last executing test programs: 10.781643231s ago: executing program 3 (id=1956): r0 = syz_io_uring_setup(0x6748, &(0x7f00000000c0)={0x0, 0x7a44, 0x200, 0x102, 0xc7}, &(0x7f0000000040), &(0x7f0000000140)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/raid456', 0x402000, 0x0) r2 = userfaultfd(0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x4, 0x0, 0x0, 0x54}, 0x9c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x4c043, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x108) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x61000000) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020002000000090503020800000000d460b92905fd7abca432f284f0aa3e90a90be4dd55"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xe405}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 10.04395533s ago: executing program 4 (id=1967): syz_open_dev$loop(&(0x7f0000001080), 0x7d, 0x2b00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4003, @fd_index=0x4, 0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b231a0987f70e06d038e7ff7fc6e5539b3272078b089b3b08384b090890e0878f0e1ac6e7049b334c959b669a240d5b67f3988f7ef3195201c0ffe8d17870000000001b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb199f6b76383709d8f5c55432a909fda039aec54a1238580f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82999ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad0f765cf60bd0ba2f3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b599d0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x98) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYRESOCT=r7], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f000001aa80)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYRES8=r7, @ANYBLOB="48717fd6a3f2dbdda817015e430c19c7d24a52513ba2bd25998764c76303b106c966490e3e5c989269f345f90313b1d211d3bf856833fbf842084382a9efefe00fbacda6b6c10a688daa0b7f016340ffde0da418421b169dcda65a9673f59d4c6eca2610c156061e96d940e767fbdd9035a104ef9d121d16fcda14815d905f5e31a6dc4ccbb02b90c0b3168cacb879e36359f04f7e97e07159ba0439499b4764a6d0720241497091f0071e13c5f9e842dfcd85ab3507ed546e5011c27fd4c696f0a03fb26ea8ec7ab10a0b7ff3ce149ea50e9dbc3ba955b5ed1c7c18ec1dabc64103b2126f8c011ef48a0755d50b4e2114d49add1d18776260672bce15b72bfdc2bd15c429905b50ec6304f693379a809a4deb8a9913ace934f7809abda3f7572f7579e80fde4f967dbaffd87c068bd83abbb6852a0be6e764a57d63224c88fea6cd5319ae25811ab316cba48566215837b2fccf18e567897efbdddcaf1714c7c8df7b74d7682ba09c0444aa442626a6aa0dfb30728ab5a242ab5db0cbdf7144c44a775f760d5ac0932722b6b104fbb4331895168410c5087da4517ada379ef8daf88896380bc242af4dcdd5921df6ad1898d555ec96bfb364bdb5b9f7f0c6c50fc91ce96867e20f52817e20679e8d37e45ec19a0b402d992f633f7e64dc85e71e38fc54060e47598d200d6b8c027d1f1c242ab964c85482501b0eaba00272470f9042dfc1efd31e47eeb15f170fadba4ce6d657f1118b912bca601b4a120b3086de2e4cf103d011458f4e03dd8a99c0d0d198ff599abbfe8a65209211687b1aa5982664db3ed2370287b9a95005cf6313952cb51828517e5b55592d25b1c469c9b6899fc1f4c30fa17f5921e9c8dee7121b30b717958ec52701cba8adf62def0df41c398d0a1c1e9587a561c47db1821784cfdf9271059dc8d6a9cba5a0e50b6e00be4cd88f7853b3892453dd1a367c067f10cab14fa98fe909e441cb306965783fa996abf3b5568da4a51db5d580fb6613b9bafb867edeea6702dcb0c6fdbeddc1ab8c4a36d1ee4c45f0eb37ddbfe9400f887bece680a014925a5607d46624f08e266b02d55a45896e2ed3a489445214943b78e7ae43426f59b13134dea69e5a8b9945ffdd8b3d9b374a54e95eb1b13f239b6af546b9be2ec1a73a208951dbc382e3078c5bb8b08991baf69d608a90ef4076437c52a1339e2d55cf617c039121295a564573783ee25f4ced65c0315eb6b54122b26eddf707221a16c4e11f0e5c8c033f95672b0b7f26da48ae39ce67aac379464573f181c413ebc8ad4c7c584f6a9e7d05148cb9b3947b2f32c7f91cbe6bcfd6323f19f64e9065d36af1e2fe5c81f4e833ddef46942eb42867f1d71472736f1b216195f702eb5571fc261a4545dd722fc7564611050d1db3e0ac7b30d773d8309c103f4e929ebfcb22d5d69ae1c9a5c087ae282feee167ed73fd827fbcc5e41301c288bf023f2826c36b4e531c307ea4e0c9be96c3ed7918d0c1158bfc1b26a4862c76baa1dbb5ae316f45cfe93b78a1793ca047df3c2d343d9da96dffee3b48d0e0dd08cb973d5bf810a79a20321f38334f71e9214f8d6cdf0e364f78f8804b67d104a408437a960071f0b83de5013226838022875525f8a15ea1efdff48b5dd95166b571a0b8ebb029547400d028548517aaf3087dbd3bce7daf8fed7c20b6a65692e70f0dc2a1e1f630c3d2470b91caf54ebb76a8b14e9b49d8f5198c390b7dc1a216475fd6621f94e1e4088eacfd253d7f2b7ea74c19eeaea831c915bd04a0cdf30fe7afd9c354c5b7ea3195c0b0bf1563f2d7b7f29de65952dc19f2945710303e1239d222331ddd63fabf655c8f06b7181663a85dddfb4466b567d5ea7a2a5ea7a8fdc5c929dfce80f34da8a770db581ac3ff92c7ed8cf05886df71b66487f9ddb4d939923408a4c199fc25593e1d2b256776fa6be2e43d62bc2e5baa06e67791e042d381c24b85ac90db113d8029f30ea0db529764f4b12230dbd94ff779e042afe32e904581f23a6572c3fc18b89201ef472b96564b3bb943b47714a4a7274b48215d4d1eb7d10fd1b947d365291f9575475bfa27611355e778146abe00a7ed55dd90bf762fba5735811dcccf73a8cd223d21a7849beefc8ca881d5f27017be433e6a70fa656b06f89c6793c2182c86a7a463df0b8a4de27555016cf2efd90cb2833d8a5c8fc957ae5d0ddac7340076d240edfb8925f4f1d56d2f807df19cae1a01b8195a03158aac93d904b2d07170adb61b79aad65aff576725d844811aa6ad61bf5deac2628b394f85323d13b029cc96402606328a237e5ee0395b01a6ea28a79f202e4d33907eedad008acfa50e55cebbeb51846111a9ac01b5c4aca0aeaf7c9101c8d33a810c6b547bc9341a2722eb1062cee32a603953ad0ccdf8959acd8785878f66f3d5da75d3af47f418106c98afca2c2ded2187c939933a372ec49db8c2f1fa9852cb93cd7a46904281c974ab028860d5d1aa37290d7aa521d95e3ec2f60d58aeef62fc5dd0d65a091a0bc6c1fca53e7715fbf375bc1e3919ab1496b46604c001ba11b5bc619337e73e95825a358c26a667be713b97195789d717be32174f1a1e06d9fa641a2ca6bb70c72dc24dd20808ac4754c250dea57fc481575d8fdece708d4430ed27d6985ae40c7e65535d4343143ea42ce3dc436e52c3639fb97443e49584e3e3bb703f1219bc4ed0047c1c73b4e8f753d8272ae9774d0c1b97e5cb2005545e515472911cc763ad41437e8db92cc1607e22b903c212cf005b7e456b72a4c45c5facec29f81efd11c7f2686bccc8af043520da95be86f852401a7115b2d97efd9806babc2e45cfa0f05026e6acba82a66c1d71bf718431ada23c480a530f361cfb2625323723c9a56a594c59936833167371757d8254632d240e1a5c1086e6b43b48224859ae205bf1af8e65d356a289c9271f93dfd493721219abbbe1fd9d408f07668c0056f954e0d99ceb091a93817b390c9cbe7ab40697324737730fa5e4bb5512f6d2066b25bb3c9a681c52039a315a19c671669690bcefb0ec0c9bc39cb206ab1143e42504509a429938d56af212643861dbc034be07ea5e8032fe617bd1588af79b592504279542bb261f5cbc842999f3abc375c56d9f2d41f0446610e5b05fcdb3ecde6541828577f59623233d9808edcfe346a4b0e821b59e5c479cb136abaa3accdbc70e2c6cf676c3832aff4ecb665cdcf54b32f119fa212dc7edfae8e6a6d998a61dbe050a2b34b34889ca07f31ec8d2f0512bf1e8b34c6842a9ea22b96a9592c1fcdcee3b474a320dafeece8359761d4bd91ee3aa27b79ee96f0310b76115a9493e759b7a808d8b34c74d09ad87665e95bc4bee324bdb6b17f052519416b7ca4176023c71bf4c6f021ba1da8f2ba2e69c1f8cbffc9c222d08c0fbc591010406e8f1c548155654cb0dfe34cb5e34e95aa3571ba0b561a011cfcf0c3e0bf4d2a2eef70cd9f2672d795223cbaffd09bc1db182930563b2496b4f4ae35ac2f3d8b842da18cae270552fe992f4c2f4cd1f774f7d1eb6c6690c7a7906deadd81a078c3217a82d04956a87549b74d860942288d9f75ef4f78cfbcb21d47e72dfe72ebf8a378eb17fd226e28e450fb4eba9b8a999029b03707cd0f810a836b730eb3cc5e4b843935db47bfc6c78c9c4b878f18ee502164e03ee21c830a6b6a88ab19f45bd3c2945ca56e23a45568c75cf29e64656eb7abda5cd90c3a82fed733ce5aa300400159747c5b30e818b61c8ce166b1bf765841d99814533233e64c322e8d9c3428dcf1b25cff3c5b6d1e71b5970d69779fb0a7004f754f10b9c069b585e8be2af8331b88cbe7c34934b0819dbc96e86a9852a54116676d35e0d79dea6cf1027426cbe2e6d7f054c0681a5fd2033596e48fecac9b7ef0c19cc9b999fd337b2457ba0186150fe3f776c8b6b170fb3db3c4a390107ae3693cc0225f3fed0fcee478d008ca1af1eab5887a5fe18668aaba484f7d6bcf270168cf373f56f819f95960edb85217a6613f31c4d413ea400cf836995a06549fc10c3981eae746ef345cc55f42e83447ab1a4f330f4810fe68e9491ef2d423feb84a927403e721ba9c28d6315f185e9da81d94c7236e09104b79b812ff1fd4a942ef6b86bad1b3264a92d18d353c065e3b453e3120ce71d9805259c60717942dd6edd34bae19f7c6e1a1fd6ef9785f1918288b859a5b322bebc219efa716303672a9324e59d9d2f9294b0fcabc19b135ed679eeffe8080a48b6ac47cf2cbbcb90ac0e0c014636ff253a415f0d46e0200bba19170066f7d3bd92559c9741cdc3f1100f4679ca760be156c9335613f46fdcb0e5efced4f1088c199fca2005ef54f989fba26b00c10b3e43ed7f9dc2b82d489f001fe736e93da016e5132d914b8a87e08cfafafb1959ac8c019a12c2a4fab383655e0cf60f09917c1ec3b4e8260f3f46d37972a2d3693ea618cb20a0ad1566ce12ee37f42a1bd3525b90ff186102bad39181832967cccdc99c53c5c34eb1c6909b6e8130669323f28e2f2e2257ae86ace4f999ba9699bcdec362c5a63bd02517b334c02fb1c863b5700b51ad3c5281552ab8a5cce298cdefc021b391b929b676ab1e86ad6bb49aae8b1581c95b1d5991f9b752c30af1e30bf83a16ea518bbe5562dff31d9fa7d5bcb43d6a7e4bd774fcc6b51d9bbf555f9f41d9ce4fcd8c3f25a35b4f92a5407a68ff4f5daa255be6af0ff369ad7bc018b35c0c894f726e5a458f7c486921f564ad8beb496679a839616c9bb8860a21efe591852b8ee149cafe4d1866110acc35e8d73b9c1971db8e80868a510bc70bf7d8091e50559844ba97ce79788a085e14e22b10a2dc921d2bf3c185e4a775c9b16a6137152093c815aeefdfc2c1ce679b503331f32a0c4ac28928ba1df69f59d8f047835db266d2602ba014ee1bca7d275170b28f08e62754ce3ff373334b5b8af01886fcd69617d45ba19def865ee6506970f012b1dc4d58ac2e17cca1e0cf5dc7c65f69422e3fd1ac740bc43ae0a2f609a859ab902d2ef99c891dc1929a0ec1f493a3d4ef6fdc5afdb41f5bd1be7e12803e3b4b325235b6d34988f8ecc238d42a65ab11f8be83315f9e0edb72b7c476c5fb2b38441b031b685291c37f68462fa60d99322a87846253796c02af5ac7b3458229c6f952d259da45c6e2dc1deb23ff1b2e4f91894e8c746f555f4214542496a32a233faa91cdb53a3979399547a20261c8d25a0adbbd2c12a8bccee416df967d8ec860ab1ba8a1a8eadadb1b7bf49deb45f39825c0ce27e835b12cff30d6f6b4fb6b83c1a51833a512b7c2840824401d90523c1d4cf566bd77e89d4e1eaee680179f5ed851eb65dc25c756522cb0ecbc36b36162a3ddf41bb048323404c2ecf6f581c1f1b4ebb6a60ec65ad49d81ba6b6effe6615345add04a4c725bfdc33200e5501042f13184b55aec3d6a8c6dd3a1f2cd045b08ac62f2cf3664a05ce66040e7746c1617152b17f1d2e5639bd06fff121689d0d9587e4846ae63273d03e4e377177d01fb8129099708c105b967f41e5078948691f8fd359458881d9754234e78d974ec6ffd9c67d902da032d0780a22c7a96ae04d75d3282a39b2ef9f42dedab2f4c03433c29c7ca2fc6efd4fb711ba91daaaa761af5ba0efbe4a85163ccd8875f6574b44054b13a41", @ANYRESOCT=0x0, @ANYRES32, @ANYRES64=r3]) r8 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) 8.761566648s ago: executing program 2 (id=1974): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000640)={0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000140)={r5, 0x0, r6}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x0, "1fd45ca8085eca725545312c927cd20ed9d73e635b0350ff35b7547c0b94a8b8", 0x31364d59}) 8.173543543s ago: executing program 3 (id=1979): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r3 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x20032111) keyctl$read(0xb, r3, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40010121}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}], 0x10) 7.781563039s ago: executing program 1 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a32000000001400000011000100"], 0x6c}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x800000, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 7.726223479s ago: executing program 2 (id=1981): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000242000/0x4000)=nil, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) r2 = openat$vnet(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$vhost_msg(r2, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x44) write$UHID_INPUT(r0, &(0x7f0000000680)={0xfc, {"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", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000242000/0x4000)=nil, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) (async) openat$vnet(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) write$vhost_msg(r2, &(0x7f0000000600)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x44) (async) write$UHID_INPUT(r0, &(0x7f0000000680)={0xfc, {"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", 0x1000}}, 0x1006) (async) 7.642439312s ago: executing program 1 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f00000006c0)) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x10}, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0xc8, 0x1}) 7.421521322s ago: executing program 1 (id=1983): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x4, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x18, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.242309395s ago: executing program 1 (id=1984): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000580)={0x239, 0x2, 0x20, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\xfd\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 7.185836873s ago: executing program 4 (id=1985): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='net_cls.classid\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2083, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0xd000, 0x0, 0x1, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0x3000, 0x0, 0x0, r3, 0x4}) write$cgroup_int(r0, &(0x7f0000000140)=0x86, 0x12) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="811000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x6, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x7}}, 0x30) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x2, 0xac, 0x400, 0x6, 0x2600000, r6}) r7 = socket$netlink(0x10, 0x3, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0xb8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9573732a6bbae2b4140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="23003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r9], 0x40}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe9}]}, 0x34}}, 0x445) 7.029539853s ago: executing program 3 (id=1986): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000980)=@urb_type_control={0x2, {0x1, 0x1}, 0x8001, 0x4, &(0x7f0000000240)={0x1f7e6465d1251c06, 0xf}, 0x8, 0x0, 0x5, 0x2000, 0x0, 0x0, 0x0}) 7.023787132s ago: executing program 1 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x20}}, 0x0) socket$inet6(0xa, 0x800, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffff"], 0xd) syslog(0x4, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x77, 0xe4, 0xf9, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) inotify_init1(0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) r4 = socket(0x200000100000011, 0x803, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="4dcdc7d96a766000002f000500000000e80300ff441bc9252feb8fb55c093a44d77cfee9a81370773ef34fc4639580830244fb42", 0x34, 0x0, &(0x7f0000000380)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, 0x9c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000140)=0x64a) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000080)=0x3) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x0) 6.837152458s ago: executing program 3 (id=1988): io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4cf0, 0xffffffffffffffff, 0x0, 0x0, 0xa865, 0x0, 0x4990b8495df3a8e8}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="53049b0e2f51791b", 0x0, 0x0, 0x0, 0xfffffffd}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0xffffab56, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 6.709470073s ago: executing program 3 (id=1989): r0 = syz_io_uring_setup(0x6748, &(0x7f00000000c0)={0x0, 0x7a44, 0x200, 0x102, 0xc7}, &(0x7f0000000040), &(0x7f0000000140)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/raid456', 0x402000, 0x0) r2 = userfaultfd(0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0xffffffff}, 0xffffffffffffff7b) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x4, 0x0, 0x0, 0x54}, 0x9c) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x4c043, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x108) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x61000000) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x7, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300040000000904010000020d00000904010102020d0000090582020002000000090503020800000000d460b92905fd7abca432f284f0aa3e90a90be4dd55"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xe405}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.709339423s ago: executing program 2 (id=1990): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000741c9934000000010440000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000001800038014000080040001800c"], 0xd0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c20018006000600800a000000010280f90014"], 0x124}}, 0xc000) 6.623245103s ago: executing program 2 (id=1991): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 6.42170216s ago: executing program 2 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="200000002a000900000000000000000b0400002c040019800800098086"], 0x20}, 0x1, 0x3000000}, 0x0) 6.311919117s ago: executing program 4 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='yeah\x00', 0x5) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 6.299554072s ago: executing program 2 (id=1996): syz_open_dev$loop(&(0x7f0000001080), 0x7d, 0x2b00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4003, @fd_index=0x4, 0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYRESOCT=r7], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f000001aa80)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYRES8=r7, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES32, @ANYRES64=r3]) r8 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) 6.184323815s ago: executing program 0 (id=1997): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {}, 0x7}) 6.088934587s ago: executing program 0 (id=1998): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 5.769520253s ago: executing program 0 (id=1999): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000640)={0x0, 'veth0_vlan\x00', {0x2}, 0x7}) 5.614901914s ago: executing program 4 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000300766c616e000000002000028006000100010000000c000200540a0000200000000600050088a8000008000500", @ANYRES32=r2], 0x58}, 0x1, 0xba01}, 0x0) 5.339793974s ago: executing program 0 (id=2001): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.290236196s ago: executing program 4 (id=2002): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000020147f67ba1fbcf6473fe5480c200000008004500003c00000000000690780000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0c20001907800000303091e10210a0700000000000000e300000000"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000001000000000123faedd6571055ddd2b9a59cadff4380d9b0c45b1464b3ff24b6cf8dd8a73980b880f72a885659fdc6080d024babd0e91", @ANYRES32=r3, @ANYBLOB="040081000a0006000802110000010000"], 0x2c}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe800000000000000000003b169500000000bbfe8000000000000000000000000000aa00", @ANYRES32=0x41424344], 0x0) 5.092426406s ago: executing program 1 (id=2003): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigaction(0x64b, 0x0, 0x0, 0x0, 0x0) 4.892482465s ago: executing program 0 (id=2004): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000401e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 4.664126101s ago: executing program 4 (id=2005): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x445c2, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) (fail_nth: 9) 4.233352579s ago: executing program 0 (id=2006): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000480)) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}}}, 0x24}}, 0x0) ppoll(&(0x7f00000005c0)=[{0xffffffffffffffff, 0x2113}, {r0}], 0x2, 0x0, &(0x7f0000000000)={[0x2000010001006]}, 0x8) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000440)=0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="0adeef0cd3c8f5294248b30be2fcd9461179389b892d67425c9ecdab5e23328d43", 0x21) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000400), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b0600000000000000f43358ada528c9975f6a54460d82bfed6962baa066d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4a46317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d4094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650b53771860093ddbc9c50a5cdefe904", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f00000005c0)=""/255, 0xff, &(0x7f0000000540)={&(0x7f0000000280)={'sha256-ssse3\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000200)={&(0x7f0000000fc0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b171164680a4bf03"}, 0x48}}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000000040000,user_id=', @ANYRES16=r9, @ANYBLOB=',group_id=']) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x100000, 0x0) 0s ago: executing program 3 (id=2007): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETSW2(r0, 0x5408, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000029c0)={[&(0x7f00000028c0)='\x06', &(0x7f0000002900)='(\x00', &(0x7f0000002940)='\x00', &(0x7f0000002980)='\x00']}, &(0x7f0000002840)={[&(0x7f0000002780)='/dev/snd/seq\x00', &(0x7f0000002800)=')\x00']}, 0x800) r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r3, 0x0, 0xd3ba287d) close(r2) execveat$binfmt(r3, r1, 0x0, &(0x7f0000000140), 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000640)={0x81, 0x10, '\x00', 0x1, &(0x7f0000000200)=[0x0, 0x0]}) r6 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) write(r6, &(0x7f0000000180)="01010101", 0x4) close(r6) renameat(r3, &(0x7f00000005c0)='./file0\x00', r3, &(0x7f00000027c0)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000002b80)={[&(0x7f0000002b40)='!