last executing test programs: 9.062532862s ago: executing program 4 (id=1152): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='thermal_power_allocator_pid\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300"], 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r4, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1d, 0x2, 0x6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924dc64c3b6e6f00"}) 6.782186163s ago: executing program 1 (id=1165): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8301c0018000100020d0400f9ff02000003040000100000073d0400ecfe0000608cc00f3e2c1112b0e8b87f6a8888b585f84d8c39a0720d44001016bc8d9f6320f09b3dacc91b7bf6eb930909576f9e83756a072ab4e1e6bf23f8312d230a6ef865b3b13bc0"], 0x21) syz_open_dev$usbmon(&(0x7f0000000180), 0x8000000, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="073167b3cd43453c05c0afd7690400aab51fb30e37ba0132481568544755eb35c1b80adb26207505352d35838132139cbc32a2c116ce172bfbcd5c585a76078f508b2b1364bf71b4772abf62be68812c2f4693e90d501ce0d22ae6b55c5d1b69a2f0fdaffbf7280eeec64245e7de50d2f6fb19e8d30c5ee6"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000780)='./file3\x00', 0xef0d, 0xe) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 6.619168922s ago: executing program 0 (id=1166): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00\x00\xfc\xff'}, {0x20, '\":/(\xa7'}, {0x20, '/dev/audio\x00\xbf\xd6.\xe9g;]\x85\x11\xf5\xdc\xa8\xcc\xac\x94\xda\xd0\x04!\xb2\x9f+4\x06\xf6\xad[\x02\xbc\xd1\xf1\xb4\xa3\xaf\x92\xe69:\xd6LC\x8fw\x7f\xe9\xed\xaeh\xf6%\xe3=\xaa\xa6\xfar0*\x96\x935\x878\xb1\f7\x81\v\xe3\xf3;?\xdf\x03\x83\xfa\xb1\xb4\x05UZ\x89\f/\xb4@\xfb\x0f\x8eZ\xa7v^\xa4\x1a\x89p\xba\f\xe3\xe0\xfc\xe1\x86\xa9I\x0e\xb1\xb8L\x16\xa3\x1eN\x12Nr\xf7\xe7\xc5\xc9n!f\xc5\x85Ou\xbc\xae&\xe4\x95s\x95\xb4\xde|c\xb4\x92\xfe\xf6\xcc\xc5\x98\xc6\xf2&}\xe9\xa9\xcb\xbfp\x9c\x8am\xb5q\xee\x94\xcf\xbd\x18T\xee\nZ\xbb\xd7\x84\x0f\xd5S$\x98'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1952b90e4d3ffc9e829494aa707b13b6cab38f20af5dc90d6ab615fecbdb3e432a6cd672f28a81d7a6ffc21b0bb34b4dc92fc87513ef736"}, 0x143) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KDGKBENT(r5, 0x5401, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x5, 0x3, 0x2000, 0x2000, &(0x7f0000ec6000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) 6.156231211s ago: executing program 1 (id=1167): r0 = socket$qrtr(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) listen(r3, 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r3, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000300)={0x0, r5}) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000000)={0x1, 0x13}) close_range(r0, 0xffffffffffffffff, 0x0) 5.939255204s ago: executing program 4 (id=1168): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8301c0018000100020d0400f9ff02000003040000100000073d0400ecfe0000608cc00f3e2c1112b0e8b87f6a8888b585f84d8c39a0720d44001016bc8d9f6320f09b3dacc91b7bf6eb930909576f9e83756a072ab4e1e6bf23f8312d230a6ef865b3b13bc0"], 0x21) syz_open_dev$usbmon(&(0x7f0000000180), 0x8000000, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="073167b3cd43453c05c0afd7690400aab51fb30e37ba0132481568544755eb35c1b80adb26207505352d35838132139cbc32a2c116ce172bfbcd5c585a76078f508b2b1364bf71b4772abf62be68812c2f4693e90d501ce0d22ae6b55c5d1b69a2f0fdaffbf7280eeec64245e7de50d2f6fb19e8d30c5ee6"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000780)='./file3\x00', 0xef0d, 0xe) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 5.79186168s ago: executing program 1 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = fanotify_init(0x200, 0x0) r4 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r5 = dup(r4) fanotify_mark(r3, 0x1, 0x4800105a, r5, 0x0) r6 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c\x87\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r6, &(0x7f0000000940)=ANY=[@ANYRES32=0x0], 0x3c) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES8=r8, @ANYRES32=r8], 0x38}}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000900)=ANY=[@ANYBLOB="1201000088e5b24086124620965113d4bf53000226000100000009090477f902ff040102020709050fa8970770cb06090505001000000aad"], 0x0) 5.350178793s ago: executing program 0 (id=1170): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0x20, 0xff, 0x0, 0x2, 0xe, 0x20, 0xfb, 0x81, 0x80, 0x40, 0x94, 0xd5}, 0xe) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/197, 0xc5}, 0x7}], 0x2, 0x40014000, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x100000) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xb}}}, 0x24}}, 0x8001) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) madvise(&(0x7f00002e3000/0x400000)=nil, 0x400000, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.276631832s ago: executing program 4 (id=1171): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendto$packet(r2, &(0x7f00000003c0)="60e047ef9c408fa01a0c274ab9dcf712ae5814da43a7d31d134eacd0a20fb3da00beb29fbf72f1f5", 0x28, 0x60090, &(0x7f0000000180)={0x11, 0x4e6d3f781f48dd97, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) write$vhost_msg_v2(r1, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x4f) write$vhost_msg_v2(r1, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0x77, 0x0, 0x0, 0x3}}, 0x48) mmap(&(0x7f0000763000/0x4000)=nil, 0x4000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) getpriority(0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x8, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xd, 0x100b, &(0x7f0000000540)=""/4107, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffdb7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) 4.966593856s ago: executing program 4 (id=1173): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "e925"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7, 0xfbffffff}, 0x0) 4.591455618s ago: executing program 4 (id=1175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="82", 0x1}], 0x1}}], 0x1, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000180)="2e260f009d040000000f3266ba4100ec36650fc75d85b9800000c00f3235000800000f30b805000000b9060000000f01c10f1bde652e0f309a004800006700c4e29d026a05", 0x45}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='veth0_to_team\x00', 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r6 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') preadv(r6, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ppoll(&(0x7f0000000080)=[{r8, 0x111}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000b4bffc), 0x4) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000090) 4.141955532s ago: executing program 4 (id=1180): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a31e", 0x28}], 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) recvmmsg(0xffffffffffffffff, &(0x7f0000010bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x132, &(0x7f0000000980)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xbc, 0x42, "d69f", "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"}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)='P', 0x1}, {&(0x7f0000002640)="999d67d400b1b4fe5176801373fb683ad93fb7ba3c7b27212016e8c0db1026253ba0efec99a557a23cbfa842b7183d628796691f00e993201200a16246dc16456e4496705ef7114dbdfe2928a69de3167c78f501657ead503baa70fd86448622e49c79b6e2ca2e995dbc38264e5efa78cba890407a9fca485b7cbc4e8cfd0e254b77f81d965432847ee10c31390a043c454187a50cfe819f0acc486549a67417d0895d6da7ddaa6204c275a48f25ee03598725d59c347bc50eb2db4c8700f1b2cea5a579902ce3e12d6b499153cb3518b41e2ca674489d5172096ee1c530f31a52353545c2c2617fa88cf9f6b80132ef101fe2520202cc8b4ab29b0a1bba2c9834884e97c5cf883b4d157cc4f05563e24c2209a41a052b015613e25239c0e7a9808eb06110c1fbdbefdfc330dcae221bdd96dfa26226b6967d0968bb55b5ec50155559cadbb934deef2b6f7bc59c6833343bfb9792dc28a2aad3566087110070844f5f94b98f2e9d1f5083f7d24ca7051215983d9b6c3a2c2ac9f99b56c6659ed940b418de5b398b6892392f2b6db20f807cdf6b42e3e64d0749020d1d499f82091786c604dce5cae3c35dc0f7ff5ffe94390807c3bdbcbaa6ba43d458e4be9380a4e65f0cc405bf35757f93aeb21b1c1b728228196b9bfeb936a0637f6d79dd7fd8441c32bbb82caf927ba759ec81866401a9825484e1ae8ed2d866c5ee6377ac116f4c44c9c5fde68a23bb9358e75890245cb7e24d823b6b5e9fbb3f674b04858a48ada1fa8dc193cf1d44ce95c1ef181dd87e7a80c0199195d99fe8c4c9df0072ea1226b9256f20fa558540a77c5cceb87b15e1cc34c9ee64c7a39b8c5802d19c0ffc4847da7a192ae6ca5cf04cd9b03c099c0fe0b14fb408105f07f872e2a6010231e3f30f77ecd30bb1b39428ec354360b501727c4c8b0af5800c41b3205316ec3d625430a34b3172a8aa01601bfbfe18eb45b22c217553c0e4057d22449a0df0ebd1f2561976dfe09232535d8a3c10e560ffd70d613bf1c30b90bcd76694148f187c4bf01ae0c568d96e83a9bf1f077d511bb35bc2f9f7f7c44dcd045110c26e5160ffe6e5700477678bb3f2bdffd1e70b81c08ed3afc2d6aabb840ab6fd369eece3c62fb0a7b5f0f386747f0022b130bdf63e4cffcb02b1e274c1b013244e629a41dcff69a58a8c92a01bb3dafee2c4ec14f3456f21bb0471406c3fb0e41d5040e5690882df6a29b8f8fe6ea524da402a017348318dfb7d1f8a449acd67609d1a5e0abca12f7838ec0d2a144f7986a464579a898d80548e6067a0e43e418e0e3b6e35506b77fb85ba1c7474e75c4ead7f1a8bf6db77a292fabaab71e46b5b93d27b73504b71f84b9230ac833559324b8b580c1e80e26f7a375897f236cbf028c3bc386376f47520ee7843cc57e27380d2fc6299f864e2d385220d06b2d6a6cd822d017e3e8656b7eec4adcb988b18c9310e1cb98d9fb4d8d04c4a467262e631f4d0877fc4482e56855dd7a02628805eb8587fc4e8e647186f600052ffd967ce6278ae6bfc9246a90acff5481514ced0b71f228a8e3c7df1518004925feb6d2f09b6d9f02cf9447697c927c5cfd541d4338d67a573e17f25681f4302f32f6d88e1258f35dc00aa3f4bb54b33b2ea40de179a1e234d36091720b1d60914c26398cb1e7d09aa87d5dace07e3fcb3f7bca4ef07a3ff3ed03f9e2146757646836b4bf5c7f4050f065e6cefea0685212075f7a2b32cc305548257538ba28e29365b632e7e67830a54ed212ecb8183277a2ba52a353885ee80e9f52d302b631f6ecfb1e2262d06e52ad78b7d86822902b1ef9212355922f392463bbc6be6f165a57b049b2365352f6c80460b23a9d58383474630cbdee8bbb50c3ae742343e343bb899da044999a4ae4e2187f30ac0710656b9ea16d37164f3890bf7d7d34758d7831f30b70508fb92b3e57d0472c19231d379b1c945ad9feed0ef321cd4dec306732db7f9bc174d28d172acdd9f4425a5602a7e20728f00deb28cb40d665f58014ddb20f49a88c9d8c29bb83b64b007f78650adbe63ec2b668b471a3b4793e0d047fd89591026dfa8f9f7961fb51b9b20c4964c690f26930a837ef73384d3ed81be8f56ad6fcdf27d8c6f657da0f207b0dbc0bac908f4045fe24d88cfafbfc5b68867145f86a4fcea06a311a2a513bf6e1b4fcb6e1d087d87bdd24529f867945d44c20d8685a593ecddd96b68ee1b4b97f1075ca742e6189fe7b89ea215e0a073ac0b03692e54dc30d6fbb32a0e8c21a8bb8b953d9d42fe8781d44495f9bd9717d4d9e7eb9411f7bbaa77d0a4a36cd271a0b42d4c7092a8af6b8331c74be5237863c74a384809f5ce44554c0abcfb0643642b8636bea5fe954140d3ad2f9e1d8d74c3a22c8b6e214787bc5baa557b7426d104fa437f28c446c9131bbccec49c7526900687af90e670dd23104201176821a47b8bf1fe83075ece6216da22a94b08a8a5bbdc9fec273d4acf33426737be2d60d62975d1bd03fc94ad203c86b4b46b48a6df37d2b37cda39b1556bcb62b6815a786fb85fc4743b8827ea8718eb972bb91116c0742c0edcf4acbc4cae1a880955e77539498af9164430650ef71852a7fb1f86c42b4d3a05c016831f263d5acc19d6413bee1dd4c525032bdf8d2dfbf1599eb1c244836cd512fe5bc7befc6f86a9e60e410e88a33ef667e3b79609114e753cd89282a0ff29f576a7db9dce686bbf9392282104bf01082b978148f136bfdc3f2fd0d063534db6c833dd6da1a574465ed9769df061aa537f942ff1ad52f74602bb004b7abb772c46178e7e61f66feed8594c344e7eb75f0f3fe520c41ddc4f5c7548094cacd9d07b3fb51e474eab3326c52e6b9fcad9cafedc99a2bf380b0981cac4fd9b95c6974de984ed8eab3bbbf6654324fd19082153ed9cffac33fe7fe4d17fde3e6d6e321e469fa2b40b5bc1067b26e60737915aebe0411f9b9c4699ab95e5073c078685aaae0500ffc92d68b6e88fb92fac1c5348e533dfecf3e3332e36c7e0eb07da6937a6d0f24d9c1640240ccecac20a2aa75728542e5359b449b66d94e7a275811762d0d2d2e2a10355d2e31a789a3fe6e19419bdbb3d421577c2fcc17dfd3495fcbc56a50e699af14a727dcd12cfead421fa5d2d9b04b9794e2e496d8895ab0c222424379bc31ff3ab734e2c93f32a27fb5e0e6273a2d959373910a2562a1dc30dac19fce027088108d69333ed07e1ed1aa3286f543cd5c26ed653519c8de7529526a8311516e50a0f03c44aedc1e15ed9b309b8498a03d2cbc27e14d30b6df62b3295eeb367ced8790ad6d003e69c3cd049f96948edbdb4017de21a120d4581608d2e4779ddc9fd1dc32067a20a399c33a5e635bab56b12d447eebb42350ae6cea8b3b096966e4e5ba3e6958c55278f0254bebfbb8a79562856e481fbd89effd664a3d66eb75dae9bbef0b71fe0b8b9b27d70c8eb25899c22dc960f67b3a0fffd64b340fa16095bebb8feebde51c35a99279be3d3095af390fc34c2507fa5fcd37dc11c290a8b62605c6f57f62cd3a27406dbba41ad11952f8406d1cc921c1f9ea239ab31dc0d99ecc96132a6152c26efa42e62ee17e6e5c137a76497415497b64e819511f9b11c21474cf141fe383bd22a5699df670d2b0ccb040fc5a9380ea4f14287193ffaf2aa250eb26352c2cd056b17b6b3d0441e34ef52df1cafbf6db710fe18b09799f0dac7ac4ebadde6107f3d27d106b1e8d37ee7871d0238d1d1ea1c2ad4c366f02608398a12b95b3d2c3abb45b25dc994ed332c22c5d4f9c35aae48f36173c6e63b5ca47cca89326af8ebb7a6c3720afef65a31a4f7f426663d64608371c8b453f1520b6b4f3e13cff447e298932ceef93d8a2280ded7e62c2d913ff78e3170209a189ccbff845ba94d54fbd1f06f83bed419cdf156fa6badeb0444d9ae9de2b06767139e7f6b0b79feb3b75ff5e873f1845be98bde2fdbab29e2454a3dcb880931573e05b93381157692147c1c9aca73ff4a6bb5d487ed0b5b5ff662f15cfe5ab99f5bf79703efd0346cb354b529f398312bbbc764dd8015cf7a1f68f8ddbb524cf4c82340e6fd9dda11df7f5254865a07c62e1849dba2307c36276e3ce7ecbcf8d7423274dee496aa84f3d4735ec738bce8864d5d1e2751695ed0aaf91a2ba10ef80afc25ab703593a3a8b13c4f307ae7b83fbf8fd8ceb3cb861afe1fa13c081bb97a9847022dc39ae24b963d2633c7273941c7ae8549fa9e9dfb932e299b3d54e071b70c33fe762e8150feb319aac649f1fc1ec6d8225a80b1f8d240a7cd325a930a851037b2256068750dc5d3267ed343fe2206320c0b776367f8590bf2cfdd3d5ad56a30f33544507d291e46267c992e8b005539d87de9f35330a627252dd35cbac3ac015a8f7f613ab1a39f6e93893da62cc42a200f6ed6a55e8592378c85fb8ded6e7a09a60574a882570fc4a014839c2cba813b9554289375914c05a27b4f1320594713dd02a68cc14ea4f517c8c4db52f71d17f23b9bc67beeb358b9e3e1f739b0afe0f457d576865dca5e49d6fd4ae919d56bdeeda4a1c062d4e82155ae658e796cbedf3208aeeb05d18a0f860341989a7fd3feadb60d1f59a31659cf61c354800ac275345ae2aef1f8be88708103368b06f658257775b27279ffe523ee6ec7a7f8421b463758bc454aa6c48c8b370279379eef8ac1ebe6d5792718d1dfaf4e611a02005359fbfb2548053059ffbe38ac505d20c784480c5b8e67c19536f98b85b0e225d2e5c544a029e5f946a14d11bd18ae4693c43be84e8550d5fb9ddc2698cfa31ec326359b46f884bce76f866c1d4a2532884abfe54de018f6f75288555f3b97b22768a4af105bbf05ede604e8a746536f3df8097e1e4dffafb724bc7255e6ee4b5eeef07ca5e14b8ae59fa95c1730c5b06e773e6e64181caa3e9e208ad0177345efcc24f415e92ef0e884c7ae691b9c3b155a77ead2f18d83e6c835b6767f167e83a18b807e21dcd34256af2172a75b2cd30404dbc81c9acd807a7e28e2fc3c8afbcd29b101a2f4e79e63adfd9f76ac0ea16036775d8253c17d06247f04a7fb38d2d557290c08414f5112a65ed3aa14a19d4eed2a25c0855a10cab7cb6baac68ca11783fc250655b0b29254bf63a80b63d7cab805eb6d5b408d51265d496f3e0fae09d100bc75042319fabfe259a4da1a812a1e8fa739c861fa4144f09c117f6a830674dd2c745db1248353de8f37b980a57b984ad735889361a8a9b1e901d6d3d177a9ac1e8ce089ed5d50809c75f55c22044c750fdc6dd185728c18d620d7cb2417f9957e28b8302edacbdb0c0cacc76e8242b5411b8ca93ffca421f67df99ee1a21bc58fc8095647c21b2dd48e71521a4a1d7933d7dabfb439905fd0539cb301498a61a5276670cbcb6497fe4dda292e9d8e8c86eac4499604f1266a5e55df164f4b3b49e892d9c4bf9fbfffd8a5a9efdff4b0cc236210b015662768961f48fb7ffdde22e349f5db130143d16202ec0416c9f57525ec789e2159fbb8a6c3519b2f86fd509131e8ccc553a095e75ec8d09aefa67ae48dd503c94820fc5ca42d747d2644d7ac692161b87af040fa3147eecc13cf6c9335f2e71d0ed88f725d8b666bbf3874bd2fcf34afb966c998476a970c60f8326e62dc26c984e94f4093b98258a0936e939955400bdeaa62fc536016e3fd4776961eb083b7302a16a3bed42f123252100020798f44e44b6849ed3697ea2139138e77c07a04357013c2dad0400ac7c25b7f61c0", 0x1000}], 0x2}}, {{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private1={0xfc, 0x1, '\x00', 0x40}}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x2000) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000380)={0x0, 0x8000, 0x0, 0x2, 0x3, 0xac04, "165450daba25c08da16240d6e68e5822", 0x5, 0x0, 0x2, 0x1, 0x2, 0x43, 0x40}) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x82, &(0x7f0000000080), &(0x7f0000000180)=0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000440)=ANY=[], 0x4}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, 0x0, 0x10, 0x70bd24, 0x25dfdbf8, {{}, {}, {0x4c, 0x18, {0x80000000, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000000a00000000000000000000000500341a"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000900)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6ee6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008003}, 0x4000) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_ro(r9, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) 4.111978161s ago: executing program 0 (id=1181): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8301c0018000100020d0400f9ff02000003040000100000073d0400ecfe0000608cc00f3e2c1112b0e8b87f6a8888b585f84d8c39a0720d44001016bc8d9f6320f09b3dacc91b7bf6eb930909576f9e83756a072ab4e1e6bf23f8312d230a6ef865b3b13bc0"], 0x21) syz_open_dev$usbmon(&(0x7f0000000180), 0x8000000, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="073167b3cd43453c05c0afd7690400aab51fb30e37ba0132481568544755eb35c1b80adb26207505352d35838132139cbc32a2c116ce172bfbcd5c585a76078f508b2b1364bf71b4772abf62be68812c2f4693e90d501ce0d22ae6b55c5d1b69a2f0fdaffbf7280eeec64245e7de50d2f6fb19e8d30c5ee6"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000780)='./file3\x00', 0xef0d, 0xe) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 3.865476549s ago: executing program 2 (id=1183): socket$inet6(0xa, 0x3, 0x9) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x2}, 0x18) (async) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x3}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x2) (async, rerun: 32) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (rerun: 32) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async, rerun: 32) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[], 0x69) (async, rerun: 32) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (rerun: 32) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x20, 0x4ef7e228, 0x95f, {{0x8, 0x4, 0x3, 0x0, 0x20, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x58, 0x1, 0x7, [{@rand_addr=0x64010100, 0x3481}]}]}}}}}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x80}]}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (rerun: 32) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) 3.716005808s ago: executing program 0 (id=1184): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000840)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0', [{0x20, '\x00\x00\xfc\xff'}, {0x20, '\":/(\xa7'}, {0x20, '/dev/audio\x00\xbf\xd6.\xe9g;]\x85\x11\xf5\xdc\xa8\xcc\xac\x94\xda\xd0\x04!\xb2\x9f+4\x06\xf6\xad[\x02\xbc\xd1\xf1\xb4\xa3\xaf\x92\xe69:\xd6LC\x8fw\x7f\xe9\xed\xaeh\xf6%\xe3=\xaa\xa6\xfar0*\x96\x935\x878\xb1\f7\x81\v\xe3\xf3;?\xdf\x03\x83\xfa\xb1\xb4\x05UZ\x89\f/\xb4@\xfb\x0f\x8eZ\xa7v^\xa4\x1a\x89p\xba\f\xe3\xe0\xfc\xe1\x86\xa9I\x0e\xb1\xb8L\x16\xa3\x1eN\x12Nr\xf7\xe7\xc5\xc9n!f\xc5\x85Ou\xbc\xae&\xe4\x95s\x95\xb4\xde|c\xb4\x92\xfe\xf6\xcc\xc5\x98\xc6\xf2&}\xe9\xa9\xcb\xbfp\x9c\x8am\xb5q\xee\x94\xcf\xbd\x18T\xee\nZ\xbb\xd7\x84\x0f\xd5S$\x98'}], 0xa, "b7ef1c3e568656655c186e4e60a4215394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d5b8e7790cd94560779d1952b90e4d3ffc9e829494aa707b13b6cab38f20af5dc90d6ab615fecbdb3e432a6cd672f28a81d7a6ffc21b0bb34b4dc92fc87513ef736"}, 0x143) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @local}, 0x14) socket$packet(0x11, 0x3, 0x300) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KDGKBENT(r5, 0x5401, 0x0) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) 3.62270181s ago: executing program 3 (id=1185): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000002d000000000000005504000001ed0a002500000017ffffffae040000000000007b0a00fe000000006e04000000000020c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdd97359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d6800000000009ee23e892fc81406d0a47177d7764f5a9c56d4e9b9f9087782f685509cb8a12e49fbd53372b9b0f2d0212c1a0c94b58c22a3bc1deccca1d24b78d68370038adb61149055fd3855f8f41b71e390d35e03b9161101a01fdeb2339688d48e60501203d2fafb89765f0b55a255ac73ccc2a516189318"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.506991099s ago: executing program 3 (id=1186): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x804}}}, 0x7) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x804}}}, 0x7) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r3}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x4, 0x1) (async) set_mempolicy(0x0, &(0x7f0000000040)=0x4, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) (async) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000080)={r6}, 0x8) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e060062204f"], 0x9) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) fsopen(0x0, 0x0) (async) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) 3.465184967s ago: executing program 2 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xc00e, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000002340)={0x1210, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22c0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc8b}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa4a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x4002080}, 0x4008000) sigaltstack(0x0, &(0x7f0000001140)={0x0}) 3.270880465s ago: executing program 2 (id=1188): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$amidi(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 3.127396877s ago: executing program 2 (id=1189): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000440)='%pK \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xffff8001, 0x0, 0x4, 0x1000, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}, 0x38) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000000c0)={0x2, 0xfffc, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x10000, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x6}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x4, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000c2000000000101090224000100000000090400000203000000092100000001220500090581ffff000000000000000000"], 0x0) syz_usb_connect(0x0, 0x43, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) unshare(0x22000600) r4 = socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x9) bind(r4, &(0x7f0000000040)=@in, 0x80) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, r6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 3.023146431s ago: executing program 3 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000200000020060206b830f983afffe8000000000000000020000001200bbfe88000000000000000000000000000189"], 0xfce) 2.932168893s ago: executing program 0 (id=1191): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x6, 0x400) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @empty, 'bond_slave_1\x00'}}, 0x1e) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x3}) syz_usb_connect(0x0, 0x34, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8e, 0xd6, 0x87, 0x10, 0xc21c, 0x79d3, 