last executing test programs: 10.564257292s ago: executing program 2 (id=2978): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="9201008e27ad337c4f393d3c0b00000000404c054b020000000000010902240001000000000904000001030000000921e1fffff7040905810300000000ce48997e61a1f061b6280ab9242500000096db42dd5e1654245508a70d32840289004b41a7060d175a76ecac7501d332988c0a6ef3aadd562835326306cf4e247fca51ad8caa4ace571d287a54b286f67c87ad8c40fdfe65cb06eb1b20f24d0ab88778a59a1be0eb778465e63af1617f23f0e202abe8aeda4d50d073f963d387e5ee613cf789d195f9ff39aab74e8628042fd4062606da04db2d15fe0eb7e040aee888e714a3378ab3fa028b21a53c8611f1d5cf55537ba1c5d3e8bbb22565b58e31f12cb7e939c8d9ad49120191af1dcbfa29c7fec7f40bb48bbcec5d79256b9a03d2658fcf1c3aa1224bdd95884c2f27e28aa5c51ba874aaa81f244d170090a70f26ae405271e9c60da2c66dca249628685f7080e24d36555433eb6e91297ee30ae0622294606333534a4b0844df12575c9f968f488149a55038bad1b88b7330b7e85e155f43ee7a00000000000000da2a6ecd81d8d8994487b62cca2928829aac226baa3cc331d73c93ff85fb5c876dd991221879c26b5ee060d3ac25f0ac5fc96b9d03004f926729fca33493ea15d1d43b78d4bf5663cd018c11b3b841c7e400ffb62fb318f8812769e85fc24a8c39ff4fdedbd260c2e1e13c0ed96bcfd5751efc0563c83e69812191c25210aad044d2bd27e3b2a7c4938113d3bb69dab700b8518adfb92e4d08c3b345a87172c6ad0df0"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000e9", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf250500000005000500fa000000080002000600000008000400217300000800030005000000050005007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x41) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000013906c08e90f58db9be90102030109023c0001000000000904000003884f7b0009050000000000000009050000ff0300000007250100000000090500000000000000080bdb285dcef7b946c459de5a7aa9a22723b2d2156cbefc77a47e4d297826442fd1b52952d51092228b621c6a5645fd4440b922c9cd475b1e14577544027718a3f22df143b780c7b86c2222c93db0924cc262fd979d33c7c9a689bfd91edb16fafeb1f1644c8b38f6e7ad20ec23ba43c29403870640d4f427e6b4a8574cad8a"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de284211000000000001090224"], 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, 0x0, 0x0) sendmsg$kcm(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) 7.725659776s ago: executing program 0 (id=2987): unshare(0x20000400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$can_j1939(0x1d, 0x2, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x430083, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0xa, 0x6) unshare(0x4000000) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r4 = fanotify_init(0x200, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x101, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r1, 0x0) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x1}}, 0x18) lsm_get_self_attr(0x66, &(0x7f0000000100)={0x0, 0x0, 0x30, 0x10, ""/16}, &(0x7f0000000140)=0x30, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000280)) 7.428130369s ago: executing program 2 (id=2988): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0xa00, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f00000001c0), 0x0}, 0x1c) connect$inet(r1, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r0, 0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000fc0)={0x40, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x40}}, 0x0) r6 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x5, 0x5, 0x0, 0xbc, 0x2, 0x3e, 0x24, 0x3e8, 0x40, 0x1b4, 0x5, 0xe8, 0x38, 0x4, 0x1, 0x5}, [{0x7, 0x0, 0x100000000, 0x7, 0x5, 0x720f, 0xf}, {0x3, 0x4, 0x6, 0xff, 0x5, 0x2b, 0x100000000, 0xff}, {0x3, 0x4, 0x7, 0x1ff, 0xb3f4, 0x6, 0xfe0, 0x9}, {0x4, 0x6, 0x46, 0x9, 0x4, 0x1, 0x4, 0x8000000000000000}], "9436828a2dc43b439d9512d58a55db49e56a2c0beaf492250fc8ab7fb69d56afd5b68a7243a7557fdc5994e1b840fc0581fe5ace2c42846417b7d65355d9a9387dab91093023e03480940bbfd448c007d26d3ebed9748b07c7c17dc9b78bda122ff6ffecca7b1062dea44f223729c87a2ef68dac180ddede31f6900be44ac7295d8405212527bb0efca03ad86c5bbe9e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7f36d088d0e0020c6210000000109022f0001000000000904000000db02ef00052406"], 0x0) syz_usb_connect(0x3, 0x971, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x3f, 0x9c, 0x7c, 0x40, 0x1514, 0x2008, 0x882c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95f, 0x4, 0xba, 0x7, 0x80, 0x81, [{{0x9, 0x4, 0x2, 0xd, 0x3, 0x5a, 0xfc, 0xef, 0xf, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x205, 0x5, 0x2, 0xb, 0x78, 0x91}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0xe, 0x3, "dfc45421e9"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x1, 0x4, 0xf8}, @processing_unit={0xa, 0x24, 0x7, 0x3, 0x2, 0x3, "9ca46c"}]}], [{{0x9, 0x5, 0x89, 0x1, 0x40, 0xfa, 0x1, 0xb4, [@generic={0xe6, 0xf, "a3be3d9cc98af01d894c376fde611ebded89c1d3739dc6ce56a2124ec10a988c8b7132db6fd94c677b045f04468e4f2400e0761291b3fea29e7c661fc0a75b328d7565c5fae7a705278e5cc6ced82e0b427d6f4c81e2627f6e2ee00dc19a9b66644fa4909534efb91ab8ca6bb768cce3a5193ffe40011ac3194ea377884caff64c8171a3b25344aeaa6b3d1b2a3dfaa68b680c1136d3a22be02a24df0c73cbd60dd1d261fba9abea0b63e6e57208177778d61fb460394ef049cdca15cf211b9d03ce74b423c4036e0de575d82b6cced44906497334710ec263fb23e8b1005e1a1bb0abce"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x9, 0x4, 0x4a}}, {{0x9, 0x5, 0x80, 0x0, 0x1a7, 0x81, 0x0, 0x7, [@generic={0x97, 0xa, "4c87806a9aafacc6f435cc619c8a27b7adeca1ced9fe5d3c11c21727683ebc5e09f0339f33de97d2178f5eee9fdcb64f6bc494870a02f474b93b17974fd6a9c26c0d4460abaf2e0efe3b7ead2514379c73c2c921895691da3b1c5a222ae2bde1d69f221dd87568b2f6aa6f3364ec4c9194590ae8342d5ca84adcfc896c2c2f0947de82136c1d38cd7cb441814e9d10715ce45e4f52"}]}}]}}, {{0x9, 0x4, 0xe, 0x66, 0x7, 0x4b, 0xcf, 0x5e, 0x3, [], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0xb4, 0x9, [@generic={0xb3, 0x21, "f6763a3bf3efb3b386b00382f6eaee09ba5a87bc9d9cb02d96438345fdea35a9b8aefa081f620f09663e1c11d139c085fdce1705c97d14737f0042992cb0e1d967f392b98a742695280f21f1b9ac3d1145fac96064e74f65037800fa4e5fe0b2595b46aa415f1200519c845bd862d18c65aa0cf17d125592a38f7fe6eb1686719b3d25c6cc118beffbd32fef754e106124b7d518dae189c9e5881e4fa0e1540ad2e7e46f3365f1f50780ab3066f7f016c7"}, @generic={0xaa, 0x3, "94c1f7ee6c92be5ce54ac11249397c3800dee7bcb28283696129bf005ce69c01ca14ab525c797e7f0006324449d35eacacc8cf9f75e08713cfbbcaa19c96a0f5b7aad35954f52807c590811af5f3d2b04801540a7bfdb5b4e7c0070609bed5ce24b3d1f7aa0db30c29676d3276c71cfb6b8d8a8f701ea6b87b12f52b07140f67815accbd9f5849607f63cbfd68f9a5262da8230413d4fa3f3625dd0e18c5015d32056925de6123e0"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x0, 0x95, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x2, 0xf, 0x3ff, 0x7f, 0x1, 0x4}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x2, 0x35, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x100}, @generic={0x3e, 0x9, "6315d589d1c4fd9e0186d0e3c12258100d6f042e62100b7ec4b6968cca9bc52543a466565b929df8046c9823e65e10d32f95155327cd5962fdf23343"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x5, 0x2, 0x3a, [@generic={0x39, 0x22, "fc77d9075492aa8f145df729381395f758a68de41e699162f0bdda37756876cbfc4e901eb0cd13ebcbc64c2ca6125a7f594220d10a0b46"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x20, 0x4, 0x3, 0x6, [@generic={0xfb, 0x22, "e5fd22a8ab29f993378222e85b217383352c25c7491b6b8dffb0c4ee09732062c590f97909a2baff4cc60da0675d922de86e28084f27d961731dc8d299d36cc350e329e32655c3a9f5e2ade24acbe9e7156505868a7eda4e0f37711aa729ddb45e0bcb311dbf142c15e5e521313a2a5415ccffb3863ff24c521054d8b352d859889b12ec602d936f5ded468a33f675dea417e50160ad1e5e00fcb5b8100fb8d6ed6f83e4a6baa476afcc0a3c5afad793ad2754e31004ccea41afca38d2da6e66e78a203a62e1a8cb506cddc735bd5bd6003179331c94716f42e19f99f552f8233ddbf6c5aedc0f4664debd1206cf03fbcc4fa530d6e78dafb5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x7ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x5, 0x80, 0x87}}]}}, {{0x9, 0x4, 0x23, 0x4, 0x9, 0x79, 0xd2, 0x96, 0x0, [], [{{0x9, 0x5, 0xe, 0x10, 0x200, 0xc, 0xe, 0xf}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x38, 0xf, 0x9f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0xbd}]}}, {{0x9, 0x5, 0xe, 0x6, 0x40, 0xf, 0x3, 0x6}}, {{0x9, 0x5, 0xa, 0x16, 0x400, 0x9, 0x6, 0xaa, [@generic={0xb3, 0xb, "220be3205329a3d24bcd7935f5506b6e0dd2bf540a17b1ae2fdc301d63a0b19afa7951f09235e3f50e1e6db9132a5b99e084ff9e0e9d2a3db6a4bb08b4c1db6e00147f3ef2be405abbb93469fb4b719463429256892129c3a5a0bfbfe116ddc7de98eb4950bb55ab2ac05a060f47490c29b24852a8028094959ed394bba2870cdd799e7dca9d32ae466bb44e284677da22641b7a68f9c13ff05a23d320261c57853b7f9e8b064bfcf2a79488a193dc4c4f"}, @generic={0xc4, 0xc, "8f5771ba0d654b46674a191db6ef50da839cdf8f3311ee8c6c7925d2b1b2602eb255a42d867b6bce2bdbc85a780dfd6b07c6e9700eed0c56f39de40c4a879b52d3d793cb55bdae66a1aada7a19f57103066248b9cfea2ee2ed644cb2b774c0f90641fab12b2fab114477ba9ca9fa09d56352cce69c492139d1fd3e0a602de45ec5fd129d5d90df190abdd62fcfb93c3b8286b189dfb9bd24afd24f2a65f700a6f8d054e579ac6b27f2720f4e7de6bbe1e496f84e549674cdee8201fc0a6f0bcb0b2d"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x2d, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x1, 0x81, 0x44}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x1, 0x9, 0xd, [@generic={0x4d, 0x23, "63c989134c80714d3d1477142e56fbaae0873af1c16af1c51f5cd5b0555b2a87375aa423ba9972cac0fa02e70693a8899b445612c0e877600dd176ccdc4463b5e28702ad5c95eaf30a6919"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x7, 0xc, 0x3}}, {{0x9, 0x5, 0x7, 0x2, 0x0, 0x3, 0x2, 0x2d, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x71, 0x7}, @generic={0xd9, 0x31, "b60043e70099f1c462e5d4d170ebb22328898819d87799253c02135725dc6ef7762227ef64cab9cceec29b433c45b0f03c200816367d9519b4b4cd311d17b60550e0a3fa29b3d940853fb89582918a9db6e96b94caed0e090965f72691dca6311cb6977a9bd4a0301b8b28e1f5357d6c44e012428b01ad965ed31bc32115a8426aec05624c8a62b50bb6dbf5cb82a48f7f3f8a0d749ba657db2f5a6bd102f4b313353fbace13fef3bbbbf24dc45f9d5d6826669c86dfc50c0d897949b8077cb72728f4d0fedc0eb3425e1a3bbce23fddbe5e4262c23d41"}]}}]}}, {{0x9, 0x4, 0x71, 0x0, 0x7, 0x4f, 0x4d, 0x45, 0x4, [], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x3, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xfb, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x7, 0x43, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x240, 0x4, 0x81, 0x9, [@generic={0x2c, 0x5, "f11741cb4ac12e114961db086c5824991dae6e216f59b21dc5b5d1a0d9057c0c879dfdf6abf358eed30d"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x0, 0xf9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xee}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xa3, 0x7, 0x0, [@generic={0xa4, 0x22, "af0dcca12abf7afe7df88de0ae6e04b51e112428834730905219477b2d2aa5f1510846b42e86b46c00cac6c3041591cf205dbd907788a5ef49bca97c2f1277797eee8e54eaa34da0d4d8171db1121d24830de0074ebe606376e3df7b7ef2be72a8043c18d822faafdff1d65b38622a76bc65781b67eb05b5fdbee6fa9ebc1306b5e4763a400c33d5d10747129e955e2bda71769749ca14a652e5a842f8cd07728797"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x9}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0xe5, 0x12, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x355}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0xe, 0x5, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0xc}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x400, 0x8c, 0x5, 0x4, 0x20, 0x1}, 0x5, &(0x7f0000000c00)={0x5, 0xf, 0x5}, 0x3, [{0xda, &(0x7f0000000c40)=@string={0xda, 0x3, "a1d186ff3ae45bffab3204882731f8bf4c22c91b0320c4df6d1b6b50ce15f24952ab7d147fd3dc4b03cb89b763948c43b89b46834b65252b0ca44681a68fb96d0d9e3ccac9c9c2b82d9972c1ec0609bbac10380a1889a805a049549e96a3e5bef74919873af58c1d9dfe63c0eaf64e2b806e8e108d4960d1bddc12ea9e28272a6ab7d88e505cf6b96bb4bb89984b40fc0d8e6450ab5ad2a85c828fb56b351a3bb28e748ec8e88742e131ba23ee6d40bca2de4a6579b6080532e90beb84d69051c38b33bf7fd06773bda583e1d1b4ce3854f074a91e5b148a"}}, {0x0, 0x0}, {0x0, 0x0}]}) 7.347858431s ago: executing program 0 (id=2989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.844999599s ago: executing program 4 (id=2991): syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[], 0x0) 6.689341847s ago: executing program 4 (id=2992): r0 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0f8565c, &(0x7f0000000140)={0x0, 0x6, 0x4, 0x2, 0x0, {}, {0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, "7036fafa"}}) 6.53365225s ago: executing program 4 (id=2993): sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2400c044, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006294a1816dda7f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000000000000000c000140001"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 4.885221228s ago: executing program 0 (id=2996): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x1e33994e) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000040)) 4.44164004s ago: executing program 0 (id=2998): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="62000000000000007b0a00ff000000001d0a000000000000950000000000000018100000", @ANYRES64=0x0], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000740)="9eef54e5944fc65c03fa46bd0333c0e257b8bba035fff98603e44d6b4f7955b4313cdcda89a4ff796aadb83576ad3c7d6e03bee41f66d72db10257e8ac7b4afb2c6397688663e6fae9e297f3fc30a0e1e98f1c70b3606ac6823dfbb8313ea23615ad83ba54e36856f5552d59c9084413efe747bfca6df4d82069b2aabd51578b3f3f2081178397d6b86e4b6deec6b7906b2c593c05fbd3edd8aeda394e8ae6120f", 0xa1}, {&(0x7f0000000880)="a23ec0f8ac4a27b244cdff5012a6658732d75ce2d81d71087ea3dcfcf3b64f09007dae848496877a460c9ae81a484ebcabf5cbf511810535a3badc8f896cf40bc4ede9cee042a4d2753e0e1cc0b05b9d2ed4ccb08173a6bde0e954123f7f98957cea80652bb6ae6dd1c00030b443c13f9958bad6d947cc98d04bd9ad6db25a7fad70ce87698552515cb904f334f16c6c16f2813ac1ae83d7d81bde66635c52aabd7925e9fac92728e9775361ccd6db0b77132907c356aea706136bf88f49405e4f94768af0affc8a6cb85e54211f4d23661be6c3", 0xd4}], 0x2, 0xa85, 0x1) socket$inet6(0xa, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000001780)={&(0x7f00000016c0), 0xc, &(0x7f0000001740)={0x0}, 0x1, 0x0, 0x0, 0xe010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2218, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000600)=0x14) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x400000000c882, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1d, 0x1, 0xe1, 0x8, 0x4, r3, 0x9, '\x00', r4, r6, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="080029bd7000fedbdf25010000000900030073797a304319d65cf2b157a5240994a5000000000900742fe4ea41ba4fd8a434030073797a32000000000900030073797a31000000000900030073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xd1) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x8010) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r7, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) connect$packet(r3, &(0x7f00000006c0)={0x11, 0x5, r4, 0x1, 0x77, 0x6, @broadcast}, 0x14) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='#', 0x1}], 0x1}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8010000100013070000000000000000fe8000000000000000000000000000bbac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) 4.295029209s ago: executing program 2 (id=2999): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000020605000000000000000000000000000900020073797a"], 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103000000092100000001330700090581"], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.333526393s ago: executing program 4 (id=3004): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0x100, 0x2, 0x0, 0x101}, {0x366, 0x7, 0x8, 0x10000}, {0x8, 0x3, 0x8, 0x4}, {0x8, 0xf, 0xab, 0x2}, {0x2, 0x0, 0x7, 0xdbd}]}) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/99, 0x63}) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000004c0)={{r0}, "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"}) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0x69, 0x9}}]}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@global=@item_4={0x3, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0xa, "a8d4a4d5"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) 3.333147458s ago: executing program 0 (id=3005): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) 3.242750278s ago: executing program 0 (id=3006): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = creat(0x0, 0x0) unlink(0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0xffffffff, 0x1}}, 0x11c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000900)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x8004) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x1208256, 0x441, 0xffff}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4882, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000280)={0x3, 0x5, 0x98, &(0x7f0000000400)=""/152}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x13, r7, 0x3000) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 2.840772796s ago: executing program 2 (id=3007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x50}}, 0x0) 2.641503841s ago: executing program 2 (id=3008): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000008c0)={"8a2596dd", 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000081", "643aa6bf", "69c7c4a9", "f7bf0700", ["87b700", "275f27336448602a553ae850", "5d6fd1214703bf778b51fce0", "4973dce60c23eb4573635a16"]}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500010000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e17c5ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2", @ANYRES64, @ANYRESHEX=r1, @ANYRESOCT=r0], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa1e7f51611b05bfa, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400040082c104003e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = userfaultfd(0x80001) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000180000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='fsi_master_gpio_out\x00', r4}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0xc6300, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) ioprio_set$pid(0x1, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$UFFDIO_CONTINUE(r3, 0xc028aa03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="756e896f636b206e6f6e6500"], 0xc) fcntl$dupfd(r2, 0x406, r5) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) recvfrom$inet6(r7, &(0x7f0000000940)=""/4096, 0x1000, 0x41, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}, 0x1c) 2.392895903s ago: executing program 3 (id=3009): fdatasync(0xffffffffffffffff) 2.153798723s ago: executing program 3 (id=3010): mmap(&(0x7f00004a0000/0x2000)=nil, 0x2000, 0xb635773f07ebbee3, 0x8010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = openat$binderfs_ctrl(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x6}) socket$qrtr(0x2a, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.78070605s ago: executing program 3 (id=3013): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010001000000000000800600575fb38b26a77ae5cc3b66651008"], 0x40}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_gettime(0x0, &(0x7f0000000000)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000019"]) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0xcfb9cc821fc0631b, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "182a167fb8683154c59f6736fae00ac7"}, @md5sig={0x13, 0x12, "ed2cb3d053ef96b64f3d6d860b3dc5d2"}]}}}}}}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) dup(r4) io_cancel(0x0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r8 = dup2(r0, r0) read$FUSE(r8, &(0x7f00000043c0)={0x2020}, 0x1e0f) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000100)=""/212, &(0x7f0000000200)=0xd4) socket$inet_smc(0x2b, 0x1, 0x0) 1.707424802s ago: executing program 2 (id=3014): sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2400c044, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="000000006294a1816dda7f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000000000000000c000140001"], 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x0, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, 0x8}, 0xe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 1.553488526s ago: executing program 3 (id=3015): syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[], 0x0) 1.553170374s ago: executing program 4 (id=3016): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0) 1.515000763s ago: executing program 3 (id=3017): openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000020605000000000000000000000000000900020073797a"], 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000000866660488000000000001090224000100000000090400000103000000092100000001330700090581"], 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.349538139s ago: executing program 4 (id=3019): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = gettid() r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000500)="ce6d262f34b71e03031a4e3d46aa06fbd48d53c3e1a89401aeefcb9dd0c60fee54b21d92d18519f888902f04f42b422c088da11ed058a96d9484e9ec67d1a93324666d57b19d924d692902bf2fc093651115d63b27a97917ac8a05057495e106", 0x60}, {&(0x7f0000000280)="e6cb52f62e79a6185dd87ae1d48354e21677b22be6e8da7c3600f26bf9e537b2e092b9dd03a201500ad4c6ab74fc4ee6f4423c0b1b21410b", 0x38}, {&(0x7f0000000300)="7c749dbe974212dc7e17ef643c3ed7cad54b84717a82b895eaec6c8dee22f721c2801c4fe9795d87da620aa4b6403fea104cff7409c68d0a398734903566051abde56d4654fa18ffaba5a5f745fabe3438775ac9ac434eb5b1dac1f6f761316792f3", 0x62}, {&(0x7f00000006c0)="fff88b4088f9524497442fad17eeb95d4b8a4540a6e34345a32506b1afa91e13562c1d24a3a39f4dd5903d8193cc49b81e1c9e9908b26363b3ab99740f06fe2a6126d97914dec6", 0x47}], 0x4}}], 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000001c0)='ns/time_for_children\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) personality(0x400000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000d, 0x4031, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x110, 0x14, 0x0, &(0x7f0000000780)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x81) 1.265457293s ago: executing program 1 (id=3020): r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) fdatasync(r0) 1.127842639s ago: executing program 1 (id=3021): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) set_mempolicy_home_node(&(0x7f00002ec000/0x1000)=nil, 0x1000, 0x0, 0x0) 893.810955ms ago: executing program 1 (id=3022): r0 = eventfd2(0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) (fail_nth: 1) 546.775668ms ago: executing program 1 (id=3023): r0 = eventfd2(0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 456.525087ms ago: executing program 1 (id=3024): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f0000000880)=""/116, 0x74}, {&(0x7f00000001c0)=""/44, 0x2c}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x7, &(0x7f0000000340), 0x0, 0x0) mremap(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000b23000/0x1000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9}}}, 0x8) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x40004) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x17, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x40000010, 0x1a582) mmap$fb(&(0x7f0000d6e000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0xda000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000200)={r6, r10, r7, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) 297.349986ms ago: executing program 1 (id=3025): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010001000000000000800600575fb38b26a77ae5cc3b66651008"], 0x40}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_gettime(0x0, &(0x7f0000000000)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000019"]) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0xcfb9cc821fc0631b, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "182a167fb8683154c59f6736fae00ac7"}, @md5sig={0x13, 0x12, "ed2cb3d053ef96b64f3d6d860b3dc5d2"}]}}}}}}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) dup(r4) io_cancel(0x0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r8 = dup2(r0, r0) read$FUSE(r8, &(0x7f00000043c0)={0x2020}, 0x1e0f) getsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000100)=""/212, &(0x7f0000000200)=0xd4) socket$inet_smc(0x2b, 0x1, 0x0) 0s ago: executing program 3 (id=3026): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x2, @local, 'vxcan1\x00'}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24}, 0x24}}, 0x0) socket(0x16b434974aafeae0, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r1 = gettid() openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) write$binfmt_misc(r5, &(0x7f0000000080), 0x2000088e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'xfrm0\x00', 0x100}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) unshare(0x8040480) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) semget(0x3, 0x3, 0x103) r6 = syz_open_procfs(0x0, 0x0) fchdir(r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="67a9"], 0x3}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) kernel console output (not intermixed with test programs): ] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.008037][T17695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.008067][T17695] RIP: 0023:0xf7f11579 [ 643.008086][T17695] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 643.015539][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 643.018354][T17695] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 643.018383][T17695] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 643.023607][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.027709][T17695] RDX: 000000000400c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.027727][T17695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.027739][T17695] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 643.027752][T17695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.027778][T17695] [ 643.250776][ T3040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.349944][T17697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.401758][T17697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.471158][ T5282] usb 1-1: usb_control_msg returned -71 [ 643.487332][ T5282] usbtmc 1-1:16.0: can't read capabilities [ 643.506048][ T5282] usb 1-1: USB disconnect, device number 116 [ 643.526759][ T3040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.841039][ T3040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.094618][T17710] wg1: entered promiscuous mode [ 644.132963][ T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 644.191255][T17699] chnl_net:caif_netlink_parms(): no params data found [ 644.291351][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2877'. [ 644.413283][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 644.420261][ T47] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 644.443767][ T47] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 644.451634][ T47] usb 2-1: can't read configurations, error -61 [ 644.710209][ T3040] bridge_slave_1: left allmulticast mode [ 644.720190][ T3040] bridge_slave_1: left promiscuous mode [ 644.733324][ T3040] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.832619][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 644.878406][ T3040] bridge_slave_0: left allmulticast mode [ 644.894650][ T3040] bridge_slave_0: left promiscuous mode [ 644.910274][ T3040] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.012678][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 645.029012][ T47] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 645.045184][ T47] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 645.080926][ T47] usb 2-1: can't read configurations, error -61 [ 645.102730][ T47] usb usb2-port1: attempt power cycle [ 645.123637][ T5235] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 645.313159][ T5235] usb 4-1: Using ep0 maxpacket: 8 [ 645.322032][ T5235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.344172][ T5235] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.377318][ T5235] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 645.386829][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.397189][ T5237] Bluetooth: hci1: command tx timeout [ 645.443511][ T5235] usb 4-1: config 0 descriptor?? [ 645.485169][ T47] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 645.541521][ T5235] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 645.584135][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 645.590101][ T47] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 645.609171][ T47] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 645.617002][ T47] usb 2-1: can't read configurations, error -61 [ 645.639499][T17757] FAULT_INJECTION: forcing a failure. [ 645.639499][T17757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.654632][T17757] CPU: 1 UID: 0 PID: 17757 Comm: syz.0.2884 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 645.665443][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 645.675522][T17757] Call Trace: [ 645.678816][T17757] [ 645.681787][T17757] dump_stack_lvl+0x241/0x360 [ 645.686466][T17757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.691657][T17757] ? __pfx__printk+0x10/0x10 [ 645.696261][T17757] ? __pfx_lock_release+0x10/0x10 [ 645.701300][T17757] ? __lock_acquire+0x1384/0x2050 [ 645.706326][T17757] should_fail_ex+0x3b0/0x4e0 [ 645.711182][T17757] _copy_from_user+0x2f/0xe0 [ 645.715784][T17757] kstrtouint_from_user+0xc6/0x190 [ 645.720924][T17757] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 645.726657][T17757] ? __pfx_lock_acquire+0x10/0x10 [ 645.731685][T17757] proc_fail_nth_write+0xaa/0x2d0 [ 645.736720][T17757] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 645.742643][T17757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 645.748311][T17757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 645.753981][T17757] vfs_write+0x29c/0xc90 [ 645.758257][T17757] ? __pfx_vfs_write+0x10/0x10 [ 645.763045][T17757] ? __fget_files+0x3f3/0x470 [ 645.767728][T17757] ? fdget_pos+0x24e/0x320 [ 645.772145][T17757] ksys_write+0x183/0x2b0 [ 645.776476][T17757] ? __pfx_ksys_write+0x10/0x10 [ 645.781321][T17757] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 645.787912][T17757] ? lockdep_hardirqs_on+0x99/0x150 [ 645.793112][T17757] __do_fast_syscall_32+0xb4/0x110 [ 645.798220][T17757] ? exc_page_fault+0x590/0x8c0 [ 645.803071][T17757] do_fast_syscall_32+0x34/0x80 [ 645.807916][T17757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 645.814238][T17757] RIP: 0023:0xf7f76579 [ 645.818302][T17757] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 645.837904][T17757] RSP: 002b:00000000f56b45a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 645.846324][T17757] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56b4620 [ 645.854291][T17757] RDX: 0000000000000001 RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 645.862257][T17757] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 645.870221][T17757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 645.878185][T17757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 645.886162][T17757] [ 645.962914][ T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 645.993405][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 645.999342][ T47] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 646.022352][ T47] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 646.031867][ T25] usb 4-1: USB disconnect, device number 104 [ 646.047196][ T47] usb 2-1: can't read configurations, error -61 [ 646.061313][ T47] usb usb2-port1: unable to enumerate USB device [ 646.162585][ T3040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.175494][ T3040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.185991][ T3040] bond0 (unregistering): Released all slaves [ 646.214491][T17749] bridge0: port 3(ipvlan2) entered blocking state [ 646.221054][T17749] bridge0: port 3(ipvlan2) entered disabled state [ 646.230354][T17749] ipvlan2: entered allmulticast mode [ 646.236105][T17749] bridge0: entered allmulticast mode [ 646.243938][T17749] ipvlan2: left allmulticast mode [ 646.250333][T17749] bridge0: left allmulticast mode [ 646.340222][T17699] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.347794][T17699] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.362137][T17699] bridge_slave_0: entered allmulticast mode [ 646.369960][T17699] bridge_slave_0: entered promiscuous mode [ 