&!.j!\x00']}, &(0x7f0000000600)={[&(0x7f0000000000)='/\x00', &(0x7f00000003c0)='\\}M\xd3)\x00', &(0x7f0000000400)='kW\x03&\x9b\x00\x00\x00', &(0x7f0000000440)=')\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='+)--&]/.#\xd9@(.).,\x00', &(0x7f0000000540)='&\x00', &(0x7f0000000680)='!Izo\xb4E\xb3p\xbe\xe8A<\x8d\\\x99\xdb\xa9N\xdb\x1e\xc1\xac\n\x83\x88\xc8\xac\x1e+j)\xfb\xdc\xc0\fl9\x1fN\xaf\xbc*\xbe${\xb6.8M\x85\'\x8f\xd0\x1e\x93H\xfd:b6\xe2\xcb\xc5\xfba\xab\x838\xe6A\r\xaaK\x16d]\xe0\x1bQh\x92\xadcTO r+\xb0\x01\x05\xa3\xd83\xb4}\xa1-`r\xf2\xa1\x8c\x81\xc8jb\x14\xe9\xfb\xd1L\b\x134\xce\xaf\x05\x1c\xb3\xfb\xabS\r\x13\xbc9p\xf7\xdd\x84U\xd6\xff4\xd5\x12\x0e\xfa\x8f\bUX0\xbf\x9dOK\xe3']}, 0x0) kernel console output (not intermixed with test programs): e0: port 1(bridge_slave_0) entered disabled state [ 481.949733][ T5279] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 482.137310][ T5279] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 482.159185][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.176403][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.186329][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 482.229119][ T5279] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 482.245153][ T5279] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 482.255281][ T5279] usb 3-1: Manufacturer: syz [ 482.272065][ T940] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 482.307357][ T5279] usb 3-1: config 0 descriptor?? [ 482.459766][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 482.472058][ T940] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 482.499412][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.534080][ T940] usb 2-1: Product: syz [ 482.538370][ T940] usb 2-1: Manufacturer: syz [ 482.546232][ T940] usb 2-1: SerialNumber: syz [ 482.553477][ T940] usb 2-1: config 0 descriptor?? [ 482.720961][ T5279] appleir 0003:05AC:8243.0056: unknown main item tag 0x0 [ 482.729460][ T5279] appleir 0003:05AC:8243.0056: No inputs registered, leaving [ 482.746636][ T5279] appleir 0003:05AC:8243.0056: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 482.765013][ T940] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 483.089477][ T5240] Bluetooth: hci0: command tx timeout [ 483.120471][ T1833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.159925][ T1833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.176141][ T1833] bond0 (unregistering): Released all slaves [ 483.384101][ T1833] tipc: Disabling bearer [ 483.429756][ T1833] tipc: Disabling bearer [ 483.452894][ T1833] tipc: Left network mode [ 483.563681][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.592951][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.615176][T12658] bridge_slave_0: entered allmulticast mode [ 483.632815][T12658] bridge_slave_0: entered promiscuous mode [ 483.710164][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.742880][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.770761][T12658] bridge_slave_1: entered allmulticast mode [ 483.801536][T12658] bridge_slave_1: entered promiscuous mode [ 483.890715][ T5240] Bluetooth: hci4: command tx timeout [ 484.024883][ T1833] hsr_slave_0: left promiscuous mode [ 484.026241][T12684] fuse: Bad value for 'user_id' [ 484.036488][ T1833] hsr_slave_1: left promiscuous mode [ 484.057026][T12684] fuse: Bad value for 'user_id' [ 484.067168][T12684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.077980][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.090204][T12684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.097942][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.130675][ T1833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.138209][ T1833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.187595][ T1833] veth1_macvtap: left promiscuous mode [ 484.199179][ T1833] veth0_macvtap: left promiscuous mode [ 484.204852][ T1833] veth1_vlan: left promiscuous mode [ 484.229115][ T1833] veth0_vlan: left promiscuous mode [ 484.327206][ T940] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 484.341521][ T940] usb 2-1: USB disconnect, device number 87 [ 484.919782][T12736] support for the xor transformation has been removed. [ 485.023764][ T1833] team0 (unregistering): Port device team_slave_1 removed [ 485.085067][ T5303] usb 3-1: reset high-speed USB device number 88 using dummy_hcd [ 485.182778][ T5240] Bluetooth: hci0: command tx timeout [ 485.265855][ T5303] usb 3-1: device firmware changed [ 485.271712][ T5278] usb 3-1: USB disconnect, device number 88 [ 485.429132][ T5278] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 485.628184][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 485.645479][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 485.660583][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 485.679716][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.705067][ T5278] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.719516][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.730024][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.743478][T12727] geneve2: entered promiscuous mode [ 485.748828][T12727] geneve2: entered allmulticast mode [ 485.756867][ T5278] usb 3-1: config 0 descriptor?? [ 485.769643][T12734] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 485.827359][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.969794][ T5240] Bluetooth: hci4: command tx timeout [ 485.991930][T12658] team0: Port device team_slave_0 added [ 486.005800][T12658] team0: Port device team_slave_1 added [ 486.121914][T12744] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1802'. [ 486.168309][T12744] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1802'. [ 486.239724][ T5278] plantronics 0003:047F:FFFF.0057: unknown main item tag 0xd [ 486.257885][ T5278] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving [ 486.280116][ T5278] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 486.399960][ T5303] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 486.549124][ T5303] usb 2-1: Using ep0 maxpacket: 16 [ 486.562896][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.582533][ T5303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.606210][ T5279] usb 3-1: USB disconnect, device number 89 [ 486.670263][ T5303] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 486.707552][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.731429][ T5303] usb 2-1: config 0 descriptor?? [ 486.765200][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.774902][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.805846][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.852039][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.891289][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.919066][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.145641][T12680] chnl_net:caif_netlink_parms(): no params data found [ 487.168842][ T5303] gt683r_led 0003:1770:FF00.0058: unknown main item tag 0x0 [ 487.189569][ T5303] gt683r_led 0003:1770:FF00.0058: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 487.237280][T12658] hsr_slave_0: entered promiscuous mode [ 487.256354][ T5240] Bluetooth: hci0: command tx timeout [ 487.291634][T12658] hsr_slave_1: entered promiscuous mode [ 487.314848][T12658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.341994][T12658] Cannot create hsr debugfs directory [ 487.376503][ T5279] usb 2-1: USB disconnect, device number 88 [ 487.395104][ T5321] gt683r_led 0003:1770:FF00.0058: failed to send set report request: -19 [ 487.416343][ T5303] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 487.591049][ T5303] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 487.611180][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.648488][ T5303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.693215][ T5303] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 487.734326][ T5303] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 487.749964][ T5303] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 487.767809][ T5303] usb 5-1: Manufacturer: syz [ 487.797877][ T5303] usb 5-1: config 0 descriptor?? [ 487.834935][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.916866][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.924605][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.934952][T12680] bridge_slave_0: entered allmulticast mode [ 487.956495][T12680] bridge_slave_0: entered promiscuous mode [ 487.992246][ T5281] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 488.049532][ T5240] Bluetooth: hci4: command tx timeout [ 488.060268][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.107384][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.107639][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.107890][T12680] bridge_slave_1: entered allmulticast mode [ 488.110694][T12680] bridge_slave_1: entered promiscuous mode [ 488.181943][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.234736][ T5281] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 488.242457][ T5303] appleir 0003:05AC:8243.0059: unknown main item tag 0x0 [ 488.263301][ T5303] appleir 0003:05AC:8243.0059: No inputs registered, leaving [ 488.274876][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.289433][ T5303] appleir 0003:05AC:8243.0059: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 488.302928][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.332016][ T5281] usb 3-1: Product: syz [ 488.351479][ T5281] usb 3-1: Manufacturer: syz [ 488.356721][ T5281] usb 3-1: SerialNumber: syz [ 488.437165][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.512863][T12680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.552444][T12680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.618708][T12778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.675233][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.782969][T12804] loop0: detected capacity change from 0 to 7 [ 488.812281][T12804] Dev loop0: unable to read RDB block 7 [ 488.840405][T12804] loop0: unable to read partition table [ 488.869483][T12804] loop0: partition table beyond EOD, truncated [ 488.897745][T12804] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 488.897745][T12804] ) failed (rc=-5) [ 489.228823][T12680] team0: Port device team_slave_0 added [ 489.264054][T12807] Cannot find map_set index 0 as target [ 489.270693][T12778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.329759][ T5240] Bluetooth: hci0: command tx timeout [ 489.401257][T12680] team0: Port device team_slave_1 added [ 489.506227][ T5281] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 489.506288][ T5281] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 489.615925][T12680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.639101][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.678286][T12680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.701621][T12680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.709726][T12680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.752734][ T5281] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 489.760203][T12680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.817814][ T5281] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 489.884901][ T5281] usb 3-1: USB disconnect, device number 90 [ 489.926936][ T5281] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 489.963977][T12680] hsr_slave_0: entered promiscuous mode [ 489.973546][T12680] hsr_slave_1: entered promiscuous mode [ 489.994868][T12680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.002709][T12680] Cannot create hsr debugfs directory [ 490.129709][ T5240] Bluetooth: hci4: command tx timeout [ 490.341887][ T940] usb 5-1: USB disconnect, device number 73 [ 490.874913][ T78] bond0 (unregistering): Released all slaves [ 490.893488][T12818] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1815'. [ 490.908011][T12821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1816'. [ 490.997789][T12819] bridge_slave_0: left allmulticast mode [ 491.014132][T12819] bridge_slave_0: left promiscuous mode [ 491.025645][T12819] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.038026][T12819] bridge_slave_1: left allmulticast mode [ 491.046962][T12819] bridge_slave_1: left promiscuous mode [ 491.053674][T12819] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.079901][T12819] bond0: (slave bond_slave_0): Releasing backup interface [ 491.114566][T12819] bond0: (slave bond_slave_1): Releasing backup interface [ 491.179192][T12819] team0: Port device team_slave_0 removed [ 491.211374][T12819] team0: Port device team_slave_1 removed [ 491.225597][T12819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.234226][T12819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.245565][T12819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.255707][T12819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.375844][ T940] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 491.539372][ T940] usb 5-1: device descriptor read/64, error -71 [ 491.626370][T12837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1823'. [ 491.735575][T12658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 491.763961][T12658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.789149][ T940] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 491.822882][ T78] hsr_slave_0: left promiscuous mode [ 491.848785][ T78] hsr_slave_1: left promiscuous mode [ 491.888555][ T78] veth1_macvtap: left promiscuous mode [ 491.897697][ T78] veth0_macvtap: left promiscuous mode [ 491.903495][ T78] veth1_vlan: left promiscuous mode [ 491.909485][ T78] veth0_vlan: left promiscuous mode [ 491.942202][ T940] usb 5-1: device descriptor read/64, error -71 [ 491.999178][ T5281] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 492.108806][ T940] usb usb5-port1: attempt power cycle [ 492.172839][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 492.191427][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.207711][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.221791][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 492.243425][ T5281] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 492.252718][ T5281] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 492.261188][ T5281] usb 3-1: Manufacturer: syz [ 492.273339][ T5281] usb 3-1: config 0 descriptor?? [ 492.322586][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 492.335264][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 492.346896][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.372611][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.384772][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 492.404564][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 492.481405][ T940] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 492.521512][ T940] usb 5-1: device descriptor read/8, error -71 [ 492.693502][ T5281] appleir 0003:05AC:8243.005A: unknown main item tag 0x0 [ 492.702201][ T5281] appleir 0003:05AC:8243.005A: No inputs registered, leaving [ 492.714457][ T5281] appleir 0003:05AC:8243.005A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 492.769829][ T940] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 492.802423][ T940] usb 5-1: device descriptor read/8, error -71 [ 492.910368][ T940] usb usb5-port1: unable to enumerate USB device [ 493.442680][T12658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 493.494647][T12658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.022777][T12843] chnl_net:caif_netlink_parms(): no params data found [ 494.118172][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.166536][T12658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.283395][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.372257][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.406334][T12658] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.450016][ T54] Bluetooth: hci3: command tx timeout [ 494.458221][T12680] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 494.479177][ T5303] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 494.518847][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.585615][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.592776][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.603410][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.610562][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.621723][T12680] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 494.653212][T12680] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 494.660572][ T5303] usb 5-1: unable to get BOS descriptor or descriptor too short [ 494.680151][ T5303] usb 5-1: not running at top speed; connect to a high speed hub [ 494.693851][ T5303] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 494.717667][T12843] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.720806][ T5303] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 494.728193][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.749068][ T5303] usb 5-1: config 129 descriptor has 1 excess byte, ignoring [ 494.762399][ T5303] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 494.766245][T12843] bridge_slave_0: entered allmulticast mode [ 494.781413][ T5321] usb 3-1: USB disconnect, device number 91 [ 494.792094][ T5303] usb 5-1: config 129 has no interface number 0 [ 494.806436][ T5303] usb 5-1: config 129 has no interface number 1 [ 