0x569d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x8, 0x0, 0x1c0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x1, 0xe0, 0x1, 0x3, 0x0, [], [{{0x9, 0x5, 0xd, 0x4, 0x3ff, 0x10, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}]}}]}}]}}, 0x0) 2.622489796s ago: executing program 3 (id=1192): r0 = socket$qrtr(0x2a, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = gettid() ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) listen(r3, 0x1) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvfrom$inet6(r3, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000300)={0x0, r5}) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000000)={0x1, 0x13}) close_range(r0, 0xffffffffffffffff, 0x0) 2.62222694s ago: executing program 1 (id=1193): unshare(0x22000600) r0 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r1, &(0x7f0000002100)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_tos_int={{0x18, 0x0, 0x34}}], 0x18}}], 0x2, 0x0) 2.557021512s ago: executing program 1 (id=1194): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c8301c0018000100020d0400f9ff02000003040000100000073d0400ecfe0000608cc00f3e2c1112b0e8b87f6a8888b585f84d8c39a0720d44001016bc8d9f6320f09b3dacc91b7bf6eb930909576f9e83756a072ab4e1e6bf23f8312d230a6ef865b3b13bc0"], 0x21) syz_open_dev$usbmon(&(0x7f0000000180), 0x8000000, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="073167b3cd43453c05c0afd7690400aab51fb30e37ba0132481568544755eb35c1b80adb26207505352d35838132139cbc32a2c116ce172bfbcd5c585a76078f508b2b1364bf71b4772abf62be68812c2f4693e90d501ce0d22ae6b55c5d1b69a2f0fdaffbf7280eeec64245e7de50d2f6fb19e8d30c5ee6"], 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mknod(&(0x7f0000000780)='./file3\x00', 0xef0d, 0xe) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0x11) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0xd0) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x0) 2.549192109s ago: executing program 3 (id=1195): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x7, 0x20}, 0x48) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000020000500050002000000050004000000000015000300686173683a6970"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x7, @pix_mp={0x9}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = gettid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004e80)="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", 0x2000, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) sendmsg$nl_netfilter(r1, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002580)={&(0x7f00000001c0)={0x2c, 0x0, 0x3, 0x3, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0xd}, [@typed={0xc, 0x5e, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) read$FUSE(r4, &(0x7f0000002dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f00000000c0)={0x10, 0xffffffffffffffda, r5}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 2.434793451s ago: executing program 3 (id=1196): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r0 = syz_open_dev$video(&(0x7f0000000000), 0x400, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@mmap={0x5, 0x6, 0x4, 0x1, 0x8000, {0x77359400}, {0x2, 0x0, 0xa6, 0x1, 0x3, 0xb5, "6ed72638"}, 0x8, 0x1, {}, 0x9b}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x0, 0x9, 0x29, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x700, 0x8000, 0x5, 0x3}}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000002200)={'nat\x00', 0x0, 0x4, 0xdf, [0x23a, 0x1, 0x4, 0x3, 0x1, 0x3ff], 0x9, &(0x7f0000002040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002100)=""/223}, &(0x7f0000002280)=0x78) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff38, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/85, 0x55, 0x0, &(0x7f0000000600)=""/213, 0xd5}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x8, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000646b21520000000004000000185800000300000007000000400000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x3, 0xc9, &(0x7f0000000800)=""/201, 0x40f00, 0x20, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xb, 0x9, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1006) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050200000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB='\n\x004'], 0x28}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000008a606672"], 0x24}}, 0x0) statx(r1, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x5, 0x4e23, 0x6, 0xa, 0x20, 0xc0, 0x21, r2, r12}, {0x4, 0x7, 0x8e56, 0xfffe, 0x43, 0x8, 0x4c1bfb7c, 0x4}, {0x7, 0xfffffffffffffffc, 0x800, 0x6}, 0x61, 0x6e6bb7, 0x0, 0x0, 0x3, 0x2}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x3, 0x2, 0xd, 0xefa, 0x3, 0x7}}, 0xe8) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x20, &(0x7f0000000dc0)=ANY=[], 0x0, 0x532, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x23, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x0, 0x6, 0x6}, 0x10, r5, r6, 0x0, 0x0, 0x0, 0x10, 0x3200}, 0x90) 2.365906509s ago: executing program 1 (id=1197): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x140, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x1, 0xffff}, {0x0, 0xe}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x80, 0x7ff, 0x1, 0x1, 0x8, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x3b, 0x8, 0x3, 0x0, 0x2, 0xc157, 0x7ff, 0x9}}, {0x16, 0x2, [0x2000, 0x6, 0x0, 0x4, 0xff81, 0x3d, 0x3, 0x1, 0xff1e]}}, {{0x1c, 0x1, {0x9, 0x2, 0x8, 0x3, 0x0, 0x7, 0x2, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x8}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3ff800}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x3}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd2}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x100}, {{0x4}, {0x2, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xf4, 0x3, 0x1}, {0xffff, 0x5, 0x3ff, 0x2}}}]}]}]}}]}, 0x74}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r2, 0x4b4c, &(0x7f0000000000)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000280)) ioctl$VT_ACTIVATE(r2, 0x5606, 0x3b) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000a00), 0x420100, 0x0) ioctl$KDFONTOP_COPY(r5, 0x4b72, &(0x7f0000000080)={0x3, 0x1, 0x20001c, 0x6, 0x5c, &(0x7f0000000300)}) ioctl$TIOCMBIS(r4, 0x5416, &(0x7f00000001c0)=0x7) ioctl$KDMKTONE(r4, 0x4b30, 0x7) ioctl$VT_RESIZEX(r4, 0x40086602, &(0x7f0000000100)={0x6}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @multicast1}, 0x186, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff}) r7 = syz_open_pts(r4, 0x400440) ioctl$TCSBRK(r2, 0x5409, 0x800) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f0000000180)) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000140)) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) r8 = syz_open_pts(r2, 0x100) ioctl$TIOCCONS(r8, 0x541d) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000002c0)) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r9, 0x5456, &(0x7f0000000a40)={0x1f, 0x5, 0x800, 0x0, 0x9, "2792851fc06a78851e073b55e792c5b53687c3"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000700)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.214611152s ago: executing program 0 (id=1198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @multicast1}], 0x20) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r1, &(0x7f00000007c0), 0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000097ebc79aae236518b3e785a11bafe254101b3b97e1e1738e40500"/42, @ANYRES16=r4, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r5], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r6, @ANYBLOB="010000050000000000080003000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_emit_vhci(0x0, 0x22) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000a00)) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac5"], 0xd) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042c111ec80000000000000000009f9a0a530437dd49d554bc912e628c0008000400"], 0x14) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/102386, 0x18ff2}], 0x1, 0x400000, 0x81) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002000010000000000fedbdf250200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x6000011}, 0x24008884) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$inet(0x2, 0x4000000000000001, 0x0) 45.622204ms ago: executing program 2 (id=1199): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$amidi(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000000)) 0s ago: executing program 2 (id=1200): r0 = socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x907, &(0x7f00000002c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1000}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8}}]}]}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001380)={0x63c, r7, 0x5d2346a9be0a0437, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x5bc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x45}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xfffffffffffffd7b, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x63c}}, 0x0) getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f00000024c0), &(0x7f0000002800)=0x4) getsockopt$inet_int(r0, 0x10d, 0xa8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r10 = socket$kcm(0x29, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') read(r11, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)="e9717077de8dd24dbdbe5ad6797defa1721acc48e850d21401d6c43ee51da248c1a80d138471d66e7e8f788af7ef3560d12ad0cadf7de3b8cc29088236e4606bf98543a42845cf8b6fd1d28d1a9707abb7a1026e92c7aa646c3445fc60fd1ceb953af16d219c9816db945f42cc47632276c8c3966f569ee0960b9ebad9800889a7c8bbefde7f56075f456b0b796101b1dc9179b9113a4a341a7d19f9d3035b73eabdc1332c4a95f42a477b1ae30e3e782ef1d29b43706b633a938258b7ef12ed963f13ccc5c494433e8f1abb113be1754459be07befcfd86337244eb603a3f7d25", 0xe1}, {&(0x7f0000000180)="a89eb5a25bcdb267ff915b071fec79d19105e10a7e1f4db339459822b9b2ec0f29feb2e72fefb61502f32dcdc6885fafc4fad5d0963d177464cdcb7cefa30eda6ad6e950eb93df9197c2f549b55dd7de99be274f6c2c3066196acf9549b3aad1edfb5bb426d19aed887a902473b979e776f14b143a1afe0bd1a3085cf7980a5b628edb78339badb698322639fd6bcf39c66512dcc454e4232e584386f7513314a8542ea033", 0xa5}, {&(0x7f0000000240)="133fc18a67a839fddab9df7493ae7d90027d0297c7c120d6f989bd6c701c6ce96c7b65c044656749006b028793a2ef5cb785582a7db8ec542a198690a12ff7ac3bb1e2f9345f7597545eb8fcf9db1f8b671a8728111a22e8d823429435a5fe2fb7ca61cc1a2a6682c4be5b581505fc3e2d66aca95bc7705d00eadc6ba3b2aac65fdf3739c372274e7efed458421d246889cc0477137a2b8405a2d52db68925f4a50d4c3fbfc83292ba1577956c199fd8fa10108c3b4c497c406498ee48bee0", 0xbf}, {&(0x7f0000000300)="f83791f66476088785ba7aabe1aca8b25c7a96e4315775493f08d295f17789c1457b76c3e0f3ab35a3dd4ef8da92d33a7ae7e10a7f54ab9cd4916c3ddfdb1264b815b0c71c13928b0dfac93cc306a373aabb0faa4d6143aa444e45663c97280928ba38ca2fb29ea4ed29a0b618cde68967fbfb35d289e698", 0x78}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="55222fc51771", 0x6}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="7a8b98feae1931324558c3e5ad3df13d48bb3158e2cfb66bbd36435013ec93e46480e29855d955093f96e2adba07bf2b524f91be65ba058794590933cf5680102f08db2ac548686984280207d2a5322149d6824118d8cf1f088fd17ec1b2aff0b12295dbdda57e55a99a093289a41ca7cb6ad48df14d102096c04c579acb58e816322d66a664ab74df2e020a1a40909995aa4d886bceb0a9b99191e233dee1d3182727e9ebd4ed359d57123550346d3d7b33b8ed9863a6ddc0783bc27d93ee507802b4e04da950f03fd0f36dae91dc701c5768deba9e6bc926b2", 0xda}, {&(0x7f00000025c0)="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", 0x213}], 0x9}, 0x820) r12 = socket(0x400000000010, 0x3, 0x0) write(r12, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a000300", 0x33a) kernel console output (not intermixed with test programs): 243.565897][ T8807] vfs_read+0x204/0xbc0 [ 243.570038][ T8807] ? __pfx_lock_release+0x10/0x10 [ 243.575051][ T8807] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.580583][ T8807] ? __pfx_vfs_read+0x10/0x10 [ 243.585267][ T8807] ? __fget_files+0x29/0x470 [ 243.589851][ T8807] ? __fget_files+0x3f6/0x470 [ 243.594530][ T8807] ksys_read+0x1a0/0x2c0 [ 243.598767][ T8807] ? __pfx_ksys_read+0x10/0x10 [ 243.603541][ T8807] ? do_syscall_64+0x100/0x230 [ 243.608326][ T8807] ? do_syscall_64+0xb6/0x230 [ 243.613003][ T8807] do_syscall_64+0xf3/0x230 [ 243.617493][ T8807] ? clear_bhb_loop+0x35/0x90 [ 243.622332][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.628237][ T8807] RIP: 0033:0x7f7aebd7b93c [ 243.632662][ T8807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 243.652369][ T8807] RSP: 002b:00007f7aeca97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.660791][ T8807] RAX: ffffffffffffffda RBX: 00007f7aebf35f80 RCX: 00007f7aebd7b93c [ 243.668762][ T8807] RDX: 000000000000000f RSI: 00007f7aeca970a0 RDI: 0000000000000003 [ 243.676740][ T8807] RBP: 00007f7aeca97090 R08: 0000000000000000 R09: 0000000000000000 [ 243.684707][ T8807] R10: 0000000000000082 R11: 0000000000000246 R12: 0000000000000001 [ 243.692715][ T8807] R13: 0000000000000001 R14: 00007f7aebf35f80 R15: 00007f7aec05fa28 [ 243.700696][ T8807] [ 243.778404][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.856848][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.917961][ T8811] loop0: detected capacity change from 0 to 7 [ 243.935247][ T8811] Dev loop0: unable to read RDB block 7 [ 243.968025][ T8811] loop0: unable to read partition table [ 243.990372][ T8811] loop0: partition table beyond EOD, truncated [ 244.013135][ T8818] [U]  [ 244.014680][ T8682] team0: Port device team_slave_0 added [ 244.045014][ T8811] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 244.045014][ T8811] ) failed (rc=-5) [ 244.073756][ T8682] team0: Port device team_slave_1 added [ 244.271245][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.288599][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.429094][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.470020][ T8790] program syz.2.885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.483203][ T8817] netlink: 'syz.0.892': attribute type 4 has an invalid length. [ 244.517260][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.885'. [ 244.569171][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.584172][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.654647][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.939332][ T8838] syz.0.896 (8838) used obsolete PPPIOCDETACH ioctl [ 244.943784][ T8682] hsr_slave_0: entered promiscuous mode [ 244.971883][ T8682] hsr_slave_1: entered promiscuous mode [ 244.988740][ T4623] Bluetooth: hci0: command tx timeout [ 245.234442][ T4623] Bluetooth: hci3: command tx timeout [ 245.258706][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 245.264896][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 245.275765][ T5929] usb 3-1: USB disconnect, device number 38 [ 245.608992][ T5281] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 245.734694][ T8869] kvm: pic: non byte write [ 245.830801][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.912124][ T5281] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 245.931896][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.957865][ T5281] usb 1-1: config 0 descriptor?? [ 245.987176][ T5281] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 246.055288][ T29] audit: type=1326 audit(1725526891.107:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce857cef9 code=0x7ffc0000 [ 246.106193][ T29] audit: type=1326 audit(1725526891.127:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce857cef9 code=0x7ffc0000 [ 246.134266][ T29] audit: type=1326 audit(1725526891.147:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ce857b890 code=0x7ffc0000 [ 246.163017][ T29] audit: type=1326 audit(1725526891.147:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.206076][ T29] audit: type=1326 audit(1725526891.147:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.231070][ T29] audit: type=1326 audit(1725526891.147:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.253815][ T29] audit: type=1326 audit(1725526891.147:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.279094][ T29] audit: type=1326 audit(1725526891.287:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.309499][ T29] audit: type=1326 audit(1725526891.367:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.380394][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 246.389439][ T29] audit: type=1326 audit(1725526891.447:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8878 comm="syz.2.905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ce857cafb code=0x7ffc0000 [ 246.588708][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 246.612272][ T25] usb 3-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 246.632053][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.672598][ T25] usb 3-1: Product: syz [ 246.676822][ T25] usb 3-1: Manufacturer: syz [ 246.687866][ T8682] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.704673][ T8682] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.721867][ T25] usb 3-1: SerialNumber: syz [ 246.736191][ T25] usb 3-1: config 0 descriptor?? [ 246.766058][ T8682] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.799827][ T8682] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.141302][ T5281] usb 3-1: USB disconnect, device number 39 [ 247.293602][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.464418][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.493858][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.501113][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.550296][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.557525][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.846146][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.981779][ T8682] veth0_vlan: entered promiscuous mode [ 248.067964][ T8682] veth1_vlan: entered promiscuous mode [ 248.234078][ T8682] veth0_macvtap: entered promiscuous mode [ 248.277068][ T8682] veth1_macvtap: entered promiscuous mode [ 248.285807][ T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 248.346141][ T5285] usb 1-1: USB disconnect, device number 49 [ 248.364752][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.391681][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.411939][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.447351][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.458663][ T25] usb 5-1: device descriptor read/64, error -71 [ 248.482340][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.534750][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.548250][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.571280][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.630088][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.658766][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.693636][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.713118][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.735634][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.738655][ T25] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 248.764072][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.778761][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.835115][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.868410][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.894673][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.950752][ T25] usb 5-1: device descriptor read/64, error -71 [ 248.968220][ T8682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.995555][ T8682] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.028616][ T8682] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.076811][ T8682] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.098966][ T25] usb usb5-port1: attempt power cycle [ 249.138713][ T5332] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 249.328986][ T5332] usb 4-1: Invalid ep0 maxpacket: 32 [ 249.367646][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.418081][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.508049][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.509356][ T5332] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 249.532274][ T25] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 249.554167][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.600925][ T25] usb 5-1: device descriptor read/8, error -71 [ 249.758878][ T5332] usb 4-1: Invalid ep0 maxpacket: 32 [ 249.802843][ T5332] usb usb4-port1: attempt power cycle [ 249.900466][ T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 249.941124][ T25] usb 5-1: device descriptor read/8, error -71 [ 250.058794][ T58] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 250.085222][ T25] usb usb5-port1: unable to enumerate USB device [ 250.239157][ T5332] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 250.283552][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 250.309495][ T5332] usb 4-1: Invalid ep0 maxpacket: 32 [ 250.330976][ T58] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 250.368741][ T58] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 250.378620][ T5929] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 250.386405][ T58] usb 2-1: config 0 has no interface number 0 [ 250.399173][ T58] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.490515][ T5332] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 250.516184][ T58] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 250.542856][ T5332] usb 4-1: Invalid ep0 maxpacket: 32 [ 250.572084][ T5332] usb usb4-port1: unable to enumerate USB device [ 250.576470][ T58] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 250.641502][ T58] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 250.670821][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.671114][ T58] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 250.753341][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.794416][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.808031][ T58] usb 2-1: Product: syz [ 250.835085][ T58] usb 2-1: config 0 descriptor?? [ 250.842226][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 250.887863][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.916849][ T5929] usb 1-1: config 0 descriptor?? [ 251.406346][ T8995] netlink: 76 bytes leftover after parsing attributes in process `syz.2.921'. [ 251.488386][ T58] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input32 [ 251.559125][ T58] input: failed to attach handler kbd to device input32, error: -5 [ 252.021378][ T25] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 252.045879][ T9013] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 252.289111][ T25] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 252.322038][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.338747][ T58] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 252.368113][ T25] usb 3-1: Product: syz [ 252.377430][ T25] usb 3-1: Manufacturer: syz [ 252.386339][ T25] usb 3-1: SerialNumber: syz [ 252.405628][ T25] usb 3-1: config 0 descriptor?? [ 252.533786][ T5929] usbhid 1-1:0.0: can't add hid device: -71 [ 252.559880][ T5929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 252.576290][ T58] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 252.591668][ T5929] usb 1-1: USB disconnect, device number 50 [ 252.641043][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.675231][ T58] usb 5-1: config 0 descriptor?? [ 252.706576][ T58] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 252.940697][ T9003] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 253.145676][ T58] gspca_sunplus: reg_w_riv err -71 [ 253.167804][ T58] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 253.209883][ T25] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 253.241652][ T58] usb 5-1: USB disconnect, device number 49 [ 253.375669][ T25] usb 2-1: USB disconnect, device number 34 [ 253.469027][ T5231] Bluetooth: hci1: command tx timeout [ 253.777029][ T9049] input: syz0 as /devices/virtual/input/input33 [ 253.787494][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 254.053902][ T9070] FAULT_INJECTION: forcing a failure. [ 254.053902][ T9070] name failslab, interval 1, probability 0, space 0, times 0 [ 254.111956][ T9070] CPU: 1 UID: 0 PID: 9070 Comm: syz.1.932 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 254.122602][ T9070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 254.132677][ T9070] Call Trace: [ 254.135964][ T9070] [ 254.138903][ T9070] dump_stack_lvl+0x241/0x360 [ 254.143586][ T9070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.148786][ T9070] ? __pfx__printk+0x10/0x10 [ 254.153364][ T9070] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 254.158918][ T9070] ? __pfx___might_resched+0x10/0x10 [ 254.164227][ T9070] ? __lock_acquire+0x137a/0x2040 [ 254.169265][ T9070] should_fail_ex+0x3b0/0x4e0 [ 254.173947][ T9070] should_failslab+0xac/0x100 [ 254.178622][ T9070] ? io_rsrc_data_alloc+0x61/0x270 [ 254.183727][ T9070] __kmalloc_cache_noprof+0x6c/0x2c0 [ 254.189042][ T9070] io_rsrc_data_alloc+0x61/0x270 [ 254.193980][ T9070] io_sqe_buffers_register+0x1d6/0x750 [ 254.199561][ T9070] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 254.205532][ T9070] ? rcu_is_watching+0x15/0xb0 [ 254.210288][ T9070] ? trace_contention_end+0x3c/0x120 [ 254.215560][ T9070] ? __might_fault+0xc6/0x120 [ 254.220329][ T9070] io_register_rsrc+0x2ef/0x390 [ 254.225174][ T9070] ? __pfx_io_register_rsrc+0x10/0x10 [ 254.230559][ T9070] ? __fget_files+0x3f6/0x470 [ 254.235228][ T9070] ? __fget_files+0x29/0x470 [ 254.239810][ T9070] __se_sys_io_uring_register+0xaaf/0x15d0 [ 254.245624][ T9070] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 254.251865][ T9070] ? do_syscall_64+0x100/0x230 [ 254.256647][ T9070] ? do_syscall_64+0xb6/0x230 [ 254.261316][ T9070] do_syscall_64+0xf3/0x230 [ 254.265807][ T9070] ? clear_bhb_loop+0x35/0x90 [ 254.270480][ T9070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.276364][ T9070] RIP: 0033:0x7f234337cef9 [ 254.280768][ T9070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.300451][ T9070] RSP: 002b:00007f23440e2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 254.308854][ T9070] RAX: ffffffffffffffda RBX: 00007f2343535f80 RCX: 00007f234337cef9 [ 254.316817][ T9070] RDX: 0000000020000380 RSI: 000000000000000f RDI: 0000000000000003 [ 254.324780][ T9070] RBP: 00007f23440e2090 R08: 0000000000000000 R09: 0000000000000000 [ 254.332758][ T9070] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 254.340728][ T9070] R13: 0000000000000000 R14: 00007f2343535f80 R15: 00007f234365fa28 [ 254.348712][ T9070] [ 254.684275][ T58] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 254.719359][ T9084] syz.3.936 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 254.746340][ T5332] usb 3-1: USB disconnect, device number 40 [ 254.948571][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.011967][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.066050][ T58] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 255.136296][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.169813][ T58] usb 1-1: config 0 descriptor?? [ 255.235660][ T25] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 255.479658][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.528677][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.561158][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.942'. [ 255.576743][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.615791][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 255.645506][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.684538][ T25] usb 5-1: config 0 descriptor?? [ 255.727631][ T9113] program syz.0.933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.775744][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.933'. [ 255.889868][ T5929] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 255.968723][ T9116] loop2: detected capacity change from 0 to 7 [ 255.992815][ T9116] Dev loop2: unable to read RDB block 7 [ 256.017262][ T9116] loop2: unable to read partition table [ 256.039525][ T9116] loop2: partition table beyond EOD, truncated [ 256.059469][ T9116] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.092546][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.114520][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.121401][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.148675][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.160975][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.174441][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 256.185789][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.222401][ T5929] usb 3-1: config 0 descriptor?? [ 256.586433][ T58] usbhid 1-1:0.0: can't add hid device: -71 [ 256.611898][ T58] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.664735][ T58] usb 1-1: USB disconnect, device number 51 [ 256.908844][ T5231] Bluetooth: hci3: command tx timeout [ 257.108149][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 257.144351][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 257.218231][ T5929] usb 3-1: USB disconnect, device number 41 [ 257.401423][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 257.413257][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.427810][ T25] usb 5-1: USB disconnect, device number 50 [ 257.598617][ T58] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.639260][ T5929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 257.802566][ T58] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 257.812816][ T9141] loop0: detected capacity change from 0 to 7 [ 257.816642][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.832979][ T58] usb 2-1: Product: syz [ 257.833760][ T9141] Dev loop0: unable to read RDB block 7 [ 257.837266][ T58] usb 2-1: Manufacturer: syz [ 257.848727][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 257.860620][ T9141] loop0: unable to read partition table [ 257.875331][ T58] usb 2-1: SerialNumber: syz [ 257.880769][ T5929] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 257.895106][ T9141] loop0: partition table beyond EOD, truncated [ 257.897014][ T58] usb 2-1: config 0 descriptor?? [ 257.917518][ T58] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 257.927025][ T5929] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 257.938977][ T9141] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 257.938977][ T9141] ) failed (rc=-5) [ 257.975615][ T5929] usb 3-1: config 0 has no interface number 0 [ 258.003105][ T5929] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.024287][ T2492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.047868][ T5929] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 258.087486][ T5929] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 258.120832][ T5929] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 258.153234][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 258.183201][ T5929] usb 3-1: Product: syz [ 258.219178][ T5929] usb 3-1: config 0 descriptor?? [ 258.235434][ T2492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.350373][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.377652][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.417017][ T9128] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.948'. [ 258.435145][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.452453][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.457116][ T2492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.519930][ T9128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.584529][ T9128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.663065][ T2492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.677880][ T9150] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 258.718585][ T9150] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.956'. [ 258.786675][ T25] usb 2-1: USB disconnect, device number 35 [ 258.899325][ T5929] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input35 [ 258.969073][ T5929] input: failed to attach handler kbd to device input35, error: -5 [ 259.016991][ T2492] bridge_slave_1: left allmulticast mode [ 259.028826][ T2492] bridge_slave_1: left promiscuous mode [ 259.044977][ T2492] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.087315][ T2492] bridge_slave_0: left allmulticast mode [ 259.113469][ T2492] bridge_slave_0: left promiscuous mode [ 259.140799][ T2492] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.185834][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.196508][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.224585][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.235547][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.244551][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.253278][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.268599][ T58] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 259.563057][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.616736][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.654721][ T58] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 259.667854][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.767023][ T58] usb 4-1: config 0 descriptor?? [ 259.947474][ T2492] bridge0 (unregistering): left promiscuous mode [ 260.164598][ T9174] FAULT_INJECTION: forcing a failure. [ 260.164598][ T9174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.178844][ T9174] CPU: 1 UID: 0 PID: 9174 Comm: syz.4.963 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 260.189490][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 260.199564][ T9174] Call Trace: [ 260.202851][ T9174] [ 260.205779][ T9174] dump_stack_lvl+0x241/0x360 [ 260.210477][ T9174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.215689][ T9174] ? __pfx__printk+0x10/0x10 [ 260.220309][ T9174] ? __pfx_lock_release+0x10/0x10 [ 260.225339][ T9174] should_fail_ex+0x3b0/0x4e0 [ 260.230026][ T9174] _copy_from_iter+0x1f6/0x1960 [ 260.234887][ T9174] ? __virt_addr_valid+0x183/0x530 [ 260.240006][ T9174] ? __pfx_lock_release+0x10/0x10 [ 260.245031][ T9174] ? __alloc_skb+0x28f/0x440 [ 260.249617][ T9174] ? __pfx__copy_from_iter+0x10/0x10 [ 260.254902][ T9174] ? __virt_addr_valid+0x183/0x530 [ 260.260002][ T9174] ? __virt_addr_valid+0x183/0x530 [ 260.265098][ T9174] ? __virt_addr_valid+0x45f/0x530 [ 260.270198][ T9174] ? __check_object_size+0x49c/0x900 [ 260.275486][ T9174] pfkey_sendmsg+0x235/0x1050 [ 260.280164][ T9174] ? __pfx___might_resched+0x10/0x10 [ 260.285469][ T9174] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 260.290593][ T9174] ? aa_sk_perm+0x96d/0xab0 [ 260.295097][ T9174] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.299939][ T9174] ? __might_fault+0xaa/0x120 [ 260.304624][ T9174] ? __pfx_lock_release+0x10/0x10 [ 260.309648][ T9174] ? __import_iovec+0x536/0x820 [ 260.314509][ T9174] ? aa_sock_msg_perm+0x91/0x160 [ 260.319450][ T9174] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 260.324735][ T9174] ? security_socket_sendmsg+0x87/0xb0 [ 260.330281][ T9174] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 260.335385][ T9174] __sock_sendmsg+0x221/0x270 [ 260.340067][ T9174] ____sys_sendmsg+0x525/0x7d0 [ 260.344837][ T9174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.350131][ T9174] __sys_sendmsg+0x2b0/0x3a0 [ 260.354722][ T9174] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.359836][ T9174] ? vfs_write+0x7c4/0xc90 [ 260.364275][ T9174] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.370687][ T9174] ? do_syscall_64+0x100/0x230 [ 260.375447][ T9174] ? do_syscall_64+0xb6/0x230 [ 260.380126][ T9174] do_syscall_64+0xf3/0x230 [ 260.384628][ T9174] ? clear_bhb_loop+0x35/0x90 [ 260.389311][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.395206][ T9174] RIP: 0033:0x7fce4377cef9 [ 260.399614][ T9174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.419214][ T9174] RSP: 002b:00007fce44635038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.427621][ T9174] RAX: ffffffffffffffda RBX: 00007fce43935f80 RCX: 00007fce4377cef9 [ 260.435583][ T9174] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 260.443551][ T9174] RBP: 00007fce44635090 R08: 0000000000000000 R09: 0000000000000000 [ 260.451514][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.459477][ T9174] R13: 0000000000000000 R14: 00007fce43935f80 R15: 00007fce43a5fa28 [ 260.467454][ T9174] [ 260.536812][ T9157] program syz.3.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.561978][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 260.709268][ T2492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.729081][ T2492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.754606][ T2492] bond0 (unregistering): Released all slaves [ 260.778791][ T5285] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 260.850936][ T5332] usb 3-1: USB disconnect, device number 42 [ 261.013291][ T9181] netlink: 'syz.1.964': attribute type 30 has an invalid length. [ 261.062942][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.080611][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.107729][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.132310][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 261.143891][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.154404][ T5285] usb 5-1: config 0 descriptor?? [ 261.168400][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 261.188140][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.262989][ T58] usb 4-1: USB disconnect, device number 37 [ 261.310265][ T5231] Bluetooth: hci0: command tx timeout [ 261.319673][ T5280] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 261.521761][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.561539][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.599356][ T25] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 261.651762][ T2492] hsr_slave_0: left promiscuous mode [ 261.658346][ T5280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.689109][ T2492] hsr_slave_1: left promiscuous mode [ 261.696118][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.731417][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.748106][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.757583][ T5280] usb 2-1: config 0 descriptor?? [ 261.808210][ T2492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.814913][ T25] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 261.832560][ T2492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.861479][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.926137][ T25] usb 3-1: Product: syz [ 261.934789][ T2492] veth1_macvtap: left promiscuous mode [ 261.945837][ T25] usb 3-1: Manufacturer: syz [ 261.957906][ T2492] veth0_macvtap: left promiscuous mode [ 261.968868][ T25] usb 3-1: SerialNumber: syz [ 261.988720][ T5285] usbhid 5-1:0.0: can't add hid device: -71 [ 261.994768][ T5285] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.002362][ T2492] veth1_vlan: left promiscuous mode [ 262.013067][ T25] usb 3-1: config 0 descriptor?? [ 262.038117][ T5285] usb 5-1: USB disconnect, device number 51 [ 262.046446][ T2492] veth0_vlan: left promiscuous mode [ 262.201015][ T9202] [U]  [ 262.207194][ T5280] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 262.252223][ T5280] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 262.341675][ T5280] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 262.452654][ T9187] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 262.690778][ T58] usb 2-1: USB disconnect, device number 36 [ 262.759506][ T25] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 263.396970][ T5231] Bluetooth: hci0: command tx timeout [ 263.474891][ T2492] team0 (unregistering): Port device team_slave_1 removed [ 263.549024][ T2492] team0 (unregistering): Port device team_slave_0 removed [ 264.147537][ T5280] usb 3-1: USB disconnect, device number 43 [ 264.471581][ T9222] syz.1.972 (9222): /proc/9221/oom_adj is deprecated, please use /proc/9221/oom_score_adj instead. [ 264.486154][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.971'. [ 264.614744][ T9162] chnl_net:caif_netlink_parms(): no params data found [ 264.802331][ T5285] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 264.872656][ T9162] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.880450][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.887910][ T9162] bridge_slave_0: entered allmulticast mode [ 264.898410][ T9162] bridge_slave_0: entered promiscuous mode [ 264.918647][ T5280] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 264.926571][ T9162] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.935630][ T9162] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.943963][ T9162] bridge_slave_1: entered allmulticast mode [ 264.954103][ T9162] bridge_slave_1: entered promiscuous mode [ 265.016906][ T9162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.021133][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.045073][ T9162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.047687][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.078116][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.105230][ T5285] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 265.118150][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.134412][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 265.136491][ T5285] usb 2-1: config 0 descriptor?? [ 265.154621][ T5280] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 265.156579][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 265.169989][ T5280] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 265.217315][ T5280] usb 3-1: config 0 has no interface number 0 [ 265.224238][ T5280] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.227382][ T9162] team0: Port device team_slave_0 added [ 265.237649][ T5280] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.257665][ T9162] team0: Port device team_slave_1 added [ 265.289584][ T5280] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.325867][ T5280] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 265.340880][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 265.353839][ T5280] usb 3-1: Product: syz [ 265.400922][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.405858][ T2492] IPVS: stop unused estimator thread 0... [ 265.420105][ T5280] usb 3-1: config 0 descriptor?? [ 265.426474][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.460639][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.461417][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.470782][ T5231] Bluetooth: hci0: command tx timeout [ 265.529880][ T9162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.534864][ T25] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 265.558899][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.570219][ T25] usb 4-1: config 0 descriptor?? [ 265.583536][ T9162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.591344][ T9162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.621216][ T9162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.673495][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.708162][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.734765][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.774934][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.796890][ T9162] hsr_slave_0: entered promiscuous mode [ 265.803679][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.813067][ T9162] hsr_slave_1: entered promiscuous mode [ 265.822514][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.832854][ T9255] [U]  [ 265.833117][ T5285] wacom 0003:056A:0094.0009: unknown main item tag 0x0 [ 265.842986][ T9162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.851420][ T9162] Cannot create hsr debugfs directory [ 265.882444][ T5285] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 265.910325][ T5285] wacom 0003:056A:0094.0009: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 265.964518][ T5285] usb 2-1: USB disconnect, device number 37 [ 266.056613][ T9238] program syz.3.