last executing test programs: 19.052011613s ago: executing program 4 (id=1677): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050001000700000005000400bd7f22ae4984bdadbe54ba91ea9981000000000c00078008001200000000000900020073797a31000000000500050072052d0fd4f057374cd0083fcb"], 0x5c}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xb, 0x3, 0x1, 0x0, 0x1}) dup(0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 17.760325238s ago: executing program 4 (id=1679): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000700)="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", 0xfe, 0x4004046, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @mcast2, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@noprefix}, {@subsystem='cpuacct'}]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r3}, 0x10) process_vm_readv(r1, &(0x7f0000000500)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000000380)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000140)=""/60, 0xfffffffffffffd15}], 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x131867, 0xffffffff, 0x0, 0x1, 0x0, 0xfffffff2}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000eeff180000f2ffffff00000085000000610003007b7bb7e5e80a96fed2807064f75aa6d5f54e2ee6d38b57e8d2c26c45e1757fbf7aa8c2e01a0475e8a435ac0aa3f424c29ace0602c9a759b821417cd82f8956281ea741c1a705711ad93ac52683aa7aeee57eed7f4c03eb5888baf33feb575cf1b924ed590c846a438fdd1bee0059897895d810d819449ec76c1653d8e91209c1896e8d583c4e9a9652403f7b39759d670cf72185e83106735d80b88193d7cd", @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fc7000/0x2000)=nil, 0xfffffffffffff000, &(0x7f0000000840)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x1e\xb1=x\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xbb$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x80\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7gxvc\xcd\x97') ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x5, 0x513, 0x2}, 'syz1\x00', 0x4d}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91"], 0x22) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) 17.488938166s ago: executing program 4 (id=1680): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40000dc, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000113000/0x2000)=nil, 0x2000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14010000210001000000000000000000010100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) 14.927465858s ago: executing program 2 (id=1637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="e1fe062bdab9ac728d88ec2db1e86a6eee9ee91df6ae561f41cfa2eb9f78636980f0f6b4ca78ab59e9794c758b600df5db79876070328b0acc1863a3a48fff432f479181554fc969097f02ce90392b29cca5eb2ae86db5f2f5e986463a444dea1e6f44bf66c51bcc2a96934d300c2d8976e092675ac4726a3e9fee4441ace546049f8575e275adeceaedb574a1586d89366039f77fa59de83026737259eab884a29f41733a5be7af1e18c4d58e8972483b8267a7f1", 0xb5, 0x4001, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001380)="2e2b0812635ff32dcfd350deceeb7133524ecd9e8dce2e592df1f0fa8d47671266665509974bf2585b626b7b7871367c72631c33a2846ed7c5a5cf0c69eda6dc95c3554e277a658f40b37983ddb52f96785c83c5f862476bc5c7e05eb504b80d99fb55b309485006a7f47a7bc833c9e5729943a877be6682b3948ae0e201e3a7e2af197e4b87503db3b605fd9daaffced10565cbbffce2441053fb6d2dd747d917c28352", 0xa4, 0x4000, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r3) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x4002410) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000340)={'fscrypt:', @auto=[0x39, 0x65, 0x0, 0x63, 0x62, 0x31, 0x35, 0x38, 0x36, 0x64, 0x31, 0x31, 0x39, 0x7, 0x37, 0x32]}, &(0x7f0000000400)={0x0, "73e73a3005c9b57dbd109d20dc40610329720531d20c6da8e8884926925e5f7f1a26a408a47b7eecddfcf8fe2ac3324d5c84a6110efac0f054b14948004000", 0x112}, 0x48, r5) keyctl$dh_compute(0x17, &(0x7f0000000300)={r5, r4}, &(0x7f0000000340)=""/197, 0xc5, &(0x7f0000000680)={&(0x7f0000000440)={'sha256-avx\x00'}, &(0x7f0000000580)="707adafc6dc1f5848de9d72dbe8157eb7c42c3aee040a104df25956930f29c2f190f11ad989240b0037578d6d8c49edddba7587e470cde580fae8d43d326e8a542dbb7a0d29c5d21ff8f440f3ec5f9ef0ea890563e1dadb0280e40e162405a813060f4a4b9240427a56491d4499c0e70c312eab3f0fe537169677a3849e48e47f10ec56ae9c52b9cdff38498e564a9f668fd4ae53a1a40f1f503bf542c4900383c00830ba4a1a27baaac9c90807764151738687bda8d3c2c8843a0063d48bd7c3b4b5391ac369d89c4675621cf354d0e11c2", 0xd2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 13.810250375s ago: executing program 2 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000240)={0xa, 0x0, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312090000"], 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x9, 0x400000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000280)={[{@datacow}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x3, 0x50d4, &(0x7f000000a2c0)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, @void}, 0x62) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = open(&(0x7f0000000540)='./file2\x00', 0x181042, 0x200000) sendfile(r3, r3, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000700, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0xa}]}}, 0x0, 0x4a}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x0) 12.354239292s ago: executing program 1 (id=1688): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050001000700000005000400bd7f22ae4984bdadbe54ba91ea9981000000000c00078008001200000000000900020073797a31000000000500050072052d0fd4f057374cd0083fcb"], 0x5c}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xb, 0x3, 0x1, 0x0, 0x1}) dup(0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 10.665463386s ago: executing program 1 (id=1692): openat$hwrng(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbe, 0xe4, 0xf9, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x10}}]}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@flowinfo={{0x14}}], 0x18}}], 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 9.193271783s ago: executing program 2 (id=1695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @u32}, @nested={0x8, 0x7, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x40, 0xb, 0x97, {0x97, 0x0, "3af10391f6f64d17989e8e77365dd9e3c699519c102ea670235159903a1433175198e2287a75a7286192d04d6826dcc308414de3c59f29eca893370da51e7e65186f550275303923df2dda85c60b8f9d7294fea2887b61d229f853fe3ec9e5c845fb8bf83d86f16c67661aa36afd947fc98979664a3ef7338ae97a43574b23adcff2ca0e22c10dd08dc3739420e6e996cca9d5e3d8"}}, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="000f12000000050f1200020a10030204009509910003100b8d0a88f35b51c31c94a3818a007bb20372ab711aefe86ab0bf16f2d1690a505e0e0b4ba0966f50756b679ce7e725acda21263f19533990e24e2ec8992bf105b48b7199423006f56f676c47b5d67514d907c3aaa97482a9ac5634797658dd7f8530a8ec00ccbf5217881ab2d2262da8988d3ae3e68a76de894d0e9fa5f4388427c8c9f6d111a609520e2df120430c757450c7ef06063d1bde5c89d0883d5b18f9b9642691816045f744d0c4b6fac13749bafc593d57d22d1b49cdf06a"], &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x18, 0x0, 0x3c, "ca915279", "a9622aa7"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x0, 0x8, 0xc0, 0x6, 0x1800}}}, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x40, 0x11, 0xf0, "678b54649b4d66e7901397ff69dc7d57b8ae72c82f3e135b48e2a2628f9da42adbb0ee4263ee19e55aded1e45fe187701d7a228b130b0085295304f5979a852be596bd715bbdc24be536c99ec3662915f3430401f69d8eda76abe3db80d02727e39963233f049e030d448ad9dea5d8c81482fd5370bf01833d2fb06380bc9c033f5a387563032c6fa85bddaa43417671518c62d77f7b2eab6e8d4eb0315c518648a9b77f9865a5aeac8a8533099cb4414e4f42b05ca1fb9b3101ebf1d6026d750507bc25444e32743228445a549a37929c1838a3e0f0f932f8ab3399a40cd46ea676fc635beadf49afb1642a6f128827"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x86}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x49c412e0632bd5c4}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x140, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x5}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, 'p,'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2a10"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="81feffecff000000"], 0x0, 0x0}, 0x0) 8.5454039s ago: executing program 4 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={r5, 0xc9, "df894d92364b233d014020729f123f3f5069bc6f2aedb75823d5eae82408bf53bf4a9dcc35955e9fab147f2ea7a3b0cafe912931e6e7481d1431de6268f3fb60931471f7f9e4b5e2c20c099a0b04a82b203222a235eff71de70e3364fe5fa727b02db8f00f6cb349c06a0a46775fa421e9a0f14898f2a1253b25d52e4353ff1a458b9491ecc30be90249a13bdff4c79104947a7ae45e93064b40c9ae05f491e679a6e4fefd1a5eb5199e483b914ae476bed588a919bc729eaff7ccb4936267f66ded2f90d8ea7e2cf0"}, &(0x7f0000000100)=0xd1) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8010, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04120800aaaaaaaaaa103a"], 0xb) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0) 7.347471542s ago: executing program 1 (id=1700): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000380)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) fsync(r0) 6.728835632s ago: executing program 0 (id=1701): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000700)="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", 0xfe, 0x4004046, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @mcast2, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@noprefix}, {@subsystem='cpuacct'}]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r3}, 0x10) process_vm_readv(r1, &(0x7f0000000500)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000000380)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000140)=""/60, 0xfffffffffffffd15}], 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x131867, 0xffffffff, 0x0, 0x1, 0x0, 0xfffffff2}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000eeff180000f2ffffff00000085000000610003007b7bb7e5e80a96fed2807064f75aa6d5f54e2ee6d38b57e8d2c26c45e1757fbf7aa8c2e01a0475e8a435ac0aa3f424c29ace0602c9a759b821417cd82f8956281ea741c1a705711ad93ac52683aa7aeee57eed7f4c03eb5888baf33feb575cf1b924ed590c846a438fdd1bee0059897895d810d819449ec76c1653d8e91209c1896e8d583c4e9a9652403f7b39759d670cf72185e83106735d80b88193d7cd", @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fc7000/0x2000)=nil, 0xfffffffffffff000, &(0x7f0000000840)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x1e\xb1=x\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xbb$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x80\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7gxvc\xcd\x97') ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x5, 0x513, 0x2}, 'syz1\x00', 0x4d}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91"], 0x22) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) 5.97588137s ago: executing program 0 (id=1703): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000680)={0x60, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}, {}]}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="50010000100033060000000000000000ffffffff000000000000020000000000e00000020000000000000000000000004e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0001000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/264], 0x150}}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$sysctl(r2, &(0x7f0000000100)='7\x00', 0x2) r3 = socket(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e1e702d10ad65772064656661756c7420757365723a73797a21303030303030303030303030303030303430393300"], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0x0) keyctl$read(0xb, r4, &(0x7f0000000480)=""/112, 0x70) sendmmsg$sock(r3, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x3}, 0x80, 0x0}}], 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_setup(0x400, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x318701, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r7, 0x1, 0x3e, 0x0, &(0x7f0000005ac0)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="30003300c0000000080211000001080211000000505050505050"], 0x4c}}, 0x0) socket(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_getres(0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f00000001c0)) 5.254190826s ago: executing program 3 (id=1704): socket(0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000340)={0x1000000, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x40080) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x931}, &(0x7f0000000100)=0x8) 4.972001699s ago: executing program 2 (id=1705): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0xfff, 0xda, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f000000", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000202020202020000080035000000000004000501f338cdf3ffffffffffff309aad0fe765778e784277be0cebf033816a19b636b5829c3e3e09461cda4f0acb2e1bb4b2c55b262ba41b4c539a7e74017e18b7ba40a816d9ddd337e14450d24ed8d9cbf56852072ae5086e2d8fe8e0cf447bf017bd7c0e7bcfe2b95182959b72408180057d5cd9fa50c289a74d6e940cde888c52bd33880c2496cd9dc5cf31b442e4925d8f61a7edd03637e50bc8bf982dcb9cfe315bd757ac58094deb6e4f5c88d91712cd62a17f35d5a9f889f4d9d380bf61756a7675aa6b84b8a639844601f7809842fd209195b9443c00d3970cc47158195cae4d5bb900b30613988cf2c5d336b4968798492008b7730de8fa078b4109d1ecdc"], 0x74}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000280)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @initial, @broadcast, {0x9, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x3e, 0x0, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xb7, "38201f26814b64e11e9d6bac348ea78d186b8b429841f709ff84a05c4bf88ad8554cc541d6c57f3a78e896cf783b130ce18d0a5760bac18087e216bf5e6e5da6cf6774de76a9cac478c0c4759c57ec23a4ab9e05e857106a856dfebe4470a29a0fc5746b0de3511b93d40752593312d9c5f252361da97af814001f7b0a1fb2a7e9ee619aa95be0ddaf2e15818b8580cea250cb69199a06c40781e843da19ed2e34de04220622d4eb715fc21b32b9243200095f7648146d"}]}, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xb5}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x80f, 0x1fe1, 0x0, 0xff, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x101, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x69}}, @val={0x76, 0x6, {0x6, 0x3, 0xa, 0xc9f6}}, [{0xdd, 0x51, "c8d55bff4a56364f02248f8a3520e3fa464a8188e703455bb39bd96ca6f0bd20356e5a425f7c72b75e5784e369a506207cac653bc1277272510bb60972f71f46e4e799230b670f7ad042309f078725d420"}]}, 0xc7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="ad7f8a90ba9e50000000", @ANYRES16=r10, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) socket(0x27, 0x5, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xff, 0x0, 0x0, @broadcast}}}}) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108) 4.182592808s ago: executing program 3 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.068711597s ago: executing program 1 (id=1707): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x2, &(0x7f0000000080)={0x10, "c3f75d4b007c27cbac504b6e57de86f8134fa44d35000000001000"}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x26, 0x0, "8ddbb5062cfd03080000000000e4dc036d58b39fa8d54ee832040000bdfba71bc4b828c7de258b0172a1fc52bca0dd2a000000000000000000001600000000000000000000000000000000000000002c"}, 0xd8) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xb, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX]) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x39}, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3ff, 0x28}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc044}, 0x80) r7 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 4.003402193s ago: executing program 4 (id=1708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r4], 0x58}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5a}]}, 0x2c}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x9, 0x20000) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000000)={0x1f, 0x0, 0x0}) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r9, 0x4008af12, &(0x7f0000000540)) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) socket$inet6(0xa, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRESHEX=r8], &(0x7f0000000100)={0x0, 0x0, 0x25, &(0x7f00000000c0)=ANY=[], 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x4c0a}}]}) socket$inet_udplite(0x2, 0x2, 0x88) 3.188109671s ago: executing program 3 (id=1709): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_GET_MAP_INFO(0x8, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2.967909997s ago: executing program 3 (id=1710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="e1fe062bdab9ac728d88ec2db1e86a6eee9ee91df6ae561f41cfa2eb9f78636980f0f6b4ca78ab59e9794c758b600df5db79876070328b0acc1863a3a48fff432f479181554fc969097f02ce90392b29cca5eb2ae86db5f2f5e986463a444dea1e6f44bf66c51bcc2a96934d300c2d8976e092675ac4726a3e9fee4441ace546049f8575e275adeceaedb574a1586d89366039f77fa59de83026737259eab884a29f41733a5be7af1e18c4d58e8972483b8267a7f1", 0xb5, 0x4001, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001380)="2e2b0812635ff32dcfd350deceeb7133524ecd9e8dce2e592df1f0fa8d47671266665509974bf2585b626b7b7871367c72631c33a2846ed7c5a5cf0c69eda6dc95c3554e277a658f40b37983ddb52f96785c83c5f862476bc5c7e05eb504b80d99fb55b309485006a7f47a7bc833c9e5729943a877be6682b3948ae0e201e3a7e2af197e4b87503db3b605fd9daaffced10565cbbffce2441053fb6d2dd747d917c28352", 0xa4, 0x4000, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r3) r5 