494.813861][T12843] bridge_slave_0: entered promiscuous mode [ 494.818626][ T5303] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 494.837095][ T5303] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 494.847968][T12680] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 494.857727][ T5303] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 494.887252][T12843] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.891688][ T5303] usb 5-1: config 129 interface 135 has no altsetting 0 [ 494.902716][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.916022][T12843] bridge_slave_1: entered allmulticast mode [ 494.919143][ T5303] usb 5-1: config 129 interface 5 has no altsetting 0 [ 494.932121][T12875] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1828'. [ 494.948661][ T5303] usb 5-1: string descriptor 0 read error: -22 [ 494.950503][T12843] bridge_slave_1: entered promiscuous mode [ 494.960772][ T5303] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 494.970626][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.991050][ T5303] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 495.017902][ T5303] usb 5-1: MIDIStreaming interface descriptor not found [ 495.145292][T12843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.175379][T12843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.280976][T12843] team0: Port device team_slave_0 added [ 495.297471][T12843] team0: Port device team_slave_1 added [ 495.385252][ T940] usb 5-1: USB disconnect, device number 78 [ 495.506085][T12843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.527300][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.556734][T12843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.602067][T12843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.616070][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.646168][T12843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.288398][ T78] bond0 (unregistering): Released all slaves [ 496.477090][ T78] bond1 (unregistering): Released all slaves [ 496.505499][T12658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.520752][T12895] vlan2: entered promiscuous mode [ 496.525939][T12895] bond0: entered promiscuous mode [ 496.555864][ T54] Bluetooth: hci3: command tx timeout [ 496.562279][T12895] bond_slave_0: entered promiscuous mode [ 496.568090][T12895] bond_slave_1: entered promiscuous mode [ 496.618662][T12895] bond0: left promiscuous mode [ 496.624935][T12895] bond_slave_0: left promiscuous mode [ 496.649274][T12895] bond_slave_1: left promiscuous mode [ 496.922626][T12843] hsr_slave_0: entered promiscuous mode [ 496.930218][T12843] hsr_slave_1: entered promiscuous mode [ 496.936537][T12843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.944566][T12843] Cannot create hsr debugfs directory [ 497.307598][T12935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.323412][T12935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.342889][T12935] bond0 (unregistering): Released all slaves [ 497.437213][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 497.724851][ T78] hsr_slave_0: left promiscuous mode [ 497.744995][ T78] hsr_slave_1: left promiscuous mode [ 497.765440][ T78] veth1_macvtap: left promiscuous mode [ 497.789189][ T78] veth0_macvtap: left promiscuous mode [ 497.794877][ T78] veth1_vlan: left promiscuous mode [ 497.829276][ T78] veth0_vlan: left promiscuous mode [ 498.609432][ T54] Bluetooth: hci3: command tx timeout [ 498.888847][T12992] netlink: 'syz.4.1840': attribute type 34 has an invalid length. [ 499.403382][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'. [ 499.507472][T12658] veth0_vlan: entered promiscuous mode [ 499.722129][T12658] veth1_vlan: entered promiscuous mode [ 499.753013][T12680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.856056][T12658] veth0_macvtap: entered promiscuous mode [ 499.890356][T13002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1843'. [ 499.913246][T12658] veth1_macvtap: entered promiscuous mode [ 500.057012][T12680] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.088322][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.095606][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.116890][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.127798][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.130718][T13008] xt_connbytes: Forcing CT accounting to be enabled [ 500.138591][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.157325][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.168801][T13008] Cannot find del_set index 0 as target [ 500.169781][T12658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.189543][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.196698][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.218159][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.239724][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.250337][T12658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.272070][T12658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.297046][T12658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.341856][T12658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.372208][T12658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.388145][T12658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.399265][T12658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.446496][T13013] FAULT_INJECTION: forcing a failure. [ 500.446496][T13013] name failslab, interval 1, probability 0, space 0, times 0 [ 500.469287][T13013] CPU: 1 UID: 0 PID: 13013 Comm: syz.4.1845 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 500.479971][T13013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 500.490061][T13013] Call Trace: [ 500.493357][T13013] [ 500.496292][T13013] dump_stack_lvl+0x241/0x360 [ 500.500982][T13013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.506184][T13013] ? __pfx__printk+0x10/0x10 [ 500.510973][T13013] ? __kmalloc_node_noprof+0xb7/0x440 [ 500.516362][T13013] ? __pfx___might_resched+0x10/0x10 [ 500.521662][T13013] should_fail_ex+0x3b0/0x4e0 [ 500.526356][T13013] should_failslab+0xac/0x100 [ 500.531061][T13013] __kmalloc_node_noprof+0xdf/0x440 [ 500.536295][T13013] ? __kvmalloc_node_noprof+0x72/0x190 [ 500.541770][T13013] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 500.547244][T13013] __kvmalloc_node_noprof+0x72/0x190 [ 500.552545][T13013] alloc_netdev_mqs+0x9b/0x1000 [ 500.557503][T13013] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 500.562992][T13013] ip6_tnl_locate+0x607/0x820 [ 500.567704][T13013] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 500.572931][T13013] ? __might_fault+0xc6/0x120 [ 500.577629][T13013] ? ip6_tnl_siocdevprivate+0x9c3/0x1700 [ 500.583412][T13013] ip6_tnl_siocdevprivate+0x9e9/0x1700 [ 500.588935][T13013] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 500.594878][T13013] ? do_raw_spin_unlock+0x13c/0x8b0 [ 500.600111][T13013] ? full_name_hash+0x93/0xe0 [ 500.604812][T13013] dev_ifsioc+0xaec/0xe70 [ 500.609189][T13013] ? __pfx_dev_ifsioc+0x10/0x10 [ 500.614088][T13013] ? dev_load+0x21/0x1f0 [ 500.618370][T13013] dev_ioctl+0x881/0x1340 [ 500.622777][T13013] sock_ioctl+0x7ef/0x8e0 [ 500.627244][T13013] ? __pfx_sock_ioctl+0x10/0x10 [ 500.632313][T13013] compat_sock_ioctl+0x291/0xf20 [ 500.637289][T13013] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 500.642779][T13013] ? __fget_files+0x29/0x470 [ 500.647406][T13013] ? __fget_files+0x3f3/0x470 [ 500.652133][T13013] __se_compat_sys_ioctl+0x510/0xc90 [ 500.657442][T13013] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 500.663285][T13013] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 500.669292][T13013] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 500.675648][T13013] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 500.682342][T13013] ? lockdep_hardirqs_on+0x99/0x150 [ 500.687649][T13013] __do_fast_syscall_32+0xb4/0x110 [ 500.692782][T13013] ? exc_page_fault+0x590/0x8c0 [ 500.697654][T13013] do_fast_syscall_32+0x34/0x80 [ 500.702532][T13013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.708934][T13013] RIP: 0023:0xf745d579 [ 500.713037][T13013] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 500.732862][T13013] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 500.741320][T13013] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 500.749306][T13013] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.757303][T13013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.765286][T13013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.773270][T13013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.781275][T13013] [ 500.810306][ T54] Bluetooth: hci3: command tx timeout [ 500.980037][T12843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.040691][T12843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.093481][T12843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.136345][T12843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.176032][ T4591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.188669][ T4591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.214874][T12680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.222022][ T5321] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 501.249970][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.263054][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.309193][ T5303] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 501.326959][T12680] veth0_vlan: entered promiscuous mode [ 501.398268][T12680] veth1_vlan: entered promiscuous mode [ 501.399323][ T5321] usb 5-1: Using ep0 maxpacket: 32 [ 501.421637][ T5321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 501.445764][ T5321] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 501.460437][ T5321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 501.473618][T12843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.486363][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 501.496632][ T5321] usb 5-1: Product: syz [ 501.510052][ T5303] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 501.536364][T12680] veth0_macvtap: entered promiscuous mode [ 501.538143][ T5321] usb 5-1: Manufacturer: syz [ 501.547483][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 501.563469][ T5321] usb 5-1: SerialNumber: syz [ 501.579093][ T5303] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.603520][ T5321] usb 5-1: config 0 descriptor?? [ 501.612946][T12680] veth1_macvtap: entered promiscuous mode [ 501.631942][ T5321] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.639948][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.656801][T12843] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.671731][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.705152][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.712244][ T5321] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 501.731920][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.732530][ T5303] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 501.738756][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.762418][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 501.779779][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.798172][ T9627] udevd[9627]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.800832][ T5303] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.831964][ T5321] usb 5-1: USB disconnect, device number 79 [ 501.839090][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.863746][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.890351][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.902747][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.929005][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.944192][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 501.962654][T12680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.972562][ T5303] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 501.978650][ T2464] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.980992][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 501.987631][ T2464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.007213][ T5303] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.019747][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.032210][ T5303] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 502.047849][ T2464] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.055070][ T2464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.087783][ T5303] usb 3-1: string descriptor 0 read error: -22 [ 502.089501][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.099399][ T5303] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 502.110686][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.125825][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.136096][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.140535][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.156373][T12680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.180360][ T5303] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 502.182551][T12680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.231974][T12680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.308424][T12680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.333728][T12680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.353954][T12680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.364364][T12680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.461103][T13051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.514807][T13051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.583044][ T2464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.593826][T12843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.620149][ T2464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.758597][ T2464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.772516][ T2464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.912427][T12843] veth0_vlan: entered promiscuous mode [ 503.005233][T12843] veth1_vlan: entered promiscuous mode [ 503.117793][T13064] tipc: Started in network mode [ 503.143054][T13064] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 503.184577][T13064] tipc: Enabled bearer , priority 0 [ 503.238258][T13065] tipc: Enabled bearer , priority 0 [ 503.327108][T12843] veth0_macvtap: entered promiscuous mode [ 503.367073][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 503.411255][T12843] veth1_macvtap: entered promiscuous mode [ 503.532304][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.590947][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.616102][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 503.647092][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.664283][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.675095][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.695690][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.718442][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.761189][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.773466][T12843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.792936][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.813308][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.825714][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.835898][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 503.843865][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.862871][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.876054][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.891800][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.906875][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.919527][ T5321] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 503.940659][T12843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.004732][T12843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.013870][T12843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.023553][T12843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.032881][T12843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.115359][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.166953][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.186896][ T5321] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 504.202598][ T5280] usb 3-1: USB disconnect, device number 92 [ 504.229259][ T8] tipc: Node number set to 10136234 [ 504.234961][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.274288][ T5321] usb 1-1: config 0 descriptor?? [ 504.438135][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.478402][T10337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.500919][T10337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.573966][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.755722][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.796017][T13091] FAULT_INJECTION: forcing a failure. [ 504.796017][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 504.813785][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.828375][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.836936][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.3.1865 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 504.847418][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 504.857519][T13091] Call Trace: [ 504.861099][T13091] [ 504.864065][T13091] dump_stack_lvl+0x241/0x360 [ 504.868796][T13091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.874056][T13091] ? __pfx__printk+0x10/0x10 [ 504.878700][T13091] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 504.884209][T13091] ? __pfx___might_resched+0x10/0x10 [ 504.889552][T13091] should_fail_ex+0x3b0/0x4e0 [ 504.894288][T13091] should_failslab+0xac/0x100 [ 504.899007][T13091] ? snd_seq_port_connect+0x6a/0x490 [ 504.904345][T13091] __kmalloc_cache_noprof+0x6c/0x2c0 [ 504.909768][T13091] snd_seq_port_connect+0x6a/0x490 [ 504.914921][T13091] ? do_raw_read_unlock+0x3c/0x80 [ 504.919994][T13091] ? _raw_read_unlock+0x28/0x50 [ 504.920579][T13072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.924875][T13091] snd_seq_ioctl_subscribe_port+0x31e/0x780 [ 504.939361][T13091] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 504.945820][T13091] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 504.952208][T13091] snd_seq_oss_midi_open+0x423/0x9d0 [ 504.957553][T13091] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 504.963417][T13091] ? __pfx_lock_release+0x10/0x10 [ 504.968488][T13091] ? aa_file_perm+0x137/0xf50 [ 504.973300][T13091] ? aa_file_perm+0x3ef/0xf50 [ 504.978030][T13091] snd_seq_oss_process_event+0xce0/0x2af0 [ 504.983826][T13091] snd_seq_oss_write+0x538/0xbb0 [ 504.988831][T13091] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 504.994343][T13091] ? common_file_perm+0x1a6/0x210 [ 504.999419][T13091] ? bpf_lsm_file_permission+0x9/0x10 [ 505.004841][T13091] ? security_file_permission+0x74/0x280 [ 505.010628][T13091] odev_write+0x5b/0x80 [ 505.014834][T13091] ? __pfx_odev_write+0x10/0x10 [ 505.019731][T13091] vfs_write+0x29c/0xc90 [ 505.024045][T13091] ? __pfx_vfs_write+0x10/0x10 [ 505.028871][T13091] ? __fget_files+0x29/0x470 [ 505.033527][T13091] ? __fget_files+0x3f3/0x470 [ 505.038518][T13091] ? __fget_files+0x29/0x470 [ 