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.092035][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 266.109518][ T5280] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input36 [ 266.154343][ T5280] input: failed to attach handler kbd to device input36, error: -5 [ 266.713130][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 266.732771][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 266.776935][ T25] usb 4-1: USB disconnect, device number 38 [ 267.518915][ T5332] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 267.549070][ T5231] Bluetooth: hci0: command tx timeout [ 267.723586][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.743439][ T5332] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 267.786861][ T5332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.823093][ T5332] usb 5-1: Product: syz [ 267.839029][ T5332] usb 5-1: Manufacturer: syz [ 267.869715][ T5332] usb 5-1: SerialNumber: syz [ 267.915544][ T5332] usb 5-1: config 0 descriptor?? [ 267.922733][ T5280] usb 3-1: USB disconnect, device number 44 [ 268.006780][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.122995][ T9295] netlink: 76 bytes leftover after parsing attributes in process `syz.2.985'. [ 268.222115][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.398912][ T9286] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 268.467482][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.487251][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.501314][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.511988][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.530027][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.538167][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.546710][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.658723][ T58] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 268.689247][ T5332] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 268.702938][ T9162] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.742222][ T9162] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.816556][ T9162] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.839800][ T9162] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.861283][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.899971][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.936865][ T58] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 268.966833][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.014510][ T58] usb 3-1: config 0 descriptor?? [ 269.158129][ T52] bridge_slave_1: left allmulticast mode [ 269.179335][ T52] bridge_slave_1: left promiscuous mode [ 269.210825][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.264366][ T52] bridge_slave_0: left allmulticast mode [ 269.274698][ T52] bridge_slave_0: left promiscuous mode [ 269.294574][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.478894][ T58] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 269.499072][ T58] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 269.541150][ T58] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 270.277029][ T5285] usb 5-1: USB disconnect, device number 52 [ 270.512216][ T9324] [U]  [ 270.588926][ T5231] Bluetooth: hci3: command tx timeout [ 271.138124][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.166563][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.191991][ T52] bond0 (unregistering): Released all slaves [ 271.447732][ T52] IPVS: stopping backup sync thread 9013 ... [ 271.922054][ T52] hsr_slave_0: left promiscuous mode [ 271.945442][ T52] hsr_slave_1: left promiscuous mode [ 271.967808][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.986517][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.009430][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.016908][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.086311][ T52] veth1_macvtap: left promiscuous mode [ 272.118693][ T52] veth0_macvtap: left promiscuous mode [ 272.124401][ T52] veth1_vlan: left promiscuous mode [ 272.150537][ T52] veth0_vlan: left promiscuous mode [ 272.652760][ T58] arvo 0003:1E7D:30D4.000A: couldn't init struct arvo_device [ 272.665712][ T58] arvo 0003:1E7D:30D4.000A: couldn't install keyboard [ 272.672624][ T4623] Bluetooth: hci3: command tx timeout [ 272.720580][ T58] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -71 [ 272.738113][ T58] usb 3-1: USB disconnect, device number 45 [ 273.384925][ T52] team0 (unregistering): Port device team_slave_1 removed [ 273.477926][ T52] team0 (unregistering): Port device team_slave_0 removed [ 273.550851][ T4623] Bluetooth: hci1: command 0x0406 tx timeout [ 274.329705][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.400334][ T9406] loop2: detected capacity change from 0 to 7 [ 274.428265][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.428302][ T9406] Dev loop2: unable to read RDB block 7 [ 274.452070][ T9406] loop2: unable to read partition table [ 274.478910][ T9406] loop2: partition table beyond EOD, truncated [ 274.489423][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 274.506618][ T9406] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.528906][ T5281] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 274.546767][ T2580] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.554064][ T2580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.662853][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.670079][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.748663][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 274.748696][ T5231] Bluetooth: hci3: command tx timeout [ 274.755276][ T5281] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 274.780464][ T5281] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 274.801196][ T9412] [U]  [ 274.812540][ T5281] usb 5-1: config 0 has no interface number 0 [ 274.821354][ T5281] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.836236][ T5281] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.847458][ T5281] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.859321][ T5281] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 274.868715][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 274.895630][ T5281] usb 5-1: Product: syz [ 274.919246][ T5281] usb 5-1: config 0 descriptor?? [ 275.088960][ T9424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.119405][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.140471][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.158054][ T9424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.173583][ T9300] bridge_slave_0: entered allmulticast mode [ 275.187886][ T9300] bridge_slave_0: entered promiscuous mode [ 275.214012][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.237925][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.255847][ T9300] bridge_slave_1: entered allmulticast mode [ 275.283648][ T9300] bridge_slave_1: entered promiscuous mode [ 275.369972][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 275.423509][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.450157][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.517728][ T9300] team0: Port device team_slave_0 added [ 275.549299][ T8] usb 4-1: device descriptor read/64, error -71 [ 275.554319][ T9300] team0: Port device team_slave_1 added [ 275.567131][ T5281] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input37 [ 275.577567][ T5281] input: failed to attach handler kbd to device input37, error: -5 [ 275.637631][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.655746][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.682574][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.726509][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.750040][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.785052][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.851412][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 275.898742][ T5281] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 275.996988][ T9300] hsr_slave_0: entered promiscuous mode [ 276.027533][ T9300] hsr_slave_1: entered promiscuous mode [ 276.034321][ T8] usb 4-1: device descriptor read/64, error -71 [ 276.084792][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.153708][ T5281] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 276.190107][ T8] usb usb4-port1: attempt power cycle [ 276.198630][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.238632][ T5281] usb 3-1: Product: syz [ 276.242849][ T5281] usb 3-1: Manufacturer: syz [ 276.247459][ T5281] usb 3-1: SerialNumber: syz [ 276.292907][ T5281] usb 3-1: config 0 descriptor?? [ 276.316880][ T9162] veth0_vlan: entered promiscuous mode [ 276.557847][ T5281] hso 3-1:0.0: Failed to find BULK IN ep [ 276.577948][ T9162] veth1_vlan: entered promiscuous mode [ 276.623944][ T5281] usb-storage 3-1:0.0: USB Mass Storage device detected [ 276.631256][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 276.671261][ T8] usb 4-1: device descriptor read/8, error -71 [ 276.774528][ T5281] usb 3-1: USB disconnect, device number 46 [ 276.831879][ T5231] Bluetooth: hci3: command tx timeout [ 276.863336][ T9162] veth0_macvtap: entered promiscuous mode [ 276.970387][ T9162] veth1_macvtap: entered promiscuous mode [ 276.989228][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 276.998285][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.009939][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.027130][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.038762][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.058093][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.074157][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.090272][ T8] usb 4-1: device descriptor read/8, error -71 [ 277.092060][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.202498][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.218004][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.231450][ T8] usb usb4-port1: unable to enumerate USB device [ 277.240992][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.254337][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.266299][ T9162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.280885][ T9162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.296747][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.321506][ T9162] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.340055][ T9162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.350283][ T9162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.359510][ T9162] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.392027][ T58] usb 5-1: USB disconnect, device number 53 [ 277.678655][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.718549][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.845693][ T9300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.895660][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.915875][ T9300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 277.933457][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.954789][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 278.027395][ T9300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.034542][ T5929] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 278.074443][ T9300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.259365][ T9476] FAULT_INJECTION: forcing a failure. [ 278.259365][ T9476] name failslab, interval 1, probability 0, space 0, times 0 [ 278.280344][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 278.304784][ T5929] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 278.317763][ T9476] CPU: 1 UID: 0 PID: 9476 Comm: syz.0.955 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 278.328379][ T9476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.338425][ T9476] Call Trace: [ 278.341930][ T9476] [ 278.344878][ T9476] dump_stack_lvl+0x241/0x360 [ 278.349602][ T9476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.354863][ T9476] ? __pfx__printk+0x10/0x10 [ 278.359489][ T9476] ? __kmalloc_noprof+0xb0/0x400 [ 278.364463][ T9476] ? __pfx___might_resched+0x10/0x10 [ 278.369791][ T9476] should_fail_ex+0x3b0/0x4e0 [ 278.371844][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 278.374492][ T9476] ? io_alloc_page_table+0x96/0x120 [ 278.388638][ T9476] should_failslab+0xac/0x100 [ 278.393358][ T9476] ? io_alloc_page_table+0x96/0x120 [ 278.398766][ T9476] __kmalloc_noprof+0xd8/0x400 [ 278.403587][ T9476] io_alloc_page_table+0x96/0x120 [ 278.408628][ T9476] io_rsrc_data_alloc+0x9a/0x270 [ 278.413606][ T9476] io_sqe_buffers_register+0x1d6/0x750 [ 278.419117][ T9476] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 278.425118][ T9476] ? rcu_is_watching+0x15/0xb0 [ 278.429884][ T9476] ? trace_contention_end+0x3c/0x120 [ 278.435166][ T9476] ? __might_fault+0xc6/0x120 [ 278.439844][ T9476] io_register_rsrc+0x2ef/0x390 [ 278.444696][ T9476] ? __pfx_io_register_rsrc+0x10/0x10 [ 278.450074][ T9476] ? __fget_files+0x3f6/0x470 [ 278.454742][ T9476] ? __fget_files+0x29/0x470 [ 278.459334][ T9476] __se_sys_io_uring_register+0xaaf/0x15d0 [ 278.465151][ T9476] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 278.471390][ T9476] ? do_syscall_64+0x100/0x230 [ 278.476147][ T9476] ? do_syscall_64+0xb6/0x230 [ 278.480820][ T9476] do_syscall_64+0xf3/0x230 [ 278.485313][ T9476] ? clear_bhb_loop+0x35/0x90 [ 278.489991][ T9476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.495878][ T9476] RIP: 0033:0x7fadfbb7cef9 [ 278.500467][ T9476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.520163][ T9476] RSP: 002b:00007fadfc9be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 278.528580][ T9476] RAX: ffffffffffffffda RBX: 00007fadfbd35f80 RCX: 00007fadfbb7cef9 [ 278.536546][ T9476] RDX: 0000000020000380 RSI: 000000000000000f RDI: 0000000000000003 [ 278.544690][ T9476] RBP: 00007fadfc9be090 R08: 0000000000000000 R09: 0000000000000000 [ 278.552656][ T9476] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 278.560619][ T9476] R13: 0000000000000000 R14: 00007fadfbd35f80 R15: 00007fadfbe5fa28 [ 278.568707][ T9476] [ 278.575453][ T5929] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 278.586708][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.606053][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.619075][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.882701][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.939494][ T9487] [U]  [ 278.948194][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.955400][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.996458][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.003635][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.108987][ T5929] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 279.223051][ T9491] loop2: detected capacity change from 0 to 7 [ 279.266756][ T9491] Dev loop2: unable to read RDB block 7 [ 279.292031][ T9491] loop2: unable to read partition table [ 279.298227][ T9491] loop2: partition table beyond EOD, truncated [ 279.318920][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 279.338442][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.373464][ T5929] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 279.377331][ T9491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.390780][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.417111][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.477147][ T5929] usb 3-1: Product: syz [ 279.510841][ T5929] usb 3-1: Manufacturer: syz [ 279.527752][ T5929] usb 3-1: SerialNumber: syz [ 279.556153][ T5929] usb 3-1: config 0 descriptor?? [ 279.582084][ T5929] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 279.606354][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 279.642959][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.662954][ T5929] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 279.675432][ T5929] usb 3-1: media controller created [ 279.721000][ T9300] veth0_vlan: entered promiscuous mode [ 279.766964][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.791111][ T9300] veth1_vlan: entered promiscuous mode [ 279.868969][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 279.881477][ T5929] DVB: Unable to find symbol mt352_attach() [ 279.899832][ T5929] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 279.913478][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 279.950585][ T5929] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 280.010617][ T9300] veth0_macvtap: entered promiscuous mode [ 280.051396][ T9300] veth1_macvtap: entered promiscuous mode [ 280.102176][ T25] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 280.123931][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.143177][ T25] usb 1-1: Product: syz [ 280.162491][ T25] usb 1-1: Manufacturer: syz [ 280.184987][ T25] usb 1-1: SerialNumber: syz [ 280.226169][ T25] usb 1-1: config 0 descriptor?? [ 280.239154][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.257649][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.271176][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.288615][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.310656][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.398653][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.417890][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.455137][ T25] hso 1-1:0.0: Failed to find BULK IN ep [ 280.482217][ T25] usb-storage 1-1:0.0: USB Mass Storage device detected [ 280.483551][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.547658][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.623350][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.647833][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.711040][ T25] usb 1-1: USB disconnect, device number 52 [ 280.745476][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.797524][ T5929] usb 5-1: USB disconnect, device number 54 [ 280.820473][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.852863][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.866380][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.902088][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.914755][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.962393][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.068294][ T9300] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.081112][ T9300] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.113074][ T9300] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.141501][ T9300] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.399213][ T5929] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 281.456558][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.477444][ T9535] xt_hashlimit: overflow, try lower: 0/0 [ 281.502603][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.570286][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.588116][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.600063][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 281.652039][ T5929] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 281.677664][ T5929] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 281.718295][ T5929] usb 5-1: config 0 has no interface number 0 [ 281.740860][ T5929] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.764361][ T5929] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.795764][ T5929] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 281.813537][ T5929] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 281.828712][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 281.843625][ T5929] usb 5-1: Product: syz [ 281.862449][ T5929] usb 5-1: config 0 descriptor?? [ 281.894790][ T8] usb 3-1: USB disconnect, device number 47 [ 282.010936][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 282.098716][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 282.312168][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 282.345071][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 282.357828][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 282.374540][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.385412][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 282.401969][ T25] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 282.413935][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.425085][ T25] usb 4-1: Product: syz [ 282.433487][ T25] usb 4-1: Manufacturer: syz [ 282.467694][ T25] usb 4-1: SerialNumber: syz [ 282.499558][ T25] usb 4-1: config 0 descriptor?? [ 282.526439][ T25] option 4-1:0.0: GSM modem (1-port) converter detected [ 282.534899][ T5929] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input38 [ 282.581011][ T5929] input: failed to attach handler kbd to device input38, error: -5 [ 282.807107][ T9564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1019'. [ 282.859271][ T9564] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1019'. [ 283.143608][ T9571] kvm: pic: non byte write [ 283.360255][ T25] usb 4-1: USB disconnect, device number 43 [ 283.381005][ T25] option 4-1:0.0: device disconnected [ 283.871254][ T9587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.888679][ T58] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 283.934671][ T9589] [U]  [ 283.978780][ T5301] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 284.110901][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.134987][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.150621][ T58] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 284.162369][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.178592][ T5301] usb 1-1: Using ep0 maxpacket: 16 [ 284.198948][ T5301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.213079][ T58] usb 3-1: config 0 descriptor?? [ 284.246610][ T5280] usb 5-1: USB disconnect, device number 55 [ 284.273470][ T5301] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 284.302433][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.323217][ T5301] usb 1-1: Product: syz [ 284.337616][ T5301] usb 1-1: Manufacturer: syz [ 284.354874][ T5301] usb 1-1: SerialNumber: syz [ 284.381154][ T5301] usb 1-1: config 0 descriptor?? [ 284.406569][ T5301] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 284.438409][ T5301] dvb-usb: bulk message failed: -22 (3/0) [ 284.493859][ T5301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.558297][ T5301] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 284.583852][ T5301] usb 1-1: media controller created [ 284.651770][ T9603] random: crng reseeded on system resumption [ 284.694580][ T5301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.837490][ T9578] program syz.2.