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x4002410) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000340)={'fscrypt:', @auto=[0x39, 0x65, 0x0, 0x63, 0x62, 0x31, 0x35, 0x38, 0x36, 0x64, 0x31, 0x31, 0x39, 0x7, 0x37, 0x32]}, &(0x7f0000000400)={0x0, "73e73a3005c9b57dbd109d20dc40610329720531d20c6da8e8884926925e5f7f1a26a408a47b7eecddfcf8fe2ac3324d5c84a6110efac0f054b14948004000", 0x112}, 0x48, r5) keyctl$dh_compute(0x17, &(0x7f0000000300)={r5, r4}, &(0x7f0000000340)=""/197, 0xc5, &(0x7f0000000680)={&(0x7f0000000440)={'sha256-avx\x00'}, &(0x7f0000000580)="707adafc6dc1f5848de9d72dbe8157eb7c42c3aee040a104df25956930f29c2f190f11ad989240b0037578d6d8c49edddba7587e470cde580fae8d43d326e8a542dbb7a0d29c5d21ff8f440f3ec5f9ef0ea890563e1dadb0280e40e162405a813060f4a4b9240427a56491d4499c0e70c312eab3f0fe537169677a3849e48e47f10ec56ae9c52b9cdff38498e564a9f668fd4ae53a1a40f1f503bf542c4900383c00830ba4a1a27baaac9c90807764151738687bda8d3c2c8843a0063d48bd7c3b4b5391ac369d89c4675621cf354d0e11c2", 0xd2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 2.957696295s ago: executing program 0 (id=1711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.294835832s ago: executing program 3 (id=1712): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) chdir(&(0x7f0000000380)='./file0\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.286499039s ago: executing program 0 (id=1713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000700)="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", 0xfe, 0x4004046, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @mcast2, 0x8}, 0x1c) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@noprefix}, {@subsystem='cpuacct'}]}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000340)='b', 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r3}, 0x10) process_vm_readv(r1, &(0x7f0000000500)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000000380)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000140)=""/60, 0xfffffffffffffd15}], 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x131867, 0xffffffff, 0x0, 0x1, 0x0, 0xfffffff2}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18020000eeff180000f2ffffff00000085000000610003007b7bb7e5e80a96fed2807064f75aa6d5f54e2ee6d38b57e8d2c26c45e1757fbf7aa8c2e01a0475e8a435ac0aa3f424c29ace0602c9a759b821417cd82f8956281ea741c1a705711ad93ac52683aa7aeee57eed7f4c03eb5888baf33feb575cf1b924ed590c846a438fdd1bee0059897895d810d819449ec76c1653d8e91209c1896e8d583c4e9a9652403f7b39759d670cf72185e83106735d80b88193d7cd", @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fc7000/0x2000)=nil, 0xfffffffffffff000, &(0x7f0000000840)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x1e\xb1=x\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xbb$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x80\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7gxvc\xcd\x97') ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x5, 0x513, 0x2}, 'syz1\x00', 0x4d}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91"], 0x22) r8 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4) 1.263235344s ago: executing program 2 (id=1714): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000050001000700000005000400bd7f22ae4984bdadbe54ba91ea9981000000000c00078008001200000000000900020073797a31000000000500050072052d0fd4f057374cd0083fcb"], 0x5c}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0xb, 0x3, 0x1, 0x0, 0x1}) dup(0xffffffffffffffff) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 249.781973ms ago: executing program 3 (id=1715): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0xfff, 0xda, 0x9}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000019c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f000000", @ANYRES32=r4, @ANYBLOB="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"], 0x74}}, 0x0) syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000280)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @initial, @broadcast, {0x9, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x3e, 0x0, 0x2, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xb7, "38201f26814b64e11e9d6bac348ea78d186b8b429841f709ff84a05c4bf88ad8554cc541d6c57f3a78e896cf783b130ce18d0a5760bac18087e216bf5e6e5da6cf6774de76a9cac478c0c4759c57ec23a4ab9e05e857106a856dfebe4470a29a0fc5746b0de3511b93d40752593312d9c5f252361da97af814001f7b0a1fb2a7e9ee619aa95be0ddaf2e15818b8580cea250cb69199a06c40781e843da19ed2e34de04220622d4eb715fc21b32b9243200095f7648146d"}]}, 0xe4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x7c, r6, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3, {0x0, 0xb5}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x80f, 0x1fe1, 0x0, 0xff, 0x0, 0x0, 0x1, 0x3}, 0x400, 0x101, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x69}}, @val={0x76, 0x6, {0x6, 0x3, 0xa, 0xc9f6}}, [{0xdd, 0x51, "c8d55bff4a56364f02248f8a3520e3fa464a8188e703455bb39bd96ca6f0bd20356e5a425f7c72b75e5784e369a506207cac653bc1277272510bb60972f71f46e4e799230b670f7ad042309f078725d420"}]}, 0xc7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="ad7f8a90ba9e50000000", @ANYRES16=r10, @ANYBLOB="010000000000000000003d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x50}}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x38}}, 0x0) r12 = socket(0x27, 0x5, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000780)={'sit0\x00', 0x0}) getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x8, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @private=0xa010102}}}, 0x108) 188.794729ms ago: executing program 0 (id=1716): mknodat$null(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x27}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004340)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 176.732791ms ago: executing program 1 (id=1717): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f00000001c0)='\t', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x0, r4}, 0x14) 139.673347ms ago: executing program 4 (id=1718): syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 1.093113ms ago: executing program 1 (id=1719): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 829.505µs ago: executing program 0 (id=1720): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="d2", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 0s ago: executing program 2 (id=1721): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$write(0x1, &(0x7f00000000c0)={0xe49}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): eft allmulticast mode [ 658.415644][ T63] bridge_slave_1: left promiscuous mode [ 658.423055][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.441764][ T63] bridge_slave_0: left allmulticast mode [ 658.448603][ T63] bridge_slave_0: left promiscuous mode [ 658.464213][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.756262][ T5094] Bluetooth: hci3: command tx timeout [ 660.634834][ T5094] Bluetooth: hci0: command tx timeout [ 660.852274][ T5094] Bluetooth: hci3: command tx timeout [ 661.366983][T12686] binder: BINDER_SET_CONTEXT_MGR already set [ 661.373074][T12686] binder: 12682:12686 ioctl 4018620d 20000040 returned -16 [ 662.090033][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.170015][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.196147][ T63] bond0 (unregistering): Released all slaves [ 662.223864][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.244064][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1569'. [ 662.256682][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.385235][T12689] netlink: 'syz.2.1569': attribute type 10 has an invalid length. [ 662.619388][T12640] team0: Port device team_slave_0 added [ 662.625280][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 662.666239][T12640] team0: Port device team_slave_1 added [ 662.685413][ T5094] Bluetooth: hci0: command tx timeout [ 662.689768][T12646] chnl_net:caif_netlink_parms(): no params data found [ 662.807186][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 662.826318][ T8] usb 3-1: config 1 has an invalid interface descriptor of length 3, skipping [ 662.836452][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.849317][ T8] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 662.862309][ T8] usb 3-1: config 1 has no interface number 1 [ 662.879304][ T8] usb 3-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 662.909313][ T8] usb 3-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 662.932463][ T5094] Bluetooth: hci3: command tx timeout [ 662.944486][ T8] usb 3-1: config 1 interface 2 has no altsetting 0 [ 662.970501][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.974749][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 662.980346][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 663.008626][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.015934][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.025219][ T8] usb 3-1: Product: 쑿퉈ਝ쑻 [ 663.092118][T12693] loop4: detected capacity change from 0 to 32768 [ 663.101306][ T8] usb 3-1: Manufacturer: ф [ 663.106762][ T8] usb 3-1: SerialNumber: syz [ 663.110109][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.136665][T12693] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1570 (12693) [ 663.207186][T12693] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 663.250583][T12693] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 663.272887][ T25] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 663.281421][T12693] BTRFS info (device loop4): using free-space-tree [ 663.369848][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.396718][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.400534][ T8] usb 3-1: USB disconnect, device number 33 [ 663.426280][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.464498][ T25] usb 1-1: config 0 has no interface number 0 [ 663.502209][ T25] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 663.521847][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.600791][ T25] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 663.672488][ T25] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 663.691462][ T6811] udevd[6811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.692258][ T25] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 663.748897][T12693] BTRFS info (device loop4): rebuilding free space tree [ 663.795322][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.953732][ T25] usb 1-1: config 0 descriptor?? [ 663.996300][T12698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 664.039609][ T25] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 664.049849][ T63] hsr_slave_0: left promiscuous mode [ 664.175450][ T63] hsr_slave_1: left promiscuous mode [ 664.231387][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.244934][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.265715][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.273144][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.340070][T12731] loop2: detected capacity change from 0 to 256 [ 664.349765][ T63] veth1_macvtap: left promiscuous mode [ 664.372752][ T63] veth0_macvtap: left promiscuous mode [ 664.395518][ T63] veth1_vlan: left promiscuous mode [ 664.432279][ T63] veth0_vlan: left promiscuous mode [ 664.755603][ T5094] Bluetooth: hci0: command tx timeout [ 664.995268][ T5094] Bluetooth: hci3: command tx timeout [ 665.076310][T10707] usb 1-1: Failed to submit usb control message: -110 [ 665.086222][T10707] usb 1-1: unable to send the bmi data to the device: -110 [ 665.095710][T10707] usb 1-1: unable to get target info from device [ 665.102353][T10707] usb 1-1: could not get target info (-110) [ 665.114354][T10707] usb 1-1: could not probe fw (-110) [ 665.575978][ T5829] usb 1-1: USB disconnect, device number 29 [ 665.625350][T12738] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.639523][T12738] FAT-fs (loop2): Filesystem has been set read-only [ 665.646308][T12738] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.656433][T12738] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 665.666700][ T29] audit: type=1800 audit(1720145140.162:72): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1572" name="file1" dev="loop2" ino=1048717 res=0 errno=0 [ 665.686698][ C0] vkms_vblank_simulate: vblank timer overrun [ 666.157586][ T9488] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 666.693846][ T63] team0 (unregistering): Port device team_slave_1 removed [ 666.859747][ T63] team0 (unregistering): Port device team_slave_0 removed [ 667.078949][ T25] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 667.292556][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 667.303714][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 667.331046][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.340239][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 667.348813][ T25] usb 5-1: SerialNumber: syz [ 667.357065][T12749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.500905][T12740] team0: entered promiscuous mode [ 667.515361][T12740] team_slave_0: entered promiscuous mode [ 667.521430][T12740] team_slave_1: entered promiscuous mode [ 667.527622][T12740] team0: left promiscuous mode [ 667.532512][T12740] team_slave_0: left promiscuous mode [ 667.538965][T12740] team_slave_1: left promiscuous mode [ 667.544899][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 667.576955][T12749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.712232][T12646] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.724107][T12646] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.755509][T12646] bridge_slave_0: entered allmulticast mode [ 667.773653][T12646] bridge_slave_0: entered promiscuous mode [ 667.794440][T12646] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.812665][T12646] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.833136][T12646] bridge_slave_1: entered allmulticast mode [ 667.849963][T12646] bridge_slave_1: entered promiscuous mode [ 667.927363][T12640] hsr_slave_0: entered promiscuous mode [ 667.945490][T12640] hsr_slave_1: entered promiscuous mode [ 668.045563][T12758] binder: BINDER_SET_CONTEXT_MGR already set [ 668.051701][T12758] binder: 12752:12758 ioctl 4018620d 20000040 returned -16 [ 668.263751][T12646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.804116][ T25] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 668.858466][T12646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.721557][T12646] team0: Port device team_slave_0 added [ 669.750977][T12646] team0: Port device team_slave_1 added [ 669.801907][T12771] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 669.826228][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1580'. [ 669.862401][T12771] team0: Failed to send options change via netlink (err -105) [ 669.886445][T12771] team0: Port device netdevsim0 added [ 669.996741][T12646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.012353][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.038311][ C0] vkms_vblank_simulate: vblank timer overrun [ 670.102803][T12646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.152224][T12646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.168988][T12646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.203760][ T5829] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 670.209533][T12646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.352455][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.396894][ T5829] usb 1-1: Using ep0 maxpacket: 8 [ 670.420227][ T5829] usb 1-1: config 1 has an invalid interface descriptor of length 3, skipping [ 670.451877][ T5829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 670.462877][ T5829] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 670.474123][ T5829] usb 1-1: config 1 has no interface number 1 [ 670.523755][ T5829] usb 1-1: too many endpoints for config 1 interface 2 altsetting 220: 113, using maximum allowed: 30 [ 670.535142][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 670.547150][ T5829] usb 1-1: config 1 interface 2 altsetting 220 has 0 endpoint descriptors, different from the interface descriptor's value: 113 [ 670.568301][ T5829] usb 1-1: config 1 interface 2 has no altsetting 0 [ 670.594227][ T5829] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 670.615347][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.623988][ T5829] usb 1-1: Product: 쑿퉈ਝ쑻 [ 670.629385][ T5829] usb 1-1: Manufacturer: ф [ 670.634357][ T5829] usb 1-1: SerialNumber: syz [ 670.671000][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.730827][ T8] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 670.763429][ T25] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 670.772916][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.776775][ T9] usb 5-1: USB disconnect, device number 26 [ 670.783973][ T25] usb 3-1: config 0 has no interface number 0 [ 670.795737][ T25] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 670.833103][ T9] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 670.836418][ T25] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 670.903295][T12646] hsr_slave_0: entered promiscuous mode [ 670.938613][ T25] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 670.939997][T12646] hsr_slave_1: entered promiscuous mode [ 670.957705][ T25] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 670.969513][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.969588][ T5829] usb 1-1: USB disconnect, device number 30 [ 670.980205][ T25] usb 3-1: config 0 descriptor?? [ 670.990304][T12784] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 671.033822][T12646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.044986][ T25] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 671.059135][T12794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 671.060514][T12646] Cannot create hsr debugfs directory [ 671.110767][T12795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.146460][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.296122][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.341709][T12794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 671.380656][ T63] team0: Port device netdevsim0 removed [ 671.396358][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.937192][ T63] bridge_slave_1: left allmulticast mode [ 671.995181][ T63] bridge_slave_1: left promiscuous mode [ 672.016724][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.061351][ T63] bridge_slave_0: left allmulticast mode [ 672.085176][ T63] bridge_slave_0: left promiscuous mode [ 672.107809][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.119568][ T3506] usb 3-1: Failed to submit usb control message: -110 [ 672.131244][ T5094] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 672.151127][ T3506] usb 3-1: unable to send the bmi data to the device: -110 [ 672.186999][ T3506] usb 3-1: unable to get target info from device [ 672.229931][ T3506] usb 3-1: could not get target info (-110) [ 672.250859][ T3506] usb 3-1: could not probe fw (-110) [ 673.051633][ T5176] usb 3-1: USB disconnect, device number 34 [ 673.371498][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.384233][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.394960][ T63] bond0 (unregistering): Released all slaves [ 673.453907][T12827] binder: BINDER_SET_CONTEXT_MGR already set [ 673.460405][T12827] binder: 12824:12827 ioctl 4018620d 20000040 returned -16 [ 673.966982][T12818] team0: entered promiscuous mode [ 673.972073][T12818] team_slave_0: entered promiscuous mode [ 673.985322][T12818] team_slave_1: entered promiscuous mode [ 674.031124][T12818] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 674.041475][T12818] team0: left promiscuous mode [ 674.051175][T12818] team_slave_0: left promiscuous mode [ 674.061042][T12818] team_slave_1: left promiscuous mode [ 674.095395][T12818] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 674.406813][ T5176] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 674.628151][ T5176] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 674.693809][ T5176] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 674.708950][ T5176] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 674.732392][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.899439][ T63] hsr_slave_0: left promiscuous mode [ 674.913906][ T63] hsr_slave_1: left promiscuous mode [ 674.929648][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.950479][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.969549][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.990649][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.073232][ T63] veth1_macvtap: left promiscuous mode [ 675.084311][ T63] veth0_macvtap: left promiscuous mode [ 675.109171][ T63] veth1_vlan: left promiscuous mode [ 675.114609][ T63] veth0_vlan: left promiscuous mode [ 675.221365][T12835] loop4: detected capacity change from 0 to 32768 [ 675.248706][T12835] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1591 (12835) [ 675.321212][T12835] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 675.362161][T12835] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 675.379771][T12835] BTRFS info (device loop4): using free-space-tree [ 675.494437][T12835] BTRFS info (device loop4): rebuilding free space tree [ 675.600763][ T63] pimreg (unregistering): left allmulticast mode [ 676.760715][ T63] team0 (unregistering): Port device team_slave_1 removed [ 677.541639][T12829] : entered promiscuous mode [ 677.616803][ T5176] usb 3-1: string descriptor 0 read error: -71 [ 677.630366][ T5176] usb 3-1: USB disconnect, device number 35 [ 677.657697][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'. [ 677.803085][T12880] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1594'. [ 677.871209][ T9488] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 677.899512][T12884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.084163][T12640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 678.152906][T12640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 678.183876][T12640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 678.252828][T12640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 678.268202][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.405549][ T5176] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 678.619955][ T5176] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 678.632706][ T5176] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.646279][ T5176] usb 1-1: config 0 has no interface number 0 [ 678.652394][ T5176] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 678.664635][ T5176] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 678.677580][ T5176] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 678.705182][ T5176] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 678.725194][ T5829] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 678.730652][ T5176] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.787714][ T5176] usb 1-1: config 0 descriptor?? [ 678.818580][T12885] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 678.862398][ T5176] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 678.929896][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 678.971465][ T5829] usb 5-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 678.991441][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 679.020535][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.054463][ T5829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.113251][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.177104][ T5829] usb 5-1: Product: Р [ 679.181272][ T5829] usb 5-1: Manufacturer: 舭࿔꣋ம唄澁㱄묘꯻韇ᾖ苷ഐ䌿킁ᗁ䧛˥䲵馂쬴㛉괳탰軣釓뎤竱⭜ꔍ殖 [ 679.201088][T12640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.239868][ T5829] usb 5-1: SerialNumber: ꖏ鐋몵驪埤탷伖䀗쾛䳻氷꣑闣蕋撟䍜칕콦ﵽ딜볓滷쑤㩴튄췤Ꮅ⠁Ϯដଽ鄡䗃 [ 679.422681][T12640] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.441980][T12646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.465555][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.472784][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.508835][T12646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.554316][T12646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.568805][ T5829] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 679.581838][ T5829] cdc_ncm 5-1:1.0: bind() failure [ 679.620995][T12646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.696135][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.703382][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.875712][ T3506] usb 1-1: Failed to submit usb control message: -110 [ 679.890226][T12640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 679.924975][ T3506] usb 1-1: unable to send the bmi data to the device: -110 [ 679.935957][ T3506] usb 1-1: unable to get target info from device [ 679.942328][ T3506] usb 1-1: could not get target info (-110) [ 679.953383][T12640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 679.997486][ T3506] usb 1-1: could not probe fw (-110) [ 680.120073][T12909] ipvlan2: entered promiscuous mode [ 680.166387][T12909] ipvlan2: entered allmulticast mode [ 680.175573][T12909] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 680.393732][T12646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.459211][T12646] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.517278][ T5176] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.524415][ T5176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.571211][ T5176] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.578496][ T5176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.619383][T12640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.754578][T12640] veth0_vlan: entered promiscuous mode [ 680.807817][T12640] veth1_vlan: entered promiscuous mode [ 680.899276][ T5145] usb 1-1: USB disconnect, device number 31 [ 680.937411][ T47] usb 5-1: USB disconnect, device number 27 [ 680.980248][T12640] veth0_macvtap: entered promiscuous mode [ 681.014681][T12640] veth1_macvtap: entered promiscuous mode [ 681.141432][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.181629][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.216105][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.234306][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.255311][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.278778][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.289770][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.300474][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.314449][T12640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.330854][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.341631][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.351862][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.362523][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.382182][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.410770][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.432897][T12640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.444232][T12640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.470078][T12640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.509583][T12640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.522391][T12640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.533097][T12640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.547801][T12640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.632293][T12646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.936768][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.972876][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.070908][T12646] veth0_vlan: entered promiscuous mode [ 682.113843][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.154764][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.171665][T12646] veth1_vlan: entered promiscuous mode [ 682.432129][T12646] veth0_macvtap: entered promiscuous mode [ 683.204405][T12646] veth1_macvtap: entered promiscuous mode [ 683.235899][ T5176] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 683.465719][ T5176] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 683.660254][T12954] ALSA: seq fatal error: cannot create timer (-22) [ 684.286116][ T5176] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.312974][ T5176] usb 5-1: config 0 has no interface number 0 [ 684.319837][ T5176] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 684.333225][ T5176] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 684.432759][ T5176] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 684.619327][ T5176] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 684.628622][ T5176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.658675][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.338588][ T5176] usb 5-1: config 0 descriptor?? [ 685.364187][ T5176] usb 5-1: can't set config #0, error -71 [ 685.378578][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.436552][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.449148][ T5176] usb 5-1: USB disconnect, device number 28 [ 685.499025][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.548292][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.574281][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.609918][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.684013][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.724335][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.760568][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.808101][T12646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.839574][ T47] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 685.854212][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.039684][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.095536][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.128018][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.134692][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.141487][ T47] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 686.166243][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.216811][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.233382][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.258944][ T47] usb 4-1: config 0 has no interface number 0 [ 686.295137][ T47] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 686.310129][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.357899][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.369875][ T47] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 686.390539][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.413481][ T47] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 686.455137][T12646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.488513][ T47] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 686.505092][T12646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.537089][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.568640][T12646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.598932][ T47] usb 4-1: config 0 descriptor?? [ 686.624944][T12966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 686.681304][T12646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.709726][ T47] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 686.751431][T12646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.819677][T12646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.873679][T12646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.962332][T12978] team0: entered promiscuous mode [ 687.155372][T12978] team_slave_0: entered promiscuous mode [ 687.169730][T12978] team_slave_1: entered promiscuous mode [ 687.917345][ T3506] usb 4-1: Failed to submit usb control message: -110 [ 687.935300][T12978] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 687.951213][T13000] loop4: detected capacity change from 0 to 512 [ 687.968072][ T3506] usb 4-1: unable to send the bmi data to the device: -110 [ 687.969369][T13000] EXT4-fs: Ignoring removed bh option [ 687.995251][ T3506] usb 4-1: unable to get target info from device [ 688.001627][ T47] usb 4-1: USB disconnect, device number 39 [ 688.019393][T13000] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 688.034563][ T3506] usb 4-1: could not get target info (-110) [ 688.066768][ T3506] usb 4-1: could not probe fw (-110) [ 688.107466][T13000] EXT4-fs (loop4): 1 truncate cleaned up [ 688.114513][T13000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.165661][T12976] team0: left promiscuous mode [ 688.179395][T12976] team_slave_0: left promiscuous mode [ 688.202787][T13000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.217382][T12976] team_slave_1: left promiscuous mode [ 688.222942][T12976] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 689.319245][T13017] loop2: detected capacity change from 0 to 2048 [ 689.330134][ T5094] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 689.351303][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.361711][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.387365][T13017] loop2: p1 < > p4 [ 689.392745][T13017] loop2: p4 size 8388608 extends beyond EOD, truncated [ 689.501096][T13024] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 689.526087][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.531032][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 689.539291][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.645986][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 689.815115][T10539] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 689.901205][T13032] loop1: detected capacity change from 0 to 256 [ 689.953986][T13032] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 690.075518][T10539] usb 4-1: Using ep0 maxpacket: 32 [ 690.120783][T10539] usb 4-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 690.160000][T10539] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.177407][T10539] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 690.294408][T13042] loop1: detected capacity change from 0 to 2048 [ 690.711528][ T5094] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 690.869347][T13043] loop1: p1 < > p4 [ 690.880085][T13043] loop1: p4 size 8388608 extends beyond EOD, truncated [ 691.053674][T13042] loop1: p1 < > p4 [ 691.059113][T13042] loop1: p4 size 8388608 extends beyond EOD, truncated [ 691.133391][T10539] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.165152][T10539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.183462][T13042] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 691.190185][T10539] usb 4-1: Product: Р [ 691.207662][T10539] usb 4-1: Manufacturer: 