505.043172][T13091] ? __fdget_pos+0x19a/0x320 [ 505.047807][T13091] ksys_write+0x1a0/0x2c0 [ 505.052192][T13091] ? __pfx_ksys_write+0x10/0x10 [ 505.055192][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.057161][T13091] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 505.057199][T13091] ? lockdep_hardirqs_on+0x99/0x150 [ 505.067997][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.071282][T13091] __do_fast_syscall_32+0xb4/0x110 [ 505.071321][T13091] ? exc_page_fault+0x590/0x8c0 [ 505.071353][T13091] do_fast_syscall_32+0x34/0x80 [ 505.071384][T13091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.071416][T13091] RIP: 0023:0xf741d579 [ 505.071438][T13091] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.071458][T13091] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 505.071484][T13091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000580 [ 505.088196][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.088715][T13091] RDX: 0000000000000239 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.088736][T13091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.088752][T13091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.095992][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.098431][T13091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.098469][T13091] [ 505.098597][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.108035][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 505.219821][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.306984][T13072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.453652][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.499298][T13105] geneve2: entered promiscuous mode [ 505.504611][T13105] geneve2: entered allmulticast mode [ 505.922114][ T52] bridge_slave_1: left allmulticast mode [ 505.938393][ T52] bridge_slave_1: left promiscuous mode [ 505.946837][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.971216][ T52] bridge_slave_0: left allmulticast mode [ 505.976973][ T52] bridge_slave_0: left promiscuous mode [ 505.997781][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.415808][T13131] loop0: detected capacity change from 0 to 7 [ 506.425797][T13131] Dev loop0: unable to read RDB block 7 [ 506.432031][T13131] loop0: unable to read partition table [ 506.438262][T13131] loop0: partition table beyond EOD, truncated [ 506.452148][T13131] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 506.452148][T13131] ) failed (rc=-5) [ 506.634741][ T5321] usbhid 1-1:0.0: can't add hid device: -71 [ 506.671153][ T5321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 506.706544][ T5321] usb 1-1: USB disconnect, device number 78 [ 506.979089][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 507.008083][T13097] chnl_net:caif_netlink_parms(): no params data found [ 507.109318][ T5321] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 507.150887][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 507.199028][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.237905][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.249856][ T54] Bluetooth: hci1: command tx timeout [ 507.290758][ T5321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 507.300221][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 507.304429][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.330359][ T5321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.340709][ T5321] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 507.355839][ T5321] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 507.371160][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 507.380885][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 507.389490][ T9] usb 4-1: Manufacturer: syz [ 507.397980][ T5321] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 507.406465][ T52] hsr_slave_0: left promiscuous mode [ 507.414004][ T9] usb 4-1: config 0 descriptor?? [ 507.426195][ T52] hsr_slave_1: left promiscuous mode [ 507.453320][ T5321] usb 1-1: Manufacturer: syz [ 507.478754][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.488899][ T5321] usb 1-1: config 0 descriptor?? [ 507.506204][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.535353][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.551707][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1881'. [ 507.563829][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.633940][T13157] Cannot find add_set index 0 as target [ 507.679371][ T52] veth1_macvtap: left promiscuous mode [ 507.716836][ T52] veth0_macvtap: left promiscuous mode [ 507.743472][ T52] veth1_vlan: left promiscuous mode [ 507.757710][ T52] veth0_vlan: left promiscuous mode [ 507.837989][ T9] appleir 0003:05AC:8243.005B: unknown main item tag 0x0 [ 507.849185][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 507.863214][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 507.876621][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 507.887359][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 507.894681][ T9] appleir 0003:05AC:8243.005B: No inputs registered, leaving [ 507.908878][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 507.916908][ T9] appleir 0003:05AC:8243.005B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 507.929243][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 507.942661][ T5321] appleir 0003:05AC:8243.005C: unknown main item tag 0x0 [ 507.972189][ T5321] appleir 0003:05AC:8243.005C: No inputs registered, leaving [ 507.994386][ T5321] appleir 0003:05AC:8243.005C: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 508.985876][ T52] team0 (unregistering): Port device team_slave_1 removed [ 509.046936][ T52] team0 (unregistering): Port device team_slave_0 removed [ 509.177566][ T5278] usb 1-1: USB disconnect, device number 79 [ 509.330013][ T5240] Bluetooth: hci1: command tx timeout [ 509.809108][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 509.809130][ T29] audit: type=1326 audit(1727014237.300:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13172 comm="syz.3.1882" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 509.889995][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.890233][T13177] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1882'. [ 509.897125][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.934485][T13097] bridge_slave_0: entered allmulticast mode [ 509.942746][ T29] audit: type=1326 audit(1727014237.440:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13172 comm="syz.3.1882" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x0 [ 509.960415][T13097] bridge_slave_0: entered promiscuous mode [ 509.970583][ T5240] Bluetooth: hci2: command tx timeout [ 509.982699][ T9] usb 4-1: USB disconnect, device number 95 [ 510.011497][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1885'. [ 510.024496][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.050536][T13181] usb usb8: usbfs: process 13181 (syz.3.1882) did not claim interface 0 before use [ 510.066097][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.074311][T13097] bridge_slave_1: entered allmulticast mode [ 510.110118][T13097] bridge_slave_1: entered promiscuous mode [ 510.159573][ T5321] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 510.188845][T13097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.217038][T13097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.313043][ T5321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.338859][ T5321] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.368845][T13097] team0: Port device team_slave_0 added [ 510.370897][ T5321] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.400456][ T5321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 510.416307][ T5321] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 510.420392][T13097] team0: Port device team_slave_1 added [ 510.466411][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.510847][ T5321] usb 1-1: config 0 descriptor?? [ 510.595564][T13097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.603346][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.636426][T13097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.649843][T13097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.656907][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.683165][T13097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.894549][T13097] hsr_slave_0: entered promiscuous mode [ 510.925637][T13097] hsr_slave_1: entered promiscuous mode [ 510.950197][T13097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.970364][T13097] Cannot create hsr debugfs directory [ 511.002316][T13164] chnl_net:caif_netlink_parms(): no params data found [ 511.025999][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 511.053394][ T5321] usbhid 1-1:0.0: can't add hid device: -71 [ 511.061318][ T5321] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 511.091096][ T5321] usb 1-1: USB disconnect, device number 80 [ 511.141775][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.219637][ T5279] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 511.300742][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.402880][ T5279] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 511.413978][ T5240] Bluetooth: hci1: command tx timeout [ 511.419875][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.431721][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.441664][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 511.456310][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 511.467538][ T5279] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 511.475978][ T5279] usb 4-1: Manufacturer: syz [ 511.485776][ T5279] usb 4-1: config 0 descriptor?? [ 511.546294][T13217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.558841][T13217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.573175][T13217] bond0 (unregistering): Released all slaves [ 511.735499][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.787909][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.798251][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.845465][T13164] bridge_slave_0: entered allmulticast mode [ 511.864294][T13164] bridge_slave_0: entered promiscuous mode [ 511.875817][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.883456][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.893222][T13164] bridge_slave_1: entered allmulticast mode [ 511.903916][ T5279] appleir 0003:05AC:8243.005D: unknown main item tag 0x0 [ 511.909330][T13164] bridge_slave_1: entered promiscuous mode [ 511.911980][ T5279] appleir 0003:05AC:8243.005D: No inputs registered, leaving [ 511.927411][ T5279] appleir 0003:05AC:8243.005D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 511.964825][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.049226][ T5240] Bluetooth: hci2: command tx timeout [ 512.058277][T13164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.081775][T13164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.099268][ T9] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 512.224934][T13164] team0: Port device team_slave_0 added [ 512.247595][T13164] team0: Port device team_slave_1 added [ 512.259013][ T9] usb 1-1: device descriptor read/64, error -71 [ 512.540114][ T9] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 512.582808][T13164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.614669][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.676345][T13164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.709428][ T9] usb 1-1: device descriptor read/64, error -71 [ 512.725659][T13164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.753139][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.789508][T13164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.839232][ T5278] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 512.856253][ T9] usb usb1-port1: attempt power cycle [ 513.023659][ T5278] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 513.063662][ T5278] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 513.079448][ T52] bridge_slave_1: left allmulticast mode [ 513.085418][ T52] bridge_slave_1: left promiscuous mode [ 513.106561][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.122626][ T5278] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29300, setting to 1024 [ 513.151501][ T5278] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 513.151643][ T52] bridge_slave_0: left allmulticast mode [ 513.177868][ T5278] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 513.188536][ T52] bridge_slave_0: left promiscuous mode [ 513.209176][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.209368][ T9] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 513.228993][ T5278] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 513.248493][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.278835][T13236] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 513.288880][ T9] usb 1-1: device descriptor read/8, error -71 [ 513.489269][ T5240] Bluetooth: hci1: command tx timeout [ 513.510030][ T5278] ath6kl: Failed to submit usb control message: -71 [ 513.516804][ T5278] ath6kl: unable to send the bmi data to the device: -71 [ 513.539578][ T5278] ath6kl: Unable to send get target info: -71 [ 513.549787][ T9] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 513.568614][ T5278] ath6kl: Failed to init ath6kl core: -71 [ 513.577596][ T5278] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 513.587367][ T9] usb 1-1: device descriptor read/8, error -71 [ 513.612721][ T5278] usb 2-1: USB disconnect, device number 89 [ 513.699610][ T9] usb usb1-port1: unable to enumerate USB device [ 513.962108][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.980366][ T5281] usb 4-1: USB disconnect, device number 96 [ 514.023863][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.042298][ T52] bond0 (unregistering): Released all slaves [ 514.129189][ T5240] Bluetooth: hci2: command tx timeout [ 514.163650][T13164] hsr_slave_0: entered promiscuous mode [ 514.207614][T13164] hsr_slave_1: entered promiscuous mode [ 514.213860][T13255] netlink: 'syz.1.1898': attribute type 34 has an invalid length. [ 514.245547][T13164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.256449][T13164] Cannot create hsr debugfs directory [ 514.337674][T13259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1900'. [ 514.354347][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1900'. [ 514.374296][T13259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1900'. [ 514.386601][T13259] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1900'. [ 514.415957][ T52] tipc: Disabling bearer [ 514.427703][ T52] tipc: Disabling bearer [ 514.449169][ T52] tipc: Left network mode [ 514.491921][T13262] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1900'. [ 514.988161][T13267] netlink: 'syz.3.1903': attribute type 10 has an invalid length. [ 515.018844][T13267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1903'. [ 515.040533][T13267] bridge0: port 3(batadv0) entered blocking state [ 515.075949][T13267] bridge0: port 3(batadv0) entered disabled state [ 515.122917][T13267] batadv0: entered allmulticast mode [ 515.143586][T13267] batadv0: entered promiscuous mode [ 515.152656][T13267] bridge0: port 3(batadv0) entered blocking state [ 515.159260][T13267] bridge0: port 3(batadv0) entered forwarding state [ 515.232537][T13271] FAULT_INJECTION: forcing a failure. [ 515.232537][T13271] name failslab, interval 1, probability 0, space 0, times 0 [ 515.250217][T13271] CPU: 0 UID: 0 PID: 13271 Comm: syz.0.1904 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 515.260695][T13271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 515.270766][T13271] Call Trace: [ 515.274053][T13271] [ 515.276984][T13271] dump_stack_lvl+0x241/0x360 [ 515.281675][T13271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.286879][T13271] ? __pfx__printk+0x10/0x10 [ 515.291489][T13271] should_fail_ex+0x3b0/0x4e0 [ 515.296178][T13271] should_failslab+0xac/0x100 [ 515.300859][T13271] ? __hw_addr_add_ex+0x1a8/0x610 [ 515.305888][T13271] __kmalloc_cache_noprof+0x6c/0x2c0 [ 515.311196][T13271] __hw_addr_add_ex+0x1a8/0x610 [ 515.316079][T13271] dev_addr_init+0x143/0x230 [ 515.320691][T13271] ? __pfx_dev_addr_init+0x10/0x10 [ 515.325819][T13271] alloc_netdev_mqs+0x2a1/0x1000 [ 515.330768][T13271] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 515.336241][T13271] ip6_tnl_locate+0x607/0x820 [ 515.340954][T13271] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 515.346178][T13271] ? __might_fault+0xc6/0x120 [ 515.350868][T13271] ? ip6_tnl_siocdevprivate+0x9c3/0x1700 [ 515.356516][T13271] ip6_tnl_siocdevprivate+0x9e9/0x1700 [ 515.361996][T13271] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 515.367988][T13271] ? do_raw_spin_unlock+0x13c/0x8b0 [ 515.373204][T13271] ? full_name_hash+0x93/0xe0 [ 515.377899][T13271] dev_ifsioc+0xaec/0xe70 [ 515.382239][T13271] ? __pfx_dev_ifsioc+0x10/0x10 [ 515.387111][T13271] ? dev_load+0x21/0x1f0 [ 515.391366][T13271] dev_ioctl+0x881/0x1340 [ 515.395705][T13271] sock_ioctl+0x7ef/0x8e0 [ 515.400058][T13271] ? __pfx_sock_ioctl+0x10/0x10 [ 515.404934][T13271] compat_sock_ioctl+0x291/0xf20 [ 515.409892][T13271] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 515.415412][T13271] ? __fget_files+0x29/0x470 [ 515.420024][T13271] ? __fget_files+0x3f3/0x470 [ 515.424712][T13271] __se_compat_sys_ioctl+0x510/0xc90 [ 515.430010][T13271] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 515.435836][T13271] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.441843][T13271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.448186][T13271] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 515.454781][T13271] ? lockdep_hardirqs_on+0x99/0x150 [ 515.459987][T13271] __do_fast_syscall_32+0xb4/0x110 [ 515.465105][T13271] ? exc_page_fault+0x590/0x8c0 [ 515.469967][T13271] do_fast_syscall_32+0x34/0x80 [ 515.474826][T13271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 515.481162][T13271] RIP: 0023:0xf7fc7579 [ 515.485231][T13271] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 515.504861][T13271] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 515.513282][T13271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000089f1 [ 515.521264][T13271] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.529239][T13271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 515.537221][T13271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 515.545203][T13271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 515.553186][T13271] [ 515.578800][T10337] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 515.588993][T10337] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 515.645638][ T52] hsr_slave_0: left promiscuous mode [ 515.676787][ T52] hsr_slave_1: left promiscuous mode [ 515.720035][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.737412][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.758262][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.766854][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.804574][ T52] veth1_macvtap: left promiscuous mode [ 515.819090][ T5321] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 515.837536][ T52] veth0_macvtap: left promiscuous