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.931344][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 284.966062][ T5301] DVB: Unable to find symbol mt352_attach() [ 284.995174][ T5301] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 285.040245][ T5301] dvb-usb: bulk message failed: -22 (3/0) [ 285.085282][ T5301] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 285.736131][ T9620] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1035'. [ 285.856710][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 285.895980][ T9625] [U]  [ 285.911947][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.020719][ T58] usb 3-1: USB disconnect, device number 48 [ 286.388587][ T5281] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 286.599510][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 286.632624][ T5281] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 286.642039][ T5281] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 286.651203][ T5281] usb 4-1: config 0 has no interface number 0 [ 286.658588][ T5281] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 286.673123][ T5281] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 286.684827][ T5281] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 286.708586][ T58] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 286.743841][ T5280] usb 1-1: USB disconnect, device number 53 [ 286.764990][ T5281] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 286.788434][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 286.798138][ T5281] usb 4-1: Product: syz [ 286.808856][ T5301] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 286.823772][ T5281] usb 4-1: config 0 descriptor?? [ 286.832523][ T5280] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 286.968808][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 286.988085][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.014784][ T58] usb 5-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 287.024642][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.032898][ T58] usb 5-1: Product: syz [ 287.037190][ T58] usb 5-1: Manufacturer: syz [ 287.042110][ T5301] usb 2-1: Using ep0 maxpacket: 8 [ 287.047321][ T58] usb 5-1: SerialNumber: syz [ 287.064987][ T5301] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.083228][ T58] usb 5-1: config 0 descriptor?? [ 287.113172][ T5301] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 287.126351][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.134589][ T5301] usb 2-1: Product: syz [ 287.139018][ T5301] usb 2-1: Manufacturer: syz [ 287.143736][ T5301] usb 2-1: SerialNumber: syz [ 287.155312][ T5301] usb 2-1: config 0 descriptor?? [ 287.171799][ T5301] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 287.178133][ T5301] usb 2-1: selecting invalid altsetting 1 [ 287.329828][ T58] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 287.365212][ T58] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 287.375465][ T58] dib0700: firmware download failed at 7 with -22 [ 287.382624][ T5301] gspca_stk014: init reg: 0x00 [ 287.393921][ T5301] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 287.406452][ T58] usb 5-1: USB disconnect, device number 56 [ 287.457982][ T5281] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input39 [ 287.486084][ T5281] input: failed to attach handler kbd to device input39, error: -5 [ 287.622703][ T25] usb 2-1: USB disconnect, device number 38 [ 288.580314][ T5281] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 288.852541][ T5281] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 288.922133][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.956100][ T5281] usb 2-1: Product: syz [ 288.977922][ T5281] usb 2-1: Manufacturer: syz [ 289.055355][ T5281] usb 2-1: SerialNumber: syz [ 289.079014][ T5281] usb 2-1: config 0 descriptor?? [ 289.202982][ T5281] rndis_host 2-1:0.0: skipping garbage [ 289.230733][ T5281] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 289.259328][ T58] usb 4-1: USB disconnect, device number 44 [ 289.275512][ T5281] usb 2-1: bad CDC descriptors [ 289.303049][ T5281] cdc_acm 2-1:0.0: skipping garbage [ 289.308330][ T5281] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 289.379001][ T5285] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 289.567294][ T58] usb 2-1: USB disconnect, device number 39 [ 289.588792][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 289.625180][ T5285] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 289.647340][ T5285] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.688276][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.708867][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.728689][ T5285] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.741959][ T5285] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.751144][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.938695][ T5281] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 289.968688][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 289.993112][ T5285] usb 3-1: usb_control_msg returned -32 [ 290.003735][ T5285] usbtmc 3-1:16.0: can't read capabilities [ 290.138558][ T5281] usb 5-1: Using ep0 maxpacket: 16 [ 290.156910][ T5281] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 290.178930][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.179304][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 290.208400][ T5281] usb 5-1: Product: syz [ 290.226138][ T5281] usb 5-1: Manufacturer: syz [ 290.227391][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.250891][ T25] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 290.263220][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.263317][ T5281] usb 5-1: SerialNumber: syz [ 290.275177][ T25] usb 4-1: Product: syz [ 290.285202][ T25] usb 4-1: Manufacturer: syz [ 290.301467][ T25] usb 4-1: SerialNumber: syz [ 290.304287][ T5281] usb 5-1: config 0 descriptor?? [ 290.322079][ T25] usb 4-1: config 0 descriptor?? [ 290.341076][ T25] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 290.355684][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.367306][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 290.379173][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.405106][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.434910][ T25] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 290.451806][ T25] usb 4-1: media controller created [ 290.500955][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.607662][ T5281] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 290.653444][ T5281] usb 5-1: No valid video chain found. [ 290.711994][ T5281] usb 5-1: USB disconnect, device number 57 [ 290.777231][ T25] DVB: Unable to find symbol mt352_attach() [ 290.821825][ T25] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 290.862816][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 290.901081][ T25] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 291.292073][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1063'. [ 291.376052][ T9719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.780946][ T9728] loop0: detected capacity change from 0 to 7 [ 291.817091][ T9728] Dev loop0: unable to read RDB block 7 [ 291.831873][ T9728] loop0: unable to read partition table [ 291.841064][ T9728] loop0: partition table beyond EOD, truncated [ 291.847812][ T9728] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 291.847812][ T9728] ) failed (rc=-5) [ 291.888059][ T4685] Dev loop0: unable to read RDB block 7 [ 291.894588][ T4685] loop0: unable to read partition table [ 291.908453][ T4685] loop0: partition table beyond EOD, truncated [ 292.049733][ T9714] ALSA: mixer_oss: invalid OSS volume 'À' [ 292.231755][ T5285] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 292.430823][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.453069][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.467306][ T5285] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 292.487582][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.546389][ T5285] usb 1-1: config 0 descriptor?? [ 292.595869][ T9741] kvm: pic: non byte write [ 292.709981][ T5929] usb 4-1: USB disconnect, device number 45 [ 292.770706][ T5285] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 292.778106][ T5285] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 292.815155][ T5929] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 292.852950][ T5285] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000B/input/input40 [ 292.941753][ T5285] cm6533_jd 0003:0D8C:0022.000B: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 293.003475][ T5285] usb 1-1: USB disconnect, device number 54 [ 293.826047][ T9746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.845679][ T9746] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 293.914907][ T5283] IPVS: starting estimator thread 0... [ 294.008809][ T9771] IPVS: using max 33 ests per chain, 79200 per kthread [ 294.078682][ T5281] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 294.148598][ T58] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 294.188782][ T5285] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 294.288819][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 294.303361][ T5281] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 294.317071][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.326723][ T5281] usb 2-1: Product: syz [ 294.335798][ T5281] usb 2-1: Manufacturer: syz [ 294.340757][ T5281] usb 2-1: SerialNumber: syz [ 294.349269][ T5281] usb 2-1: config 0 descriptor?? [ 294.359142][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 294.373399][ T58] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=9b.5e [ 294.383495][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.393015][ T58] usb 4-1: Product: syz [ 294.397248][ T58] usb 4-1: Manufacturer: syz [ 294.397667][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.403032][ T58] usb 4-1: SerialNumber: syz [ 294.414072][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.427803][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.431375][ T58] usb 4-1: config 0 descriptor?? [ 294.449098][ T5285] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.455202][ T58] kalmia 4-1:0.0: probe with driver kalmia failed with error -22 [ 294.465614][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.485782][ T5285] usb 5-1: config 0 descriptor?? [ 294.558826][ T6021] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 294.578362][ T5281] kaweth 2-1:0.0: Firmware present in device. [ 294.671548][ T58] usb 4-1: USB disconnect, device number 46 [ 294.738789][ T6021] usb 1-1: Using ep0 maxpacket: 16 [ 294.747313][ T6021] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.771531][ T6021] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 294.771675][ T5281] kaweth 2-1:0.0: Statistics collection: 0 [ 294.781440][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.795011][ T5281] kaweth 2-1:0.0: Multicast filter limit: 0 [ 294.795035][ T5281] kaweth 2-1:0.0: MTU: 0 [ 294.795050][ T5281] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 294.816267][ T6021] usb 1-1: Product: syz [ 294.822272][ T6021] usb 1-1: Manufacturer: syz [ 294.826928][ T6021] usb 1-1: SerialNumber: syz [ 294.837382][ T6021] usb 1-1: config 0 descriptor?? [ 294.848251][ T6021] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 294.856264][ T6021] dvb-usb: bulk message failed: -22 (3/0) [ 294.892630][ T6021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.906734][ T6021] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 294.915272][ T6021] usb 1-1: media controller created [ 294.927224][ T5285] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 294.956253][ T6021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.965808][ T5285] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 294.986680][ T5285] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 295.136884][ T6021] DVB: Unable to find symbol mt352_attach() [ 295.168574][ T6021] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 295.179031][ T6021] dvb-usb: bulk message failed: -22 (3/0) [ 295.209072][ T6021] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 295.554337][ T9698] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 295.663750][ T6021] usb 3-1: USB disconnect, device number 49 [ 296.119368][ T58] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 296.346671][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.403314][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.452275][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.494114][ T58] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 296.536141][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.587825][ T58] usb 4-1: config 0 descriptor?? [ 296.958023][ T5281] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 297.045154][ T5281] usb 2-1: USB disconnect, device number 40 [ 297.125064][ T5283] usb 5-1: USB disconnect, device number 58 [ 297.356794][ T8] usb 1-1: USB disconnect, device number 55 [ 297.519607][ T8] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 298.128851][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 298.325218][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 298.338927][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.369977][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.395027][ T8] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 298.424201][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.458994][ T8] usb 2-1: config 0 descriptor?? [ 298.658029][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 298.718826][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 298.742128][ T58] usb 4-1: USB disconnect, device number 47 [ 299.106126][ T9830] binder: 9828:9830 ioctl c06864a2 20001980 returned -22 [ 299.219889][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 299.238891][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.269891][ T9836] fuse: Unknown parameter '' [ 299.277405][ T8] usb 2-1: USB disconnect, device number 41 [ 299.678922][ T5285] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 299.902837][ T5285] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 299.940184][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.968146][ T5285] usb 1-1: config 0 descriptor?? [ 300.000072][ T5285] cp210x 1-1:0.0: cp210x converter detected [ 300.399903][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 300.618227][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 300.628712][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.638119][ T25] usb 5-1: Product: syz [ 300.644593][ T25] usb 5-1: Manufacturer: syz [ 300.650440][ T25] usb 5-1: SerialNumber: syz [ 300.658395][ T25] usb 5-1: config 0 descriptor?? [ 300.675959][ T25] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 301.485393][ T9879] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1112'. [ 301.622686][ T9879] fuse: Bad value for 'group_id' [ 301.627922][ T9879] fuse: Bad value for 'group_id' [ 302.329751][ T5285] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 302.361064][ T5285] cp210x 1-1:0.0: querying part number failed [ 302.380399][ T5285] usb 1-1: cp210x converter now attached to ttyUSB0 [ 302.403989][ T5285] usb 1-1: USB disconnect, device number 56 [ 302.453514][ T5285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 302.502181][ T5285] cp210x 1-1:0.0: device disconnected [ 302.607274][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 302.888636][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 303.096429][ T25] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 303.116432][ T5301] usb 5-1: USB disconnect, device number 59 [ 303.116477][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.158193][ T25] usb 3-1: Product: syz [ 303.166881][ T25] usb 3-1: Manufacturer: syz [ 303.172478][ T25] usb 3-1: SerialNumber: syz [ 303.188210][ T25] usb 3-1: config 0 descriptor?? [ 303.220266][ T25] ch341 3-1:0.0: ch341-uart converter detected [ 303.617500][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 303.617517][ T29] audit: type=1326 audit(1725526948.667:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9889 comm="syz.2.1116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ce857cef9 code=0x0 [ 303.646133][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.818787][ T6021] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 303.968618][ T8] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 304.010887][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 304.030358][ T6021] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 304.053459][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.075687][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.088281][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.107498][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.130889][ T9929] nft_compat: unsupported protocol 0 [ 304.136388][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.158717][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 304.167125][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.179992][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.195599][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.203377][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.217891][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.219264][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 304.238300][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.253035][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.277969][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.278086][ T8] usb 1-1: config 0 descriptor?? [ 304.297539][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.325751][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.333719][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.361703][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.376089][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.398736][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.423208][ T9933] xt_NFQUEUE: number of total queues is 0 [ 304.429494][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.436966][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.455959][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.495883][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.543977][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.563354][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.570223][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.597037][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.636473][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.652066][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.661448][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.667867][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.680910][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.694492][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.705650][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.714459][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.722420][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.735764][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.757167][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.767844][ T6021] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 304.777028][ T6021] usb 5-1: config 0 has no interface number 0 [ 304.783603][ T6021] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 304.787745][ T8] savu 0003:1E7D:2D5A.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 304.795075][ T6021] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 304.819523][ T6021] usb 5-1: config 0 interface 49 has no altsetting 0 [ 304.836005][ T6021] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 304.846685][ T6021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 304.860947][ T6021] usb 5-1: Product: syz [ 304.865254][ T6021] usb 5-1: Manufacturer: syz [ 304.876450][ T6021] usb 5-1: SerialNumber: syz [ 304.896071][ T6021] usb 5-1: config 0 descriptor?? [ 304.983724][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.004610][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.031711][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 305.106838][ T6021] mdc800 5-1:0.49: probe fails -> wrong Number of Configuration [ 305.145140][ T6021] usb 5-1: USB disconnect, device number 60 [ 305.229757][ T25] usb 3-1: failed to send control message: -110 [ 305.242206][ T25] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 305.598678][ T8] usb 3-1: USB disconnect, device number 50 [ 305.626049][ T8] ch341 3-1:0.0: device disconnected [ 305.809324][ T9950] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.188601][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 306.241933][ T5231] Bluetooth: hci1: unexpected event for opcode 0x080d [ 306.358237][ T9963] netlink: zone id is out of range [ 306.378760][ T9963] netlink: zone id is out of range [ 306.380725][ T6021] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 306.414944][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.432402][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 306.445007][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.481758][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.539790][ T25] usb 3-1: config 0 descriptor?? [ 306.622340][ T6021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.643584][ T6021] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 306.665537][ T6021] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 306.700517][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.736994][ T25] usb 1-1: USB disconnect, device number 57 [ 306.746435][ T6021] usb 5-1: config 0 descriptor?? [ 306.824007][ T5929] usb 3-1: USB disconnect, device number 51 [ 306.977062][ T9972] macsec1: entered promiscuous mode [ 307.002053][ T6021] Bluetooth: Can't get state to change to load ram patch err [ 307.013295][ T9972] vlan1: entered promiscuous mode [ 307.029842][ T9972] macsec1: entered allmulticast mode [ 307.035293][ T6021] Bluetooth: Loading patch file failed [ 307.050900][ T6021] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 307.058915][ T9972] vlan1: entered allmulticast mode [ 307.069842][ T9972] veth0_vlan: entered allmulticast mode [ 307.097590][ T9972] vlan1: left allmulticast mode [ 307.112344][ T9972] veth0_vlan: left allmulticast mode [ 307.136127][ T9972] vlan1: left promiscuous mode [ 307.749094][ T6021] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 307.808597][ T5929] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 307.838637][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 307.948995][ T6021] usb 1-1: Using ep0 maxpacket: 16 [ 307.957189][ T6021] usb 1-1: config 253 has an invalid interface number: 157 but max is 3 [ 307.965881][ T6021] usb 1-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 307.975550][ T6021] usb 1-1: config 253 has an invalid interface number: 213 but max is 3 [ 307.994612][ T6021] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 308.008709][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 308.016661][ T6021] usb 1-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 308.026751][ T6021] usb 1-1: config 253 has no interface number 0 [ 308.034039][ T5929] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 308.043098][ T5929] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 308.048577][ T8] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 308.059263][ T6021] usb 1-1: config 253 has no interface number 1 [ 308.066852][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.080354][ T6021] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 308.092919][ T5929] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 308.107497][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.121766][ T5929] usb 4-1: config 250 has no interface number 0 [ 308.128229][ T6021] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 308.139432][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.152862][ T5929] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 308.164803][ T6021] usb 1-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 308.176285][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 