646.409815][T17699] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.422273][T17699] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.450639][T17699] bridge_slave_1: entered allmulticast mode [ 646.466355][T17699] bridge_slave_1: entered promiscuous mode [ 646.591363][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.649095][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.842675][ T3040] hsr_slave_0: left promiscuous mode [ 646.860477][ T3040] hsr_slave_1: left promiscuous mode [ 646.870420][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 646.889084][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.907197][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.922883][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.932148][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.973166][ T3040] veth1_macvtap: left promiscuous mode [ 646.981756][ T3040] veth0_macvtap: left promiscuous mode [ 646.999859][ T3040] veth1_vlan: left promiscuous mode [ 647.008183][ T3040] veth0_vlan: left promiscuous mode [ 647.442996][ T5282] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 647.478930][ T5237] Bluetooth: hci1: command tx timeout [ 647.597133][ T5282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.608879][ T5282] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 647.620025][ T5282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 647.630744][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.655511][ T5282] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.663957][ T5282] usb 1-1: invalid MIDI out EP 0 [ 647.781379][ T8643] udevd[8643]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 647.829153][ T3040] team0 (unregistering): Port device team_slave_1 removed [ 647.868399][ T5282] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 647.915582][ T3040] team0 (unregistering): Port device team_slave_0 removed [ 648.410201][T17807] loop7: detected capacity change from 0 to 16384 [ 648.638029][T17808] loop7: detected capacity change from 16384 to 0 [ 648.648774][T17777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2888'. [ 648.749996][T17699] team0: Port device team_slave_0 added [ 648.810442][T17699] team0: Port device team_slave_1 added [ 649.045413][T17699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.067286][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.093268][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.146967][T17699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.214843][T17699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.238292][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.257360][ T47] usb 1-1: USB disconnect, device number 117 [ 649.264264][ C0] vkms_vblank_simulate: vblank timer overrun [ 649.297039][ T5282] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 649.350127][T17699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.473225][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 649.501278][ T5282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.516395][ T5282] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 649.533488][ T5282] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 649.554764][ T5237] Bluetooth: hci1: command tx timeout [ 649.563208][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.574833][ T5282] usb 3-1: config 0 descriptor?? [ 649.583546][ T5282] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 649.617923][T17699] hsr_slave_0: entered promiscuous mode [ 649.626359][T17699] hsr_slave_1: entered promiscuous mode [ 649.634438][T17699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.642139][T17699] Cannot create hsr debugfs directory [ 649.950444][ T5282] usb 3-1: USB disconnect, device number 104 [ 650.192924][ T47] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 650.818934][T17699] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 650.867031][T17699] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 650.889261][T17699] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 650.965528][T17699] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 651.160954][T17699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.169733][ T47] usb 1-1: device descriptor read/64, error -71 [ 651.189958][T17870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2905'. [ 651.244056][T17872] binder: BINDER_SET_CONTEXT_MGR already set [ 651.250466][T17872] binder: 17871:17872 ioctl 40046207 0 returned -16 [ 651.367459][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.434929][T17699] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.442689][ T47] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 651.464091][T17872] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.471360][T17872] IPv6: NLM_F_CREATE should be set when creating new route [ 651.478690][T17872] IPv6: NLM_F_CREATE should be set when creating new route [ 651.550575][ T2545] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.557751][ T2545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.610317][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.614139][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.617587][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.636970][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.646928][ T5237] Bluetooth: hci1: command tx timeout [ 651.684158][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.741792][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.771144][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.796001][ T47] usb 1-1: config 0 descriptor?? [ 651.842635][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.011931][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.089607][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.102815][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.111542][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.122077][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.132315][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 652.153405][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.195880][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 652.216901][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.220089][ T47] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 652.240195][ T47] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 652.315466][T17699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.346467][T17699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.376148][T17699] veth0_vlan: entered promiscuous mode [ 652.387253][T17699] veth1_vlan: entered promiscuous mode [ 652.555909][T17699] veth0_macvtap: entered promiscuous mode [ 652.629902][T17699] veth1_macvtap: entered promiscuous mode [ 652.805250][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.826999][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.837454][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.848312][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.860656][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.871618][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.884014][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.895011][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.917207][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.939276][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.962287][T17699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.147740][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.169533][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.198605][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.235452][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 653.242658][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.242714][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.242734][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.242751][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.242765][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.242782][T17699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 653.242796][T17699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.244227][T17699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.332237][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 653.341657][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 653.350131][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 653.357824][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 653.365332][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 653.484196][T17903] chnl_net:caif_netlink_parms(): no params data found [ 653.518371][T17699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.531788][T17699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.541794][T17699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.565858][T17699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.707688][ T35] bridge_slave_1: left allmulticast mode [ 653.716443][ T35] bridge_slave_1: left promiscuous mode [ 653.722261][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.750450][ T35] bridge_slave_0: left allmulticast mode [ 653.763376][ T35] bridge_slave_0: left promiscuous mode [ 653.769131][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.066516][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 654.103500][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 654.117440][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 654.131032][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 654.146576][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 654.154536][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.195531][ T5237] Bluetooth: hci0: command tx timeout [ 654.361689][ T47] usb 1-1: USB disconnect, device number 119 [ 654.780534][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.797444][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.816630][ T35] bond0 (unregistering): Released all slaves [ 654.902309][T17963] wg1: entered promiscuous mode [ 655.008259][T17903] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.018618][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.027220][T17903] bridge_slave_0: entered allmulticast mode [ 655.052847][T17903] bridge_slave_0: entered promiscuous mode [ 655.067465][T17903] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.075049][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.082405][T17903] bridge_slave_1: entered allmulticast mode [ 655.090520][T17903] bridge_slave_1: entered promiscuous mode [ 655.213477][T17903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.314504][T17903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.354733][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.369611][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.377963][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.393383][ T5237] Bluetooth: hci4: command tx timeout [ 655.393733][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.477998][T17903] team0: Port device team_slave_0 added [ 655.499245][T17903] team0: Port device team_slave_1 added [ 655.554688][T17993] syzkaller1: entered promiscuous mode [ 655.562845][T17993] syzkaller1: entered allmulticast mode [ 655.722598][T18007] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2921'. [ 656.028625][ T35] hsr_slave_0: left promiscuous mode [ 656.055060][ T35] hsr_slave_1: left promiscuous mode [ 656.085912][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.110350][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.121225][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.132089][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.176681][ T35] veth1_macvtap: left promiscuous mode [ 656.183913][ T35] veth0_macvtap: left promiscuous mode [ 656.189662][ T35] veth1_vlan: left promiscuous mode [ 656.195540][ T5237] Bluetooth: hci3: command tx timeout [ 656.209699][ T35] veth0_vlan: left promiscuous mode [ 656.276643][ T5237] Bluetooth: hci0: command tx timeout [ 656.952085][ T35] team0 (unregistering): Port device team_slave_1 removed [ 657.014638][ T35] team0 (unregistering): Port device team_slave_0 removed [ 657.405586][T17903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.414058][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.440773][T17903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.482674][ T5237] Bluetooth: hci4: command tx timeout [ 657.483994][T17930] chnl_net:caif_netlink_parms(): no params data found [ 657.505836][T18038] netlink: 'syz.4.2925': attribute type 27 has an invalid length. [ 657.553407][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.560829][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.639708][T18038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.654647][T18038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.725809][T18038] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.736279][T18038] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.745252][T18038] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.756146][T18038] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.817784][T18039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.827309][T18039] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.839350][T18039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.860685][T18040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.881917][T17903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.912571][T17903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.940585][T17903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.136654][T17903] hsr_slave_0: entered promiscuous mode [ 658.170785][T17903] hsr_slave_1: entered promiscuous mode [ 658.181596][T17903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.198656][T17903] Cannot create hsr debugfs directory [ 658.216238][T17951] chnl_net:caif_netlink_parms(): no params data found [ 658.272609][ T5237] Bluetooth: hci3: command tx timeout [ 658.281994][T18048] bridge0: port 3(ipvlan2) entered blocking state [ 658.303461][T18048] bridge0: port 3(ipvlan2) entered disabled state [ 658.310260][T18048] ipvlan2: entered allmulticast mode [ 658.332724][T18048] bridge0: entered allmulticast mode [ 658.338831][T18048] ipvlan2: left allmulticast mode [ 658.344024][T18048] bridge0: left allmulticast mode [ 658.365698][ T5237] Bluetooth: hci0: command tx timeout [ 658.404877][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.423483][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 658.435415][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 658.449968][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 658.458592][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 658.468004][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 658.635868][T17930] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.662411][T17930] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.670077][T17930] bridge_slave_0: entered allmulticast mode [ 658.703686][T17930] bridge_slave_0: entered promiscuous mode [ 658.770030][T17930] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.782145][T17930] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.792946][T17930] bridge_slave_1: entered allmulticast mode [ 658.799851][T17930] bridge_slave_1: entered promiscuous mode [ 658.888139][T17930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.940360][T17951] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.956367][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.970880][T17951] bridge_slave_0: entered allmulticast mode [ 658.981715][T17951] bridge_slave_0: entered promiscuous mode [ 658.992687][ T9] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 659.015905][T17930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.035172][T17951] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.042316][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.055320][T17951] bridge_slave_1: entered allmulticast mode [ 659.062312][T17951] bridge_slave_1: entered promiscuous mode [ 659.148421][T17930] team0: Port device team_slave_0 added [ 659.157464][ T9] usb 5-1: config 0 has no interfaces? [ 659.168699][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 659.173055][T17930] team0: Port device team_slave_1 added [ 659.178430][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.192215][ T9] usb 5-1: Product: syz [ 659.196799][ T9] usb 5-1: Manufacturer: syz [ 659.201422][ T9] usb 5-1: SerialNumber: syz [ 659.208994][ T9] usb 5-1: config 0 descriptor?? [ 659.250950][T17951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.295287][T17951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.323240][T17930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.330399][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.357288][T17930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.397397][T17930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.405484][T17930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.432124][T17930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.521081][T17951] team0: Port device team_slave_0 added [ 659.534699][T17951] team0: Port device team_slave_1 added [ 659.542256][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2931'. [ 659.551534][T18065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2931'. [ 659.562010][ T5237] Bluetooth: hci4: command tx timeout [ 659.576518][T18065] vlan2: entered allmulticast mode [ 659.610627][T17930] hsr_slave_0: entered promiscuous mode [ 659.617425][T17930] hsr_slave_1: entered promiscuous mode [ 659.625852][T17930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.633641][T17930] Cannot create hsr debugfs directory [ 659.639238][T18076] bridge_slave_1: left allmulticast mode [ 659.648804][T18076] bridge_slave_1: left promiscuous mode [ 659.656186][T18076] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.669211][T18076] bridge_slave_0: left promiscuous mode [ 659.676259][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.852409][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.925690][T17951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.933248][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.964069][T17951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.999479][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.023526][T17951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.050424][T17951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.099158][T17951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.153538][ T47] usb 5-1: USB disconnect, device number 113 [ 660.181833][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.213649][T18054] chnl_net:caif_netlink_parms(): no params data found [ 660.277089][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 660.287594][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 660.298413][ T35] bridge0: port 3(netdevsim0) entered disabled state [ 660.309552][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.354723][ T5237] Bluetooth: hci3: command tx timeout [ 660.383420][T17951] hsr_slave_0: entered promiscuous mode [ 660.390018][T17951] hsr_slave_1: entered promiscuous mode [ 660.396433][T17951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.404156][T17951] Cannot create hsr debugfs directory [ 660.445628][ T5237] Bluetooth: hci0: command tx timeout [ 660.452075][T17903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.467592][T17903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.512659][ T5237] Bluetooth: hci2: command tx timeout [ 660.520383][T17903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.529730][T17903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.617266][T17930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.646995][T18054] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.659161][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.666556][T18054] bridge_slave_0: entered allmulticast mode [ 660.674010][T18054] bridge_slave_0: entered promiscuous mode [ 660.682325][T18054] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.691404][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.698757][T18054] bridge_slave_1: entered allmulticast mode [ 660.706602][T18054] bridge_slave_1: entered promiscuous mode [ 660.779228][T17930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.851397][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.874708][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.918206][T17930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.939325][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.993701][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.025840][T18054] team0: Port device team_slave_0 added [ 661.068838][T17930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.120748][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.135242][T18054] team0: Port device team_slave_1 added [ 661.184964][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.191948][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.219242][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.250237][ T35] batman_adv: batadv0: Removing interface: macvtap1 [ 661.261623][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.300408][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.327789][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.363201][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.412330][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.449120][T18054] hsr_slave_0: entered promiscuous mode [ 661.458568][T18054] hsr_slave_1: entered promiscuous mode [ 661.471966][T18054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.481914][T18054] Cannot create hsr debugfs directory [ 661.635419][T17903] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.643656][ T5237] Bluetooth: hci4: command tx timeout [ 661.664434][T17930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 661.713929][T17930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 661.805652][T17930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 661.842043][ T2545] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.849244][ T2545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.894204][T17930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 661.979817][ T35] bridge_slave_1: left allmulticast mode [ 661.985670][ T35] bridge_slave_1: left promiscuous mode [ 661.991310][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.014646][ T35] bridge_slave_0: left allmulticast mode [ 662.022325][ T35] bridge_slave_0: left promiscuous mode [ 662.040164][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.061674][ T35] bridge_slave_1: left allmulticast mode [ 662.070788][ T35] bridge_slave_1: left promiscuous mode [ 662.082970][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.102581][ T35] bridge_slave_0: left allmulticast mode [ 662.108270][ T35] bridge_slave_0: left promiscuous mode [ 662.128334][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.149417][ T35] bridge_slave_1: left allmulticast mode [ 662.155579][ T35] bridge_slave_1: left promiscuous mode [ 662.161229][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.171359][ T35] bridge_slave_0: left allmulticast mode [ 662.177449][ T35] bridge_slave_0: left promiscuous mode [ 662.183421][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.434620][ T5237] Bluetooth: hci3: command tx timeout [ 662.602768][ T5237] Bluetooth: hci2: command tx timeout [ 663.193449][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.205746][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.216196][ T35] bond0 (unregistering): Released all slaves [ 663.375202][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.386601][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.401549][ T35] bond0 (unregistering): Released all slaves [ 663.538328][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.549155][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.564566][ T35] bond0 (unregistering): Released all slaves [ 663.584462][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.591570][T11689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.987082][T17903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.235767][T17951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 664.257411][T17951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 664.370575][T17951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 664.395096][T17951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 664.521983][T17930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.562351][T17903] veth0_vlan: entered promiscuous mode [ 664.672347][T17930] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.682955][ T5237] Bluetooth: hci2: command tx timeout [ 664.746214][T17903] veth1_vlan: entered promiscuous mode [ 664.805531][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.812695][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.849628][ T3040] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.856758][ T3040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.933845][T17903] veth0_macvtap: entered promiscuous mode [ 664.947686][T18054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 664.963102][T18054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 665.000921][T17951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.009660][T18054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 665.020650][T18054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 665.038983][ T35] hsr_slave_0: left promiscuous mode [ 665.045231][ T35] hsr_slave_1: left promiscuous mode [ 665.050952][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.058468][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.067098][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.075725][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.087664][ T35] hsr_slave_0: left promiscuous mode [ 665.094532][ T35] hsr_slave_1: left promiscuous mode [ 665.100367][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.108013][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.116055][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.124319][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.139208][ T35] hsr_slave_0: left promiscuous mode [ 665.145460][ T35] hsr_slave_1: left promiscuous mode [ 665.151310][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.159882][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.169355][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.177117][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.227911][ T35] veth1_macvtap: left promiscuous mode [ 665.233841][ T35] veth0_macvtap: left promiscuous mode [ 665.239417][ T35] veth1_vlan: left promiscuous mode [ 665.246262][ T35] veth0_vlan: left promiscuous mode [ 665.252670][ T35] veth1_macvtap: left promiscuous mode [ 665.258240][ T35] veth0_macvtap: left promiscuous mode [ 665.263863][ T35] veth1_vlan: left promiscuous mode [ 665.269119][ T35] veth0_vlan: left promiscuous mode [ 665.276532][ T35] veth1_macvtap: left promiscuous mode [ 665.282036][ T35] veth0_macvtap: left promiscuous mode [ 665.287998][ T35] veth1_vlan: left promiscuous mode [ 665.293958][ T35] veth0_vlan: left promiscuous mode [ 665.545634][ T35] pimreg7 (unregistering): left allmulticast mode [ 665.965437][ T35] team0 (unregistering): Port device team_slave_1 removed [ 666.018059][ T35] team0 (unregistering): Port device team_slave_0 removed [ 666.754917][ T5237] Bluetooth: hci2: command tx timeout [ 666.955352][ T35] team0 (unregistering): Port device team_slave_1 removed [ 667.001748][ T35] team0 (unregistering): Port device team_slave_0 removed [ 667.514522][ T35] pimreg7 (unregistering): left allmulticast mode [ 667.898461][ T35] team0 (unregistering): Port device team_slave_1 removed [ 667.949846][ T35] team0 (unregistering): Port device team_slave_0 removed [ 668.504354][T17903] veth1_macvtap: entered promiscuous mode [ 668.558490][T17903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.569205][T17903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.581497][T17903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.634848][T17951] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.667353][T17903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.679379][T17903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.709782][T17903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.759793][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.766936][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.806900][ T1830] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.814063][ T1830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.829017][T17903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.843505][T17903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.852234][T17903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.865982][T17903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.945802][T18054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.050261][T17951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 669.061082][T17951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.111991][T18054] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.145893][T17930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.215083][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.222193][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.239036][T11689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.253954][T11689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.290471][T17951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.370566][T11689] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.377754][T11689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.412207][T17930] veth0_vlan: entered promiscuous mode [ 669.467653][ T1830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.495544][ T1830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.504066][T17930] veth1_vlan: entered promiscuous mode [ 669.735715][T17930] veth0_macvtap: entered promiscuous mode [ 669.826164][T18054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.843205][T17930] veth1_macvtap: entered promiscuous mode [ 669.843541][T18142] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2932'. [ 669.851721][T17951] veth0_vlan: entered promiscuous mode [ 669.911988][T17951] veth1_vlan: entered promiscuous mode [ 669.934113][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.958675][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.969586][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.983421][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.995030][T17930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.026050][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.037970][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.048880][T17930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.060099][T17930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.071514][T17930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.122350][T17930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.134416][T17930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.145680][T17930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.154639][T17930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.202908][ T5324] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 670.265160][T17951] veth0_macvtap: entered promiscuous mode [ 670.271992][T18054] veth0_vlan: entered promiscuous mode [ 670.288577][T17951] veth1_macvtap: entered promiscuous mode [ 670.317527][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.328016][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.332022][T18054] veth1_vlan: entered promiscuous mode [ 670.347272][ T5324] usb 5-1: device descriptor read/64, error -71 [ 