mode [ 515.845895][ T52] veth1_vlan: left promiscuous mode [ 515.857454][ T52] veth0_vlan: left promiscuous mode [ 516.029054][ T5279] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 516.039509][ T5321] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 516.051269][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.062735][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.073196][ T5321] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 516.089485][ T5321] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 516.098804][ T5321] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 516.108214][ T5321] usb 4-1: Manufacturer: syz [ 516.125602][ T5321] usb 4-1: config 0 descriptor?? [ 516.179419][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 516.187588][ T5279] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 516.206397][ T5279] usb 1-1: can't read configurations, error -61 [ 516.226999][ T5240] Bluetooth: hci2: command tx timeout [ 516.349171][ T5279] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 516.523755][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 516.532235][ T5279] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 516.542171][ T5279] usb 1-1: can't read configurations, error -61 [ 516.553061][ T5279] usb usb1-port1: attempt power cycle [ 516.562022][ T5321] appleir 0003:05AC:8243.005E: unknown main item tag 0x0 [ 516.572521][ T5321] appleir 0003:05AC:8243.005E: No inputs registered, leaving [ 516.583189][ T5321] appleir 0003:05AC:8243.005E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 516.674008][ T52] team0 (unregistering): Port device team_slave_1 removed [ 516.736051][ T52] team0 (unregistering): Port device team_slave_0 removed [ 516.910921][ T5279] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 516.949108][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 516.972064][ T5279] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 516.985484][ T5279] usb 1-1: can't read configurations, error -61 [ 517.129273][ T5279] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 517.160812][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 517.191542][ T5279] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 517.203595][ T5279] usb 1-1: can't read configurations, error -61 [ 517.215303][ T5279] usb usb1-port1: unable to enumerate USB device [ 517.471906][T13283] tipc: Started in network mode [ 517.476854][T13283] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 517.488202][T13283] tipc: Enabled bearer , priority 0 [ 517.618016][T13097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 517.650230][T13097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 517.765830][T13097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 517.814666][T13097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 517.984776][ T5321] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 518.008470][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.092850][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.130501][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.137631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.171298][ T5321] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 518.197404][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.204611][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.221041][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.236970][ T5321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.258009][ T5321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 518.283073][T13164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.285898][ T5321] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 518.301222][ T5321] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 518.310188][ T5321] usb 2-1: Manufacturer: syz [ 518.322427][T13164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.343113][T13164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.352682][ T5321] usb 2-1: config 0 descriptor?? [ 518.370464][T13164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.479091][ T8] tipc: Node number set to 10136234 [ 518.527638][T13097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 518.693065][T13097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.703659][ T5279] usb 4-1: USB disconnect, device number 97 [ 518.728629][T13164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.782103][ T5321] appleir 0003:05AC:8243.005F: unknown main item tag 0x0 [ 518.812942][ T5321] appleir 0003:05AC:8243.005F: No inputs registered, leaving [ 518.826209][ T5321] appleir 0003:05AC:8243.005F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 518.861304][T13097] veth0_vlan: entered promiscuous mode [ 518.886877][T13164] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.926451][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.933689][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.955283][T13097] veth1_vlan: entered promiscuous mode [ 519.012797][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.020037][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.168366][T13097] veth0_macvtap: entered promiscuous mode [ 519.221935][T13097] veth1_macvtap: entered promiscuous mode [ 519.370447][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.370472][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.370487][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.370502][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.370515][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.370530][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.371763][T13097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.408849][T13319] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 519.408884][T13319] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.416118][T13319] vhci_hcd vhci_hcd.0: Device attached [ 519.428521][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.525224][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.525520][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.525659][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.525930][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.526067][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.528002][T13097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.567820][T13164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.575520][T13097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.575567][T13097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.575603][T13097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.575637][T13097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.659097][ T8] usb 9-1: new low-speed USB device number 3 using vhci_hcd [ 519.889441][ T5278] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 519.949402][T13164] veth0_vlan: entered promiscuous mode [ 520.006034][T13164] veth1_vlan: entered promiscuous mode [ 520.041576][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.078638][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.096158][ T5278] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 520.115822][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.143008][ T5278] usb 1-1: Product: syz [ 520.154275][ T5278] usb 1-1: Manufacturer: syz [ 520.189064][ T5278] usb 1-1: SerialNumber: syz [ 520.205047][T13164] veth0_macvtap: entered promiscuous mode [ 520.221652][ T5278] usb 1-1: config 0 descriptor?? [ 520.241802][ T1833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.244058][ T5278] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 089 [ 520.259445][T13164] veth1_macvtap: entered promiscuous mode [ 520.274514][ T1833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.305464][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.352492][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.388976][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.445672][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.478971][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.498983][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.508886][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.545632][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.612098][T13164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.670180][T13346] usb usb8: usbfs: process 13346 (syz.3.1918) did not claim interface 0 before use [ 520.694209][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.729328][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.767753][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.807423][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.868374][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.905762][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.936313][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.949615][ T5284] usb 2-1: USB disconnect, device number 90 [ 520.993812][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.052028][T13164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.088420][T13164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.134866][T13164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.143916][T13164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.154122][T13164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.292640][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.327646][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.330874][ T940] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 521.417738][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.441380][T13367] loop0: detected capacity change from 0 to 7 [ 521.447866][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.449058][ T5284] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 521.488585][T13367] Dev loop0: unable to read RDB block 7 [ 521.510523][T13367] loop0: unable to read partition table [ 521.516900][T13367] loop0: partition table beyond EOD, truncated [ 521.538137][T13367] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 521.538137][T13367] ) failed (rc=-5) [ 521.554504][ T940] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.583076][ T940] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 521.612063][ T940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.622891][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.637671][ T5284] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 521.660346][ T940] usb 5-1: Product: syz [ 521.666280][ T940] usb 5-1: Manufacturer: syz [ 521.677990][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.690397][ T940] usb 5-1: SerialNumber: syz [ 521.714315][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.765113][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 521.793570][ T5284] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 521.803517][ T5284] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 521.812304][ T5284] usb 2-1: Manufacturer: syz [ 521.821792][ T5284] usb 2-1: config 0 descriptor?? [ 521.928266][T13349] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.242285][ T5284] appleir 0003:05AC:8243.0060: unknown main item tag 0x0 [ 522.250837][ T5284] appleir 0003:05AC:8243.0060: No inputs registered, leaving [ 522.265850][ T5284] appleir 0003:05AC:8243.0060: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 522.363352][T13387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1925'. [ 522.379202][ T5278] (null): failure setting delay to 10us [ 522.398058][ T5278] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 522.475125][ T5278] usb 1-1: USB disconnect, device number 89 [ 522.576572][T13349] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 522.641404][T13320] vhci_hcd: connection reset by peer [ 522.660565][ T2993] vhci_hcd: stop threads [ 522.665096][ T2993] vhci_hcd: release socket [ 522.673025][ T2993] vhci_hcd: disconnect device [ 522.806717][ T940] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 522.813344][ T940] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 523.008520][ T940] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 523.075230][ T940] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 523.110368][ T5279] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 523.128703][ T940] usb 5-1: USB disconnect, device number 80 [ 523.156288][ T940] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 523.290831][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 523.321994][ T5279] usb 1-1: New USB device found, idVendor=0499, idProduct=1038, bcdDevice=5b.36 [ 523.348520][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.376237][ T5279] usb 1-1: config 0 descriptor?? [ 523.398162][ T5279] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 523.459919][ T5279] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 523.471616][ T9627] udevd[9627]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.494917][ T5303] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 523.669678][ T5303] usb 4-1: Using ep0 maxpacket: 32 [ 523.680383][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.703801][ T5303] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.715384][ T5278] usb 1-1: USB disconnect, device number 90 [ 523.724477][ T5303] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 523.737326][ T5303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.765877][ T5303] usb 4-1: config 0 descriptor?? [ 524.039145][ T5279] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 524.185847][ T5279] usb 5-1: device descriptor read/64, error -71 [ 524.449564][T13378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1923'. [ 524.477681][ T5321] usb 2-1: USB disconnect, device number 91 [ 524.495378][T13378] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 524.500320][T13389] trusted_key: encrypted_key: insufficient parameters specified [ 524.546865][T13378] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 524.569072][ T5279] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 524.600898][ T5303] usb 4-1: USB disconnect, device number 98 [ 524.656706][T13451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'. [ 524.699542][ T5279] usb 5-1: device descriptor read/64, error -71 [ 524.717360][T13451] trusted_key: encrypted_key: insufficient parameters specified [ 524.744608][T13451] trusted_key: encrypted_key: insufficient parameters specified [ 524.782318][ T8] vhci_hcd: vhci_device speed not set [ 524.809437][ T5279] usb usb5-port1: attempt power cycle [ 525.201595][ T5279] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 525.261511][ T5279] usb 5-1: device descriptor read/8, error -71 [ 525.499092][ T5279] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 525.509228][ T5303] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 525.524741][ T5279] usb 5-1: device descriptor read/8, error -71 [ 525.619081][ T5321] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 525.640002][ T5279] usb usb5-port1: unable to enumerate USB device [ 525.659253][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 525.666421][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 525.683369][ T5303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 525.699346][ T940] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 525.699673][ T5303] usb 3-1: can't read configurations, error -61 [ 525.759036][ T5321] usb 4-1: device descriptor read/64, error -71 [ 525.850271][ T5303] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 525.874763][ T940] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.889044][ T940] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 525.911568][ T940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.921046][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.929998][ T940] usb 1-1: Product: syz [ 525.934364][ T940] usb 1-1: Manufacturer: syz [ 525.939142][ T940] usb 1-1: SerialNumber: syz [ 525.999361][ T5321] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 526.009330][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 526.016949][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.026851][ T5303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 526.035255][ T5303] usb 3-1: can't read configurations, error -61 [ 526.045045][ T5303] usb usb3-port1: attempt power cycle [ 526.129641][ T5321] usb 4-1: device descriptor read/64, error -71 [ 526.157632][T13474] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 526.209348][ T5279] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 526.239462][ T5321] usb usb4-port1: attempt power cycle [ 526.377008][ T5279] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 526.388257][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.399409][ T5303] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 526.407531][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.417468][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 526.431232][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 526.437243][ T5279] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 526.446665][ T5279] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 526.456174][ T5279] usb 2-1: Manufacturer: syz [ 526.462045][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.472151][ T5279] usb 2-1: config 0 descriptor?? [ 526.486743][ T5303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 526.496684][ T5303] usb 3-1: can't read configurations, error -61 [ 526.579632][ T5321] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 526.606581][ T5321] usb 4-1: device descriptor read/8, error -71 [ 526.629159][ T5303] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 526.649749][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 526.657393][ T5303] usb 3-1: unable to get BOS descriptor or descriptor too short [ 526.670797][ T5303] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 526.684516][ T5303] usb 3-1: can't read configurations, error -61 [ 526.712848][ T5303] usb usb3-port1: unable to enumerate USB device [ 526.768296][T13474] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 526.849287][ T5321] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 526.865075][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 526.879703][ T5321] usb 4-1: device descriptor read/8, error -71 [ 526.894292][ T5279] appleir 0003:05AC:8243.0062: unknown main item tag 0x0 [ 526.905250][ T5279] appleir 0003:05AC:8243.0062: No inputs registered, leaving [ 526.926770][ T5279] appleir 0003:05AC:8243.0062: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 526.981856][ T940] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 526.995637][ T940] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 527.009598][ T5321] usb usb4-port1: unable to enumerate USB device [ 527.192879][ T940] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 527.207357][ T940] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 527.230720][ T940] usb 1-1: USB disconnect, device number 91 [ 527.250015][ T8] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 527.260033][ T940] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 527.429135][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 527.440849][ T8] usb 5-1: config 10 has an invalid interface number: 80 but max is 3 [ 527.449819][ T8] usb 5-1: config 10 has an invalid interface number: 188 but max is 3 [ 527.458141][ T8] usb 5-1: config 10 