308.185639][ T5929] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 308.197981][ T6021] usb 1-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 308.213313][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.221799][ T5929] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.236452][ T6021] usb 1-1: config 253 interface 157 has no altsetting 0 [ 308.247192][ T25] usb 3-1: config 0 descriptor?? [ 308.254386][ T5929] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 308.268444][ T6021] usb 1-1: config 253 interface 213 has no altsetting 0 [ 308.278812][ T5929] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 308.280541][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 308.292806][ T5929] usb 4-1: config 250 interface 228 has no altsetting 0 [ 308.308431][ T6021] usb 1-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 308.321785][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.333716][ T6021] usb 1-1: Product: syz [ 308.338281][ T6021] usb 1-1: Manufacturer: syz [ 308.348363][ T6021] usb 1-1: SerialNumber: syz [ 308.354029][ T5929] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 308.364222][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 308.378386][ T5929] usb 4-1: Product: syz [ 308.382282][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.385332][ T5929] usb 4-1: SerialNumber: syz [ 308.419228][ T5929] hub 4-1:250.228: bad descriptor, ignoring hub [ 308.437708][ T5929] hub 4-1:250.228: probe with driver hub failed with error -5 [ 308.441923][ T8] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.463083][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.487238][ T8] usb 2-1: config 0 descriptor?? [ 308.639110][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.660129][ T5929] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 48 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 308.694533][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.744628][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.773690][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.806899][ T9978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.817045][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.833647][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.847042][ T9978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.866598][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.878996][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.890249][ T8] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 308.900990][ T25] wacom 0003:056A:0094.000E: unknown main item tag 0x0 [ 308.930142][ T25] wacom 0003:056A:0094.000E: Using device in hidraw-only mode [ 308.980202][ T25] wacom 0003:056A:0094.000E: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 309.030756][ T8] usb 5-1: USB disconnect, device number 61 [ 309.042678][ T25] usb 3-1: USB disconnect, device number 52 [ 309.203933][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.222162][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.639376][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 310.058654][ T5929] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 310.249303][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 310.268823][ T5231] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 310.277531][ T5231] Bluetooth: hci1: Injecting HCI hardware error event [ 310.287258][ T4623] Bluetooth: hci1: hardware error 0x00 [ 310.292819][ T5929] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 310.303361][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.312184][ T5929] usb 3-1: Product: syz [ 310.317674][ T5929] usb 3-1: Manufacturer: syz [ 310.322491][ T5929] usb 3-1: SerialNumber: syz [ 310.339322][ T5929] usb 3-1: config 0 descriptor?? [ 310.371239][ T5929] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 310.418646][ T5301] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 310.640025][ T5301] usb 5-1: Using ep0 maxpacket: 16 [ 310.690909][ T5301] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 310.696796][ T5929] usb 4-1: USB disconnect, device number 48 [ 310.734749][ T5301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.760066][ T5929] usblp0: removed [ 310.775632][ T5301] usb 5-1: config 0 has no interface number 0 [ 310.804494][ T25] usb 2-1: USB disconnect, device number 42 [ 310.841518][ T25] iowarrior 2-1:0.0: I/O-Warror #1 now disconnected [ 310.872677][ T5301] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 310.925372][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.938782][ T5301] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 310.950790][T10021] loop0: detected capacity change from 0 to 7 [ 310.968256][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 310.968622][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.018870][ T5301] usb 5-1: Product: syz [ 311.023477][ T5301] usb 5-1: SerialNumber: syz [ 311.033046][T10021] Dev loop0: unable to read RDB block 7 [ 311.058659][ T5301] usb 5-1: config 0 descriptor?? [ 311.076834][T10021] loop0: unable to read partition table [ 311.121283][ T5301] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 311.130080][T10021] loop0: partition table beyond EOD, truncated [ 311.159020][T10021] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 311.159020][T10021] ) failed (rc=-5) [ 311.181915][ T5301] usb 3-1: USB disconnect, device number 53 [ 311.533830][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'. [ 311.548154][T10033] loop2: detected capacity change from 0 to 7 [ 311.567451][T10033] Dev loop2: unable to read RDB block 7 [ 311.582414][T10033] loop2: unable to read partition table [ 311.596529][T10033] loop2: partition table beyond EOD, truncated [ 311.604189][T10033] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 312.058827][ T25] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 312.254023][ T25] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 312.283995][T10029] ALSA: mixer_oss: invalid OSS volume 'À' [ 312.297482][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.348718][ T4623] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 312.358204][ T25] usb 4-1: config 0 descriptor?? [ 312.493955][ T4623] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 312.500769][ T4623] Bluetooth: Wrong link type (-22) [ 313.046226][T10059] netlink: 'syz.0.1166': attribute type 4 has an invalid length. [ 313.097946][ T5301] usb 5-1: USB disconnect, device number 62 [ 313.471855][ T6021] r8712u: register rtl8712_netdev_ops to netdev_ops [ 313.479280][ T6021] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 313.508391][ T6021] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 313.537714][ T6021] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 313.579526][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 313.593786][ T6021] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 313.603083][T10074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 313.653860][ T6021] usb 1-1: Found UVC 0.00 device syz (0b05:1791) [ 313.681898][ T6021] usb 1-1: No valid video chain found. [ 313.693905][ T6021] r8712u: register rtl8712_netdev_ops to netdev_ops [ 313.707870][ T6021] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 313.733874][ T6021] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 313.760754][ T6021] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 313.774473][ T6021] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 313.904271][ T25] usb 4-1: string descriptor 0 read error: -71 [ 313.944446][ T25] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 313.965994][ T5332] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 313.989599][ T25] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 314.028258][ T25] usb 4-1: USB disconnect, device number 49 [ 314.049116][ T25] ftdi_sio 4-1:0.0: device disconnected [ 314.124415][T10085] FAULT_INJECTION: forcing a failure. [ 314.124415][T10085] name failslab, interval 1, probability 0, space 0, times 0 [ 314.142601][T10085] CPU: 0 UID: 0 PID: 10085 Comm: syz.2.1172 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 314.153412][T10085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 314.163503][T10085] Call Trace: [ 314.166802][T10085] [ 314.169758][T10085] dump_stack_lvl+0x241/0x360 [ 314.174554][T10085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.179779][T10085] ? __pfx__printk+0x10/0x10 [ 314.184403][T10085] ? __kmalloc_noprof+0xb0/0x400 [ 314.189364][T10085] ? __pfx___might_resched+0x10/0x10 [ 314.194683][T10085] should_fail_ex+0x3b0/0x4e0 [ 314.199214][ T5332] usb 2-1: too many configurations: 83, using maximum allowed: 8 [ 314.199375][T10085] ? io_alloc_async_data+0x7a/0x120 [ 314.212295][T10085] should_failslab+0xac/0x100 [ 314.213971][ T5332] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 314.216991][T10085] ? io_alloc_async_data+0x7a/0x120 [ 314.217022][T10085] __kmalloc_noprof+0xd8/0x400 [ 314.217043][T10085] ? io_arm_poll_handler+0x7cb/0xba0 [ 314.230569][ T5332] usb 2-1: can't read configurations, error -22 [ 314.230607][T10085] io_alloc_async_data+0x7a/0x120 [ 314.252044][T10085] io_prep_rw+0x4e8/0x8f0 [ 314.256375][T10085] io_prep_writev+0xb3/0x360 [ 314.260963][T10085] ? __pfx_io_prep_writev+0x10/0x10 [ 314.266167][T10085] ? io_queue_async+0x431/0x510 [ 314.271022][T10085] io_submit_sqes+0x9c4/0x1bf0 [ 314.275810][T10085] __se_sys_io_uring_enter+0x2ce/0x2670 [ 314.281356][T10085] ? vfs_write+0x7c4/0xc90 [ 314.285804][T10085] ? __pfx_vfs_write+0x10/0x10 [ 314.290578][T10085] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 314.296590][T10085] ? __fget_files+0x3f6/0x470 [ 314.301275][T10085] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 314.307253][T10085] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.313571][T10085] ? do_syscall_64+0x100/0x230 [ 314.318329][T10085] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 314.323869][T10085] do_syscall_64+0xf3/0x230 [ 314.328369][T10085] ? clear_bhb_loop+0x35/0x90 [ 314.333043][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.338940][T10085] RIP: 0033:0x7f9ce857cef9 [ 314.343346][T10085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.362960][T10085] RSP: 002b:00007f9ce940b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 314.371496][T10085] RAX: ffffffffffffffda RBX: 00007f9ce8735f80 RCX: 00007f9ce857cef9 [ 314.379509][T10085] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000005 [ 314.387507][T10085] RBP: 00007f9ce940b090 R08: 0000000000000000 R09: 0000000000000000 [ 314.389377][ T5332] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 314.395487][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.395508][T10085] R13: 0000000000000000 R14: 00007f9ce8735f80 R15: 00007f9ce885fa28 [ 314.395535][T10085] [ 314.661236][ T5332] usb 2-1: too many configurations: 83, using maximum allowed: 8 [ 314.685465][ T5332] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 314.701630][ T5332] usb 2-1: can't read configurations, error -22 [ 314.714641][ T5332] usb usb2-port1: attempt power cycle [ 315.078252][ T4623] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 315.085294][ T4623] Bluetooth: Wrong link type (-22) [ 315.091787][ T4623] Bluetooth: hci0: link tx timeout [ 315.099610][ T4623] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.138082][ T5332] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 315.180591][T10125] loop2: detected capacity change from 0 to 7 [ 315.200446][ T5332] usb 2-1: too many configurations: 83, using maximum allowed: 8 [ 315.220403][ T7447] Dev loop2: unable to read RDB block 7 [ 315.226038][ T7447] loop2: unable to read partition table [ 315.239309][ T5332] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 315.244459][ T7447] loop2: partition table beyond EOD, truncated [ 315.261334][T10125] Dev loop2: unable to read RDB block 7 [ 315.266980][T10125] loop2: unable to read partition table [ 315.284047][ T5332] usb 2-1: can't read configurations, error -22 [ 315.303747][T10125] loop2: partition table beyond EOD, truncated [ 315.318768][T10125] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 315.350896][ T4685] Dev loop2: unable to read RDB block 7 [ 315.356536][ T4685] loop2: unable to read partition table [ 315.378006][ T4685] loop2: partition table beyond EOD, truncated [ 315.428644][ T6021] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 315.458800][ T5332] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 315.519979][ T5332] usb 2-1: too many configurations: 83, using maximum allowed: 8 [ 315.540313][ T5332] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 315.564148][ T5332] usb 2-1: can't read configurations, error -22 [ 315.584718][ T5332] usb usb2-port1: unable to enumerate USB device [ 315.629038][ T6021] usb 5-1: Using ep0 maxpacket: 8 [ 315.641988][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.681126][ T6021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.713286][ T6021] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.731365][T10152] netlink: 'syz.0.1184': attribute type 4 has an invalid length. [ 315.740213][ T6021] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 315.775347][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.815836][ T6021] usb 5-1: config 0 descriptor?? [ 316.238391][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.247974][ T6021] kye 0003:0458:5010.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 316.265026][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.269832][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.295332][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.305175][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.313758][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.321345][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.328203][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.335261][ T6021] kye 0003:0458:5010.000F: unknown main item tag 0x0 [ 316.349464][ T58] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 316.357856][ T6021] kye 0003:0458:5010.000F: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 316.384989][ T6021] kye 0003:0458:5010.000F: tablet-enabling feature report not found [ 316.407080][ T6021] kye 0003:0458:5010.000F: tablet enabling failed [ 316.529029][ T58] usb 3-1: device descriptor read/64, error -71 [ 316.544461][ T4623] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 316.553017][ T4623] Bluetooth: Wrong link type (-22) [ 316.558301][ T4623] Bluetooth: hci3: link tx timeout [ 316.564120][ T4623] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 316.663268][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 316.789671][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 316.808643][ T58] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 316.968739][ T58] usb 3-1: device descriptor read/64, error -71 [ 317.089283][ T58] usb usb3-port1: attempt power cycle [ 317.149205][ T4623] Bluetooth: hci0: command 0x0406 tx timeout [ 317.518598][ T58] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 317.554315][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.560804][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.575902][ T58] usb 3-1: device descriptor read/8, error -71 [ 317.868978][ T58] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 317.913467][ T58] usb 3-1: device descriptor read/8, error -71 [ 318.041174][ T58] usb usb3-port1: unable to enumerate USB device [ 318.598857][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 319.229610][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 325.711354][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.724826][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.733877][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.742818][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.754196][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.761817][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.157828][ T6009] usb 1-1: USB disconnect, device number 58 [ 327.496789][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.520101][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.531694][ T4623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.531797][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 327.544763][ T4623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.555351][ T4623] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 327.571908][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 327.579288][ T4623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.588211][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 327.605759][ T4623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 327.617116][ T4623] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 327.625622][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 327.636191][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 327.643462][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 327.651734][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 327.667494][ T4623] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 327.680681][ T4623] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 327.693568][ T4623] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 327.793876][ T5238] Bluetooth: hci5: command tx timeout [ 329.629036][ T5238] Bluetooth: hci6: command tx timeout [ 329.718957][ T5238] Bluetooth: hci7: command tx timeout [ 329.788789][ T5238] Bluetooth: hci8: command tx timeout [ 329.868622][ T5238] Bluetooth: hci5: command tx timeout [ 330.271553][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.282659][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.292080][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.301151][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.309704][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 330.317198][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.708739][ T5238] Bluetooth: hci6: command tx timeout [ 331.788705][ T5238] Bluetooth: hci7: command tx timeout [ 331.868787][ T5238] Bluetooth: hci8: command tx timeout [ 331.948636][ T5238] Bluetooth: hci5: command tx timeout [ 332.348889][ T5238] Bluetooth: hci4: command tx timeout [ 333.789130][ T5238] Bluetooth: hci6: command tx timeout [ 333.878848][ T5238] Bluetooth: hci7: command tx timeout [ 333.948886][ T5238] Bluetooth: hci8: command tx timeout [ 334.028621][ T5238] Bluetooth: hci5: command tx timeout [ 334.428579][ T5238] Bluetooth: hci4: command tx timeout [ 335.868741][ T5238] Bluetooth: hci6: command tx timeout [ 335.948635][ T5238] Bluetooth: hci7: command tx timeout [ 336.028725][ T5238] Bluetooth: hci8: command tx timeout [ 336.508657][ T5238] Bluetooth: hci4: command tx timeout [ 338.588651][ T5238] Bluetooth: hci4: command tx timeout [ 379.000548][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.006873][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.927265][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 385.939440][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 385.948215][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 385.958318][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 385.966918][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 385.974707][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 386.198723][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 387.258777][ T5231] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 387.269272][ T5231] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 387.278031][ T5231] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 387.286479][ T5231] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 387.294330][ T5231] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 387.302701][ T5231] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 387.862588][ T4623] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 387.877056][ T4623] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 387.886959][ T4623] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 387.897117][ T4623] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 387.905871][ T4623] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 387.913685][ T4623] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 387.966490][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 387.979714][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 387.990013][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 388.004950][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 388.014376][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 388.023254][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 388.030496][ T5238] Bluetooth: hci9: command tx timeout [ 389.398887][ T4623] Bluetooth: hci10: command tx timeout [ 389.948758][ T4623] Bluetooth: hci11: command tx timeout [ 390.108760][ T4623] Bluetooth: hci9: command tx timeout [ 390.114362][ T4623] Bluetooth: hci12: command tx timeout [ 390.272499][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 390.281294][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 390.290728][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 390.301759][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 390.313506][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 390.321115][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 391.308694][ T5231] Bluetooth: hci3: command 0x0406 tx timeout [ 391.468767][ T5238] Bluetooth: hci10: command tx timeout [ 392.028696][ T5238] Bluetooth: hci11: command tx timeout [ 392.189056][ T5238] Bluetooth: hci12: command tx timeout [ 392.189065][ T5231] Bluetooth: hci9: command tx timeout [ 392.358792][ T5238] Bluetooth: hci13: command tx timeout [ 393.548707][ T5238] Bluetooth: hci10: command tx timeout [ 394.108837][ T5238] Bluetooth: hci11: command tx timeout [ 394.268886][ T5231] Bluetooth: hci12: command tx timeout [ 394.269986][ T5238] Bluetooth: hci9: command tx timeout [ 394.429436][ T5238] Bluetooth: hci13: command tx timeout [ 395.628662][ T5238] Bluetooth: hci10: command tx timeout [ 396.188724][ T5238] Bluetooth: hci11: command tx timeout [ 396.348666][ T5238] Bluetooth: hci12: command tx timeout [ 396.518693][ T5238] Bluetooth: hci13: command tx timeout [ 398.588772][ T5238] Bluetooth: hci13: command tx timeout [ 440.440578][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.447152][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.476790][ T5231] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 446.489815][ T5231] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 446.498285][ T5231] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 446.510927][ T5231] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 446.519058][ T5231] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 446.526483][ T5231] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 447.394306][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 447.403614][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 447.414317][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 447.422789][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 447.432127][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 447.439885][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 447.957123][ T5229] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 447.973242][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 447.975456][ T4623] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 447.992563][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 448.001321][ T5229] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 448.005173][ T4623] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 448.010900][ T5229] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 448.018730][ T4623] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 448.023996][ T5229] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 448.037954][ T4623] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 448.038543][ T5229] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 448.045654][ T4623] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 448.588770][ T5229] Bluetooth: hci14: command tx timeout [ 449.468705][ T5229] Bluetooth: hci15: command tx timeout [ 450.108676][ T5229] Bluetooth: hci16: command tx timeout [ 450.118754][ T5229] Bluetooth: hci17: command tx timeout [ 450.673458][ T5231] Bluetooth: hci14: command tx timeout [ 450.857065][T10266] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 450.867497][T10266] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 450.876806][T10266] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 450.885691][T10266] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 450.894758][T10266] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 450.902376][T10266] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 451.548768][T10266] Bluetooth: hci15: command tx timeout [ 452.188721][T10266] Bluetooth: hci17: command tx timeout [ 452.188751][T10263] Bluetooth: hci16: command tx timeout [ 452.748869][T10263] Bluetooth: hci14: command tx timeout [ 452.754428][T10263] Bluetooth: hci5: command 0x0406 tx timeout [ 452.759955][T10266] Bluetooth: hci4: command 0x0406 tx timeout [ 452.761592][T10263] Bluetooth: hci7: command 0x0406 tx timeout [ 452.766408][T10266] Bluetooth: hci6: command 0x0406 tx timeout [ 452.778788][T10263] Bluetooth: hci8: command 0x0406 tx timeout [ 452.988697][ T5238] Bluetooth: hci18: command tx timeout [ 453.628695][ T5238] Bluetooth: hci15: command tx timeout [ 454.268972][ T5238] Bluetooth: hci16: command tx timeout [ 454.273860][ T4623] Bluetooth: hci17: command tx timeout [ 454.838696][ T4623] Bluetooth: hci14: command tx timeout [ 455.068967][ T4623] Bluetooth: hci18: command tx timeout [ 455.708796][ T4623] Bluetooth: hci15: command tx timeout [ 456.348738][ T4623] Bluetooth: hci17: command tx timeout [ 456.348946][ T5238] Bluetooth: hci16: command tx timeout [ 457.148600][ T5238] Bluetooth: hci18: command tx timeout [ 459.228741][ T5238] Bluetooth: hci18: command tx timeout [ 462.188791][ T30] INFO: task syz.4.1180:10118 blocked for more than 143 seconds. [ 462.196649][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 462.204450][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.213193][ T30] task:syz.4.1180 state:D stack:21304 pid:10118 tgid:10117 ppid:5245 flags:0x00000004 [ 462.224978][ T30] Call Trace: [ 462.228284][ T30] [ 462.231299][ T30] __schedule+0x1800/0x4a60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.235835][ T30] ? __pfx___schedule+0x10/0x10 [ 462.240842][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.245895][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.251728][ T30] ? schedule+0x90/0x320 [ 462.255995][ T30] schedule+0x14b/0x320 [ 462.260358][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.265849][ T30] __mutex_lock+0x6a4/0xd70 [ 462.271167][ T30] ? __mutex_lock+0x527/0xd70 [ 462.298546][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 462.304088][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.322196][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 462.327549][ T30] ? schedule+0x90/0x320 [ 462.333924][ T30] ? schedule+0x90/0x320 [ 462.338265][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 462.344152][ T30] do_ip_setsockopt+0x129f/0x3cd0 [ 462.349346][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 462.354741][ T30] ? aa_sk_perm+0x96d/0xab0 [ 462.359385][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 462.364258][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 462.369938][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 462.374909][ T30] ip_setsockopt+0x63/0x100 [ 462.379614][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 462.385616][ T30] do_sock_setsockopt+0x3af/0x720 [ 462.390766][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 462.396320][ T30] ? __fget_files+0x29/0x470 [ 462.401026][ T30] ? __fget_files+0x3f6/0x470 [ 462.405722][ T30] __sys_setsockopt+0x1ae/0x250 [ 462.410662][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 462.415818][ T30] do_syscall_64+0xf3/0x230 [ 462.420445][ T30] ? clear_bhb_loop+0x35/0x90 [ 462.426278][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.432462][ T30] RIP: 0033:0x7fce4377cef9 [ 462.436894][ T30] RSP: 002b:00007fce44635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.445480][ T30] RAX: ffffffffffffffda RBX: 00007fce43935f80 RCX: 00007fce4377cef9 [ 462.453523][ T30] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000004 [ 462.461729][ T30] RBP: 00007fce437ef01e R08: 0000000000000010 R09: 0000000000000000 [ 462.470000][ T30] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000000 [ 462.478203][ T30] R13: 0000000000000000 R14: 00007fce43935f80 R15: 00007fce43a5fa28 [ 462.486454][ T30] [ 462.489588][ T30] INFO: task syz.4.1180:10122 blocked for more than 143 seconds. [ 462.497489][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 462.505395][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.514458][ T30] task:syz.4.1180 state:D stack:26160 pid:10122 tgid:10117 ppid:5245 flags:0x00000004 [ 462.526417][ T30] Call Trace: [ 462.529919][ T30] [ 462.533057][ T30] __schedule+0x1800/0x4a60 [ 462.537608][ T30] ? __pfx___schedule+0x10/0x10 [ 462.542644][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.547702][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.553840][ T30] ? schedule+0x90/0x320 [ 462.558144][ T30] schedule+0x14b/0x320 [ 462.562427][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.567912][ T30] __mutex_lock+0x6a4/0xd70 [ 462.572594][ T30] ? __mutex_lock+0x527/0xd70 [ 462.577357][ T30] ? ip_mroute_setsockopt+0x15b/0x1190 [ 462.583188][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.588362][ T30] ip_mroute_setsockopt+0x15b/0x1190 [ 462.593787][ T30] ? schedule+0x90/0x320 [ 462.598212][ T30] ? schedule+0x90/0x320 [ 462.602795][ T30] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 462.608972][ T30] do_ip_setsockopt+0x129f/0x3cd0 [ 462.614183][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 462.619688][ T30] ? aa_sk_perm+0x96d/0xab0 [ 462.624244][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 462.630492][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 462.635557][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 462.640639][ T30] ip_setsockopt+0x63/0x100 [ 462.645158][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 462.651130][ T30] do_sock_setsockopt+0x3af/0x720 [ 462.656176][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 462.661819][ T30] ? __fget_files+0x29/0x470 [ 462.666427][ T30] ? __fget_files+0x3f6/0x470 [ 462.671485][ T30] __sys_setsockopt+0x1ae/0x250 [ 462.676392][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 462.681550][ T30] do_syscall_64+0xf3/0x230 [ 462.686065][ T30] ? clear_bhb_loop+0x35/0x90 [ 462.690816][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.696723][ T30] RIP: 0033:0x7fce4377cef9 [ 462.701239][ T30] RSP: 002b:00007fce44614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 462.709757][ T30] RAX: ffffffffffffffda RBX: 00007fce43936058 RCX: 00007fce4377cef9 [ 462.717749][ T30] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000004 [ 462.725865][ T30] RBP: 00007fce437ef01e R08: 0000000000000004 R09: 0000000000000000 [ 462.735138][ T30] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000000000 [ 462.743226][ T30] R13: 0000000000000000 R14: 00007fce43936058 R15: 00007fce43a5fa28 [ 462.751384][ T30] [ 462.754424][ T30] INFO: task syz.3.1196:10192 blocked for more than 143 seconds. [ 462.762395][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 462.770120][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 462.778880][ T30] task:syz.3.1196 state:D stack:24280 pid:10192 tgid:10191 ppid:6952 flags:0x00000004 [ 462.789152][ T30] Call Trace: [ 462.792436][ T30] [ 462.795353][ T30] __schedule+0x1800/0x4a60 [ 462.799979][ T30] ? __pfx___schedule+0x10/0x10 [ 462.804855][ T30] ? __pfx_lock_release+0x10/0x10 [ 462.809925][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 462.815431][ T30] ? schedule+0x90/0x320 [ 462.819810][ T30] schedule+0x14b/0x320 [ 462.823977][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.829965][ T30] __mutex_lock+0x6a4/0xd70 [ 462.835659][ T30] ? __mutex_lock+0x527/0xd70 [ 462.840499][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 462.845482][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.850652][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 462.856950][ T30] ? __nla_parse+0x40/0x60 [ 462.861494][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 462.866367][ T30] genl_rcv_msg+0xaaa/0xec0 [ 462.870990][ T30] ? mark_lock+0x9a/0x350 [ 462.875345][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.880606][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 462.885648][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 462.891093][ T30] ? __pfx_nl80211_set_interface+0x10/0x10 [ 462.896933][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 462.902541][ T30] ? __pfx___might_resched+0x10/0x10 [ 462.907849][ T30] netlink_rcv_skb+0x1e3/0x430 [ 462.912967][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.918019][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.923471][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 462.929021][ T30] genl_rcv+0x28/0x40 [ 462.933017][ T30] netlink_unicast+0x7f6/0x990 [ 462.939119][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 462.944438][ T30] ? __virt_addr_valid+0x183/0x530 [ 462.949622][ T30] ? __check_object_size+0x49c/0x900 [ 462.954918][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 462.960228][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 462.965032][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.970391][ T30] ? __import_iovec+0x536/0x820 [ 462.975253][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 462.980372][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 462.985692][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 462.991334][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.996644][ T30] __sock_sendmsg+0x221/0x270 [ 463.001477][ T30] ____sys_sendmsg+0x525/0x7d0 [ 463.006435][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.011935][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 463.016560][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.021825][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.028175][ T30] ? do_syscall_64+0x100/0x230 [ 463.032996][ T30] ? do_syscall_64+0xb6/0x230 [ 463.038342][ T30] do_syscall_64+0xf3/0x230 [ 463.042960][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.047669][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.053626][ T30] RIP: 0033:0x7f7aebd7cef9 [ 463.058057][ T30] RSP: 002b:00007f7aeca97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.066604][ T30] RAX: ffffffffffffffda RBX: 00007f7aebf35f80 RCX: 00007f7aebd7cef9 [ 463.076351][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 463.084413][ T30] RBP: 00007f7aebdef01e R08: 0000000000000000 R09: 0000000000000000 [ 463.092754][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.101560][ T30] R13: 0000000000000000 R14: 00007f7aebf35f80 R15: 00007f7aec05fa28 [ 463.109954][ T30] [ 463.113024][ T30] INFO: task syz.3.1196:10195 blocked for more than 144 seconds. [ 463.120842][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 463.128563][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.137333][ T30] task:syz.3.1196 state:D stack:26880 pid:10195 tgid:10191 ppid:6952 flags:0x00000004 [ 463.148149][ T30] Call Trace: [ 463.151636][ T30] [ 463.154583][ T30] __schedule+0x1800/0x4a60 [ 463.159474][ T30] ? __pfx___schedule+0x10/0x10 [ 463.164382][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.169612][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.175118][ T30] ? schedule+0x90/0x320 [ 463.179557][ T30] schedule+0x14b/0x320 [ 463.183723][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.189268][ T30] __mutex_lock+0x6a4/0xd70 [ 463.193787][ T30] ? __mutex_lock+0x527/0xd70 [ 463.198741][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 463.203700][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.208847][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 463.215113][ T30] ? __nla_parse+0x40/0x60 [ 463.219680][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 463.224482][ T30] genl_rcv_msg+0xaaa/0xec0 [ 463.229197][ T30] ? mark_lock+0x9a/0x350 [ 463.233553][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.238813][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 463.245124][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 463.250747][ T30] ? __pfx_nl80211_connect+0x10/0x10 [ 463.256048][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 463.261547][ T30] ? __pfx___might_resched+0x10/0x10 [ 463.266848][ T30] netlink_rcv_skb+0x1e3/0x430 [ 463.271776][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.276810][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.282139][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 463.287611][ T30] genl_rcv+0x28/0x40 [ 463.291801][ T30] netlink_unicast+0x7f6/0x990 [ 463.296588][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 463.302181][ T30] ? __virt_addr_valid+0x183/0x530 [ 463.307314][ T30] ? __check_object_size+0x49c/0x900 [ 463.312813][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.317949][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 463.322992][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.328300][ T30] ? __import_iovec+0x536/0x820 [ 463.333201][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 463.338154][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.345179][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 463.350740][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.356033][ T30] __sock_sendmsg+0x221/0x270 [ 463.360848][ T30] ____sys_sendmsg+0x525/0x7d0 [ 463.365657][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.371070][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 463.375674][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.380929][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.387288][ T30] ? do_syscall_64+0x100/0x230 [ 463.392351][ T30] ? do_syscall_64+0xb6/0x230 [ 463.397059][ T30] do_syscall_64+0xf3/0x230 [ 463.401698][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.406391][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.412522][ T30] RIP: 0033:0x7f7aebd7cef9 [ 463.416962][ T30] RSP: 002b:00007f7aeb7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.425462][ T30] RAX: ffffffffffffffda RBX: 00007f7aebf36058 RCX: 00007f7aebd7cef9 [ 463.433494][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000006 [ 463.441592][ T30] RBP: 00007f7aebdef01e R08: 0000000000000000 R09: 0000000000000000 [ 463.451322][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.459453][ T30] R13: 0000000000000000 R14: 00007f7aebf36058 R15: 00007f7aec05fa28 [ 463.467452][ T30] [ 463.471150][ T30] INFO: task syz.3.1196:10196 blocked for more than 144 seconds. [ 463.479020][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 463.486670][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.495436][ T30] task:syz.3.1196 state:D stack:25728 pid:10196 tgid:10191 ppid:6952 flags:0x00004004 [ 463.505699][ T30] Call Trace: [ 463.509077][ T30] [ 463.512030][ T30] __schedule+0x1800/0x4a60 [ 463.516590][ T30] ? __pfx___schedule+0x10/0x10 [ 463.521584][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.526627][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.532186][ T30] ? schedule+0x90/0x320 [ 463.536438][ T30] schedule+0x14b/0x320 [ 463.540712][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.546214][ T30] __mutex_lock+0x6a4/0xd70 [ 463.552115][ T30] ? __mutex_lock+0x527/0xd70 [ 463.556830][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 463.561899][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.566946][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 463.573363][ T30] ? __nla_parse+0x40/0x60 [ 463.577803][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 463.582663][ T30] genl_rcv_msg+0xaaa/0xec0 [ 463.587179][ T30] ? mark_lock+0x9a/0x350 [ 463.591587][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.596638][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 463.601812][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 463.607199][ T30] ? __pfx_nl80211_abort_scan+0x10/0x10 [ 463.612822][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 463.618292][ T30] ? __pfx___might_resched+0x10/0x10 [ 463.623672][ T30] netlink_rcv_skb+0x1e3/0x430 [ 463.628539][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.633601][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.639125][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 463.644625][ T30] genl_rcv+0x28/0x40 [ 463.648703][ T30] netlink_unicast+0x7f6/0x990 [ 463.654631][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 463.660051][ T30] ? __virt_addr_valid+0x183/0x530 [ 463.665176][ T30] ? __check_object_size+0x49c/0x900 [ 463.670563][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.675691][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 463.680602][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.685911][ T30] ? __import_iovec+0x536/0x820 [ 463.690937][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 463.695897][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.701274][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 463.706756][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.712305][ T30] __sock_sendmsg+0x221/0x270 [ 463.717005][ T30] ____sys_sendmsg+0x525/0x7d0 [ 463.722145][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.727467][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 463.732175][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.737325][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 463.743326][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.749745][ T30] ? do_syscall_64+0x100/0x230 [ 463.756193][ T30] ? do_syscall_64+0xb6/0x230 [ 463.761076][ T30] do_syscall_64+0xf3/0x230 [ 463.765604][ T30] ? clear_bhb_loop+0x35/0x90 [ 463.770375][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.776281][ T30] RIP: 0033:0x7f7aebd7cef9 [ 463.780791][ T30] RSP: 002b:00007f7aeb7de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.789251][ T30] RAX: ffffffffffffffda RBX: 00007f7aebf36130 RCX: 00007f7aebd7cef9 [ 463.797301][ T30] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000008 [ 463.805466][ T30] RBP: 00007f7aebdef01e R08: 0000000000000000 R09: 0000000000000000 [ 463.813520][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.821574][ T30] R13: 0000000000000000 R14: 00007f7aebf36130 R15: 00007f7aec05fa28 [ 463.829758][ T30] [ 463.832796][ T30] INFO: task syz.3.1196:10200 blocked for more than 145 seconds. [ 463.840714][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 463.848354][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.858336][ T30] task:syz.3.1196 state:D stack:26296 pid:10200 tgid:10191 ppid:6952 flags:0x00004004 [ 463.868780][ T30] Call Trace: [ 463.872075][ T30] [ 463.875005][ T30] __schedule+0x1800/0x4a60 [ 463.879666][ T30] ? __pfx___schedule+0x10/0x10 [ 463.884552][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.889680][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 463.895158][ T30] ? schedule+0x90/0x320 [ 463.899464][ T30] schedule+0x14b/0x320 [ 463.903641][ T30] schedule_preempt_disabled+0x13/0x30 [ 463.909181][ T30] __mutex_lock+0x6a4/0xd70 [ 463.913698][ T30] ? __mutex_lock+0x527/0xd70 [ 463.918369][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.923622][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 463.928732][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 463.933691][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 463.938895][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.944381][ T30] ? ref_tracker_free+0x643/0x7e0 [ 463.950072][ T30] netlink_rcv_skb+0x1e3/0x430 [ 463.954912][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 463.961673][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.967031][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 463.972348][ T30] netlink_unicast+0x7f6/0x990 [ 463.977140][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 463.982476][ T30] ? __virt_addr_valid+0x183/0x530 [ 463.987598][ T30] ? __check_object_size+0x49c/0x900 [ 463.992988][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.998128][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 464.002988][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.008298][ T30] ? __import_iovec+0x536/0x820 [ 464.013256][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 464.018209][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 464.023583][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 464.029234][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.034552][ T30] __sock_sendmsg+0x221/0x270 [ 464.039316][ T30] ____sys_sendmsg+0x525/0x7d0 [ 464.044105][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.049519][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 464.054125][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.059413][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.066976][ T30] ? do_syscall_64+0x100/0x230 [ 464.071877][ T30] ? do_syscall_64+0xb6/0x230 [ 464.076584][ T30] do_syscall_64+0xf3/0x230 [ 464.081148][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.085845][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.091845][ T30] RIP: 0033:0x7f7aebd7cef9 [ 464.096271][ T30] RSP: 002b:00007f7aeb7bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.104760][ T30] RAX: ffffffffffffffda RBX: 00007f7aebf36208 RCX: 00007f7aebd7cef9 [ 464.113038][ T30] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 464.121123][ T30] RBP: 00007f7aebdef01e R08: 0000000000000000 R09: 0000000000000000 [ 464.129216][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.137201][ T30] R13: 0000000000000000 R14: 00007f7aebf36208 R15: 00007f7aec05fa28 [ 464.145251][ T30] [ 464.148296][ T30] INFO: task syz.1.1197:10194 blocked for more than 145 seconds. [ 464.156109][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 464.165233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.174040][ T30] task:syz.1.1197 state:D stack:25216 pid:10194 tgid:10193 ppid:9300 flags:0x00000004 [ 464.184289][ T30] Call Trace: [ 464.187583][ T30] [ 464.190682][ T30] __schedule+0x1800/0x4a60 [ 464.195227][ T30] ? __pfx___schedule+0x10/0x10 [ 464.200269][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.205409][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 464.210985][ T30] ? schedule+0x90/0x320 [ 464.215240][ T30] schedule+0x14b/0x320 [ 464.219467][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.224941][ T30] __mutex_lock+0x6a4/0xd70 [ 464.229552][ T30] ? mark_lock+0x9a/0x350 [ 464.233908][ T30] ? __mutex_lock+0x527/0xd70 [ 464.238650][ T30] ? ip_rt_ioctl+0xea/0x1750 [ 464.243257][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.248280][ T30] ? bpf_lsm_capable+0x9/0x10 [ 464.253028][ T30] ? security_capable+0x90/0xb0 [ 464.257893][ T30] ip_rt_ioctl+0xea/0x1750 [ 464.262389][ T30] ? __pfx_ip_rt_ioctl+0x10/0x10 [ 464.268769][ T30] ? __might_fault+0xaa/0x120 [ 464.273493][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.278635][ T30] ? __might_fault+0xc6/0x120 [ 464.283331][ T30] inet_ioctl+0x446/0x4f0 [ 464.287677][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 464.292672][ T30] sock_do_ioctl+0x158/0x460 [ 464.297286][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 464.302489][ T30] sock_ioctl+0x629/0x8e0 [ 464.306838][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 464.311786][ T30] ? __fget_files+0x29/0x470 [ 464.316444][ T30] ? __fget_files+0x3f6/0x470 [ 464.321214][ T30] ? __fget_files+0x29/0x470 [ 464.325835][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 464.330881][ T30] ? security_file_ioctl+0x87/0xb0 [ 464.336057][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 464.341024][ T30] __se_sys_ioctl+0xfc/0x170 [ 464.345634][ T30] do_syscall_64+0xf3/0x230 [ 464.350356][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.355054][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.361005][ T30] RIP: 0033:0x7fd79457cef9 [ 464.365436][ T30] RSP: 002b:00007fd795318038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.375542][ T30] RAX: ffffffffffffffda RBX: 00007fd794735f80 RCX: 00007fd79457cef9 [ 464.383609][ T30] RDX: 0000000020000200 RSI: 000000000000890b RDI: 0000000000000007 [ 464.391654][ T30] RBP: 00007fd7945ef01e R08: 0000000000000000 R09: 0000000000000000 [ 464.399699][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.407680][ T30] R13: 0000000000000000 R14: 00007fd794735f80 R15: 00007fd79485fa28 [ 464.415917][ T30] [ 464.419070][ T30] INFO: task syz.0.1198:10204 blocked for more than 145 seconds. [ 464.426790][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 464.434852][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.443803][ T30] task:syz.0.1198 state:D stack:25616 pid:10204 tgid:10198 ppid:9162 flags:0x00000004 [ 464.454101][ T30] Call Trace: [ 464.457401][ T30] [ 464.460441][ T30] __schedule+0x1800/0x4a60 [ 464.464982][ T30] ? __pfx___schedule+0x10/0x10 [ 464.469920][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.476184][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 464.481787][ T30] ? schedule+0x90/0x320 [ 464.486073][ T30] schedule+0x14b/0x320 [ 464.490316][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.495784][ T30] __mutex_lock+0x6a4/0xd70 [ 464.500379][ T30] ? __mutex_lock+0x527/0xd70 [ 464.505065][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 464.510402][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.515454][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 464.520486][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 464.525619][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.531209][ T30] ? ref_tracker_free+0x643/0x7e0 [ 464.536278][ T30] netlink_rcv_skb+0x1e3/0x430 [ 464.541099][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.546582][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.552016][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.557233][ T30] netlink_unicast+0x7f6/0x990 [ 464.562083][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 464.567407][ T30] ? __virt_addr_valid+0x183/0x530 [ 464.574205][ T30] ? __check_object_size+0x49c/0x900 [ 464.579605][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 464.584746][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 464.589689][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.594993][ T30] ? __import_iovec+0x536/0x820 [ 464.599975][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 464.604934][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 464.610329][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 464.615809][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.621185][ T30] __sock_sendmsg+0x221/0x270 [ 464.625878][ T30] ____sys_sendmsg+0x525/0x7d0 [ 464.630743][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.636051][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 464.640917][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.646093][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.652556][ T30] ? do_syscall_64+0x100/0x230 [ 464.657338][ T30] ? do_syscall_64+0xb6/0x230 [ 464.662094][ T30] do_syscall_64+0xf3/0x230 [ 464.666612][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.671389][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.678514][ T30] RIP: 0033:0x7fadfbb7cef9 [ 464.682960][ T30] RSP: 002b:00007fadfc95b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.691585][ T30] RAX: ffffffffffffffda RBX: 00007fadfbd36208 RCX: 00007fadfbb7cef9 [ 464.699644][ T30] RDX: 0000000024008884 RSI: 0000000020000040 RDI: 0000000000000009 [ 464.707639][ T30] RBP: 00007fadfbbef01e R08: 0000000000000000 R09: 0000000000000000 [ 464.716266][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.724624][ T30] R13: 0000000000000000 R14: 00007fadfbd36208 R15: 00007fadfbe5fa28 [ 464.733009][ T30] [ 464.736084][ T30] [ 464.736084][ T30] Showing all locks held in the system: [ 464.745559][ T30] 2 locks held by kworker/u8:1/12: [ 464.751017][ T30] #0: ffff88801dfbe148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 464.762679][ T30] #1: ffffc90000117d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.774971][ T30] 1 lock held by khungtaskd/30: [ 464.780528][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 464.791468][ T30] 2 locks held by kworker/u8:2/35: [ 464.796590][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 464.807038][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 464.818745][ T30] 3 locks held by kworker/0:2/58: [ 464.823836][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 464.836393][ T30] #1: ffffc9000123fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.847574][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 464.857286][ T30] 3 locks held by kworker/u8:5/995: [ 464.862588][ T30] #0: ffff88802f82f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 464.874247][ T30] #1: ffffc90003fc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.890609][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 464.900565][ T30] 2 locks held by dhcpcd/4899: [ 464.905353][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 464.915215][ T30] #1: ffff88807ee24e28 (&padapter->mutex_start){+.+.}-{3:3}, at: netdev_open+0x3c/0x730 [ 464.925483][ T30] 2 locks held by getty/4987: [ 464.931657][ T30] #0: ffff8880305d70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.941648][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 464.951997][ T30] 6 locks held by kworker/1:6/6009: [ 464.957221][ T30] #0: ffff8880222afd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 464.968756][ T30] #1: ffffc9000339fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 464.980739][ T30] #2: ffff888029459190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 464.991112][ T30] #3: ffff888034284190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 465.000618][ T30] #4: ffff888034096160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 465.011342][ T30] #5: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x12/0x30 [ 465.020729][ T30] 3 locks held by kworker/1:7/6021: [ 465.025936][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 465.036996][ T30] #1: ffffc900030bfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 465.048169][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 465.058667][ T30] 1 lock held by syz-executor/7447: [ 465.063909][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 465.073082][ T30] 1 lock held by syz.4.1180/10118: [ 465.078302][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 465.089705][ T30] 1 lock held by syz.4.1180/10122: [ 465.094844][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x15b/0x1190 [ 465.104672][ T30] 2 locks held by syz.3.1196/10192: [ 465.109924][ T30] #0: ffffffff8fcf14b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 465.118106][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 465.127442][ T30] 2 locks held by syz.3.1196/10195: [ 465.132713][ T30] #0: ffffffff8fcf14b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 465.141719][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 465.151411][ T30] 2 locks held by syz.3.1196/10196: [ 465.156636][ T30] #0: ffffffff8fcf14b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 465.164929][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 465.174240][ T30] 1 lock held by syz.3.1196/10200: [ 465.179418][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 465.190528][ T30] 1 lock held by syz.1.1197/10194: [ 465.195658][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0xea/0x1750 [ 465.204613][ T30] 1 lock held by syz.0.1198/10204: [ 465.209781][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 465.219352][ T30] 1 lock held by syz.2.1200/10209: [ 465.224469][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 465.234095][ T30] 2 locks held by syz-executor/10214: [ 465.239649][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.249168][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.259301][ T30] 2 locks held by syz-executor/10223: [ 465.264762][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.274252][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.284415][ T30] 2 locks held by syz-executor/10224: [ 465.291436][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.301037][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.311278][ T30] 2 locks held by syz-executor/10225: [ 465.316649][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.326148][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.336252][ T30] 2 locks held by syz-executor/10228: [ 465.341712][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.351174][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.361360][ T30] 2 locks held by syz-executor/10232: [ 465.366729][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.376174][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.386269][ T30] 2 locks held by syz-executor/10236: [ 465.393462][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.402995][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.413289][ T30] 2 locks held by syz-executor/10242: [ 465.418784][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.428241][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.438369][ T30] 2 locks held by syz-executor/10243: [ 465.443857][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.453349][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.463437][ T30] 2 locks held by syz-executor/10246: [ 465.468990][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.478433][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.488629][ T30] 2 locks held by syz-executor/10250: [ 465.495537][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.505103][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.515193][ T30] 2 locks held by syz-executor/10253: [ 465.520637][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.530119][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.540311][ T30] 2 locks held by syz-executor/10259: [ 465.545708][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.555526][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.566094][ T30] 2 locks held by syz-executor/10261: [ 465.571577][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.581361][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.591642][ T30] 2 locks held by syz-executor/10267: [ 465.598784][ T30] #0: ffffffff8fc7f190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 465.608251][ T30] #1: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 465.618329][ T30] [ 465.620730][ T30] ============================================= [ 465.620730][ T30] [ 465.629171][ T30] NMI backtrace for cpu 1 [ 465.633579][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 465.644063][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.654104][ T30] Call Trace: [ 465.657369][ T30] [ 465.660374][ T30] dump_stack_lvl+0x241/0x360 [ 465.665043][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.670227][ T30] ? __pfx__printk+0x10/0x10 [ 465.674797][ T30] ? vprintk_emit+0x667/0x7c0 [ 465.679462][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 465.684489][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 465.689434][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 465.694911][ T30] ? _printk+0xd5/0x120 [ 465.699067][ T30] ? __pfx__printk+0x10/0x10 [ 465.703715][ T30] ? __wake_up_klogd+0xcc/0x110 [ 465.708571][ T30] ? __pfx__printk+0x10/0x10 [ 465.713164][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 465.718183][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 465.724189][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 465.730214][ T30] watchdog+0xff4/0x1040 [ 465.734491][ T30] ? watchdog+0x1ea/0x1040 [ 465.738933][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.743618][ T30] kthread+0x2f0/0x390 [ 465.747678][ T30] ? __pfx_watchdog+0x10/0x10 [ 465.752349][ T30] ? __pfx_kthread+0x10/0x10 [ 465.756928][ T30] ret_from_fork+0x4b/0x80 [ 465.761338][ T30] ? __pfx_kthread+0x10/0x10 [ 465.765917][ T30] ret_from_fork_asm+0x1a/0x30 [ 465.770689][ T30] [ 465.774813][ T30] Sending NMI from CPU 1 to CPUs 0: [ 465.780897][ C0] NMI backtrace for cpu 0 [ 465.780914][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 465.780934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 465.780945][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 465.780970][ C0] RIP: 0010:kasan_check_range+0x79/0x290 [ 465.780995][ C0] Code: 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 <4c> 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 [ 465.781010][ C0] RSP: 0018:ffffc90000106900 EFLAGS: 00000002 [ 465.781023][ C0] RAX: 0000000000000001 RBX: 1ffffffff283c920 RCX: ffffffff816fe21c [ 465.781036][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff941e4900 [ 465.781047][ C0] RBP: 0000000000000001 R08: ffffffff941e4907 R09: 1ffffffff283c920 [ 465.781059][ C0] R10: dffffc0000000000 R11: fffffbfff283c920 R12: 0000000000000000 [ 465.781071][ C0] R13: ffff88801ce946d8 R14: dffffc0000000001 R15: fffffbfff283c921 [ 465.781084][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 465.781098][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.781110][ C0] CR2: 00007ffe1eb1fff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 465.781125][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.781135][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.781146][ C0] Call Trace: [ 465.781152][ C0] [ 465.781160][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 465.781179][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 465.781200][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 465.781226][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 465.781244][ C0] ? nmi_handle+0x14f/0x5a0 [ 465.781260][ C0] ? nmi_handle+0x2a/0x5a0 [ 465.781275][ C0] ? kasan_check_range+0x79/0x290 [ 465.781295][ C0] ? default_do_nmi+0x63/0x160 [ 465.781314][ C0] ? exc_nmi+0x123/0x1f0 [ 465.781332][ C0] ? end_repeat_nmi+0xf/0x53 [ 465.781354][ C0] ? __lock_acquire+0xf3c/0x2040 [ 465.781373][ C0] ? kasan_check_range+0x79/0x290 [ 465.781393][ C0] ? kasan_check_range+0x79/0x290 [ 465.781414][ C0] ? kasan_check_range+0x79/0x290 [ 465.781434][ C0] [ 465.781440][ C0] [ 465.781447][ C0] __lock_acquire+0xf3c/0x2040 [ 465.781474][ C0] lock_acquire+0x1ed/0x550 [ 465.781493][ C0] ? debug_object_active_state+0x15d/0x360 [ 465.781512][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 465.781532][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.781553][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.781578][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 465.781599][ C0] ? debug_object_active_state+0x15d/0x360 [ 465.781615][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 465.781635][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 465.781666][ C0] debug_object_active_state+0x15d/0x360 [ 465.781684][ C0] ? __pfx_debug_object_active_state+0x10/0x10 [ 465.781701][ C0] ? stack_depot_save_flags+0x29/0x830 [ 465.781719][ C0] ? mark_lock+0x9a/0x350 [ 465.781739][ C0] kvfree_call_rcu+0xb1/0x790 [ 465.781759][ C0] ? __lock_acquire+0x137a/0x2040 [ 465.781779][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 465.781803][ C0] cfg80211_update_known_bss+0xb39/0x1500 [ 465.781829][ C0] ? cmp_bss+0x8c7/0xea0 [ 465.781846][ C0] __cfg80211_bss_update+0x153/0x2170 [ 465.781863][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 465.781881][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 465.781901][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 465.781917][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 465.781934][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 465.781951][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 465.781967][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 465.781986][ C0] cfg80211_inform_single_bss_data+0xd51/0x2030 [ 465.782004][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 465.782027][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 465.782048][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 465.782072][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 465.782091][ C0] ? __kernel_text_address+0xd/0x40 [ 465.782106][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 465.782125][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 465.782144][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 465.782170][ C0] ? __pfx_validate_chain+0x10/0x10 [ 465.782196][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 465.782216][ C0] ? mark_lock+0x9a/0x350 [ 465.782236][ C0] ? __lock_acquire+0x137a/0x2040 [ 465.782267][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 465.782285][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 465.782308][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 465.782329][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 465.782349][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 465.782371][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 465.782391][ C0] ? __pfx_lock_release+0x10/0x10 [ 465.782417][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 465.782444][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 465.782464][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 465.782487][ C0] ? mark_lock+0x9a/0x350 [ 465.782508][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.782528][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.782548][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 465.782571][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 465.782595][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 465.782616][ C0] ? process_scheduled_works+0x945/0x1830 [ 465.782634][ C0] process_scheduled_works+0xa2c/0x1830 [ 465.782664][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.782686][ C0] ? assign_work+0x364/0x3d0 [ 465.782705][ C0] worker_thread+0x86d/0xd10 [ 465.782729][ C0] ? __kthread_parkme+0x169/0x1d0 [ 465.782750][ C0] ? __pfx_worker_thread+0x10/0x10 [ 465.782768][ C0] kthread+0x2f0/0x390 [ 465.782782][ C0] ? __pfx_worker_thread+0x10/0x10 [ 465.782801][ C0] ? __pfx_kthread+0x10/0x10 [ 465.782815][ C0] ret_from_fork+0x4b/0x80 [ 465.782840][ C0] ? __pfx_kthread+0x10/0x10 [ 465.782854][ C0] ret_from_fork_asm+0x1a/0x30 [ 465.782879][ C0] [ 465.783313][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 466.389953][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 466.400433][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 466.410490][ T30] Call Trace: [ 466.413783][ T30] [ 466.416729][ T30] dump_stack_lvl+0x241/0x360 [ 466.421403][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.426586][ T30] ? __pfx__printk+0x10/0x10 [ 466.431159][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 466.437148][ T30] ? vscnprintf+0x5d/0x90 [ 466.441549][ T30] panic+0x349/0x860 [ 466.445431][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 466.451569][ T30] ? __pfx_panic+0x10/0x10 [ 466.455963][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 466.461335][ T30] ? __irq_work_queue_local+0x137/0x410 [ 466.466890][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 466.472249][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 466.478387][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 466.484526][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 466.490694][ T30] watchdog+0x1033/0x1040 [ 466.495032][ T30] ? watchdog+0x1ea/0x1040 [ 466.499455][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.504118][ T30] kthread+0x2f0/0x390 [ 466.508186][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.512863][ T30] ? __pfx_kthread+0x10/0x10 [ 466.517470][ T30] ret_from_fork+0x4b/0x80 [ 466.521910][ T30] ? __pfx_kthread+0x10/0x10 [ 466.526486][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.531245][ T30] [ 466.534514][ T30] Kernel Offset: disabled [ 466.538833][ T30] Rebooting in 86400 seconds..