670.419091][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.430695][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.442905][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.453906][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.466689][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.477258][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.488526][T17951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.519633][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.530369][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.540444][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.551079][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.561036][T17951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.571605][T17951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.583009][T17951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.598216][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.606278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.623053][T17951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.631795][T17951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.640685][T17951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.649721][T17951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.694257][ T5324] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 670.708759][T18054] veth0_macvtap: entered promiscuous mode [ 670.737465][T18054] veth1_macvtap: entered promiscuous mode [ 670.834511][ T5324] usb 5-1: device descriptor read/64, error -71 [ 670.849470][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.871558][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.878771][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.888819][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.908553][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.921739][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.936652][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.948732][ T5324] usb usb5-port1: attempt power cycle [ 670.963505][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.973514][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.984025][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.994119][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 671.010959][T18054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.058558][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.069426][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.080410][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.091749][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.101779][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.112366][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.122611][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.135284][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.146522][T18054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.156885][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 671.164445][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.177772][T18161] bridge0: port 3(ipvlan2) entered blocking state [ 671.184432][T18161] bridge0: port 3(ipvlan2) entered disabled state [ 671.190993][T18161] ipvlan2: entered allmulticast mode [ 671.196392][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.209362][T18161] bridge0: entered allmulticast mode [ 671.215029][ T8] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 671.224908][T18161] ipvlan2: left allmulticast mode [ 671.229940][T18161] bridge0: left allmulticast mode [ 671.237386][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.251821][ T8] usb 2-1: config 0 descriptor?? [ 671.271790][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 671.291038][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.299245][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.302059][T18054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.306821][ T5324] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 671.325769][T18054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.335287][ T5324] usb 5-1: device descriptor read/8, error -71 [ 671.336641][T18054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.356913][T18054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.562984][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2939'. [ 671.574307][T18168] FAULT_INJECTION: forcing a failure. [ 671.574307][T18168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.587900][T11689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.592572][ T5324] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 671.604138][T11689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.625753][T18168] CPU: 0 UID: 0 PID: 18168 Comm: syz.2.2915 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 671.636569][T18168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 671.646659][T18168] Call Trace: [ 671.649957][T18168] [ 671.652910][T18168] dump_stack_lvl+0x241/0x360 [ 671.653253][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.657590][T18168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 671.657617][T18168] ? __pfx__printk+0x10/0x10 [ 671.669765][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.670585][T18168] ? __pfx_lock_release+0x10/0x10 [ 671.687484][T18168] ? rcu_is_watching+0x15/0xb0 [ 671.692251][T18168] should_fail_ex+0x3b0/0x4e0 [ 671.696929][T18168] _copy_from_iter+0x1ed/0x1d60 [ 671.701956][T18168] ? alloc_pages_mpol_noprof+0x417/0x680 [ 671.707583][T18168] ? __pfx__copy_from_iter+0x10/0x10 [ 671.712862][T18168] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 671.718841][T18168] ? alloc_pages_noprof+0xef/0x170 [ 671.723944][T18168] ? page_copy_sane+0x46/0x260 [ 671.728703][T18168] copy_page_from_iter+0x7a/0x100 [ 671.733725][T18168] tun_get_user+0x2046/0x47e0 [ 671.738411][T18168] ? tun_get_user+0x871/0x47e0 [ 671.743175][T18168] ? __lock_acquire+0x1384/0x2050 [ 671.748207][T18168] ? __pfx_tun_get_user+0x10/0x10 [ 671.753242][T18168] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 671.758696][T18168] ? tun_get+0x1e/0x2f0 [ 671.762851][T18168] ? __pfx_lock_release+0x10/0x10 [ 671.767882][T18168] ? tun_get+0x1e/0x2f0 [ 671.772030][T18168] ? tun_get+0x27d/0x2f0 [ 671.776266][T18168] tun_chr_write_iter+0x10d/0x1f0 [ 671.781290][T18168] vfs_write+0xa6d/0xc90 [ 671.785563][T18168] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 671.791103][T18168] ? __pfx_vfs_write+0x10/0x10 [ 671.795891][T18168] ? fdget_pos+0x19a/0x320 [ 671.800303][T18168] ksys_write+0x183/0x2b0 [ 671.804627][T18168] ? __pfx_ksys_write+0x10/0x10 [ 671.809469][T18168] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 671.816053][T18168] ? lockdep_hardirqs_on+0x99/0x150 [ 671.821248][T18168] __do_fast_syscall_32+0xb4/0x110 [ 671.826351][T18168] ? exc_page_fault+0x590/0x8c0 [ 671.831199][T18168] do_fast_syscall_32+0x34/0x80 [ 671.836045][T18168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 671.842369][T18168] RIP: 0023:0xf743d579 [ 671.846428][T18168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 671.866143][T18168] RSP: 002b:00000000f5726530 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 671.874738][T18168] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000200 [ 671.882715][T18168] RDX: 0000000000000036 RSI: 00000000f742bff4 RDI: 0000000000000000 [ 671.890692][T18168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 671.898655][T18168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 671.906617][T18168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 671.914594][T18168] [ 671.933293][ T5324] usb 5-1: device descriptor read/8, error -71 [ 671.955728][ T5285] usb 2-1: USB disconnect, device number 17 [ 672.052969][ T5324] usb usb5-port1: unable to enumerate USB device [ 672.151436][T18175] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2928'. [ 672.179891][T18176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.183016][ T8] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 672.322742][ T8] usb 3-1: device descriptor read/64, error -71 [ 672.402733][ T5324] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 672.563165][ T8] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 672.571640][ T5324] usb 1-1: Using ep0 maxpacket: 16 [ 672.584362][ T5324] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 672.591621][ T5324] usb 1-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 672.609053][ T5324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 672.613449][T18179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 672.619459][ T5324] usb 1-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 672.627029][T18179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 672.631590][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.645943][ T5324] usb 1-1: Product: syz [ 672.650183][ T5324] usb 1-1: Manufacturer: syz [ 672.655488][ T5324] usb 1-1: SerialNumber: syz [ 672.660667][T18179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 672.671048][ T5324] usb 1-1: config 0 descriptor?? [ 672.679994][T18179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 672.685498][ T5324] sierra 1-1:0.0: Sierra USB modem converter detected [ 672.687312][T18179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 672.711061][T18179] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 672.712949][ T8] usb 3-1: device descriptor read/64, error -71 [ 672.740418][T18179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 672.756562][T18179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 672.775114][T18179] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 672.779754][T18181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2943'. [ 672.791052][T18179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 672.804780][T18179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 672.842139][T18179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 672.869034][ T8] usb usb3-port1: attempt power cycle [ 672.876865][T18179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 672.899478][T18179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 672.919893][T18179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 673.212640][ T8] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 673.257936][ T8] usb 3-1: device descriptor read/8, error -71 [ 673.372260][T18198] bridge0: port 3(ipvlan2) entered blocking state [ 673.386783][T18198] bridge0: port 3(ipvlan2) entered disabled state [ 673.412903][T18198] ipvlan2: entered allmulticast mode [ 673.418302][T18198] bridge0: entered allmulticast mode [ 673.443201][T18198] ipvlan2: left allmulticast mode [ 673.448479][T18198] bridge0: left allmulticast mode [ 673.512600][ T8] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 673.543481][ T8] usb 3-1: device descriptor read/8, error -71 [ 673.654052][ T8] usb usb3-port1: unable to enumerate USB device [ 673.744024][ T29] audit: type=1326 audit(1728605227.359:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.774324][ T29] audit: type=1326 audit(1728605227.359:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.835025][ T29] audit: type=1326 audit(1728605227.389:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.858336][ T29] audit: type=1326 audit(1728605227.389:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.881461][ T29] audit: type=1326 audit(1728605227.389:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.910872][ T29] audit: type=1326 audit(1728605227.419:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=439 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.945289][ T29] audit: type=1326 audit(1728605227.419:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 673.985202][ T29] audit: type=1326 audit(1728605227.419:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 674.016811][ T29] audit: type=1326 audit(1728605227.419:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 674.071174][ T29] audit: type=1326 audit(1728605227.419:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18206 comm="syz.3.2952" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f46579 code=0x7ffc0000 [ 674.107944][ T5287] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 674.218132][T18213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2954'. [ 674.273249][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 674.289459][ T5287] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 674.298204][ T5287] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 674.321599][ T5287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 674.348012][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 674.375411][ T5287] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 674.396225][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 674.417662][ T5287] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 674.432037][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.460786][ T5287] usb 4-1: config 0 descriptor?? [ 674.662759][ T9] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 674.676842][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 674.720762][ T5287] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 105 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 674.753515][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.753960][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 674.780456][ T5287] usb 4-1: USB disconnect, device number 105 [ 674.833908][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 674.840469][ T5287] usblp0: removed [ 674.882802][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 674.900414][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 674.913909][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 674.982776][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 675.106337][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 675.124067][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.139545][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 675.149806][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.313280][ T5287] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 675.351419][ T5324] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 675.375208][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 675.384960][ T9] usbtmc 5-1:16.0: can't read capabilities [ 675.401255][ T5324] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 675.472718][ T5324] usb 1-1: USB disconnect, device number 120 [ 675.502690][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 675.541293][ T5287] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 675.575416][ T5324] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 675.592552][ T5287] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 675.610087][ T5287] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 675.635969][ T5324] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 675.664247][ T5324] sierra 1-1:0.0: device disconnected [ 675.680402][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 675.701736][T18216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.773411][ T5287] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 675.793439][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 675.814915][ T5287] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 675.840016][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.880665][T18216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.892406][ T5287] usb 4-1: config 0 descriptor?? [ 676.045511][ T5235] usb 5-1: USB disconnect, device number 118 [ 676.147136][ T5287] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 106 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 676.446517][ T994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.450470][ C1] usblp0: nonzero read bulk status received: -71 [ 676.465201][ T5235] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 676.474936][ T5285] usb 4-1: USB disconnect, device number 106 [ 676.489123][T18209] usblp0: error -71 reading from printer [ 676.512850][ T5287] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 676.522755][T18209] usblp0: removed [ 676.606119][ T994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.615331][ T5235] usb 3-1: device descriptor read/64, error -71 [ 676.674467][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 676.683210][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 676.707040][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.728158][ T5287] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 676.750352][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.759718][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.788531][ T994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.788957][ T5287] usb 1-1: Product: syz [ 676.803816][ T5287] usb 1-1: Manufacturer: syz [ 676.808487][ T5287] usb 1-1: SerialNumber: syz [ 676.823242][ T5287] usb 1-1: config 0 descriptor?? [ 676.831491][ T5287] keyspan 1-1:0.0: Keyspan 1 port adapter converter detected [ 676.846781][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.849186][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 676.856812][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout [ 676.864741][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 676.870720][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.877381][ T5235] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 676.891161][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.892585][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 676.906209][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 676.913910][ T5234] Bluetooth: hci3: command 0x0c1a tx timeout [ 676.914078][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 676.928217][ T5287] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 676.936346][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.942575][ T5287] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 676.958124][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 676.966450][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.992958][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 677.012554][ T5282] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 677.020777][ T5235] usb 3-1: device descriptor read/64, error -71 [ 677.045427][ T994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.152948][ T5235] usb usb3-port1: attempt power cycle [ 677.152965][ T5282] usb 4-1: device descriptor read/64, error -71 [ 677.177495][T18242] netlink: 'syz.0.2964': attribute type 10 has an invalid length. [ 677.196488][T18242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2964'. [ 677.244225][ T5287] usb 1-1: USB disconnect, device number 121 [ 677.268501][ T5287] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 677.295540][ T5287] keyspan 1-1:0.0: device disconnected [ 677.326526][ T994] bridge_slave_1: left allmulticast mode [ 677.332329][ T994] bridge_slave_1: left promiscuous mode [ 677.338990][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.349400][ T994] bridge_slave_0: left allmulticast mode [ 677.355520][ T994] bridge_slave_0: left promiscuous mode [ 677.361426][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.393269][ T5282] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 677.443934][ T5324] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 677.538204][ T5235] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 677.542623][ T5282] usb 4-1: device descriptor read/64, error -71 [ 677.569224][ T5235] usb 3-1: device descriptor read/8, error -71 [ 677.613952][ T5324] usb 5-1: Using ep0 maxpacket: 8 [ 677.640260][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.650669][ T5324] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 677.659825][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.679422][ T5282] usb usb4-port1: attempt power cycle [ 677.696482][ T5324] usb 5-1: config 0 descriptor?? [ 677.705083][ T5324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 677.855046][ T5235] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 677.903236][ T5235] usb 3-1: device descriptor read/8, error -71 [ 677.997896][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.010903][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.022691][ T5282] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 678.026804][ T5235] usb usb3-port1: unable to enumerate USB device [ 678.031328][ T994] bond0 (unregistering): Released all slaves [ 678.044725][ T5282] usb 4-1: device descriptor read/8, error -71 [ 678.052506][ T5324] usb 5-1: USB disconnect, device number 119 [ 678.144068][T18254] chnl_net:caif_netlink_parms(): no params data found [ 678.283607][ T5282] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 678.313258][ T5282] usb 4-1: device descriptor read/8, error -71 [ 678.425825][ T5282] usb usb4-port1: unable to enumerate USB device [ 678.442355][T18254] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.452635][T18254] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.461557][T18254] bridge_slave_0: entered allmulticast mode [ 678.477548][T18254] bridge_slave_0: entered promiscuous mode [ 678.502784][ T5235] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 678.523364][ T994] hsr_slave_0: left promiscuous mode [ 678.538547][ T994] hsr_slave_1: left promiscuous mode [ 678.554446][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.561916][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.582911][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.591524][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.660582][ T994] veth1_macvtap: left promiscuous mode [ 678.666414][ T994] veth0_macvtap: left promiscuous mode [ 678.672120][ T994] veth1_vlan: left promiscuous mode [ 678.682221][ T994] veth0_vlan: left promiscuous mode [ 678.693743][ T5235] usb 1-1: Using ep0 maxpacket: 32 [ 678.702233][ T5235] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 678.712203][ T5235] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 678.723578][ T5235] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 678.738485][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 678.752179][ T5235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 678.767578][ T5235] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 678.791655][ T5235] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 678.801352][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.820783][ T5235] usb 1-1: config 0 descriptor?? [ 678.832685][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 678.919059][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 678.927812][ T5285] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 678.993635][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.002178][ T5238] Bluetooth: hci4: command tx timeout [ 679.036434][ T5235] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 679.052496][ T5235] usb 1-1: USB disconnect, device number 122 [ 679.061692][ T5235] usblp0: removed [ 679.082677][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 679.483668][ T5235] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 679.504061][ T994] team0 (unregistering): Port device team_slave_1 removed [ 679.615231][ T994] team0 (unregistering): Port device team_slave_0 removed [ 679.642605][ T5288] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 679.678908][ T5235] usb 1-1: Using ep0 maxpacket: 32 [ 679.698635][ T5235] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 679.707245][ T5235] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 679.717056][ T5235] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 679.726583][ T5235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.737307][ T5235] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 679.747070][ T5235] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 679.760164][ T5235] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 679.769394][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.793358][ T5288] usb 3-1: device descriptor read/64, error -71 [ 679.804421][ T5235] usb 1-1: config 0 descriptor?? [ 680.015420][ T5235] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 680.053027][ T5288] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 680.222634][ T5288] usb 3-1: device descriptor read/64, error -71 [ 680.313207][ C1] usblp0: nonzero read bulk status received: -71 [ 680.319647][T18274] usblp0: error -71 reading from printer [ 680.324825][ T5235] usb 1-1: USB disconnect, device number 123 [ 680.354514][ T5288] usb usb3-port1: attempt power cycle [ 680.362375][T18274] usblp0: removed [ 680.539470][T18254] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.547336][T18254] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.555884][T18254] bridge_slave_1: entered allmulticast mode [ 680.563427][T18254] bridge_slave_1: entered promiscuous mode [ 680.676913][T18254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.707721][T18254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.732745][ T5288] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 680.821767][ T5288] usb 3-1: device descriptor read/8, error -71 [ 680.941504][T18254] team0: Port device team_slave_0 added [ 680.967440][T18254] team0: Port device team_slave_1 added [ 681.063524][ T5288] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 681.086682][ T5238] Bluetooth: hci4: command tx timeout [ 681.095657][ T5288] usb 3-1: device descriptor read/8, error -71 [ 681.150169][T18254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.166498][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.192387][ C0] vkms_vblank_simulate: vblank timer overrun [ 681.232910][ T5288] usb usb3-port1: unable to enumerate USB device [ 681.305461][T18254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.360997][T18254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.382638][T18254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.485525][T18254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.525723][ T5324] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 681.640009][T18254] hsr_slave_0: entered promiscuous mode [ 681.663788][T18254] hsr_slave_1: entered promiscuous mode [ 681.692690][ T5324] usb 5-1: Using ep0 maxpacket: 8 [ 681.724537][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.734850][ T5324] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 681.772572][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.791121][ T5324] usb 5-1: config 0 descriptor?? [ 681.825419][ T5324] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 682.078861][ T5324] usb 5-1: USB disconnect, device number 121 [ 682.761704][T18359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2990'. [ 682.904755][ T5324] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 683.026219][T18254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 683.066589][T18254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 683.092706][ T5324] usb 3-1: Using ep0 maxpacket: 16 [ 683.094873][T18254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 683.104563][ T5324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.104604][ T5324] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 683.104628][ T5324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.106361][ T5324] usb 3-1: config 0 descriptor?? [ 683.156109][ T5238] Bluetooth: hci4: command tx timeout [ 683.175215][ T5324] pxrc 3-1:0.0: Could not find endpoint [ 683.217123][T18254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 683.403436][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.427462][T18254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.441761][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.471445][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.484643][T18254] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.508165][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.537787][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.544977][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.565340][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.572622][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.643110][ T5324] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 683.739046][T18254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.774144][T18254] veth0_vlan: entered promiscuous mode [ 683.798149][T18254] veth1_vlan: entered promiscuous mode [ 683.860320][T18254] veth0_macvtap: entered promiscuous mode [ 683.869547][T18254] veth1_macvtap: entered promiscuous mode [ 683.892746][ T5324] usb 5-1: Using ep0 maxpacket: 32 [ 683.904258][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.914860][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.925237][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.936490][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.946914][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.957568][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.967573][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.978219][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.990124][T18254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.000447][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.011208][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.021297][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.031851][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.052511][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.066307][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.077454][T18254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.088057][T18254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.099311][T18254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.122403][ T5324] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 684.131039][ T5324] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 684.140250][ T5324] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 684.150309][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.160551][ T5324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.170634][ T5324] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 684.185496][ T5324] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 684.194775][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.207464][T18254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.218011][T18254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.226837][T18254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.235733][T18254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.278031][ T5324] usb 5-1: config 0 descriptor?? [ 684.411121][ T1830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.423765][ T1830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.484600][T11689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.495650][ T5324] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 684.510874][T11689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.515385][ T5324] usb 5-1: USB disconnect, device number 122 [ 684.544415][ T5324] usblp0: removed [ 684.880631][T18404] bridge0: port 3(ipvlan2) entered blocking state [ 684.909004][T18404] bridge0: port 3(ipvlan2) entered disabled state [ 684.927399][T18404] ipvlan2: entered allmulticast mode [ 684.940939][T18404] bridge0: entered allmulticast mode [ 684.960412][T18404] ipvlan2: left allmulticast mode [ 684.974287][T18404] bridge0: left allmulticast mode [ 685.012626][ T5324] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 685.172553][ T5324] usb 5-1: Using ep0 maxpacket: 32 [ 685.186100][ T5324] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 685.203254][ T5324] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 685.211893][ T5324] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 685.241019][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.242643][ T5238] Bluetooth: hci4: command tx timeout [ 685.251458][ T5324] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.301829][ T5324] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 685.359503][ T5324] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 685.371628][ T5324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.432421][ T5324] usb 5-1: config 0 descriptor?? [ 685.551790][ T5282] usb 3-1: USB disconnect, device number 117 [ 685.661247][ T5324] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 685.843875][T18438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'. [ 685.869802][T18147] usb 5-1: USB disconnect, device number 123 [ 685.882161][T18147] usblp0: removed [ 685.903500][ T5282] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 685.955343][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.962594][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.020544][T18441] program syz.1.3001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.062575][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 