舭࿔꣋ம唄澁㱄묘꯻韇ᾖ苷ഐ䌿킁ᗁ䧛˥䲵馂쬴㛉괳탰軣釓뎤竱⭜ꔍ殖 [ 691.224908][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 691.230440][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 691.267718][T10539] usb 4-1: SerialNumber: ꖏ鐋몵驪埤탷伖䀗쾛䳻氷꣑闣蕋撟䍜칕콦ﵽ딜볓滷쑤㩴튄췤Ꮅ⠁Ϯដଽ鄡䗃 [ 691.427242][ T7188] udevd[7188]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 691.465982][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 691.599734][ T35] bridge_slave_1: left allmulticast mode [ 691.627229][ T35] bridge_slave_1: left promiscuous mode [ 691.658260][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.327198][T13059] loop1: detected capacity change from 0 to 2048 [ 692.550126][ T5094] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 692.627691][T10539] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 693.061987][T10539] cdc_ncm 4-1:1.0: bind() failure [ 693.342884][T13060] loop1: p1 < > p4 [ 693.385660][T13060] loop1: p4 size 8388608 extends beyond EOD, truncated [ 693.394607][ T5094] Bluetooth: hci7: command 0x0406 tx timeout [ 693.524326][ T35] bridge_slave_0: left allmulticast mode [ 693.530177][ T35] bridge_slave_0: left promiscuous mode [ 693.536920][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.568934][T13059] loop1: p1 < > p4 [ 693.574381][T13059] loop1: p4 size 8388608 extends beyond EOD, truncated [ 693.884871][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 693.904913][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 693.948859][T10539] usb 4-1: USB disconnect, device number 40 [ 694.011572][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 694.017780][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 694.060513][ T5829] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 694.269287][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 520 [ 694.294807][ T5829] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 694.325537][ T5829] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 694.376545][ T5829] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 694.409810][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 694.432108][ T5102] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3 [ 694.454751][ T5829] usb 5-1: SerialNumber: syz [ 694.521714][T13068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 694.537595][T13068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 694.781370][T13068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 694.802365][T13068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 694.874260][T13080] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1624'. [ 695.035465][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.052014][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.079657][ T35] bond0 (unregistering): Released all slaves [ 695.102440][T13060] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 695.489651][ T5829] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 695.950600][ T8] usb 5-1: USB disconnect, device number 29 [ 696.515207][T13110] team0: entered promiscuous mode [ 696.562110][ T8] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 696.600983][T13110] team_slave_0: entered promiscuous mode [ 696.625824][T13110] team_slave_1: entered promiscuous mode [ 696.813522][T13126] loop1: detected capacity change from 0 to 512 [ 696.839056][T13126] EXT4-fs: Ignoring removed bh option [ 696.864356][T13126] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 696.927735][T13126] EXT4-fs (loop1): 1 truncate cleaned up [ 697.003080][T13126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.041067][T13126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.272722][T13109] team0: left promiscuous mode [ 697.280090][T13109] team_slave_0: left promiscuous mode [ 697.299952][T13109] team_slave_1: left promiscuous mode [ 697.405809][ T35] hsr_slave_0: left promiscuous mode [ 697.435499][ T35] hsr_slave_1: left promiscuous mode [ 697.480170][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.507085][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.546703][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.569381][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.605203][T10539] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 697.663084][ T35] veth1_macvtap: left promiscuous mode [ 697.845754][T13148] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1629'. [ 697.925963][ T35] veth0_macvtap: left promiscuous mode [ 697.973994][T10539] usb 5-1: config 1 has an invalid interface number: 237 but max is 1 [ 697.984092][ T35] veth1_vlan: left promiscuous mode [ 698.012913][ T35] veth0_vlan: left promiscuous mode [ 698.019747][T10539] usb 5-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 698.071604][T10539] usb 5-1: config 1 has no interface number 1 [ 698.119906][T10539] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.191995][T10539] usb 5-1: too many endpoints for config 1 interface 237 altsetting 105: 185, using maximum allowed: 30 [ 698.258940][T10539] usb 5-1: config 1 interface 237 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 698.353053][T10539] usb 5-1: config 1 interface 237 has no altsetting 0 [ 698.393294][T10539] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.427279][T10539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.469216][T10539] usb 5-1: Product: syz [ 698.489379][T10539] usb 5-1: Manufacturer: syz [ 698.517308][T10539] usb 5-1: SerialNumber: syz [ 698.616912][T10539] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 698.665338][T10539] cdc_ncm 5-1:1.0: bind() failure [ 698.773806][ T35] pimreg (unregistering): left allmulticast mode [ 700.008100][ T5102] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 700.138046][T13157] loop0: detected capacity change from 0 to 2048 [ 700.264557][T13159] loop0: p1 < > p4 [ 700.367111][T13159] loop0: p4 size 8388608 extends beyond EOD, truncated [ 700.469205][T13157] loop0: p1 < > p4 [ 700.474511][T13157] loop0: p4 size 8388608 extends beyond EOD, truncated [ 700.528363][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 700.533020][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 700.610813][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 700.619652][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 701.211360][T13164] loop3: detected capacity change from 0 to 256 [ 703.110880][T10539] usb 5-1: USB disconnect, device number 30 [ 703.256318][ T35] team0 (unregistering): Port device team_slave_1 removed [ 703.315032][ C0] DEBUG: holding rtnl_mutex for 597 jiffies. [ 703.321053][ C0] task:kworker/u8:2 state:R running task stack:19728 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 703.332884][ C0] Workqueue: netns cleanup_net [ 703.337702][ C0] Call Trace: [ 703.340965][ C0] [ 703.343882][ C0] __schedule+0x1800/0x4a60 [ 703.348449][ C0] ? __pfx___schedule+0x10/0x10 [ 703.353315][ C0] ? __pfx_lock_release+0x10/0x10 [ 703.358380][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 703.364287][ C0] ? kthread_data+0x52/0xd0 [ 703.368824][ C0] ? wq_worker_sleeping+0x66/0x240 [ 703.373956][ C0] ? schedule+0x90/0x320 [ 703.378233][ C0] schedule+0x14b/0x320 [ 703.382405][ C0] synchronize_rcu_expedited+0x684/0x830 [ 703.388076][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 703.394256][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 703.399604][ C0] ? __pfx___might_resched+0x10/0x10 [ 703.404904][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 703.410917][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 703.417043][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 703.423377][ C0] synchronize_rcu+0x11b/0x360 [ 703.428171][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 703.433510][ C0] lockdep_unregister_key+0x556/0x610 [ 703.438920][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 703.444832][ C0] ? rcu_is_watching+0x15/0xb0 [ 703.449631][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 703.454231][ C0] __qdisc_destroy+0x165/0x410 [ 703.459029][ C0] dev_shutdown+0x9b/0x440 [ 703.463456][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 703.469835][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 703.476647][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 703.482532][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 703.488721][ C0] default_device_exit_batch+0xa0f/0xa90 [ 703.494380][ C0] ? __pfx___might_resched+0x10/0x10 [ 703.499700][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 703.505899][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 703.511176][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 703.517370][ C0] cleanup_net+0x89d/0xcc0 [ 703.521804][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 703.526785][ C0] ? process_scheduled_works+0x945/0x1830 [ 703.532517][ C0] process_scheduled_works+0xa2c/0x1830 [ 703.538121][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 703.544119][ C0] ? assign_work+0x364/0x3d0 [ 703.548750][ C0] worker_thread+0x86d/0xd40 [ 703.553375][ C0] ? __kthread_parkme+0x169/0x1d0 [ 703.558433][ C0] ? __pfx_worker_thread+0x10/0x10 [ 703.563561][ C0] kthread+0x2f0/0x390 [ 703.567666][ C0] ? __pfx_worker_thread+0x10/0x10 [ 703.572793][ C0] ? __pfx_kthread+0x10/0x10 [ 703.577417][ C0] ret_from_fork+0x4b/0x80 [ 703.581848][ C0] ? __pfx_kthread+0x10/0x10 [ 703.586468][ C0] ret_from_fork_asm+0x1a/0x30 [ 703.591254][ C0] [ 703.594260][ C0] DEBUG: waiting rtnl_mutex for 620 jiffies. [ 703.600256][ C0] task:syz.2.1623 state:D stack:23824 pid:13078 tgid:13076 ppid:11589 flags:0x00004006 [ 703.610463][ C0] Call Trace: [ 703.613731][ C0] [ 703.616695][ C0] __schedule+0x1800/0x4a60 [ 703.621232][ C0] ? __pfx___schedule+0x10/0x10 [ 703.626118][ C0] ? __pfx_lock_release+0x10/0x10 [ 703.631165][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 703.636681][ C0] ? schedule+0x90/0x320 [ 703.640935][ C0] schedule+0x14b/0x320 [ 703.645132][ C0] schedule_preempt_disabled+0x13/0x30 [ 703.650602][ C0] __mutex_lock+0x6a4/0xd70 [ 703.655143][ C0] ? __mutex_lock+0x527/0xd70 [ 703.659835][ C0] ? cangw_pernet_exit_batch+0x20/0x90 [ 703.665329][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 703.670390][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 703.675639][ C0] ? get_rtnl_holder+0x144/0x190 [ 703.680588][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 703.686596][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 703.692590][ C0] cangw_pernet_exit_batch+0x20/0x90 [ 703.697904][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 703.703901][ C0] setup_net+0xa3b/0xca0 [ 703.708170][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 703.713748][ C0] ? __pfx_setup_net+0x10/0x10 [ 703.718564][ C0] ? read_word_at_a_time+0xe/0x20 [ 703.723612][ C0] copy_net_ns+0x4e2/0x7b0 [ 703.728069][ C0] create_new_namespaces+0x425/0x7b0 [ 703.733384][ C0] ? bpf_lsm_capable+0x9/0x10 [ 703.738108][ C0] ? copy_namespaces+0x5c/0x490 [ 703.742976][ C0] copy_namespaces+0x41a/0x490 [ 703.747777][ C0] copy_process+0x194f/0x3d90 [ 703.752476][ C0] ? copy_process+0x9fa/0x3d90 [ 703.757279][ C0] ? __pfx_copy_process+0x10/0x10 [ 703.762323][ C0] ? futex_wait+0x285/0x360 [ 703.766874][ C0] kernel_clone+0x226/0x8f0 [ 703.771393][ C0] ? aa_sock_opt_perm+0x79/0x120 [ 703.776374][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 703.781427][ C0] __x64_sys_clone+0x258/0x2a0 [ 703.786233][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 703.791546][ C0] ? do_syscall_64+0x100/0x230 [ 703.796346][ C0] ? do_syscall_64+0xb6/0x230 [ 703.801031][ C0] do_syscall_64+0xf3/0x230 [ 703.805560][ C0] ? clear_bhb_loop+0x35/0x90 [ 703.810251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.816184][ C0] RIP: 0033:0x7f9dd6f75bd9 [ 703.820604][ C0] RSP: 002b:00007f9dd7ddaff8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 703.829047][ C0] RAX: ffffffffffffffda RBX: 00007f9dd7103f60 RCX: 00007f9dd6f75bd9 [ 703.837069][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000d5ba2080 [ 703.845103][ C0] RBP: 00007f9dd6fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 703.853080][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 703.861100][ C0] R13: 000000000000000b R14: 00007f9dd7103f60 R15: 00007ffec016ecc8 [ 703.869128][ C0] [ 703.872135][ C0] DEBUG: waiting rtnl_mutex for 632 jiffies. [ 703.878139][ C0] task:dhcpcd state:D stack:20672 pid:4760 tgid:4760 ppid:4759 flags:0x00000002 [ 703.888341][ C0] Call Trace: [ 703.891624][ C0] [ 703.894548][ C0] __schedule+0x1800/0x4a60 [ 703.899125][ C0] ? __pfx___schedule+0x10/0x10 [ 703.903993][ C0] ? __pfx_lock_release+0x10/0x10 [ 703.909051][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 703.914556][ C0] ? schedule+0x90/0x320 [ 703.918838][ C0] schedule+0x14b/0x320 [ 703.923010][ C0] schedule_preempt_disabled+0x13/0x30 [ 703.928501][ C0] __mutex_lock+0x6a4/0xd70 [ 703.933024][ C0] ? __mutex_lock+0x527/0xd70 [ 703.937740][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 703.942957][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 703.948023][ C0] ? get_rtnl_holder+0x144/0x190 [ 703.952970][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 703.958031][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 703.963247][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 703.968739][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 703.974043][ C0] ? __pfx_validate_chain+0x10/0x10 [ 703.979282][ C0] ? __pfx_validate_chain+0x10/0x10 [ 703.984497][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 703.989510][ C0] ? mark_lock+0x9a/0x360 [ 703.993859][ C0] ? __pfx_validate_chain+0x10/0x10 [ 703.999097][ C0] ? __lock_acquire+0x1359/0x2000 [ 704.004146][ C0] ? mark_lock+0x9a/0x360 [ 704.008514][ C0] ? __lock_acquire+0x1359/0x2000 [ 704.013563][ C0] netlink_rcv_skb+0x1e3/0x430 [ 704.018365][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 704.023844][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 704.029186][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 704.034400][ C0] netlink_unicast+0x7f0/0x990 [ 704.039206][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 704.044503][ C0] ? __virt_addr_valid+0x183/0x530 [ 704.049653][ C0] ? __check_object_size+0x49c/0x900 [ 704.054951][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 704.060097][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 704.064876][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.070194][ C0] ? __import_iovec+0x536/0x820 [ 704.075109][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 704.080047][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 704.085383][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 704.090869][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 704.096211][ C0] __sock_sendmsg+0x221/0x270 [ 704.100915][ C0] ____sys_sendmsg+0x525/0x7d0 [ 704.105728][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 704.111027][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 704.116974][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 704.121581][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 704.126733][ C0] ? netlink_bind+0xaeb/0xc90 [ 704.131480][ C0] ? __pfx___sys_bind+0x10/0x10 [ 704.136381][ C0] ? fd_install+0x35c/0x5d0 [ 704.140903][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 704.147262][ C0] ? do_syscall_64+0x100/0x230 [ 704.152038][ C0] ? do_syscall_64+0xb6/0x230 [ 704.156748][ C0] do_syscall_64+0xf3/0x230 [ 704.161263][ C0] ? clear_bhb_loop+0x35/0x90 [ 704.165973][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.171878][ C0] RIP: 0033:0x7f97c72daa4b [ 704.176321][ C0] RSP: 002b:00007ffdc06706c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.184749][ C0] RAX: ffffffffffffffda RBX: 00007f97c72026c0 RCX: 00007f97c72daa4b [ 704.192756][ C0] RDX: 0000000000000000 RSI: 00007ffdc0684878 RDI: 000000000000000e [ 704.200763][ C0] RBP: 000000000000000e R08: 0000000000000000 R09: 00007ffdc0684878 [ 704.208778][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 704.216811][ C0] R13: 00007ffdc0684878 R14: 000000000000002c R15: 0000000000000001 [ 704.224798][ C0] [ 704.227864][ C0] DEBUG: waiting rtnl_mutex for 637 jiffies. [ 704.233858][ C0] task:kworker/1:8 state:D stack:22512 pid:11031 tgid:11031 ppid:2 flags:0x00004000 [ 704.244083][ C0] Workqueue: events linkwatch_event [ 704.249329][ C0] Call Trace: [ 704.252612][ C0] [ 704.255581][ C0] __schedule+0x1800/0x4a60 [ 704.260116][ C0] ? __pfx___schedule+0x10/0x10 [ 704.264956][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 704.270974][ C0] ? __pfx_lock_release+0x10/0x10 [ 704.276047][ C0] ? kick_pool+0x45c/0x620 [ 704.280463][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.285703][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 704.290921][ C0] ? schedule+0x90/0x320 [ 704.295195][ C0] schedule+0x14b/0x320 [ 704.299366][ C0] schedule_preempt_disabled+0x13/0x30 [ 704.304815][ C0] __mutex_lock+0x6a4/0xd70 [ 704.309356][ C0] ? __mutex_lock+0x527/0xd70 [ 704.314053][ C0] ? linkwatch_event+0xe/0x60 [ 704.318772][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 704.323819][ C0] ? get_rtnl_holder+0x144/0x190 [ 704.328793][ C0] ? process_scheduled_works+0x945/0x1830 [ 704.334530][ C0] linkwatch_event+0xe/0x60 [ 704.339061][ C0] process_scheduled_works+0xa2c/0x1830 [ 704.344635][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 704.350654][ C0] ? assign_work+0x364/0x3d0 [ 704.355285][ C0] worker_thread+0x86d/0xd40 [ 704.359866][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 704.365789][ C0] ? __kthread_parkme+0x169/0x1d0 [ 704.370832][ C0] ? __pfx_worker_thread+0x10/0x10 [ 704.375978][ C0] kthread+0x2f0/0x390 [ 704.380061][ C0] ? __pfx_worker_thread+0x10/0x10 [ 704.385202][ C0] ? __pfx_kthread+0x10/0x10 [ 704.389808][ C0] ret_from_fork+0x4b/0x80 [ 704.394214][ C0] ? __pfx_kthread+0x10/0x10 [ 704.398836][ C0] ret_from_fork_asm+0x1a/0x30 [ 704.403624][ C0] [ 704.406673][ C0] [ 704.406673][ C0] Showing all locks held in the system: [ 704.414388][ C0] 5 locks held by kworker/u8:2/35: [ 704.419523][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 704.430489][ C0] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 704.441111][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 704.450568][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 704.460609][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 704.471578][ C0] 1 lock held by dhcpcd/4760: [ 704.476275][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 704.485850][ C0] 2 locks held by getty/4848: [ 704.490531][ C0] #0: ffff88802a82b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 704.500310][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 704.510479][ C0] 3 locks held by kworker/1:8/11031: [ 704.515790][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 704.526833][ C0] #1: ffffc90014677d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 704.537849][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 704.546907][ C0] 2 locks held by syz.2.1623/13078: [ 704.552099][ C0] #0: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 704.561528][ C0] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90 [ 704.571339][ C0] 1 lock held by syz.1.1633/13158: [ 704.576478][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 704.585503][ C0] 1 lock held by syz.0.1634/13157: [ 704.590593][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 704.600108][ C0] 1 lock held by syz.3.1635/13163: [ 704.605247][ C0] 1 lock held by syz.3.1635/13164: [ 704.610333][ C0] #0: ffff88802ef3c418 (&mm->mmap_lock){++++}-{3:3}, at: exit_mm+0xd4/0x310 [ 704.619151][ C0] 2 locks held by syz.4.1636/13168: [ 704.624350][ C0] #0: ffffc90002effb40 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 704.634470][ C0] #1: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 704.644387][ C0] [ 704.646736][ C0] ============================================= [ 704.646736][ C0] [ 704.740286][ T35] team0 (unregistering): Port device team_slave_0 removed [ 705.089342][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.099955][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.108253][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.118769][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.198700][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 705.207748][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.715549][ C0] DEBUG: waiting rtnl_mutex for 571 jiffies. [ 705.721588][ C0] task:syz.1.1633 state:D stack:23216 pid:13158 tgid:13151 ppid:12646 flags:0x00004006 [ 705.731842][ C0] Call Trace: [ 705.735177][ C0] [ 705.738130][ C0] __schedule+0x1800/0x4a60 [ 705.742690][ C0] ? __pfx___schedule+0x10/0x10 [ 705.747612][ C0] ? __pfx_lock_release+0x10/0x10 [ 705.752668][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 705.758215][ C0] ? schedule+0x90/0x320 [ 705.762485][ C0] schedule+0x14b/0x320 [ 705.766704][ C0] schedule_preempt_disabled+0x13/0x30 [ 705.772182][ C0] __mutex_lock+0x6a4/0xd70 [ 705.776753][ C0] ? __mutex_lock+0x527/0xd70 [ 705.781459][ C0] ? dev_ethtool+0x21e/0x1bc0 [ 705.786202][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 705.791236][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 705.796056][ C0] ? get_rtnl_holder+0x144/0x190 [ 705.801017][ C0] dev_ethtool+0x21e/0x1bc0 [ 705.805580][ C0] ? dev_load+0x21/0x1f0 [ 705.809849][ C0] ? __pfx_dev_ethtool+0x10/0x10 [ 705.814807][ C0] ? inet6_ioctl+0x203/0x280 [ 705.819470][ C0] ? dev_load+0x21/0x1f0 [ 705.823741][ C0] dev_ioctl+0x785/0x1340 [ 705.828140][ C0] sock_do_ioctl+0x240/0x460 [ 705.832767][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 705.837955][ C0] ? rcu_read_unlock_special+0x470/0x550 [ 705.843632][ C0] sock_ioctl+0x629/0x8e0 [ 705.848019][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 705.852885][ C0] ? __rcu_read_unlock+0xa1/0x110 [ 705.857934][ C0] ? __fget_files+0x29/0x470 [ 705.862535][ C0] ? __fget_files+0x3f6/0x470 [ 705.867266][ C0] ? __fget_files+0x29/0x470 [ 705.871874][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 705.876862][ C0] ? security_file_ioctl+0x87/0xb0 [ 705.881991][ C0] ? __pfx_sock_ioctl+0x10/0x10 [ 705.886899][ C0] __se_sys_ioctl+0xfc/0x170 [ 705.891518][ C0] do_syscall_64+0xf3/0x230 [ 705.896081][ C0] ? clear_bhb_loop+0x35/0x90 [ 705.900774][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.906703][ C0] RIP: 0033:0x7f6a6f175bd9 [ 705.911126][ C0] RSP: 002b:00007f6a6ebbd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 705.919571][ C0] RAX: ffffffffffffffda RBX: 00007f6a6f304110 RCX: 00007f6a6f175bd9 [ 705.927597][ C0] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000009 [ 705.935633][ C0] RBP: 00007f6a6f1e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 705.943611][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.951608][ C0] R13: 000000000000006e R14: 00007f6a6f304110 R15: 00007ffcd9858f28 [ 705.959621][ C0] [ 705.962625][ C0] DEBUG: waiting rtnl_mutex for 535 jiffies. [ 705.968648][ C0] task:syz.0.1634 state:D stack:23328 pid:13157 tgid:13153 ppid:11893 flags:0x00000004 [ 705.978855][ C0] Call Trace: [ 705.982131][ C0] [ 705.985108][ C0] __schedule+0x1800/0x4a60 [ 705.989677][ C0] ? __pfx___schedule+0x10/0x10 [ 705.994542][ C0] ? __pfx_lock_release+0x10/0x10 [ 705.999599][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 706.005134][ C0] ? schedule+0x90/0x320 [ 706.009402][ C0] schedule+0x14b/0x320 [ 706.013567][ C0] schedule_preempt_disabled+0x13/0x30 [ 706.019078][ C0] __mutex_lock+0x6a4/0xd70 [ 706.023615][ C0] ? __mutex_lock+0x527/0xd70 [ 706.028348][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 706.033570][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 706.038640][ C0] ? get_rtnl_holder+0x144/0x190 [ 706.043590][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 706.048675][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 706.053896][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 706.059395][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 706.064780][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 706.070015][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 706.075458][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 706.080760][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 706.085922][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 706.091656][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 706.096800][ C0] ? __dev_queue_xmit+0x1763/0x3e90 [ 706.102013][ C0] ? kasan_save_track+0x51/0x80 [ 706.106919][ C0] ? do_syscall_64+0xf3/0x230 [ 706.111609][ C0] ? __dev_queue_xmit+0x2da/0x3e90 [ 706.116776][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 706.122173][ C0] ? ref_tracker_free+0x643/0x7e0 [ 706.127259][ C0] netlink_rcv_skb+0x1e3/0x430 [ 706.132050][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 706.137566][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 706.142882][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 706.148140][ C0] netlink_unicast+0x7f0/0x990 [ 706.152940][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 706.158284][ C0] ? __virt_addr_valid+0x183/0x530 [ 706.163415][ C0] ? __check_object_size+0x49c/0x900 [ 706.168734][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 706.173864][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 706.178673][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.183971][ C0] ? __import_iovec+0x536/0x820 [ 706.188869][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 706.193824][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 706.199173][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 706.204654][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 706.209970][ C0] __sock_sendmsg+0x221/0x270 [ 706.214672][ C0] ____sys_sendmsg+0x525/0x7d0 [ 706.219483][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.224794][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 706.229424][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 706.234575][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 706.240957][ C0] ? do_syscall_64+0x100/0x230 [ 706.245782][ C0] ? do_syscall_64+0xb6/0x230 [ 706.250474][ C0] do_syscall_64+0xf3/0x230 [ 706.254962][ C0] ? clear_bhb_loop+0x35/0x90 [ 706.259678][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.265615][ C0] RIP: 0033:0x7f5be6b75bd9 [ 706.270017][ C0] RSP: 002b:00007f5be78d1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 706.278481][ C0] RAX: ffffffffffffffda RBX: 00007f5be6d04110 RCX: 00007f5be6b75bd9 [ 706.286520][ C0] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 706.294513][ C0] RBP: 00007f5be6be4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 706.302545][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.310564][ C0] R13: 000000000000006e R14: 00007f5be6d04110 R15: 00007ffc5f439a88 [ 706.318613][ C0] [ 706.321645][ C0] DEBUG: holding rtnl_mutex for 897 jiffies. [ 706.327664][ C0] task:kworker/u8:2 state:D stack:19728 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 706.337852][ C0] Workqueue: netns cleanup_net [ 706.342633][ C0] Call Trace: [ 706.345964][ C0] [ 706.348912][ C0] __schedule+0x1800/0x4a60 [ 706.353440][ C0] ? __pfx___schedule+0x10/0x10 [ 706.358318][ C0] ? __pfx_lock_release+0x10/0x10 [ 706.363355][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 706.369293][ C0] ? kthread_data+0x52/0xd0 [ 706.373813][ C0] ? wq_worker_sleeping+0x66/0x240 [ 706.378983][ C0] ? schedule+0x90/0x320 [ 706.383236][ C0] schedule+0x14b/0x320 [ 706.387426][ C0] synchronize_rcu_expedited+0x684/0x830 [ 706.393083][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 706.399290][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 706.404594][ C0] ? __pfx___might_resched+0x10/0x10 [ 706.409913][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 706.416055][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 706.421279][ C0] synchronize_rcu+0x11b/0x360 [ 706.426097][ C0] ? __pfx_synchronize_rcu+0x10/0x10 [ 706.431407][ C0] lockdep_unregister_key+0x556/0x610 [ 706.436842][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 706.442766][ C0] ? rcu_is_watching+0x15/0xb0 [ 706.447600][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 706.452220][ C0] __qdisc_destroy+0x165/0x410 [ 706.457060][ C0] dev_shutdown+0x357/0x440 [ 706.461584][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 706.467967][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 706.474752][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 706.480697][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 706.486937][ C0] default_device_exit_batch+0xa0f/0xa90 [ 706.492595][ C0] ? __pfx___might_resched+0x10/0x10 [ 706.497926][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 706.504108][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 706.509427][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 706.515663][ C0] cleanup_net+0x89d/0xcc0 [ 706.520097][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 706.525090][ C0] ? process_scheduled_works+0x945/0x1830 [ 706.530819][ C0] process_scheduled_works+0xa2c/0x1830 [ 706.536427][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 706.542424][ C0] ? assign_work+0x364/0x3d0 [ 706.547076][ C0] worker_thread+0x86d/0xd40 [ 706.551698][ C0] ? __kthread_parkme+0x169/0x1d0 [ 706.556780][ C0] ? __pfx_worker_thread+0x10/0x10 [ 706.561905][ C0] kthread+0x2f0/0x390 [ 706.566032][ C0] ? __pfx_worker_thread+0x10/0x10 [ 706.571167][ C0] ? __pfx_kthread+0x10/0x10 [ 706.575814][ C0] ret_from_fork+0x4b/0x80 [ 706.580253][ C0] ? __pfx_kthread+0x10/0x10 [ 706.584870][ C0] ret_from_fork_asm+0x1a/0x30 [ 706.589685][ C0] [ 706.592712][ C0] DEBUG: waiting rtnl_mutex for 920 jiffies. [ 706.598710][ C0] task:syz.2.1623 state:D stack:23824 pid:13078 tgid:13076 ppid:11589 flags:0x00004006 [ 706.608938][ C0] Call Trace: [ 706.612230][ C0] [ 706.615225][ C0] __schedule+0x1800/0x4a60 [ 706.619753][ C0] ? __pfx___schedule+0x10/0x10 [ 706.624596][ C0] ? __pfx_lock_release+0x10/0x10 [ 706.629654][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 706.635189][ C0] ? schedule+0x90/0x320 [ 706.639450][ C0] schedule+0x14b/0x320 [ 706.643614][ C0] schedule_preempt_disabled+0x13/0x30 [ 706.649102][ C0] __mutex_lock+0x6a4/0xd70 [ 706.653648][ C0] ? __mutex_lock+0x527/0xd70 [ 706.658356][ C0] ? cangw_pernet_exit_batch+0x20/0x90 [ 706.663830][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 706.668915][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 706.674135][ C0] ? get_rtnl_holder+0x144/0x190 [ 706.679119][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 706.685162][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 706.691158][ C0] cangw_pernet_exit_batch+0x20/0x90 [ 706.696500][ C0] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 706.702511][ C0] setup_net+0xa3b/0xca0 [ 706.706825][ C0] ? __pfx_down_read_killable+0x10/0x10 [ 706.712398][ C0] ? __pfx_setup_net+0x10/0x10 [ 706.717224][ C0] ? read_word_at_a_time+0xe/0x20 [ 706.722272][ C0] copy_net_ns+0x4e2/0x7b0 [ 706.726741][ C0] create_new_namespaces+0x425/0x7b0 [ 706.732043][ C0] ? bpf_lsm_capable+0x9/0x10 [ 706.736782][ C0] ? copy_namespaces+0x5c/0x490 [ 706.741648][ C0] copy_namespaces+0x41a/0x490 [ 706.746472][ C0] copy_process+0x194f/0x3d90 [ 706.751171][ C0] ? copy_process+0x9fa/0x3d90 [ 706.755996][ C0] ? __pfx_copy_process+0x10/0x10 [ 706.761039][ C0] ? futex_wait+0x285/0x360 [ 706.765606][ C0] kernel_clone+0x226/0x8f0 [ 706.770133][ C0] ? aa_sock_opt_perm+0x79/0x120 [ 706.775161][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 706.780210][ C0] __x64_sys_clone+0x258/0x2a0 [ 706.784964][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 706.790328][ C0] ? do_syscall_64+0x100/0x230 [ 706.795157][ C0] ? do_syscall_64+0xb6/0x230 [ 706.799857][ C0] do_syscall_64+0xf3/0x230 [ 706.804363][ C0] ? clear_bhb_loop+0x35/0x90 [ 706.809084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.815040][ C0] RIP: 0033:0x7f9dd6f75bd9 [ 706.819481][ C0] RSP: 002b:00007f9dd7ddaff8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 706.827971][ C0] RAX: ffffffffffffffda RBX: 00007f9dd7103f60 RCX: 00007f9dd6f75bd9 [ 706.836005][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000d5ba2080 [ 706.843985][ C0] RBP: 00007f9dd6fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 706.851989][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 706.860020][ C0] R13: 000000000000000b R14: 00007f9dd7103f60 R15: 00007ffec016ecc8 [ 706.868099][ C0] [ 706.871133][ C0] DEBUG: waiting rtnl_mutex for 932 jiffies. [ 706.877169][ C0] task:dhcpcd state:D stack:20672 pid:4760 tgid:4760 ppid:4759 flags:0x00000002 [ 706.887376][ C0] Call Trace: [ 706.890647][ C0] [ 706.893563][ C0] __schedule+0x1800/0x4a60 [ 706.898131][ C0] ? __pfx___schedule+0x10/0x10 [ 706.903001][ C0] ? __pfx_lock_release+0x10/0x10 [ 706.908101][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 706.913581][ C0] ? schedule+0x90/0x320 [ 706.917862][ C0] schedule+0x14b/0x320 [ 706.922039][ C0] schedule_preempt_disabled+0x13/0x30 [ 706.927558][ C0] __mutex_lock+0x6a4/0xd70 [ 706.932081][ C0] ? __mutex_lock+0x527/0xd70 [ 706.936817][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 706.942048][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 706.947138][ C0] ? get_rtnl_holder+0x144/0x190 [ 706.952090][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 706.957181][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 706.962616][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 706.968165][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 706.973489][ C0] ? __pfx_validate_chain+0x10/0x10 [ 706.978734][ C0] ? __pfx_validate_chain+0x10/0x10 [ 706.983954][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 706.988940][ C0] ? mark_lock+0x9a/0x360 [ 706.993291][ C0] ? __pfx_validate_chain+0x10/0x10 [ 706.998578][ C0] ? __lock_acquire+0x1359/0x2000 [ 707.003638][ C0] ? mark_lock+0x9a/0x360 [ 707.008020][ C0] ? __lock_acquire+0x1359/0x2000 [ 707.013091][ C0] netlink_rcv_skb+0x1e3/0x430 [ 707.017946][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 707.023430][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.028798][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 707.034007][ C0] netlink_unicast+0x7f0/0x990 [ 707.038835][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 707.044233][ C0] ? __virt_addr_valid+0x183/0x530 [ 707.049399][ C0] ? __check_object_size+0x49c/0x900 [ 707.054704][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 707.059959][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 707.064748][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.070087][ C0] ? __import_iovec+0x536/0x820 [ 707.074954][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 