has an invalid interface number: 111 but max is 3 [ 527.467413][ T8] usb 5-1: config 10 has an invalid interface number: 26 but max is 3 [ 527.477012][ T8] usb 5-1: config 10 has an invalid interface number: 34 but max is 3 [ 527.486634][ T8] usb 5-1: config 10 has 5 interfaces, different from the descriptor's value: 4 [ 527.495950][ T8] usb 5-1: config 10 has no interface number 0 [ 527.503448][ T8] usb 5-1: config 10 has no interface number 1 [ 527.510807][ T8] usb 5-1: config 10 has no interface number 2 [ 527.517037][ T8] usb 5-1: config 10 has no interface number 3 [ 527.523444][ T8] usb 5-1: config 10 has no interface number 4 [ 527.529915][ T8] usb 5-1: config 10 interface 80 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 527.542202][ T8] usb 5-1: config 10 interface 80 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 527.553420][ T8] usb 5-1: config 10 interface 188 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 527.564664][ T8] usb 5-1: config 10 interface 188 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 527.576963][ T8] usb 5-1: config 10 interface 188 altsetting 1 endpoint 0xC has invalid maxpacket 1998, setting to 1024 [ 527.589760][ T8] usb 5-1: config 10 interface 188 altsetting 1 bulk endpoint 0xC has invalid maxpacket 1024 [ 527.602333][ T8] usb 5-1: config 10 interface 188 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 527.613760][ T8] usb 5-1: config 10 interface 188 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 527.625588][ T8] usb 5-1: config 10 interface 188 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 9 [ 527.639067][ T8] usb 5-1: too many endpoints for config 10 interface 111 altsetting 34: 234, using maximum allowed: 30 [ 527.650779][ T8] usb 5-1: config 10 interface 111 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 527.662124][ T8] usb 5-1: config 10 interface 111 altsetting 34 has a duplicate endpoint with address 0xA, skipping [ 527.673098][ T8] usb 5-1: config 10 interface 111 altsetting 34 has 2 endpoint descriptors, different from the interface descriptor's value: 234 [ 527.687301][ T8] usb 5-1: config 10 interface 26 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 527.698191][ T8] usb 5-1: config 10 interface 26 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 527.710937][ T8] usb 5-1: config 10 interface 26 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 527.721995][ T8] usb 5-1: config 10 interface 26 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 527.741603][ T8] usb 5-1: config 10 interface 34 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 527.752868][ T8] usb 5-1: config 10 interface 34 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 527.764035][ T8] usb 5-1: config 10 interface 34 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 527.775209][ T8] usb 5-1: config 10 interface 80 has no altsetting 0 [ 527.782088][ T8] usb 5-1: config 10 interface 188 has no altsetting 0 [ 527.789976][ T8] usb 5-1: config 10 interface 111 has no altsetting 0 [ 527.796920][ T8] usb 5-1: config 10 interface 26 has no altsetting 0 [ 527.804092][ T8] usb 5-1: config 10 interface 34 has no altsetting 0 [ 527.832398][ T8] usb 5-1: Dual-Role OTG device on HNP port [ 527.864536][ T8] usb 5-1: New USB device found, idVendor=0403, idProduct=caa0, bcdDevice= f.d7 [ 527.889766][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.898100][ T8] usb 5-1: Product: 愳༢궥Ꞹ헖ꑋ帀ㄷ澭챴駝ꤳ뜛툥膅텒䙶❾ஈ鑲פּ매堚洏늅瑻叢功෣鱦낪䖠䭅紟룱뗱冀Ӯ꺬렼䠈錊촻ܷ뜬鍞㿄쩤ꑆ댸枦믶᠞턡⒰髼ᄌⲸ辛먳䏺ᤃ䲃胤䖆寳汖濋璞䮹╋鶟䀾쵾孜幪ӹ둣햷篙鶢鑐ﮘ赉궃㴁疻獍㺖與轘귐懌쏘圑㍉֚ [ 527.941745][ T8] usb 5-1: Manufacturer: 鎝쑉귟ϕ꼪ﲴၓ࿖෕탙酑䇛⟂푻䝂䙇皹ᵾ궟囵潦蛻𧻓竆௃迀꿺흌ࢤͿ쌁 [ 527.962871][ T8] usb 5-1: SerialNumber: ቸះ捐恰該貯婪併ྼ鑮곖̯馲䧏擺ᔙ탔ⰲ훡雛촶ǯ义⒯ᒯᕛ韰శ෤ȉ凉ꦕ૰㣀髷ꬱ鮶籗㬔脾뵓웕ꘉ빁魪螑ϼ㏅鹽쬪ܴೀ [ 528.146582][T13509] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 528.248577][T13511] netlink: 'syz.2.1950': attribute type 12 has an invalid length. [ 528.256732][T13511] netlink: 'syz.2.1950': attribute type 29 has an invalid length. [ 528.264996][T13511] netlink: 'syz.2.1950': attribute type 2 has an invalid length. [ 528.273845][T13511] netlink: 'syz.2.1950': attribute type 2 has an invalid length. [ 528.281871][T13511] netlink: 'syz.2.1950': attribute type 1 has an invalid length. [ 528.289882][T13511] netlink: 'syz.2.1950': attribute type 37 has an invalid length. [ 528.297802][T13511] netlink: 'syz.2.1950': attribute type 2 has an invalid length. [ 528.305859][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.411599][ T8] ftdi_sio 5-1:10.80: FTDI USB Serial Device converter detected [ 528.440170][ T8] ftdi_sio ttyUSB0: unknown device type: 0xfd7 [ 528.459493][T13517] loop0: detected capacity change from 0 to 7 [ 528.469377][T13517] Dev loop0: unable to read RDB block 7 [ 528.488277][T13517] loop0: unable to read partition table [ 528.498225][ T8] ftdi_sio 5-1:10.188: FTDI USB Serial Device converter detected [ 528.512742][T13517] loop0: partition table beyond EOD, truncated [ 528.524916][ T8] ftdi_sio ttyUSB1: unknown device type: 0xfd7 [ 528.532411][T13517] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 528.532411][T13517] ) failed (rc=-5) [ 528.554287][ T8] ftdi_sio 5-1:10.111: FTDI USB Serial Device converter detected [ 528.564389][ T8] ftdi_sio ttyUSB2: unknown device type: 0xfd7 [ 528.581048][ T8] ftdi_sio 5-1:10.26: FTDI USB Serial Device converter detected [ 528.581151][T13523] netlink: 'syz.2.1953': attribute type 34 has an invalid length. [ 528.590060][ T8] ftdi_sio ttyUSB3: unknown device type: 0xfd7 [ 528.648044][ T8] ftdi_sio 5-1:10.34: FTDI USB Serial Device converter detected [ 528.656706][ T8] ftdi_sio ttyUSB4: unknown device type: 0xfd7 [ 528.675474][ T8] usb 5-1: USB disconnect, device number 85 [ 528.709589][ T8] ftdi_sio 5-1:10.80: device disconnected [ 528.762249][ T8] ftdi_sio 5-1:10.188: device disconnected [ 528.786606][ T8] ftdi_sio 5-1:10.111: device disconnected [ 528.804397][ T8] ftdi_sio 5-1:10.26: device disconnected [ 528.831626][ T8] ftdi_sio 5-1:10.34: device disconnected [ 528.924349][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1955'. [ 528.970869][ T5303] usb 2-1: USB disconnect, device number 92 [ 529.096471][T13537] xt_socket: unknown flags 0x4 [ 529.234685][T13542] tipc: Started in network mode [ 529.241833][T13542] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 529.242807][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 529.250631][T13542] tipc: Enabled bearer , priority 0 [ 529.279386][ T5279] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 529.396941][T13550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1965'. [ 529.418378][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1965'. [ 529.442713][T13550] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1965'. [ 529.442737][T13550] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1965'. [ 529.530673][ T5279] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.530760][ T5279] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 529.538630][ T5279] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.538669][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.538695][ T5279] usb 4-1: Product: syz [ 529.538714][ T5279] usb 4-1: Manufacturer: syz [ 529.538734][ T5279] usb 4-1: SerialNumber: syz [ 529.591364][ T29] audit: type=1326 audit(1727014257.090:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.591447][ T29] audit: type=1326 audit(1727014257.090:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.591489][ T29] audit: type=1326 audit(1727014257.090:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.591530][ T29] audit: type=1326 audit(1727014257.090:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.591606][ T29] audit: type=1326 audit(1727014257.090:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.591648][ T29] audit: type=1326 audit(1727014257.090:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.592448][ T29] audit: type=1326 audit(1727014257.090:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.592494][ T29] audit: type=1326 audit(1727014257.090:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.592558][ T29] audit: type=1326 audit(1727014257.090:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.606933][ T29] audit: type=1326 audit(1727014257.100:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13554 comm="syz.2.1966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000 [ 529.775287][T13530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 529.868910][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.870046][ T8] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 529.923484][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.032118][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 530.044867][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.079000][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.104406][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 530.138618][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 530.148813][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 530.188859][ T8] usb 5-1: Manufacturer: syz [ 530.201377][ T8] usb 5-1: config 0 descriptor?? [ 530.255482][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 530.277451][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1970'. [ 530.379216][ T5321] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 530.392288][T13530] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 530.415457][ T5303] tipc: Node number set to 10136234 [ 530.454670][T13572] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 530.619682][ T8] appleir 0003:05AC:8243.0063: unknown main item tag 0x0 [ 530.630474][ T5279] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 530.636963][ T5279] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 530.648550][ T8] appleir 0003:05AC:8243.0063: No inputs registered, leaving [ 530.678179][ T8] appleir 0003:05AC:8243.0063: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 530.781450][T13571] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 530.831765][ T5279] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 530.880953][ T5279] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 530.909294][ T5279] usb 4-1: USB disconnect, device number 103 [ 530.936115][ T5279] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 531.418444][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 531.463496][T13594] vlan2: entered promiscuous mode [ 531.476708][T13594] ip6gretap0: entered promiscuous mode [ 531.498168][T13594] vlan2: entered allmulticast mode [ 531.510210][T13594] ip6gretap0: entered allmulticast mode [ 531.526267][T13594] ip6gretap0: left allmulticast mode [ 531.531767][T13594] ip6gretap0: left promiscuous mode [ 531.539121][ T5279] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 531.690311][ T5279] usb 1-1: Using ep0 maxpacket: 16 [ 531.704194][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.719088][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.729157][ T5279] usb 1-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 531.738257][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.749270][ T5279] usb 1-1: config 0 descriptor?? [ 532.176097][T13591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1977'. [ 532.203106][T13591] unsupported nlmsg_type 40 [ 532.251526][ T5279] smartjoyplus 0003:6666:8802.0064: hidraw1: USB HID v0.00 Device [HID 6666:8802] on usb-dummy_hcd.0-1/input0 [ 532.270521][T13603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.289520][ T5279] smartjoyplus 0003:6666:8802.0064: no output reports found [ 532.300568][T13610] support for the xor transformation has been removed. [ 532.483513][ T8] usb 1-1: USB disconnect, device number 92 [ 532.612315][ T5321] usb 5-1: USB disconnect, device number 86 [ 532.945367][T13630] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 533.032374][T13632] geneve2: entered promiscuous mode [ 533.039282][T13632] geneve2: entered allmulticast mode [ 533.049137][ T8] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 533.199456][ T5284] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 533.211166][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 533.242266][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 533.262070][ T8] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 533.271729][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.289406][ T8] usb 2-1: Product: syz [ 533.296417][ T8] usb 2-1: Manufacturer: syz [ 533.310029][ T8] usb 2-1: SerialNumber: syz [ 533.336320][ T8] usb 2-1: config 0 descriptor?? [ 533.351459][ T8] as10x_usb: device has been detected [ 533.370998][ T8] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 533.451401][ T5284] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.462761][ T5284] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 533.477081][ T5284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.486691][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.496010][ T8] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 533.535507][ T5284] usb 4-1: Product: syz [ 533.542392][ T8] as10x_usb: error during firmware upload part1 [ 533.564991][ T5284] usb 4-1: Manufacturer: syz [ 533.587139][ T8] Registered device Abilis Systems DVB-Titan [ 533.614788][ T5284] usb 4-1: SerialNumber: syz [ 533.753336][ T940] usb 2-1: USB disconnect, device number 94 [ 533.818834][ T940] Unregistered device Abilis Systems DVB-Titan [ 533.858160][ T940] as10x_usb: device has been disconnected [ 533.874106][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 533.901776][T13628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 534.091950][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 534.126170][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.204357][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.253485][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 534.385492][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 534.429116][ T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 534.484734][ T9] usb 3-1: Manufacturer: syz [ 534.528455][ T9] usb 3-1: config 0 descriptor?? [ 534.552604][T13628] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 534.620301][T13656] __nla_validate_parse: 5 callbacks suppressed [ 534.620324][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2002'. [ 534.793317][ T5284] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 534.829210][ T5284] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 534.860167][ T5240] Bluetooth: hci3: command tx timeout [ 534.992488][ T9] appleir 0003:05AC:8243.0065: unknown main item tag 0x0 [ 535.004244][ T5284] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 535.045009][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'. [ 535.062986][ T9] appleir 0003:05AC:8243.0065: No inputs registered, leaving [ 535.073665][ T5284] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 535.134158][ T9] appleir 0003:05AC:8243.0065: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 535.199594][ T5284] usb 4-1: USB disconnect, device number 104 [ 535.274050][ T5284] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 535.329570][T13662] FAULT_INJECTION: forcing a failure. [ 535.329570][T13662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.268958][ C1] sched: DL replenish lagged too much [ 537.519069][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.4.2005 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 537.529835][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 537.539941][T13662] Call Trace: [ 537.543262][T13662] [ 537.546234][T13662] dump_stack_lvl+0x241/0x360 [ 537.550974][T13662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.556229][T13662] ? __pfx__printk+0x10/0x10 [ 537.560874][T13662] ? __pfx_lock_release+0x10/0x10 [ 537.565960][T13662] ? __local_bh_enable_ip+0x168/0x200 [ 537.571388][T13662] ? __convert_from_fxsr+0x5a6/0x800 [ 537.578223][T13662] should_fail_ex+0x3b0/0x4e0 [ 537.582973][T13662] copy_fpstate_to_sigframe+0xacc/0xdc0 [ 537.588592][T13662] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 537.594720][T13662] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.601208][T13662] ? fpu__alloc_mathframe+0xab/0x130 [ 537.606567][T13662] get_sigframe+0x5d9/0x800 [ 537.611133][T13662] ? __pfx_get_sigframe+0x10/0x10 [ 537.616521][T13662] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.621853][T13662] ? lockdep_hardirqs_on+0x99/0x150 [ 537.627137][T13662] ia32_setup_rt_frame+0x130/0xc80 [ 537.632319][T13662] ? __pfx_get_signal+0x10/0x10 [ 537.637221][T13662] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 537.642922][T13662] arch_do_signal_or_restart+0x4a8/0x860 [ 537.648606][T13662] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.654824][T13662] ? __se_compat_sys_sendfile+0x194/0x1f0 [ 537.660607][T13662] ? syscall_exit_to_user_mode+0xa3/0x370 [ 537.666398][T13662] syscall_exit_to_user_mode+0xc9/0x370 [ 537.672002][T13662] __do_fast_syscall_32+0xc4/0x110 [ 537.677195][T13662] ? exc_page_fault+0x590/0x8c0 [ 537.682096][T13662] do_fast_syscall_32+0x34/0x80 [ 537.688300][T13662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 537.694684][T13662] RIP: 0023:0xf7fc0579 [ 537.698801][T13662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 537.718545][T13662] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 537.727032][T13662] RAX: 0000000000000800 RBX: 0000000000000004 RCX: 0000000000000005 [ 537.735056][T13662] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000 [ 537.743067][T13662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 537.751083][T13662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 537.759103][T13662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 537.767146][T13662] [ 538.629088][ T9] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 563.174788][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.919242][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.787857][ T5278] usb 3-1: USB disconnect, device number 97 [ 589.025800][ T5226] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.042428][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 589.055061][ T5226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 589.064277][ T5226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 589.072854][ T5226] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 589.084604][ T5226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 589.099381][ T5226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 589.110602][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.119742][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.187558][ T5226] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.204318][ T5226] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 589.211883][ T5226] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.342170][T10438] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.365634][T10438] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.374834][T10438] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.383301][T10438] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.395565][T10438] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 589.403466][T10438] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.516296][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 