707.079972][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 707.085332][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 707.090823][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.096183][ C0] __sock_sendmsg+0x221/0x270 [ 707.100913][ C0] ____sys_sendmsg+0x525/0x7d0 [ 707.105751][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.111047][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.117023][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 707.121635][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 707.126819][ C0] ? netlink_bind+0xaeb/0xc90 [ 707.131523][ C0] ? __pfx___sys_bind+0x10/0x10 [ 707.136430][ C0] ? fd_install+0x35c/0x5d0 [ 707.140953][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.147436][ C0] ? do_syscall_64+0x100/0x230 [ 707.152211][ C0] ? do_syscall_64+0xb6/0x230 [ 707.156927][ C0] do_syscall_64+0xf3/0x230 [ 707.161443][ C0] ? clear_bhb_loop+0x35/0x90 [ 707.166192][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.172106][ C0] RIP: 0033:0x7f97c72daa4b [ 707.176586][ C0] RSP: 002b:00007ffdc06706c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.185070][ C0] RAX: ffffffffffffffda RBX: 00007f97c72026c0 RCX: 00007f97c72daa4b [ 707.193055][ C0] RDX: 0000000000000000 RSI: 00007ffdc0684878 RDI: 000000000000000e [ 707.201076][ C0] RBP: 000000000000000e R08: 0000000000000000 R09: 00007ffdc0684878 [ 707.209096][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 707.217139][ C0] R13: 00007ffdc0684878 R14: 000000000000002c R15: 0000000000000001 [ 707.225186][ C0] [ 707.228224][ C0] DEBUG: waiting rtnl_mutex for 937 jiffies. [ 707.234211][ C0] task:kworker/1:8 state:D stack:22512 pid:11031 tgid:11031 ppid:2 flags:0x00004000 [ 707.244442][ C0] Workqueue: events linkwatch_event [ 707.249707][ C0] Call Trace: [ 707.253001][ C0] [ 707.255991][ C0] __schedule+0x1800/0x4a60 [ 707.260554][ C0] ? __pfx___schedule+0x10/0x10 [ 707.265474][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.271469][ C0] ? __pfx_lock_release+0x10/0x10 [ 707.276559][ C0] ? kick_pool+0x45c/0x620 [ 707.280997][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 707.286280][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 707.291506][ C0] ? schedule+0x90/0x320 [ 707.295817][ C0] schedule+0x14b/0x320 [ 707.299986][ C0] schedule_preempt_disabled+0x13/0x30 [ 707.305509][ C0] __mutex_lock+0x6a4/0xd70 [ 707.310034][ C0] ? __mutex_lock+0x527/0xd70 [ 707.314736][ C0] ? linkwatch_event+0xe/0x60 [ 707.319455][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 707.324507][ C0] ? get_rtnl_holder+0x144/0x190 [ 707.326579][ T5094] Bluetooth: hci1: command tx timeout [ 707.329490][ C0] ? process_scheduled_works+0x945/0x1830 [ 707.340826][ C0] linkwatch_event+0xe/0x60 [ 707.345421][ C0] process_scheduled_works+0xa2c/0x1830 [ 707.350999][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.357026][ C0] ? assign_work+0x364/0x3d0 [ 707.361640][ C0] worker_thread+0x86d/0xd40 [ 707.366303][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.372213][ C0] ? __kthread_parkme+0x169/0x1d0 [ 707.377303][ C0] ? __pfx_worker_thread+0x10/0x10 [ 707.382438][ C0] kthread+0x2f0/0x390 [ 707.386576][ C0] ? __pfx_worker_thread+0x10/0x10 [ 707.391710][ C0] ? __pfx_kthread+0x10/0x10 [ 707.396385][ C0] ret_from_fork+0x4b/0x80 [ 707.400831][ C0] ? __pfx_kthread+0x10/0x10 [ 707.405538][ C0] ret_from_fork_asm+0x1a/0x30 [ 707.410332][ C0] [ 707.413341][ C0] [ 707.413341][ C0] Showing all locks held in the system: [ 707.421102][ C0] 5 locks held by kworker/u8:2/35: [ 707.426279][ C0] #0: ffff888015edd948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 707.437272][ C0] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 707.447874][ C0] #2: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 707.457341][ C0] #3: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 707.467422][ C0] #4: ffffffff8e33ac38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 707.478379][ C0] 1 lock held by dhcpcd/4760: [ 707.483059][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 707.492605][ C0] 2 locks held by getty/4848: [ 707.497343][ C0] #0: ffff88802a82b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 707.507171][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 707.517357][ C0] 3 locks held by kworker/1:8/11031: [ 707.522656][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 707.533732][ C0] #1: ffffc90014677d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 707.544798][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 707.553859][ C0] 2 locks held by syz.2.1623/13078: [ 707.559083][ C0] #0: ffffffff8f5f2c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 707.568542][ C0] #1: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit_batch+0x20/0x90 [ 707.578360][ C0] 1 lock held by syz.1.1633/13158: [ 707.583454][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x21e/0x1bc0 [ 707.592461][ C0] 1 lock held by syz.0.1634/13157: [ 707.597625][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 707.607233][ C0] 1 lock held by syz.4.1636/13169: [ 707.612350][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: xsk_bind+0x151/0xdc0 [ 707.621014][ C0] 1 lock held by syz.4.1636/13170: [ 707.626189][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: xsk_bind+0x151/0xdc0 [ 707.634848][ C0] 3 locks held by syz.3.1638/13176: [ 707.640083][ C0] #0: ffff88801f4a4580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 707.649929][ C0] #1: ffffc90000007c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 707.660147][ C0] #2: ffffffff8e335860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 707.670086][ C0] 1 lock held by syz-executor/13174: [ 707.675430][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 707.684985][ C0] [ 707.687364][ C0] ============================================= [ 707.687364][ C0] [ 708.040485][T13157] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 708.157686][T13179] team0: entered promiscuous mode [ 708.162786][T13179] team_slave_0: entered promiscuous mode [ 708.207070][T13179] team_slave_1: entered promiscuous mode [ 708.569038][T13196] loop4: detected capacity change from 0 to 2048 [ 708.700722][T13178] team0: left promiscuous mode [ 708.774141][T13196] loop4: p1 < > p4 [ 708.848928][T13196] loop4: p4 size 8388608 extends beyond EOD, truncated [ 709.109113][T13178] team_slave_0: left promiscuous mode [ 709.280123][T13178] team_slave_1: left promiscuous mode [ 709.299107][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 709.313607][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 709.335139][T13197] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 709.399655][ T5094] Bluetooth: hci1: command tx timeout [ 710.549739][T13174] chnl_net:caif_netlink_parms(): no params data found [ 710.966143][ T29] audit: type=1326 audit(1720145185.162:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz.0.1646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5be6b75bd9 code=0x0 [ 711.489646][T13227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1644'. [ 711.555214][ T5094] Bluetooth: hci1: command tx timeout [ 711.647546][T13229] loop0: detected capacity change from 0 to 256 [ 712.932912][T13246] cgroup: noprefix used incorrectly [ 713.017879][T13248] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 713.028369][T13248] FAT-fs (loop0): Filesystem has been set read-only [ 713.035345][T13248] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 713.045809][T13248] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 713.065102][ T29] audit: type=1800 audit(1720145187.552:74): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1647" name="file1" dev="loop0" ino=1048729 res=0 errno=0 [ 713.103700][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.150384][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.166617][T13174] bridge_slave_0: entered allmulticast mode [ 713.203927][T13174] bridge_slave_0: entered promiscuous mode [ 713.257644][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.264828][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.325382][T13174] bridge_slave_1: entered allmulticast mode [ 713.359300][T13174] bridge_slave_1: entered promiscuous mode [ 713.544842][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.639456][ T5102] Bluetooth: hci1: command tx timeout [ 713.713446][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.779543][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.913590][T13174] team0: Port device team_slave_0 added [ 714.068361][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.466168][ T29] audit: type=1326 audit(1720145188.962:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13271 comm="syz.4.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e19775bd9 code=0x0 [ 714.723191][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.001676][T13174] team0: Port device team_slave_1 added [ 715.015951][T12425] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 715.169591][ T5102] Bluetooth: hci3: command tx timeout [ 715.193627][ T35] team0: Port device netdevsim0 removed [ 715.202219][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.214449][T12425] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 715.228967][T12425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.247075][T12425] usb 1-1: config 0 descriptor?? [ 715.275934][T13174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.295453][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.433061][T13174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.502434][T13174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.519863][T13174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.577736][T13174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.633227][T12425] ath6kl: Failed to submit usb control message: -71 [ 715.665120][T12425] ath6kl: unable to send the bmi data to the device: -71 [ 715.685071][T12425] ath6kl: Unable to send get target info: -71 [ 715.717542][T12425] ath6kl: Failed to init ath6kl core: -71 [ 715.739308][T12425] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 715.766466][T12425] usb 1-1: USB disconnect, device number 32 [ 715.869495][T13174] hsr_slave_0: entered promiscuous mode [ 715.896416][T13174] hsr_slave_1: entered promiscuous mode [ 715.926796][T13174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.947214][T13174] Cannot create hsr debugfs directory [ 716.006508][T13285] cgroup: noprefix used incorrectly [ 716.073413][T13287] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1657'. [ 716.182534][ T5102] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 716.302674][T13281] loop4: detected capacity change from 0 to 32768 [ 716.346372][ T35] bridge_slave_1: left allmulticast mode [ 716.382643][ T35] bridge_slave_1: left promiscuous mode [ 716.391849][T13281] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1658 (13281) [ 716.432398][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.472605][T13281] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 716.490697][ T35] bridge_slave_0: left allmulticast mode [ 716.505228][ T35] bridge_slave_0: left promiscuous mode [ 716.525684][T13281] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 716.534444][T13281] BTRFS info (device loop4): using free-space-tree [ 716.557795][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.787869][T13281] BTRFS info (device loop4): rebuilding free space tree [ 717.165380][ T5102] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 717.184275][ T5102] Bluetooth: hci3: Injecting HCI hardware error event [ 717.198597][ T5102] Bluetooth: hci3: hardware error 0x00 [ 718.192104][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.227936][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.245791][ T35] bond0 (unregistering): Released all slaves [ 718.294536][T13291] team0: entered promiscuous mode [ 718.313802][T13291] team_slave_0: entered promiscuous mode [ 718.345388][T13291] team_slave_1: entered promiscuous mode [ 718.352182][T13293] team0: entered promiscuous mode [ 718.374342][T13293] team_slave_0: entered promiscuous mode [ 718.393635][T13293] team_slave_1: entered promiscuous mode [ 718.403634][T13293] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 718.423274][T13293] team0: left promiscuous mode [ 718.430285][T13293] team_slave_0: left promiscuous mode [ 718.443797][T13293] team_slave_1: left promiscuous mode [ 718.452998][T13293] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 718.556094][ T35] : left promiscuous mode [ 718.639748][T13291] team0: left promiscuous mode [ 718.644584][T13291] team_slave_0: left promiscuous mode [ 718.665280][T13291] team_slave_1: left promiscuous mode [ 718.859323][ T9488] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 718.915249][T13331] Bluetooth: hci2: command 0x0406 tx timeout [ 719.320056][ T5102] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 719.728305][T13351] loop1: detected capacity change from 0 to 2048 [ 719.883334][T13351] loop1: p1 < > p4 [ 719.893426][T13351] loop1: p4 size 8388608 extends beyond EOD, truncated [ 720.458810][ T6811] udevd[6811]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 720.475618][ T5947] udevd[5947]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 720.555965][T13353] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 720.801377][T13363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1666'. [ 721.191883][T13334] loop0: detected capacity change from 0 to 32768 [ 721.203595][T13334] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1662 (13334) [ 721.259153][T13334] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 721.286877][T13334] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 721.312816][T13334] BTRFS info (device loop0): using free-space-tree [ 721.328067][ T29] audit: type=1326 audit(1720145195.822:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13367 comm="syz.4.1667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e19775bd9 code=0x0 [ 721.508847][ T35] hsr_slave_0: left promiscuous mode [ 721.538693][ T35] hsr_slave_1: left promiscuous mode [ 721.538885][T13334] BTRFS info (device loop0): rebuilding free space tree [ 721.580363][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 721.588160][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.604834][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 721.622680][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.680006][ T35] veth1_macvtap: left promiscuous mode [ 721.701517][ T35] veth0_macvtap: left promiscuous mode [ 721.717498][ T35] veth1_vlan: left promiscuous mode [ 721.723247][ T35] veth0_vlan: left promiscuous mode [ 722.065485][T13395] cgroup: noprefix used incorrectly [ 722.575192][T12425] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 722.778381][T12425] usb 2-1: config 1 has an invalid interface number: 237 but max is 1 [ 722.827340][T12425] usb 2-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 722.884017][T12425] usb 2-1: config 1 has no interface number 1 [ 722.918045][T12425] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.946728][T12425] usb 2-1: too many endpoints for config 1 interface 237 altsetting 105: 185, using maximum allowed: 30 [ 722.958842][T12425] usb 2-1: config 1 interface 237 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 185 [ 722.998480][T10539] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 723.003670][T12425] usb 2-1: config 1 interface 237 has no altsetting 0 [ 723.190858][T12425] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.214347][T12425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.672363][T10539] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 723.672426][T12425] usb 2-1: Product: syz [ 723.708289][T10539] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.709681][T12425] usb 2-1: Manufacturer: syz [ 723.723352][T12425] usb 2-1: SerialNumber: syz [ 723.743758][T10539] usb 4-1: config 0 has no interface number 0 [ 723.754098][T10539] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 723.835204][T10539] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 723.870101][T12425] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 723.890680][T12425] cdc_ncm 2-1:1.0: bind() failure [ 723.940552][T10539] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 723.971735][T10539] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 723.986452][T11893] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 724.016846][T10539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.061611][T10539] usb 4-1: config 0 descriptor?? [ 724.105987][T13400] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 724.174793][T10539] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 724.760450][T13403] loop4: detected capacity change from 0 to 32768 [ 724.921598][ T35] team0 (unregistering): Port device team_slave_1 removed [ 724.975933][ T35] team0 (unregistering): Port device team_slave_0 removed [ 725.035137][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 725.082490][T13403] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names [ 725.108548][T13403] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 725.135940][T13403] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.9: disk_accounting_v2 [ 725.135940][T13403] running recovery passes: check_allocations [ 725.236556][ T12] usb 4-1: Failed to submit usb control message: -110 [ 725.428161][ T8] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 725.439305][T13403] bcachefs (loop4): accounting_read... done [ 725.445810][ T8] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 725.455454][T13403] bcachefs (loop4): alloc_read... done [ 725.461008][T13403] bcachefs (loop4): stripes_read... done [ 725.466961][ T12] usb 4-1: unable to send the bmi data to the device: -110 [ 725.474188][ T12] usb 4-1: unable to get target info from device [ 727.475071][ C0] DEBUG: holding rtnl_mutex for 602 jiffies. [ 727.481114][ C0] task:kworker/u8:2 state:R running task stack:19728 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 727.492941][ C0] Workqueue: netns cleanup_net [ 727.497767][ C0] Call Trace: [ 727.501060][ C0] [ 727.504009][ C0] __schedule+0x1800/0x4a60 [ 727.508584][ C0] ? stack_depot_save_flags+0x29/0x830 [ 727.514072][ C0] ? __pfx___schedule+0x10/0x10 [ 727.518978][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 727.525031][ C0] ? unregister_netdevice_many_notify+0x9c7/0x1d20 [ 727.531554][ C0] ? default_device_exit_batch+0xa0f/0xa90 [ 727.537425][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 727.542737][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 727.547903][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 727.553668][ C0] irqentry_exit+0x5e/0x90 [ 727.558146][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 727.564154][ C0] RIP: 0010:lockdep_unregister_key+0x56d/0x610 [ 727.570370][ C0] Code: ff 92 48 c7 c6 10 bc 6f 81 e8 8f 04 0a 00 e8 fa 18 0a 00 e9 e5 fb ff ff e8 c0 62 21 0a 41 f7 c7 00 02 00 00 74 d0 fb 45 84 f6 <75> cf eb e0 90 0f 0b 90 45 31 f6 e9 62 ff ff ff 90 0f 0b 90 e9 a1 [ 727.590040][ C0] RSP: 0018:ffffc90000ab75c0 EFLAGS: 00000246 [ 727.596169][ C0] RAX: dffffc0000000000 RBX: 1ffff92000156ec0 RCX: ffffffff947f4803 [ 727.604163][ C0] RDX: 0000000000000001 RSI: ffffffff8bcad5e0 RDI: ffffffff8c207f20 [ 727.612191][ C0] RBP: ffffc90000ab7698 R08: ffffffff92ffcf6f R09: 1ffffffff25ff9ed [ 727.620215][ C0] R10: dffffc0000000000 R11: fffffbfff25ff9ee R12: ffffc90000ab7600 [ 727.628235][ C0] R13: 1ffff92000156ebc R14: 0000000000000000 R15: 0000000000000202 [ 727.636283][ C0] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 727.642205][ C0] ? rcu_is_watching+0x15/0xb0 [ 727.646984][ C0] ? qdisc_reset+0x3bf/0x5b0 [ 727.651566][ C0] __qdisc_destroy+0x165/0x410 [ 727.656338][ C0] dev_shutdown+0x357/0x440 [ 727.660831][ C0] unregister_netdevice_many_notify+0x9c7/0x1d20 [ 727.667188][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 727.673960][ C0] ? unregister_netdevice_queue+0x26b/0x370 [ 727.679895][ C0] ? batadv_softif_destroy_netlink+0x1e0/0x270 [ 727.686074][ C0] default_device_exit_batch+0xa0f/0xa90 [ 727.691710][ C0] ? __pfx___might_resched+0x10/0x10 [ 727.697011][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 727.703170][ C0] ? cfg802154_pernet_exit+0xc3/0xe0 [ 727.708468][ C0] ? __pfx_default_device_exit_batch+0x10/0x10 [ 727.714623][ C0] cleanup_net+0x89d/0xcc0 [ 727.719056][ C0] ? __pfx_cleanup_net+0x10/0x10 [ 727.723990][ C0] ? process_scheduled_works+0x945/0x1830 [ 727.729723][ C0] process_scheduled_works+0xa2c/0x1830 [ 727.735327][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 727.741306][ C0] ? assign_work+0x364/0x3d0 [ 727.745906][ C0] worker_thread+0x86d/0xd40 [ 727.750496][ C0] ? __kthread_parkme+0x169/0x1d0 [ 727.755562][ C0] ? __pfx_worker_thread+0x10/0x10 [ 727.760670][ C0] kthread+0x2f0/0x390 [ 727.764733][ C0] ? __pfx_worker_thread+0x10/0x10 [ 727.769852][ C0] ? __pfx_kthread+0x10/0x10 [ 727.774440][ C0] ret_from_fork+0x4b/0x80 [ 727.778866][ C0] ? __pfx_kthread+0x10/0x10 [ 727.783451][ C0] ret_from_fork_asm+0x1a/0x30 [ 727.788237][ C0] [ 727.791267][ C0] DEBUG: waiting rtnl_mutex for 629 jiffies. [ 727.797263][ C0] task:syz-executor state:D stack:21024 pid:13174 tgid:13174 ppid:13171 flags:0x00004002 [ 727.807448][ C0] Call Trace: [ 727.810720][ C0] [ 727.813643][ C0] __schedule+0x1800/0x4a60 [ 727.818174][ C0] ? __pfx___schedule+0x10/0x10 [ 727.823020][ C0] ? __pfx_lock_release+0x10/0x10 [ 727.828082][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 727.833591][ C0] ? schedule+0x90/0x320 [ 727.837898][ C0] schedule+0x14b/0x320 [ 727.842090][ C0] schedule_preempt_disabled+0x13/0x30 [ 727.847583][ C0] __mutex_lock+0x6a4/0xd70 [ 727.852083][ C0] ? __mutex_lock+0x527/0xd70 [ 727.856970][ C0] ? register_nexthop_notifier+0x84/0x290 [ 727.862720][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 727.867816][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 727.874166][ C0] ? get_rtnl_holder+0x144/0x190 [ 727.879141][ C0] register_nexthop_notifier+0x84/0x290 [ 727.884683][ C0] ? devlink_resource_find+0xba/0xf0 [ 727.889987][ C0] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 727.896148][ C0] ? devlink_resource_find+0xc4/0xf0 [ 727.901431][ C0] nsim_fib_create+0x8a6/0xa70 [ 727.906209][ C0] ? __pfx_nsim_fib_create+0x10/0x10 [ 727.911536][ C0] nsim_drv_probe+0x747/0xb80 [ 727.916224][ C0] ? __pfx_nsim_drv_probe+0x10/0x10 [ 727.921443][ C0] ? kernfs_create_link+0x187/0x1f0 [ 727.926665][ C0] ? sysfs_do_create_link_sd+0xdd/0x110 [ 727.932205][ C0] ? driver_sysfs_add+0x1de/0x1f0 [ 727.937228][ C0] ? really_probe+0x147/0xad0 [ 727.941896][ C0] ? __pfx_nsim_bus_probe+0x10/0x10 [ 727.947118][ C0] really_probe+0x2b8/0xad0 [ 727.951619][ C0] __driver_probe_device+0x1a2/0x390 [ 727.956910][ C0] driver_probe_device+0x50/0x430 [ 727.961930][ C0] __device_attach_driver+0x2d6/0x530 [ 727.967307][ C0] bus_for_each_drv+0x24e/0x2e0 [ 727.972168][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 727.978120][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 727.983519][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 727.988568][ C0] __device_attach+0x333/0x520 [ 727.993334][ C0] ? __pfx___device_attach+0x10/0x10 [ 727.998631][ C0] bus_probe_device+0x189/0x260 [ 728.003478][ C0] device_add+0x856/0xbf0 [ 728.007822][ C0] new_device_store+0x3f3/0x890 [ 728.012665][ C0] ? kernfs_fop_write_iter+0x1eb/0x500 [ 728.018160][ C0] ? __pfx_new_device_store+0x10/0x10 [ 728.023524][ C0] ? sysfs_kf_write+0x182/0x2a0 [ 728.028401][ C0] ? bus_attr_store+0x4f/0xa0 [ 728.033088][ C0] ? __pfx_sysfs_kf_write+0x10/0x10 [ 728.038292][ C0] kernfs_fop_write_iter+0x3a1/0x500 [ 728.043574][ C0] vfs_write+0xa72/0xc90 [ 728.047821][ C0] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 728.053655][ C0] ? __pfx_vfs_write+0x10/0x10 [ 728.058427][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 728.064407][ C0] ksys_write+0x1a0/0x2c0 [ 728.068764][ C0] ? __pfx_ksys_write+0x10/0x10 [ 728.073600][ C0] ? do_syscall_64+0x100/0x230 [ 728.078369][ C0] ? do_syscall_64+0xb6/0x230 [ 728.083059][ C0] do_syscall_64+0xf3/0x230 [ 728.087619][ C0] ? clear_bhb_loop+0x35/0x90 [ 728.092323][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.098230][ C0] RIP: 0033:0x7f1b7797475f [ 728.102631][ C0] RSP: 002b:00007fffa8f43960 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 728.111044][ C0] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1b7797475f [ 728.119018][ C0] RDX: 0000000000000003 RSI: 00007fffa8f439b0 RDI: 0000000000000005 [ 728.126990][ C0] RBP: 00007f1b779e45c4 R08: 0000000000000000 R09: 00007fffa8f437b7 [ 728.134954][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 728.142927][ C0] R13: 00007fffa8f439b0 R14: 00007f1b78634620 R15: 0000000000000003 [ 728.150936][ C0] [ 728.153971][ C0] DEBUG: waiting rtnl_mutex for 650 jiffies. [ 728.159967][ C0] task:dhcpcd state:D stack:20672 pid:4760 tgid:4760 ppid:4759 flags:0x00000002 [ 728.170130][ C0] Call Trace: [ 728.173395][ C0] [ 728.176354][ C0] __schedule+0x1800/0x4a60 [ 728.180865][ C0] ? __pfx___schedule+0x10/0x10 [ 728.185842][ C0] ? __pfx_lock_release+0x10/0x10 [ 728.190866][ C0] ? __mutex_trylock_common+0x92/0x2e0 [ 728.196378][ C0] ? schedule+0x90/0x320 [ 728.200664][ C0] schedule+0x14b/0x320 [ 728.204836][ C0] schedule_preempt_disabled+0x13/0x30 [ 728.210304][ C0] __mutex_lock+0x6a4/0xd70 [ 728.214804][ C0] ? __mutex_lock+0x527/0xd70 [ 728.219509][ C0] ? rtnetlink_rcv_msg+0x847/0x1180 [ 728.224703][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 728.229741][ C0] ? get_rtnl_holder+0x144/0x190 [ 728.234670][ C0] rtnetlink_rcv_msg+0x847/0x1180 [ 728.239725][ C0] ? rtnetlink_rcv_msg+0x208/0x1180 [ 728.244936][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 728.250402][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 728.255715][ C0] ? __pfx_validate_chain+0x10/0x10 [ 728.260906][ C0] ? __pfx_validate_chain+0x10/0x10 [ 728.266143][ C0] ? arch_stack_walk+0x16d/0x1b0 [ 728.271071][ C0] ? mark_lock+0x9a/0x360 [ 728.275428][ C0] ? __pfx_validate_chain+0x10/0x10 [ 728.280624][ C0] ? __lock_acquire+0x1359/0x2000 [ 728.285664][ C0] ? mark_lock+0x9a/0x360 [ 728.289984][ C0] ? __lock_acquire+0x1359/0x2000 [ 728.295042][ C0] netlink_rcv_skb+0x1e3/0x430 [ 728.299816][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 728.305320][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 728.310674][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 728.315920][ C0] netlink_unicast+0x7f0/0x990 [ 728.320732][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 728.326055][ C0] ? __virt_addr_valid+0x183/0x530 [ 728.331164][ C0] ? __check_object_size+0x49c/0x900 [ 728.336450][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 728.341553][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 728.346323][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.351604][ C0] ? __import_iovec+0x536/0x820 [ 728.356460][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 728.361385][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 728.366694][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 728.372157][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.377443][ C0] __sock_sendmsg+0x221/0x270 [ 728.382112][ C0] ____sys_sendmsg+0x525/0x7d0 [ 728.386879][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 728.392156][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 728.398081][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 728.402662][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 728.407769][ C0] ? netlink_bind+0xaeb/0xc90 [ 728.412441][ C0] ? __pfx___sys_bind+0x10/0x10 [ 728.417296][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 728.423631][ C0] ? do_syscall_64+0x100/0x230 [ 728.428450][ C0] ? do_syscall_64+0xb6/0x230 [ 728.433153][ C0] do_syscall_64+0xf3/0x230 [ 728.437703][ C0] ? clear_bhb_loop+0x35/0x90 [ 728.442408][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.448330][ C0] RIP: 0033:0x7f97c72daa4b [ 728.452727][ C0] RSP: 002b:00007ffdc06706c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.461154][ C0] RAX: ffffffffffffffda RBX: 00007f97c72026c0 RCX: 00007f97c72daa4b [ 728.469125][ C0] RDX: 0000000000000000 RSI: 00007ffdc0684878 RDI: 000000000000000e [ 728.477096][ C0] RBP: 000000000000000e R08: 0000000000000000 R09: 00007ffdc0684878 [ 728.485076][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 728.493030][ C0] R13: 00007ffdc0684878 R14: 0000000000000048 R15: 0000000000000001 [ 728.501008][ C0] [ 728.504009][ C0] DEBUG: waiting rtnl_mutex for 644 jiffies. [ 728.509976][ C0] task:kworker/1:8 state:D stack:22512 pid:11031 tgid:11031 ppid:2 flags:0x00004000 [ 728.520134][ C0] Workqueue: events linkwatch_event [ 728.525344][ C0] Call Trace: [ 728.528609][ C0] [ 728.531529][ C0] __schedule+0x1800/0x4a60 [ 728.536042][ C0] ? __pfx___schedule+0x10/0x10 [ 728.540877][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 728.546854][ C0] ? __pfx_lock_release+0x10/0x10 [ 728.551859][ C0] ? kick_pool+0x1bd/0x620 [ 728.556276][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 728.561456][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 728.566655][ C0] ? schedule+0x90/0x320 [ 728.570878][ C0] schedule+0x14b/0x320 [ 728.575048][ C0] schedule_preempt_disabled+0x13/0x30 [ 728.580503][ C0] __mutex_lock+0x6a4/0xd70 [ 728.585016][ C0] ? __mutex_lock+0x527/0xd70 [ 728.589709][ C0] ? linkwatch_event+0xe/0x60 [ 728.594369][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 728.599397][ C0] ? get_rtnl_holder+0x144/0x190 [ 728.604318][ C0] ? process_scheduled_works+0x945/0x1830 [ 728.610034][ C0] linkwatch_event+0xe/0x60 [ 728.614519][ C0] process_scheduled_works+0xa2c/0x1830 [ 728.620078][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 728.626077][ C0] ? assign_work+0x364/0x3d0 [ 728.630657][ C0] worker_thread+0x86d/0xd40 [ 728.635251][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 728.641127][ C0] ? __kthread_parkme+0x169/0x1d0 [ 728.646151][ C0] ? __pfx_worker_thread+0x10/0x10 [ 728.651265][ C0] kthread+0x2f0/0x390 [ 728.655333][ C0] ? __pfx_worker_thread+0x10/0x10 [ 728.660441][ C0] ? __pfx_kthread+0x10/0x10 [ 728.665076][ C0] ret_from_fork+0x4b/0x80 [ 728.669535][ C0] ? __pfx_kthread+0x10/0x10 [ 728.674162][ C0] ret_from_fork_asm+0x1a/0x30 [ 728.679020][ C0] [ 728.682057][ C0] [ 728.682057][ C0] Showing all locks held in the system: [ 728.689819][ C0] 3 locks held by kworker/0:0/8: [ 728.694781][ C0] 2 locks held by kworker/u8:1/12: [ 728.699944][ C0] 4 locks held by kworker/u8:2/35: [ 728.705107][ C0] 3 locks held by kworker/u8:3/53: [ 728.710227][ C0] 3 locks held by kworker/u8:7/1109: [ 728.715539][ C0] 1 lock held by dhcpcd/4760: [ 728.720218][ C0] #0: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x847/0x1180 [ 728.729777][ C0] 2 locks held by getty/4848: [ 728.734469][ C0] #0: ffff88802a82b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 728.744304][ C0] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 728.754422][ C0] 5 locks held by kworker/1:5/5145: [ 728.759632][ C0] 3 locks held by kworker/1:8/11031: [ 728.764900][ C0] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 728.775869][ C0] #1: ffffc90014677d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 728.786839][ C0] #2: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 728.795808][ C0] 1 lock held by syz-executor/12646: [ 728.801072][ C0] 7 locks held by syz-executor/13174: [ 728.806439][ C0] #0: ffff88802f2c0420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 728.815326][ C0] #1: ffff88802c23e488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 728.825083][ C0] #2: ffff888021ffdb48 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 728.835106][ C0] #3: ffffffff8ef05248 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 728.845505][ C0] #4: ffff88805ecd90e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 728.854725][ C0] #5: ffff88805ecd8250 (&devlink->lock_key#26){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 728.864736][ C0] #6: ffffffff8f5ff788 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 728.874749][ C0] 1 lock held by syz.3.1671/13399: [ 728.879861][ C0] 1 lock held by syz.4.1672/13403: [ 728.884981][ C0] 2 locks held by syz.0.1673/13409: [ 728.890210][ C0] [ 728.892516][ C0] ============================================= [ 728.892516][ C0] [ 728.922885][T13403] bcachefs (loop4): snapshots_read... done [ 728.929975][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 728.939098][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.948738][ T5145] usb 2-1: USB disconnect, device number 28 [ 728.955206][T10539] usb 4-1: USB disconnect, device number 41 [ 728.962645][ T12] usb 4-1: could not get target info (-110) [ 728.969681][T13403] bcachefs (loop4): check_allocations... [ 728.972043][ T12] usb 4-1: could not probe fw (-110) [ 729.001258][T13403] btree ptr not marked in member info btree allocated bitmap [ 729.001272][T13403] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4fe84214937890c3 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, shutting down [ 729.020618][ T8] usb 1-1: can't set config #9, error -71 [ 729.022218][ T8] usb 1-1: USB disconnect, device number 33 [ 729.117357][T13424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1675'. [ 729.153052][T13403] bcachefs (loop4): inconsistency detected - emergency read only at journal seq 10 [ 729.170246][T13427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1675'. [ 729.182198][T13403] bcachefs (loop4): bch2_gc_mark_key(): error fsck_errors_not_fixed [ 729.194365][T13403] bcachefs (loop4): bch2_gc_btree(): error fsck_errors_not_fixed [ 729.210679][T13403] bcachefs (loop4): bch2_gc_btrees(): error fsck_errors_not_fixed [ 729.227912][T13403] bcachefs (loop4): bch2_check_allocations(): error fsck_errors_not_fixed [ 729.237251][T13403] bcachefs (loop4): bch2_fs_recovery(): error fsck_errors_not_fixed [ 729.287351][T13403] bcachefs (loop4): bch2_fs_start(): error starting filesystem fsck_errors_not_fixed [ 729.297467][T13403] bcachefs (loop4): shutting down [ 729.331898][T13403] bcachefs (loop4): shutdown complete [ 729.405207][ T5145] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 729.495839][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 729.631558][ T5145] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 729.653076][ T5145] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 729.693229][ T5145] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.714856][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.724569][ T5145] usb 2-1: SerialNumber: syz [ 729.725985][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 729.737065][T13422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 729.780757][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.833078][ T8] usb 1-1: config 0 descriptor?? [ 730.016889][T13422] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 730.158604][ T8] ath6kl: Failed to submit usb control message: -71 [ 730.201054][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 730.215802][T13174] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.255197][ T8] ath6kl: Unable to send get target info: -71 [ 730.266703][ T8] ath6kl: Failed to init ath6kl core: -71 [ 730.278753][T13174] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.310843][ T8] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 730.326865][T13174] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 730.360587][ T8] usb 1-1: USB disconnect, device number 34 [ 730.398081][T13174] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 730.500269][ T5145] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 730.662614][T13448] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1677'. [ 730.742532][T13174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.819537][T13174] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.856388][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.863589][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.907701][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.914906][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.950629][T13453] loop0: detected capacity change from 0 to 256 [ 731.033731][T13174] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 731.083725][T13174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 731.572702][T13174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.585535][T13467] cgroup: noprefix used incorrectly [ 731.712357][T13174] veth0_vlan: entered promiscuous mode [ 731.778669][T13174] veth1_vlan: entered promiscuous mode [ 731.861127][T13473] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 731.871465][T13473] FAT-fs (loop0): Filesystem has been set read-only [ 731.880018][T13473] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 731.890232][T13473] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 731.901489][ T29] audit: type=1800 audit(1720145206.392:77): pid=13473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1678" name="file1" dev="loop0" ino=1048732 res=0 errno=0 [ 731.930008][T13174] veth0_macvtap: entered promiscuous mode [ 731.969368][T13174] veth1_macvtap: entered promiscuous mode [ 732.035523][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.084429][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.117307][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.149812][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.171160][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.196081][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.222990][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.254181][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.281895][T13174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.390207][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.425974][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.466143][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.495108][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.504982][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.576276][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.632589][T13174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.671375][T13491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 732.704489][T13174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.719299][T13495] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1680'. [ 732.846462][ T29] audit: type=1326 audit(1720145207.322:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13483 comm="syz.0.1681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5be6b75bd9 code=0x0 [ 732.948902][T13498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.008666][T13174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.339969][T12425] usb 2-1: USB disconnect, device number 29 [ 733.365262][T12425] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 733.558047][T13174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.583465][T13500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.605099][T13174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.635295][T13174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.644079][T13174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.828954][T13507] loop0: detected capacity change from 0 to 8 [ 733.978053][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.987562][T13507] SQUASHFS error: lzo decompression failed, data probably corrupt [ 733.996551][T13507] SQUASHFS error: Failed to read block 0x28d: -5 [ 734.003089][T13507] SQUASHFS error: Unable to read metadata cache entry [28b] [ 734.010745][T13507] SQUASHFS error: Unable to read inode 0x11f [ 734.033974][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.091895][T10707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.131617][T10707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.541608][T13504] loop1: detected capacity change from 0 to 32768 [ 735.575655][T13504] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1683 (13504) [ 735.666688][T13504] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 735.715783][T13504] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 735.724549][T13504] BTRFS info (device loop1): using free-space-tree [ 735.735081][ T5143] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 735.925180][ T5145] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 735.950082][ T5143] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 735.962554][ T5143] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 735.973926][ T5143] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 735.983757][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.146887][ T5145] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 736.174861][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.206158][ T5145] usb 1-1: config 0 descriptor?? [ 736.254817][T13526] : entered promiscuous mode [ 736.447976][ T5145] ath6kl: Failed to submit usb control message: -71 [ 736.454674][ T5145] ath6kl: unable to send the bmi data to the device: -71 [ 736.485366][ T5145] ath6kl: Unable to send get target info: -71 [ 736.495368][ T5145] ath6kl: Failed to init ath6kl core: -71 [ 736.502341][ T5145] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 736.556778][ T5143] usb 4-1: string descriptor 0 read error: -71 [ 736.585376][ T5145] usb 1-1: USB disconnect, device number 35 [ 736.590338][ T5143] usb 4-1: USB disconnect, device number 42 [ 736.642015][T13535] loop2: detected capacity change from 0 to 32768 [ 736.675783][T13535] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1686 (13535) [ 736.737975][T13535] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 736.770023][T13535] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 736.789393][T13535] BTRFS info (device loop2): using free-space-tree [ 736.940132][T13535] BTRFS info (device loop2): rebuilding free space tree [ 736.963840][T12646] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 737.288204][T13574] cgroup: noprefix used incorrectly [ 737.359570][ T5102] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 737.445435][T13576] loop3: detected capacity change from 0 to 1024 [ 737.586555][T13576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.628199][T13579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1691'. [ 737.660136][T13584] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1688'. [ 737.748591][T13579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1691'. [ 738.623859][T12640] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.913215][ T29] audit: type=1326 audit(1720145213.402:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13595 comm="syz.3.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5246f75bd9 code=0x0 [ 739.395113][ T5094] Bluetooth: hci2: command 0x0406 tx timeout [ 739.575177][T12425] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 739.794836][T12425] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 739.827200][T12425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.881288][T12425] usb 2-1: config 0 descriptor?? [ 740.064827][T13174] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 740.349660][T12425] ath6kl: Failed to submit usb control message: -71 [ 740.394461][T12425] ath6kl: unable to send the bmi data to the device: -71 [ 740.410482][T12425] ath6kl: Unable to send get target info: -71 [ 740.428501][T12425] ath6kl: Failed to init ath6kl core: -71 [ 740.445723][T12425] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 740.493393][T12425] usb 2-1: USB disconnect, device number 30 [ 740.815155][ T5094] Bluetooth: hci2: unexpected event 0x06 length: 23 > 3 [ 741.450066][ T5829] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 741.758175][ T5094] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 741.767350][ T5094] Bluetooth: hci2: Injecting HCI hardware error event [ 741.777766][ T5102] Bluetooth: hci2: hardware error 0x00 [ 741.987141][ T5829] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 742.002267][T13609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1697'. [ 742.179453][ T5829] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 742.193385][ T5829] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 742.202878][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.954846][T13626] cgroup: noprefix used incorrectly [ 743.110815][ T5094] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 743.155237][T13629] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1702'. [ 743.177585][T13605] : entered promiscuous mode [ 743.378623][T13634] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1703'. [ 743.465952][ T5829] usb 3-1: string descriptor 0 read error: -71 [ 743.496325][ T5829] usb 3-1: USB disconnect, device number 36 [ 743.833644][T13622] loop1: detected capacity change from 0 to 32768 [ 743.873197][T13622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1700 (13622) [ 743.957646][ T5102] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 744.010876][T13622] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 744.063139][T13622] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 744.155199][T13622] BTRFS info (device loop1): using free-space-tree [ 744.422530][ T29] audit: type=1326 audit(1720145218.912:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13641 comm="syz.3.1704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5246f75bd9 code=0x0 [ 744.985395][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1705'. [ 745.062820][T13664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.131883][T12646] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.711725][T13656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.887571][T13670] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1708'. [ 745.977732][T13671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1708'. [ 746.320186][T13680] loop1: detected capacity change from 0 to 8 [ 746.489900][T13680] SQUASHFS error: lzo decompression failed, data probably corrupt [ 747.783216][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.790078][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.918749][T13680] SQUASHFS error: Failed to read block 0x28d: -5 [ 747.945422][T13680] SQUASHFS error: Unable to read metadata cache entry [28b] [ 747.952997][T13680] SQUASHFS error: Unable to read inode 0x11f [ 748.058734][T13692] cgroup: noprefix used incorrectly [ 748.236485][T13698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1714'. [ 749.175296][T13703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1715'. [ 749.200503][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.344093][T13712] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 749.344128][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.1.1719 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 749.344152][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 749.344165][T13712] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 749.344194][T13712] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 9f 9c 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 749.344212][T13712] RSP: 0018:ffffc90002e3f6e0 EFLAGS: 00010202 [ 749.344239][T13712] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 749.344252][T13712] RDX: ffffc90004a91000 RSI: 0000000000001d90 RDI: 0000000000001d91 [ 749.344266][T13712] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 749.344280][T13712] R10: 0000000000000004 R11: ffff88802f3a5a00 R12: 0000000000000008 [ 749.344294][T13712] R13: 0000000002e3f738 R14: 0000000000000000 R15: dffffc0000000000 [ 749.344307][T13712] FS: 00007f6a6ebff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 749.344325][T13712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.344339][T13712] CR2: 0000000020010000 CR3: 0000000069ebc000 CR4: 00000000003526f0 [ 749.344356][T13712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.344368][T13712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.344381][T13712] Call Trace: [ 749.344388][T13712] [ 749.344397][T13712] ? __die_body+0x88/0xe0 [ 749.344424][T13712] ? die+0xcf/0x110 [ 749.344449][T13712] ? do_trap+0x15a/0x3a0 [ 749.344474][T13712] ? do_error_trap+0x1dc/0x2c0 [ 749.344499][T13712] ? __pfx_do_error_trap+0x10/0x10 [ 749.344522][T13712] ? __pfx_lock_release+0x10/0x10 [ 749.344549][T13712] ? rcu_is_watching+0x15/0xb0 [ 749.344575][T13712] ? exc_stack_segment+0x38/0x50 [ 749.344596][T13712] ? asm_exc_stack_segment+0x26/0x30 [ 749.344619][T13712] ? bpf_ringbuf_query+0x4f/0x150 [ 749.344642][T13712] ? dev_hash_map_redirect+0x64/0x620 [ 749.344665][T13712] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 749.344682][T13712] bpf_prog_run_generic_xdp+0x1265/0x14c0 [ 749.344722][T13712] do_xdp_generic+0x673/0xb90 [ 749.344749][T13712] ? __pfx_do_xdp_generic+0x10/0x10 [ 749.344768][T13712] ? tun_get_user+0x26c8/0x4560 [ 749.344791][T13712] ? tun_get_user+0x26c8/0x4560 [ 749.344808][T13712] tun_get_user+0x2805/0x4560 [ 749.344833][T13712] ? __pfx_tun_get_user+0x10/0x10 [ 749.344853][T13712] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 749.344870][T13712] ? tun_get+0x1e/0x2f0 [ 749.344896][T13712] ? tun_get+0x1e/0x2f0 [ 749.344910][T13712] ? tun_get+0x27d/0x2f0 [ 749.344927][T13712] tun_chr_write_iter+0x113/0x1f0 [ 749.344945][T13712] vfs_write+0xa72/0xc90 [ 749.344964][T13712] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 749.344982][T13712] ? __pfx_vfs_write+0x10/0x10 [ 749.344996][T13712] ? do_futex+0x33b/0x560 [ 749.345024][T13712] ksys_write+0x1a0/0x2c0 [ 749.345041][T13712] ? __pfx_ksys_write+0x10/0x10 [ 749.345056][T13712] ? do_syscall_64+0x100/0x230 [ 749.345074][T13712] ? do_syscall_64+0xb6/0x230 [ 749.345089][T13712] do_syscall_64+0xf3/0x230 [ 749.345104][T13712] ? clear_bhb_loop+0x35/0x90 [ 749.345125][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.345144][T13712] RIP: 0033:0x7f6a6f17475f [ 749.345160][T13712] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 749.345176][T13712] RSP: 002b:00007f6a6ebff010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 749.345197][T13712] RAX: ffffffffffffffda RBX: 00007f6a6f303f60 RCX: 00007f6a6f17475f [ 749.345212][T13712] RDX: 000000000000fdef RSI: 0000000020000540 RDI: 00000000000000c8 [ 749.345235][T13712] RBP: 00007f6a6f1e4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 749.345248][T13712] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 749.345261][T13712] R13: 000000000000000b R14: 00007f6a6f303f60 R15: 00007ffcd9858f28 [ 749.345284][T13712] [ 749.345291][T13712] Modules linked in: [ 749.345350][T13712] ---[ end trace 0000000000000000 ]--- [ 749.361765][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.362516][T13712] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 749.759381][T13712] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 9f 9c 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 749.779051][T13712] RSP: 0018:ffffc90002e3f6e0 EFLAGS: 00010202 [ 749.785167][T13712] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 749.793169][T13712] RDX: ffffc90004a91000 RSI: 0000000000001d90 RDI: 0000000000001d91 [ 749.801216][T13712] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 749.809247][T13712] R10: 0000000000000004 R11: ffff88802f3a5a00 R12: 0000000000000008 [ 749.817275][T13712] R13: 0000000002e3f738 R14: 0000000000000000 R15: dffffc0000000000 [ 749.825291][T13712] FS: 00007f6a6ebff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 749.834253][T13712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.840898][T13712] CR2: 0000000020010000 CR3: 0000000069ebc000 CR4: 00000000003526f0 [ 749.848927][T13712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.856961][T13712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.864965][T13712] Kernel panic - not syncing: Fatal exception in interrupt [ 749.873459][T13712] Kernel Offset: disabled [ 749.877782][T13712] Rebooting in 86400 seconds..