589.542448][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 589.553048][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.561171][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 589.569710][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 589.577756][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.671119][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 589.682871][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 589.691372][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 589.701671][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 589.710193][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 589.719794][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.409346][ T54] Bluetooth: hci2: command tx timeout [ 591.489360][ T54] Bluetooth: hci5: command tx timeout [ 591.649208][ T54] Bluetooth: hci4: command tx timeout [ 591.729046][ T54] Bluetooth: hci0: command tx timeout [ 591.819230][ T54] Bluetooth: hci6: command tx timeout [ 593.489141][ T54] Bluetooth: hci2: command tx timeout [ 593.569584][ T54] Bluetooth: hci5: command tx timeout [ 593.729094][ T54] Bluetooth: hci4: command tx timeout [ 593.809077][ T54] Bluetooth: hci0: command tx timeout [ 593.892245][ T54] Bluetooth: hci6: command tx timeout [ 595.569184][ T54] Bluetooth: hci2: command tx timeout [ 595.650372][ T54] Bluetooth: hci5: command tx timeout [ 595.809551][ T54] Bluetooth: hci4: command tx timeout [ 595.889063][ T54] Bluetooth: hci0: command tx timeout [ 595.969190][ T54] Bluetooth: hci6: command tx timeout [ 597.649193][ T54] Bluetooth: hci2: command tx timeout [ 597.729239][ T54] Bluetooth: hci5: command tx timeout [ 597.889158][ T54] Bluetooth: hci4: command tx timeout [ 597.969123][ T54] Bluetooth: hci0: command tx timeout [ 598.049125][ T54] Bluetooth: hci6: command tx timeout [ 624.616643][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.623170][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 650.258559][T10438] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.289381][T10438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.298401][T10438] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.310044][T10438] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.359419][T10438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.366953][T10438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.881009][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 650.893188][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 650.901738][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 650.916930][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 650.929462][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 650.937372][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 651.026121][T10438] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 651.035826][T10438] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 651.044119][T10438] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 651.067649][T10438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 651.082109][T10438] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 651.089922][T10438] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 651.173907][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 651.185499][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 651.194929][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 651.204676][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 651.234801][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 651.242323][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 651.598311][T10438] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 651.609611][T10438] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 651.624356][T10438] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 651.632864][T10438] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 651.641148][T10438] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 651.648739][T10438] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 652.449169][T10438] Bluetooth: hci1: command tx timeout [ 653.009031][T10438] Bluetooth: hci3: command tx timeout [ 653.169565][T10438] Bluetooth: hci7: command tx timeout [ 653.329038][T10438] Bluetooth: hci8: command tx timeout [ 653.729252][T10438] Bluetooth: hci9: command tx timeout [ 654.529162][T10438] Bluetooth: hci1: command tx timeout [ 655.090413][T10438] Bluetooth: hci3: command tx timeout [ 655.249195][T10438] Bluetooth: hci7: command tx timeout [ 655.418352][T10438] Bluetooth: hci8: command tx timeout [ 655.809108][T10438] Bluetooth: hci9: command tx timeout [ 656.609375][T10438] Bluetooth: hci1: command tx timeout [ 657.169123][T10438] Bluetooth: hci3: command tx timeout [ 657.329297][T10438] Bluetooth: hci7: command tx timeout [ 657.489044][T10438] Bluetooth: hci8: command tx timeout [ 657.889115][T10438] Bluetooth: hci9: command tx timeout [ 658.689025][T10438] Bluetooth: hci1: command tx timeout [ 659.254947][T10438] Bluetooth: hci3: command tx timeout [ 659.414257][T10438] Bluetooth: hci7: command tx timeout [ 659.574054][T10438] Bluetooth: hci8: command tx timeout [ 659.969092][T10438] Bluetooth: hci9: command tx timeout [ 686.051575][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.058025][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 710.171485][ T54] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 710.183528][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 710.232328][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 710.242185][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 710.250479][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 710.257952][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 710.459745][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.863562][T10438] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 710.876831][T10438] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 710.886059][T10438] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 710.895173][T10438] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 710.903910][T10438] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 710.913004][T10438] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 711.536159][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 711.547670][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 711.564724][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 711.581423][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 711.589743][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 711.601818][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 711.689458][T13729] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 711.716256][T13729] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 711.725713][T13729] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 711.734530][T13729] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 711.744285][T13729] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 711.751865][T13729] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 712.289053][T13729] Bluetooth: hci10: command tx timeout [ 712.402387][T13730] chnl_net:caif_netlink_parms(): no params data found [ 712.502052][T13726] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 712.512319][T13726] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 712.521915][T13726] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 712.530595][T13726] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 712.544827][T13726] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 712.554067][T13726] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 712.737957][T13730] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.751536][T13730] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.763489][T13730] bridge_slave_0: entered allmulticast mode [ 712.776141][T13730] bridge_slave_0: entered promiscuous mode [ 712.788390][T13730] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.799911][T13730] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.807234][T13730] bridge_slave_1: entered allmulticast mode [ 712.822757][T13730] bridge_slave_1: entered promiscuous mode [ 712.933743][T13730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.965971][T13730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.009400][T13729] Bluetooth: hci11: command tx timeout [ 713.051724][T13730] team0: Port device team_slave_0 added [ 713.069680][T13730] team0: Port device team_slave_1 added [ 713.177415][T13730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.188148][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.226569][T13730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.242351][T13730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.257978][T13730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.293631][T13730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.425029][T13730] hsr_slave_0: entered promiscuous mode [ 713.452857][T13730] hsr_slave_1: entered promiscuous mode [ 713.649165][T13729] Bluetooth: hci12: command tx timeout [ 713.735694][T13729] Bluetooth: hci6: command 0x0406 tx timeout [ 713.741879][T13726] Bluetooth: hci4: command 0x0406 tx timeout [ 713.748494][T13726] Bluetooth: hci2: command 0x0406 tx timeout [ 713.761766][T13729] Bluetooth: hci5: command 0x0406 tx timeout [ 713.768699][T13729] Bluetooth: hci0: command 0x0406 tx timeout [ 713.819177][ T5226] Bluetooth: hci13: command tx timeout [ 714.369088][ T5240] Bluetooth: hci10: command tx timeout [ 714.609218][ T5240] Bluetooth: hci14: command tx timeout [ 715.099271][ T5240] Bluetooth: hci11: command tx timeout [ 715.728968][ T5240] Bluetooth: hci12: command tx timeout [ 715.889192][ T5240] Bluetooth: hci13: command tx timeout [ 716.449068][ T5240] Bluetooth: hci10: command tx timeout [ 716.689052][ T5240] Bluetooth: hci14: command tx timeout [ 717.169210][ T5240] Bluetooth: hci11: command tx timeout [ 717.808968][ T5240] Bluetooth: hci12: command tx timeout [ 717.969194][ T5240] Bluetooth: hci13: command tx timeout [ 718.528999][ T5240] Bluetooth: hci10: command tx timeout [ 718.769195][ T5240] Bluetooth: hci14: command tx timeout [ 719.249100][ T5240] Bluetooth: hci11: command tx timeout [ 719.899164][ T5240] Bluetooth: hci12: command tx timeout [ 720.049143][ T5240] Bluetooth: hci13: command tx timeout [ 720.849264][ T5240] Bluetooth: hci14: command tx timeout [ 747.494438][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.508902][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.819188][ T30] INFO: task syz-executor:13679 blocked for more than 143 seconds. [ 755.827173][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 755.879124][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 755.937338][ T30] task:syz-executor state:D stack:25984 pid:13679 tgid:13679 ppid:1 flags:0x20004006 [ 755.995159][ T30] Call Trace: [ 755.998520][ T30] [ 756.018869][ T30] __schedule+0x1895/0x4b30 [ 756.023489][ T30] ? __pfx___schedule+0x10/0x10 [ 756.062599][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.067732][ T30] ? __mutex_trylock_common+0x92/0x2e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 756.197880][ T30] ? schedule+0x90/0x320 [ 756.232291][ T30] schedule+0x14b/0x320 [ 756.236555][ T30] schedule_preempt_disabled+0x13/0x30 [ 756.289620][ T30] __mutex_lock+0x6a7/0xd70 [ 756.294316][ T30] ? __mutex_lock+0x52a/0xd70 [ 756.336104][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 756.363698][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 756.417070][ T30] ? read_word_at_a_time+0xe/0x20 [ 756.435093][ T30] ? sized_strscpy+0x8d/0x220 [ 756.453214][ T30] ip_tunnel_init_net+0x20e/0x720 [ 756.458345][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 756.559144][ T30] ? ops_init+0x75/0x590 [ 756.563500][ T30] ops_init+0x31e/0x590 [ 756.568561][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 756.651685][ T30] setup_net+0x287/0x9e0 [ 756.656029][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 756.723571][ T30] ? __pfx_setup_net+0x10/0x10 [ 756.728447][ T30] copy_net_ns+0x33f/0x570 [ 756.774679][ T30] create_new_namespaces+0x425/0x7b0 [ 756.798983][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 756.804897][ T30] ksys_unshare+0x619/0xc10 [ 756.848887][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 756.854099][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.903318][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 756.939233][ T30] __ia32_sys_unshare+0x37/0x40 [ 756.944190][ T30] __do_fast_syscall_32+0xb4/0x110 [ 756.992290][ T30] ? exc_page_fault+0x590/0x8c0 [ 756.997502][ T30] do_fast_syscall_32+0x34/0x80 [ 757.042046][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 757.048474][ T30] RIP: 0023:0xf7f31579 [ 757.105905][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 757.138928][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 757.147001][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 757.203889][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.243434][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 757.275932][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.313225][ T30] [ 757.316488][ T30] INFO: task syz-executor:13680 blocked for more than 144 seconds. [ 757.354766][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 757.386291][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.429067][ T30] task:syz-executor state:D stack:25648 pid:13680 tgid:13680 ppid:1 flags:0x20004006 [ 757.466137][ T30] Call Trace: [ 757.476767][ T30] [ 757.499651][ T30] __schedule+0x1895/0x4b30 [ 757.504890][ T30] ? __pfx___schedule+0x10/0x10 [ 757.558929][ T30] ? __pfx_lock_release+0x10/0x10 [ 757.564062][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 757.603277][ T30] ? schedule+0x90/0x320 [ 757.607621][ T30] schedule+0x14b/0x320 [ 757.638905][ T30] schedule_preempt_disabled+0x13/0x30 [ 757.644450][ T30] __mutex_lock+0x6a7/0xd70 [ 757.709740][ T30] ? __mutex_lock+0x52a/0xd70 [ 757.714522][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 757.755059][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 757.772862][ T30] ? read_word_at_a_time+0xe/0x20 [ 757.778325][ T30] ? sized_strscpy+0x8d/0x220 [ 757.810850][ T30] ip_tunnel_init_net+0x20e/0x720 [ 757.816064][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 757.859126][ T30] ? ops_init+0x75/0x590 [ 757.863475][ T30] ops_init+0x31e/0x590 [ 757.867684][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 757.916385][ T30] setup_net+0x287/0x9e0 [ 757.946061][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 757.958898][ T30] ? __pfx_setup_net+0x10/0x10 [ 757.963768][ T30] copy_net_ns+0x33f/0x570 [ 757.968322][ T30] create_new_namespaces+0x425/0x7b0 [ 758.009316][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 758.015173][ T30] ksys_unshare+0x619/0xc10 [ 758.055037][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 758.076251][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 758.096159][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 758.128883][ T30] __ia32_sys_unshare+0x37/0x40 [ 758.148392][ T30] __do_fast_syscall_32+0xb4/0x110 [ 758.164194][ T30] ? exc_page_fault+0x590/0x8c0 [ 758.188876][ T30] do_fast_syscall_32+0x34/0x80 [ 758.193841][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 758.228895][ T30] RIP: 0023:0xf7f04579 [ 758.233051][ T30] RSP: 002b:00000000f74eff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 758.288862][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 758.296928][ T30] RDX: 00000000f738bff4 RSI: 00000000f7262a6a RDI: 0000000030000000 [ 758.338039][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 758.378867][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 758.386930][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 758.448929][ T30] [ 758.465297][ T30] INFO: task syz-executor:13684 blocked for more than 146 seconds. [ 758.498918][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 758.506294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.580908][ T30] task:syz-executor state:D stack:25744 pid:13684 tgid:13684 ppid:1 flags:0x20004006 [ 758.617451][ T30] Call Trace: [ 758.638867][ T30] [ 758.641882][ T30] __schedule+0x1895/0x4b30 [ 758.646541][ T30] ? __pfx___schedule+0x10/0x10 [ 758.699531][ T30] ? __pfx_lock_release+0x10/0x10 [ 758.704664][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 758.746589][ T30] ? schedule+0x90/0x320 [ 758.758886][ T30] schedule+0x14b/0x320 [ 758.763129][ T30] schedule_preempt_disabled+0x13/0x30 [ 758.768631][ T30] __mutex_lock+0x6a7/0xd70 [ 758.816572][ T30] ? __mutex_lock+0x52a/0xd70 [ 758.833105][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 758.838488][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 758.875982][ T30] ip_tunnel_init_net+0x20e/0x720 [ 758.903432][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 758.921956][ T30] ? ops_init+0x75/0x590 [ 758.926303][ T30] ops_init+0x31e/0x590 [ 758.958889][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 758.964366][ T30] setup_net+0x287/0x9e0 [ 758.968656][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 759.027077][ T30] ? __pfx_setup_net+0x10/0x10 [ 759.057257][ T30] copy_net_ns+0x33f/0x570 [ 759.066474][ T30] create_new_namespaces+0x425/0x7b0 [ 759.089968][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 759.095820][ T30] ksys_unshare+0x619/0xc10 [ 759.128903][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 759.134033][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 759.172192][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 759.203246][ T30] __ia32_sys_unshare+0x37/0x40 [ 759.208291][ T30] __do_fast_syscall_32+0xb4/0x110 [ 759.242855][ T30] ? exc_page_fault+0x590/0x8c0 [ 759.247817][ T30] do_fast_syscall_32+0x34/0x80 [ 759.286162][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.318869][ T30] RIP: 0023:0xf744d579 [ 759.323027][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 759.376936][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 759.406076][ T30] RDX: 00000000f743bff4 RSI: 00000000f7312a6a RDI: 0000000030000000 [ 759.429047][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.437944][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 759.499067][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.507148][ T30] [ 759.546214][ T30] INFO: task syz-executor:13686 blocked for more than 147 seconds. [ 759.589020][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 759.596384][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.678868][ T30] task:syz-executor state:D stack:25984 pid:13686 tgid:13686 ppid:1 flags:0x20004006 [ 759.718924][ T30] Call Trace: [ 759.722280][ T30] [ 759.725250][ T30] __schedule+0x1895/0x4b30 [ 759.798902][ T30] ? __pfx___schedule+0x10/0x10 [ 759.803852][ T30] ? __pfx_lock_release+0x10/0x10 [ 759.843710][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 759.889201][ T30] ? schedule+0x90/0x320 [ 759.893543][ T30] schedule+0x14b/0x320 [ 759.897754][ T30] schedule_preempt_disabled+0x13/0x30 [ 759.946087][ T30] __mutex_lock+0x6a7/0xd70 [ 759.974048][ T30] ? __mutex_lock+0x52a/0xd70 [ 760.005956][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 760.019338][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 760.024492][ T30] ? read_word_at_a_time+0xe/0x20 [ 760.078866][ T30] ? sized_strscpy+0x8d/0x220 [ 760.083646][ T30] ip_tunnel_init_net+0x20e/0x720 [ 760.088723][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 760.163026][ T30] ? ops_init+0x75/0x590 [ 760.167466][ T30] ops_init+0x31e/0x590 [ 760.217485][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 760.229045][ T30] setup_net+0x287/0x9e0 [ 760.233377][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 760.253769][ T30] ? __pfx_setup_net+0x10/0x10 [ 760.258641][ T30] copy_net_ns+0x33f/0x570 [ 760.281859][ T30] create_new_namespaces+0x425/0x7b0 [ 760.287267][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 760.303421][ T30] ksys_unshare+0x619/0xc10 [ 760.308115][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 760.318436][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 760.327284][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 760.339027][ T30] __ia32_sys_unshare+0x37/0x40 [ 760.343963][ T30] __do_fast_syscall_32+0xb4/0x110 [ 760.355585][ T30] ? exc_page_fault+0x590/0x8c0 [ 760.361580][ T30] do_fast_syscall_32+0x34/0x80 [ 760.366677][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.381103][ T30] RIP: 0023:0xf747d579 [ 760.385266][ T30] RSP: 002b:00000000f75cff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 760.399359][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 760.407424][ T30] RDX: 00000000f746bff4 RSI: 00000000f7342a6a RDI: 0000000030000000 [ 760.422774][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.434811][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 760.446762][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.458453][ T30] [ 760.467181][ T30] INFO: task syz-executor:13687 blocked for more than 148 seconds. [ 760.477260][ T30] Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 760.491068][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 760.505563][ T30] task:syz-executor state:D stack:25984 pid:13687 tgid:13687 ppid:1 flags:0x20004006 [ 760.518848][ T30] Call Trace: [ 760.522186][ T30] [ 760.525171][ T30] __schedule+0x1895/0x4b30 [ 760.537477][ T30] ? __pfx___schedule+0x10/0x10 [ 760.542785][ T30] ? __pfx_lock_release+0x10/0x10 [ 760.547882][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 760.558918][ T30] ? schedule+0x90/0x320 [ 760.567001][ T30] schedule+0x14b/0x320 [ 760.577063][ T30] schedule_preempt_disabled+0x13/0x30 [ 760.585374][ T30] __mutex_lock+0x6a7/0xd70 [ 760.595095][ T30] ? __mutex_lock+0x52a/0xd70 [ 760.602747][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 760.608028][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 760.628518][ T30] ? read_word_at_a_time+0xe/0x20 [ 760.636491][ T30] ? sized_strscpy+0x8d/0x220 [ 760.646318][ T30] ip_tunnel_init_net+0x20e/0x720 [ 760.654311][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 760.662759][ T30] ? ops_init+0x75/0x590 [ 760.667084][ T30] ops_init+0x31e/0x590 [ 760.678241][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 760.685308][ T30] setup_net+0x287/0x9e0 [ 760.698023][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 760.705171][ T30] ? __pfx_setup_net+0x10/0x10 [ 760.716283][ T30] copy_net_ns+0x33f/0x570 [ 760.725467][ T30] create_new_namespaces+0x425/0x7b0 [ 760.738594][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 760.744741][ T30] ksys_unshare+0x619/0xc10 [ 760.756707][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 760.762190][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 760.770030][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 760.776852][ T30] __ia32_sys_unshare+0x37/0x40 [ 760.797558][ T30] __do_fast_syscall_32+0xb4/0x110 [ 760.808863][ T30] ? exc_page_fault+0x590/0x8c0 [ 760.813796][ T30] do_fast_syscall_32+0x34/0x80 [ 760.818697][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.832411][ T30] RIP: 0023:0xf7fd4579 [ 760.836556][ T30] RSP: 002b:00000000f75bff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 760.849859][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 760.857904][ T30] RDX: 00000000f745bff4 RSI: 00000000f7332a6a RDI: 0000000030000000 [ 760.873806][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.884079][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 760.898397][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.908638][ T30] [ 760.918022][ T30] [ 760.918022][ T30] Showing all locks held in the system: [ 760.927455][ T30] 3 locks held by kworker/u8:0/11: [ 760.939176][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 760.958559][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 760.978430][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 760.988388][ T30] 1 lock held by khungtaskd/30: [ 760.999182][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 761.023071][ T30] 6 locks held by kworker/u8:2/35: [ 761.028253][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 761.046670][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 761.057698][ T30] #2: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 761.072883][ T30] #3: ffff888050f8b0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 761.087117][ T30] #4: ffff888050f8c250 (&devlink->lock_key#40){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 761.101544][ T30] #5: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 761.115812][ T30] 3 locks held by kworker/1:2/937: [ 761.123691][ T30] 3 locks held by kworker/u8:7/2993: [ 761.134065][ T30] #0: ffff88814bc74948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 761.148598][ T30] #1: ffffc90009c77d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 761.168889][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 761.189175][ T30] 2 locks held by getty/4985: [ 761.193963][ T30] #0: ffff88814bf7f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 761.211518][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 761.226780][ T30] 3 locks held by kworker/0:7/5284: [ 761.234727][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 761.251033][ T30] #1: ffffc90003f87d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 761.269196][ T30] #2: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 761.288251][ T30] 6 locks held by kworker/1:7/5303: [ 761.294925][ T30] 2 locks held by syz-executor/13679: [ 761.307778][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.317711][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.334721][ T30] 2 locks held by syz-executor/13680: [ 761.343650][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.358860][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.368469][ T30] 2 locks held by syz-executor/13684: [ 761.382447][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.397686][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.410518][ T30] 2 locks held by syz-executor/13686: [ 761.415956][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.438863][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.448477][ T30] 2 locks held by syz-executor/13687: [ 761.460420][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.476294][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 761.488988][ T30] 2 locks held by syz-executor/13697: [ 761.494426][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.513874][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.527232][ T30] 2 locks held by syz-executor/13704: [ 761.537753][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.550145][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.565604][ T30] 2 locks held by syz-executor/13706: [ 761.573887][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.588870][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.606835][ T30] 2 locks held by syz-executor/13708: [ 761.612614][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.629367][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.646487][ T30] 2 locks held by syz-executor/13710: [ 761.652334][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.668880][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.685729][ T30] 2 locks held by syz-executor/13715: [ 761.693022][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.709197][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.725951][ T30] 1 lock held by syz-executor/13721: [ 761.733854][ T30] #0: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 761.748859][ T30] 5 locks held by syz-executor/13730: [ 761.754375][ T30] #0: ffff8880240e4420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 761.770729][ T30] #1: ffff888050d29c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 761.785857][ T30] #2: ffff8881443b5a58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 761.800182][ T30] #3: ffffffff8f568bc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 761.824808][ T30] #4: ffff888050f8b0e8 (&dev->mutex){....}-{3:3}, at: device_del+0xa6/0x9b0 [ 761.836541][ T30] 2 locks held by syz-executor/13732: [ 761.847011][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.859759][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.876289][ T30] 2 locks held by syz-executor/13739: [ 761.883274][ T30] #0: ffffffff8fcbe6d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 761.898886][ T30] #1: ffffffff8fccb1c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 761.916533][ T30] [ 761.919316][ T30] ============================================= [ 761.919316][ T30] [ 761.927768][ T30] NMI backtrace for cpu 0 [ 761.932128][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 761.942321][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 761.952413][ T30] Call Trace: [ 761.955723][ T30] [ 761.958685][ T30] dump_stack_lvl+0x241/0x360 [ 761.963413][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.968659][ T30] ? __pfx__printk+0x10/0x10 [ 761.973305][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 761.978295][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 761.983813][ T30] ? _printk+0xd5/0x120 [ 761.988007][ T30] ? __pfx__printk+0x10/0x10 [ 761.992643][ T30] ? __wake_up_klogd+0xcc/0x110 [ 761.997656][ T30] ? __pfx__printk+0x10/0x10 [ 762.002288][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 762.007365][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 762.013397][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 762.019439][ T30] watchdog+0xff4/0x1040 [ 762.023734][ T30] ? watchdog+0x1ea/0x1040 [ 762.028203][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.032929][ T30] kthread+0x2f0/0x390 [ 762.037040][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.041759][ T30] ? __pfx_kthread+0x10/0x10 [ 762.046387][ T30] ret_from_fork+0x4b/0x80 [ 762.050848][ T30] ? __pfx_kthread+0x10/0x10 [ 762.055480][ T30] ret_from_fork_asm+0x1a/0x30 [ 762.060395][ T30] [ 762.064504][ T30] Sending NMI from CPU 0 to CPUs 1: [ 762.070206][ C1] NMI backtrace for cpu 1 [ 762.070222][ C1] CPU: 1 UID: 0 PID: 5303 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 762.070244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 762.070257][ C1] Workqueue: events nsim_dev_trap_report_work [ 762.070294][ C1] RIP: 0010:kasan_check_range+0x1b8/0x290 [ 762.070317][ C1] Code: 4d 01 fb 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 48 ff cd 75 ee 5b <41> 5c 41 5e 41 5f 5d c3 cc cc cc cc 40 84 ed 75 5f f7 c5 00 ff 00 [ 762.070334][ C1] RSP: 0018:ffffc90000a17db8 EFLAGS: 00000256 [ 762.070348][ C1] RAX: 0000000000000001 RBX: 0000000000000038 RCX: ffffffff8a480af8 [ 762.070362][ C1] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc90000a17ea0 [ 762.070374][ C1] RBP: 0000000000000000 R08: ffffc90000a17ed7 R09: 1ffff92000142fda [ 762.070388][ C1] R10: dffffc0000000000 R11: fffff52000142fdb R12: dffffc0000000000 [ 762.070402][ C1] R13: ffff88805cc03000 R14: dffffc0000000001 R15: fffff52000142fdb [ 762.070416][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 762.070432][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.070446][ C1] CR2: 00000000f5704da4 CR3: 000000000e734000 CR4: 00000000003506f0 [ 762.070462][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.070473][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 762.070485][ C1] Call Trace: [ 762.070492][ C1] [ 762.070500][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 762.070545][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 762.070574][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 762.070601][ C1] ? nmi_handle+0x2a/0x5a0 [ 762.070627][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 762.070652][ C1] ? nmi_handle+0x14f/0x5a0 [ 762.070670][ C1] ? nmi_handle+0x2a/0x5a0 [ 762.070689][ C1] ? kasan_check_range+0x1b8/0x290 [ 762.070709][ C1] ? default_do_nmi+0x63/0x160 [ 762.070737][ C1] ? exc_nmi+0x123/0x1f0 [ 762.070764][ C1] ? end_repeat_nmi+0xf/0x53 [ 762.070790][ C1] ? ip_route_me_harder+0x108/0x1300 [ 762.070819][ C1] ? kasan_check_range+0x1b8/0x290 [ 762.070840][ C1] ? kasan_check_range+0x1b8/0x290 [ 762.070861][ C1] ? kasan_check_range+0x1b8/0x290 [ 762.070881][ C1] [ 762.070888][ C1] [ 762.070896][ C1] __asan_memset+0x23/0x50 [ 762.070922][ C1] ip_route_me_harder+0x108/0x1300 [ 762.070957][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 762.070985][ C1] ? rcu_is_watching+0x15/0xb0 [ 762.071005][ C1] ? trace_kmalloc+0x1f/0xd0 [ 762.071026][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 762.071055][ C1] ? __build_skb_around+0x245/0x3d0 [ 762.071078][ C1] ? siphash_2u64+0x25/0x2a0 [ 762.071104][ C1] synproxy_send_tcp+0x356/0x6c0 [ 762.071128][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 762.071154][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 762.071176][ C1] ? synproxy_pernet+0x45/0x270 [ 762.071199][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 762.071223][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 762.071246][ C1] ? nf_ip_checksum+0x13a/0x500 [ 762.071270][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 762.071298][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 762.071318][ C1] ? validate_chain+0x11e/0x5920 [ 762.071341][ C1] ? __pfx_validate_chain+0x10/0x10 [ 762.071366][ C1] nft_do_chain+0x4ad/0x1da0 [ 762.071394][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 762.071414][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 762.071451][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 762.071478][ C1] nft_do_chain_inet+0x418/0x6b0 [ 762.071501][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 762.071521][ C1] ? ipt_do_table+0x312/0x1860 [ 762.071549][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 762.071569][ C1] nf_hook_slow+0xc3/0x220 [ 762.071588][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 762.071614][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 762.071641][ C1] NF_HOOK+0x29e/0x450 [ 762.071666][ C1] ? NF_HOOK+0x9a/0x450 [ 762.071691][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 762.071716][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 762.071746][ C1] ? ip_rcv_finish+0x406/0x560 [ 762.071779][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 762.071804][ C1] NF_HOOK+0x3a4/0x450 [ 762.071828][ C1] ? __lock_acquire+0x1384/0x2050 [ 762.071855][ C1] ? NF_HOOK+0x9a/0x450 [ 762.071879][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 762.071908][ C1] ? ip_rcv_core+0x801/0xd10 [ 762.071934][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 762.071963][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 762.071988][ C1] __netif_receive_skb+0x2bf/0x650 [ 762.072017][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 762.072044][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 762.072071][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 762.072098][ C1] ? __pfx_lock_release+0x10/0x10 [ 762.072125][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 762.072150][ C1] process_backlog+0x662/0x15b0 [ 762.072172][ C1] ? process_backlog+0x33b/0x15b0 [ 762.072194][ C1] ? __pfx_process_backlog+0x10/0x10 [ 762.072212][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 762.072240][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 762.072269][ C1] __napi_poll+0xcb/0x490 [ 762.072303][ C1] net_rx_action+0x89b/0x1240 [ 762.072331][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 762.072350][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 762.072394][ C1] handle_softirqs+0x2c5/0x980 [ 762.072420][ C1] ? do_softirq+0x11b/0x1e0 [ 762.072445][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 762.072473][ C1] do_softirq+0x11b/0x1e0 [ 762.072496][ C1] [ 762.072502][ C1] [ 762.072509][ C1] ? __pfx_do_softirq+0x10/0x10 [ 762.072533][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 762.072561][ C1] ? rcu_is_watching+0x15/0xb0 [ 762.072582][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 762.072606][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 762.072631][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 762.072655][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 762.072679][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 762.072707][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 762.072739][ C1] ? process_scheduled_works+0x976/0x1850 [ 762.072764][ C1] process_scheduled_works+0xa63/0x1850 [ 762.072802][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 762.072832][ C1] ? assign_work+0x364/0x3d0 [ 762.072857][ C1] worker_thread+0x870/0xd30 [ 762.072886][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 762.072909][ C1] ? __kthread_parkme+0x169/0x1d0 [ 762.072937][ C1] ? __pfx_worker_thread+0x10/0x10 [ 762.072961][ C1] kthread+0x2f0/0x390 [ 762.072978][ C1] ? __pfx_worker_thread+0x10/0x10 [ 762.073003][ C1] ? __pfx_kthread+0x10/0x10 [ 762.073020][ C1] ret_from_fork+0x4b/0x80 [ 762.073046][ C1] ? __pfx_kthread+0x10/0x10 [ 762.073063][ C1] ret_from_fork_asm+0x1a/0x30 [ 762.073097][ C1] [ 762.105305][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 762.105330][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 762.105359][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 762.105375][ T30] Call Trace: [ 762.105384][ T30] [ 762.105395][ T30] dump_stack_lvl+0x241/0x360 [ 762.105434][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.105466][ T30] ? __pfx__printk+0x10/0x10 [ 762.105491][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 762.105533][ T30] ? vscnprintf+0x5d/0x90 [ 762.105571][ T30] panic+0x349/0x880 [ 762.105599][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 762.105636][ T30] ? __pfx_panic+0x10/0x10 [ 762.105680][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 762.105707][ T30] ? __irq_work_queue_local+0x137/0x410 [ 762.105740][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 762.105767][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 762.105803][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 762.105842][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 762.105883][ T30] watchdog+0x1033/0x1040 [ 762.105917][ T30] ? watchdog+0x1ea/0x1040 [ 762.105955][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.105987][ T30] kthread+0x2f0/0x390 [ 762.106011][ T30] ? __pfx_watchdog+0x10/0x10 [ 762.106050][ T30] ? __pfx_kthread+0x10/0x10 [ 762.106075][ T30] ret_from_fork+0x4b/0x80 [ 762.106110][ T30] ? __pfx_kthread+0x10/0x10 [ 762.106133][ T30] ret_from_fork_asm+0x1a/0x30 [ 762.106182][ T30] [ 762.898863][ T30] Kernel Offset: disabled [ 762.903203][ T30] Rebooting in 86400 seconds..