686.069448][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.081882][ T5282] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 686.123081][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.132628][ T5285] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 686.171464][ T5282] usb 3-1: config 0 descriptor?? [ 686.194424][ T5282] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 686.273518][T18427] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2998'. [ 686.302656][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 686.314330][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 686.341488][ T5285] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 686.361118][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.400710][ T47] usb 3-1: USB disconnect, device number 118 [ 686.422135][ T5285] usb 4-1: config 0 descriptor?? [ 686.453103][ T5285] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 686.493847][ T5285] usb 4-1: Detected SIO [ 686.512250][ T5285] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 686.669327][ T47] hid (null): global environment stack underflow [ 686.676548][ T5288] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 686.712757][ T47] hid (null): unknown global tag 0xe [ 686.734121][ T5285] usb 4-1: USB disconnect, device number 111 [ 686.742038][ T47] hid-generic 0000:0000:FFFFFFFF.0027: unknown main item tag 0x2 [ 686.774672][ T5285] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 686.786487][ T47] hid-generic 0000:0000:FFFFFFFF.0027: global environment stack underflow [ 686.819948][ T5285] ftdi_sio 4-1:0.0: device disconnected [ 686.829059][ T47] hid-generic 0000:0000:FFFFFFFF.0027: item 0 1 1 11 parsing failed [ 686.853764][ T5288] usb 2-1: Using ep0 maxpacket: 8 [ 686.864132][ T47] hid-generic 0000:0000:FFFFFFFF.0027: probe with driver hid-generic failed with error -22 [ 686.876720][ T5288] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 686.885467][ T5288] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 686.901336][ T5288] usb 2-1: config 1 has no interface number 1 [ 686.918344][ T5288] usb 2-1: config 1 interface 167 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.943361][ T5288] usb 2-1: config 1 interface 167 has no altsetting 0 [ 686.963021][ T5288] usb 2-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=5e.f6 [ 686.974309][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.982333][ T5288] usb 2-1: Product: syz [ 687.010472][ T5288] usb 2-1: Manufacturer: syz [ 687.019568][ T5288] usb 2-1: SerialNumber: syz [ 687.032565][ T25] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 687.070432][ T5288] hub 2-1:1.167: bad descriptor, ignoring hub [ 687.085227][ T5288] hub 2-1:1.167: probe with driver hub failed with error -5 [ 687.101119][ T5288] em28xx 2-1:1.167: New device syz syz @ 480 Mbps (2040:6502, interface 167, class 167) [ 687.118577][ T5288] em28xx 2-1:1.167: Video interface 167 found: [ 687.132646][ T5282] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 687.195407][ T25] usb 1-1: config 0 has no interfaces? [ 687.201154][ T25] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 687.217926][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.243310][ T25] usb 1-1: config 0 descriptor?? [ 687.271079][T18479] netlink: 'syz.2.3008': attribute type 1 has an invalid length. [ 687.299411][T18479] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3008'. [ 687.312804][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 687.324498][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 687.324514][ T29] audit: type=1326 audit(1728605240.939:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.370083][ T5288] em28xx 2-1:1.167: unknown em28xx chip ID (0) [ 687.386662][ T5282] usb 5-1: unable to get BOS descriptor or descriptor too short [ 687.392007][ T29] audit: type=1326 audit(1728605240.939:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.405098][ T5282] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 687.426255][ T29] audit: type=1326 audit(1728605240.939:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.448555][ T29] audit: type=1326 audit(1728605240.939:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.471826][ T29] audit: type=1326 audit(1728605240.939:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.477702][ T5282] usb 5-1: can't read configurations, error -71 [ 687.494100][ T29] audit: type=1326 audit(1728605240.939:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.522767][ T29] audit: type=1326 audit(1728605240.939:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.546373][ T29] audit: type=1326 audit(1728605240.939:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.568661][ T29] audit: type=1326 audit(1728605240.939:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.591045][ T29] audit: type=1326 audit(1728605240.939:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18478 comm="syz.2.3008" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7ffc0000 [ 687.630135][ T5288] em28xx 2-1:1.167: reading from i2c device at 0xa0 failed (error=-5) [ 687.639057][ T5288] em28xx 2-1:1.167: board has no eeprom [ 687.703311][ T5288] em28xx 2-1:1.167: Identified as Hauppauge WinTV HVR 900 (R2) (card=18) [ 687.723173][ T5288] em28xx 2-1:1.167: analog set to bulk mode. [ 687.729363][ T25] em28xx 2-1:1.167: Registering V4L2 extension [ 687.741531][ T5288] hub 2-1:1.0: bad descriptor, ignoring hub [ 687.752151][ T5288] hub 2-1:1.0: probe with driver hub failed with error -5 [ 687.775606][ T5288] usb 2-1: USB disconnect, device number 18 [ 687.790263][ T5288] em28xx 2-1:1.167: Disconnecting em28xx [ 687.927676][ T25] em28xx 2-1:1.167: Config register raw data: 0xffffffed [ 687.948503][ T25] em28xx 2-1:1.167: AC97 chip type couldn't be determined [ 687.966473][ T25] em28xx 2-1:1.167: No AC97 audio processor [ 687.973425][ T25] em28xx 2-1:1.167: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 687.988993][ T25] em28xx 2-1:1.167: Binding DVB extension [ 688.002565][ T25] em28xx 2-1:1.167: no endpoint for DVB mode and transfer type 0 [ 688.012926][ T25] em28xx 2-1:1.167: failed to pre-allocate USB transfer buffers for DVB. [ 688.027726][ T25] em28xx 2-1:1.167: Registering input extension [ 688.053006][ T5288] em28xx 2-1:1.167: Closing input extension [ 688.065610][ T5288] em28xx 2-1:1.167: Freeing device [ 688.111806][T18502] netlink: 'syz.1.3012': attribute type 11 has an invalid length. [ 688.156413][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3013'. [ 688.180616][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 688.237675][T18504] program syz.3.3013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.442656][ T8] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 688.593202][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 688.600605][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 688.610571][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 688.620825][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 688.633184][T18147] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 688.641763][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 688.654321][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 688.664520][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 688.684917][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 688.700100][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.720031][ T8] usb 3-1: config 0 descriptor?? [ 688.802574][T18147] usb 4-1: Using ep0 maxpacket: 8 [ 688.809941][T18147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.821618][T18147] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 688.842303][T18147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.873421][T18147] usb 4-1: config 0 descriptor?? [ 688.885652][T18147] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 688.928429][T18526] FAULT_INJECTION: forcing a failure. [ 688.928429][T18526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.943397][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 119 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 688.944321][T18526] CPU: 1 UID: 0 PID: 18526 Comm: syz.1.3022 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 688.964963][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 688.975041][T18526] Call Trace: [ 688.978335][T18526] [ 688.981281][T18526] dump_stack_lvl+0x241/0x360 [ 688.985445][ T8] usb 3-1: USB disconnect, device number 119 [ 688.985963][T18526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 688.997138][T18526] ? __pfx__printk+0x10/0x10 [ 689.001767][T18526] ? __pfx_lock_release+0x10/0x10 [ 689.006796][T18526] ? __lock_acquire+0x1384/0x2050 [ 689.011818][T18526] should_fail_ex+0x3b0/0x4e0 [ 689.016509][T18526] _copy_from_user+0x2f/0xe0 [ 689.021122][T18526] io_submit_one+0xc1/0x18a0 [ 689.025748][T18526] ? __pfx_io_submit_one+0x10/0x10 [ 689.030866][T18526] ? __might_fault+0xaa/0x120 [ 689.035547][T18526] ? __pfx_lock_release+0x10/0x10 [ 689.040592][T18526] ? lookup_ioctx+0x94/0x6a0 [ 689.045177][T18526] ? __might_fault+0xaa/0x120 [ 689.049845][T18526] ? __might_fault+0xc6/0x120 [ 689.054530][T18526] __se_compat_sys_io_submit+0x188/0x310 [ 689.060191][T18526] ? __pfx___se_compat_sys_io_submit+0x10/0x10 [ 689.066350][T18526] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 689.072949][T18526] ? lockdep_hardirqs_on+0x99/0x150 [ 689.078160][T18526] __do_fast_syscall_32+0xb4/0x110 [ 689.083279][T18526] ? exc_page_fault+0x590/0x8c0 [ 689.085312][ T8] usblp0: removed [ 689.088136][T18526] do_fast_syscall_32+0x34/0x80 [ 689.088161][T18526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.088184][T18526] RIP: 0023:0xf749d579 [ 689.107024][T18526] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 689.125804][T18147] usb 4-1: USB disconnect, device number 112 [ 689.126629][T18526] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 689.126658][T18526] RAX: ffffffffffffffda RBX: 00000000f7ffb000 RCX: 0000000000000001 [ 689.149020][T18526] RDX: 0000000020000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.157018][T18526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.165014][T18526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 689.173005][T18526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.180994][T18526] [ 689.538590][ T8] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 689.566298][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 689.748974][T18532] program syz.1.3025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 694.492451][ C1] sched: DL replenish lagged too much [ 740.114334][ T8] usb 3-1: device not accepting address 120, error -71 [ 760.669932][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.684526][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.633589][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.639943][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 843.314960][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 867.520519][ T7] bridge_slave_1: left allmulticast mode [ 867.526340][ T7] bridge_slave_1: left promiscuous mode [ 867.532099][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.943316][ T7] bridge_slave_0: left allmulticast mode [ 867.949970][ T7] bridge_slave_0: left promiscuous mode [ 867.960881][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.708159][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 870.305477][T18559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 870.314957][T18559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 870.324097][T18559] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 870.333831][T18559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 870.342205][T18559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 870.351855][T18559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 870.360941][T18559] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 870.370493][T18559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 870.377955][T18559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 870.385821][T18559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 870.394038][T18559] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 870.405720][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 870.413127][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 870.444614][T18561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 870.452587][T18561] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 870.462801][T18561] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 870.470697][T18561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 870.828534][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.872464][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.037480][T18561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 871.115327][T18561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 871.124826][T18561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 871.133613][T18561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 871.141199][T18561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 871.150318][T18561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 871.196545][T18561] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 871.244992][T18561] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 871.255398][T18561] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 871.364372][T18561] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 871.384304][T18561] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 871.394157][T18561] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 871.526920][ T7] bond0 (unregistering): left promiscuous mode [ 871.534226][ T7] bond_slave_0: left promiscuous mode [ 871.539784][ T7] bond_slave_1: left promiscuous mode [ 871.551345][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.581053][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.592334][ T7] bond0 (unregistering): Released all slaves [ 871.602566][ T7] bond1 (unregistering): Released all slaves [ 872.090420][ T7] team0: left promiscuous mode [ 872.095726][ T7] team_slave_0: left promiscuous mode [ 872.101994][ T7] team_slave_1: left promiscuous mode [ 872.111754][ T7] hsr_slave_0: left promiscuous mode [ 872.120160][ T7] hsr_slave_1: left promiscuous mode [ 872.139358][ T7] veth1_macvtap: left promiscuous mode [ 872.146301][ T7] veth0_macvtap: left promiscuous mode [ 872.151933][ T7] veth1_vlan: left promiscuous mode [ 872.157351][ T7] veth0_vlan: left promiscuous mode [ 872.681797][ T7] team0 (unregistering): Port device team_slave_1 removed [ 872.737444][ T7] team0 (unregistering): Port device team_slave_0 removed [ 872.832711][T18561] Bluetooth: hci6: command tx timeout [ 872.917586][T18561] Bluetooth: hci5: command tx timeout [ 873.008221][T18561] Bluetooth: hci7: command tx timeout [ 873.237977][T18561] Bluetooth: hci4: command tx timeout [ 873.480817][T18561] Bluetooth: hci8: command tx timeout [ 873.552474][T18564] chnl_net:caif_netlink_parms(): no params data found [ 873.605463][T18562] chnl_net:caif_netlink_parms(): no params data found [ 873.615819][T18563] chnl_net:caif_netlink_parms(): no params data found [ 873.747246][T18569] chnl_net:caif_netlink_parms(): no params data found [ 873.774092][T18567] chnl_net:caif_netlink_parms(): no params data found [ 873.925803][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.992999][T18563] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.000097][T18563] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.008471][T18563] bridge_slave_0: entered allmulticast mode [ 874.015331][T18563] bridge_slave_0: entered promiscuous mode [ 874.030558][T18564] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.038719][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.046046][T18564] bridge_slave_0: entered allmulticast mode [ 874.052969][T18564] bridge_slave_0: entered promiscuous mode [ 874.061071][T18564] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.068590][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.075931][T18564] bridge_slave_1: entered allmulticast mode [ 874.083480][T18564] bridge_slave_1: entered promiscuous mode [ 874.123468][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.150018][T18563] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.161290][T18563] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.171143][T18563] bridge_slave_1: entered allmulticast mode [ 874.178678][T18563] bridge_slave_1: entered promiscuous mode [ 874.279906][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.301687][T18562] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.310291][T18562] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.319545][T18562] bridge_slave_0: entered allmulticast mode [ 874.326996][T18562] bridge_slave_0: entered promiscuous mode [ 874.335234][T18562] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.342310][T18562] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.349942][T18562] bridge_slave_1: entered allmulticast mode [ 874.357251][T18562] bridge_slave_1: entered promiscuous mode [ 874.368647][T18564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.381231][T18564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.409675][T18567] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.418431][T18567] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.425962][T18567] bridge_slave_0: entered allmulticast mode [ 874.432859][T18567] bridge_slave_0: entered promiscuous mode [ 874.451134][T18563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.481847][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.529242][T18567] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.542570][T18567] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.549788][T18567] bridge_slave_1: entered allmulticast mode [ 874.556921][T18567] bridge_slave_1: entered promiscuous mode [ 874.572021][T18569] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.580007][T18569] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.587489][T18569] bridge_slave_0: entered allmulticast mode [ 874.595658][T18569] bridge_slave_0: entered promiscuous mode [ 874.605544][T18569] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.612832][T18569] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.620055][T18569] bridge_slave_1: entered allmulticast mode [ 874.627367][T18569] bridge_slave_1: entered promiscuous mode [ 874.635628][T18563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.668342][T18564] team0: Port device team_slave_0 added [ 874.724971][T18562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.737932][T18564] team0: Port device team_slave_1 added [ 874.752873][T18567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.764819][T18569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.785872][T18563] team0: Port device team_slave_0 added [ 874.794975][T18562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.834068][T18567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.855860][T18569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.875265][T18563] team0: Port device team_slave_1 added [ 874.912505][T18561] Bluetooth: hci6: command tx timeout [ 874.972123][T18562] team0: Port device team_slave_0 added [ 874.979582][T18564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.990275][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.018935][T18564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.026209][T18561] Bluetooth: hci5: command tx timeout [ 875.046201][T18564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.053452][T18564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.079876][T18561] Bluetooth: hci7: command tx timeout [ 875.085560][T18564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.105492][T18567] team0: Port device team_slave_0 added [ 875.120838][T18569] team0: Port device team_slave_0 added [ 875.129063][T18563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.136270][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.162589][T18563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.175890][T18563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.183626][T18563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.209951][T18563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.227625][T18562] team0: Port device team_slave_1 added [ 875.289159][T18567] team0: Port device team_slave_1 added [ 875.297350][T18569] team0: Port device team_slave_1 added [ 875.323014][T18561] Bluetooth: hci4: command tx timeout [ 875.371504][T18567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.381043][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.407852][T18567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.460937][T18562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.470892][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.497823][T18562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.510855][T18562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.517933][T18562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.544626][T18562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.555726][T18561] Bluetooth: hci8: command tx timeout [ 875.575767][T18564] hsr_slave_0: entered promiscuous mode [ 875.588448][T18564] hsr_slave_1: entered promiscuous mode [ 875.595482][T18564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.603425][T18564] Cannot create hsr debugfs directory [ 875.609536][T18567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.618287][T18567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.644955][T18567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.677634][T18563] hsr_slave_0: entered promiscuous mode [ 875.687159][T18563] hsr_slave_1: entered promiscuous mode [ 875.693668][T18563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.701246][T18563] Cannot create hsr debugfs directory [ 875.767699][T18569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.775253][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.801484][T18569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.816190][T18569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.823263][T18569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.850016][T18569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.923790][T18562] hsr_slave_0: entered promiscuous mode [ 875.930309][T18562] hsr_slave_1: entered promiscuous mode [ 875.942798][T18562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.950387][T18562] Cannot create hsr debugfs directory [ 875.974066][T18567] hsr_slave_0: entered promiscuous mode [ 875.980384][T18567] hsr_slave_1: entered promiscuous mode [ 875.988606][T18567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.996348][T18567] Cannot create hsr debugfs directory [ 876.127690][T18569] hsr_slave_0: entered promiscuous mode [ 876.134316][T18569] hsr_slave_1: entered promiscuous mode [ 876.140904][T18569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.148973][T18569] Cannot create hsr debugfs directory [ 876.534336][ T994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.600137][T18564] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.755613][ T994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.819483][T18564] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.894011][ T994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.943291][T18564] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.992584][T18561] Bluetooth: hci6: command tx timeout [ 877.015955][ T994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.072726][T18561] Bluetooth: hci5: command tx timeout [ 877.090707][T18564] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.152766][T18561] Bluetooth: hci7: command tx timeout [ 877.317954][ T994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.403332][T18561] Bluetooth: hci4: command tx timeout [ 877.425119][ T994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.516910][ T994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.632872][T18561] Bluetooth: hci8: command tx timeout [ 877.645114][ T994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.805074][ T994] bridge_slave_1: left allmulticast mode [ 877.810780][ T994] bridge_slave_1: left promiscuous mode [ 877.820615][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.855269][ T994] bridge_slave_0: left allmulticast mode [ 877.869272][ T994] bridge_slave_0: left promiscuous mode [ 877.875535][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.898909][ T994] bridge_slave_1: left allmulticast mode [ 877.911248][ T994] bridge_slave_1: left promiscuous mode [ 877.922787][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.940282][ T994] bridge_slave_0: left allmulticast mode [ 877.952512][ T994] bridge_slave_0: left promiscuous mode [ 877.960391][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.988974][ T994] bridge_slave_1: left allmulticast mode [ 877.994990][ T994] bridge_slave_1: left promiscuous mode [ 878.000700][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.025620][ T994] bridge_slave_0: left allmulticast mode [ 878.031306][ T994] bridge_slave_0: left promiscuous mode [ 878.037716][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.083236][T18561] Bluetooth: hci6: command tx timeout [ 879.162572][T18561] Bluetooth: hci5: command tx timeout [ 879.237025][T18561] Bluetooth: hci7: command tx timeout [ 879.356230][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.369181][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.380654][ T994] bond0 (unregistering): Released all slaves [ 879.474486][T18561] Bluetooth: hci4: command tx timeout [ 879.538382][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.554288][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.564438][ T994] bond0 (unregistering): Released all slaves [ 879.717558][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.726325][T18561] Bluetooth: hci8: command tx timeout [ 879.737191][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.748504][ T994] bond0 (unregistering): Released all slaves [ 879.911020][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.927513][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.937718][ T994] bond0 (unregistering): Released all slaves [ 880.064088][T18567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 880.088762][T18567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 880.303684][T18567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 880.351874][T18567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 880.826923][T18567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.855694][T18563] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 880.919682][T18563] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 880.956628][T18563] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 880.969123][T18567] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.007983][T18563] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 881.196219][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.203394][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.317981][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.325154][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.754606][T18563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.820525][T18563] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.870706][ T994] hsr_slave_0: left promiscuous mode [ 881.878577][ T994] hsr_slave_1: left promiscuous mode [ 881.889658][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.897690][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.908607][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.916349][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.928753][ T994] hsr_slave_0: left promiscuous mode [ 881.937688][ T994] hsr_slave_1: left promiscuous mode [ 881.944906][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.953112][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.965077][ T994] hsr_slave_0: left promiscuous mode [ 881.970929][ T994] hsr_slave_1: left promiscuous mode [ 881.978602][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.987127][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.997122][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.005033][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.018067][ T994] hsr_slave_0: left promiscuous mode [ 882.027229][ T994] hsr_slave_1: left promiscuous mode [ 882.036275][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.044491][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.052225][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.059991][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.112604][ T994] veth1_macvtap: left promiscuous mode [ 882.118174][ T994] veth0_macvtap: left promiscuous mode [ 882.124111][ T994] veth1_vlan: left promiscuous mode [ 882.129432][ T994] veth0_vlan: left promiscuous mode [ 882.135846][ T994] bridge_slave_0: left allmulticast mode [ 882.141652][ T994] veth1_macvtap: left promiscuous mode [ 882.147385][ T994] veth0_macvtap: left promiscuous mode [ 882.153138][ T994] veth1_vlan: left promiscuous mode [ 882.158397][ T994] veth0_vlan: left promiscuous mode [ 882.169269][ T994] veth1_macvtap: left promiscuous mode [ 882.175004][ T994] veth0_macvtap: left promiscuous mode [ 882.180737][ T994] veth1_vlan: left promiscuous mode [ 882.186290][ T994] veth0_vlan: left promiscuous mode [ 882.889174][ T994] team0 (unregistering): Port device team_slave_1 removed [ 882.942825][ T994] team0 (unregistering): Port device team_slave_0 removed [ 883.916444][ T994] team0 (unregistering): Port device team_slave_1 removed [ 883.975181][ T994] team0 (unregistering): Port device team_slave_0 removed [ 884.352816][ T30] INFO: task syz.0.3006:18463 blocked for more than 152 seconds. [ 884.360637][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 884.369545][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.378356][ T30] task:syz.0.3006 state:D stack:23776 pid:18463 tgid:18463 ppid:18054 flags:0x20004006 [ 884.388632][ T30] Call Trace: [ 884.391908][ T30] [ 884.395547][ T30] __schedule+0x1895/0x4b30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 884.400120][ T30] ? __pfx___schedule+0x10/0x10 [ 884.405302][ T30] ? __pfx_lock_release+0x10/0x10 [ 884.410517][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 884.416851][ T30] ? schedule+0x90/0x320 [ 884.421127][ T30] schedule+0x14b/0x320 [ 884.425674][ T30] __fuse_simple_request+0xe17/0x1840 [ 884.431584][ T30] ? __pfx___fuse_simple_request+0x10/0x10 [ 884.438173][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 884.445014][ T30] ? up_write+0x1a9/0x590 [ 884.491406][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 884.500613][ T30] ? __pfx_up_write+0x10/0x10 [ 884.505713][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 884.510940][ T30] ? filemap_check_errors+0xe1/0x140 [ 884.516378][ T30] fuse_flush+0x69d/0x950 [ 884.520734][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 884.525761][ T30] ? __pfx_lock_release+0x10/0x10 [ 884.530812][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 884.536472][ T30] filp_flush+0xac/0x150 [ 884.540830][ T30] filp_close+0x1e/0x40 [ 884.545127][ T30] __close_range+0x380/0x6c0 [ 884.549737][ T30] ? __pfx___close_range+0x10/0x10 [ 884.554975][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 884.560981][ T30] __ia32_sys_close_range+0x7a/0x90 [ 884.566863][ T30] __do_fast_syscall_32+0xb4/0x110 [ 884.572010][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 884.578444][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 884.583770][ T30] do_fast_syscall_32+0x34/0x80 [ 884.588645][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 884.595140][ T30] RIP: 0023:0xf7f77579 [ 884.599223][ T30] RSP: 002b:00000000f755fb1c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 884.607700][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000001e [ 884.615793][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 884.623842][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 884.631818][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 884.640137][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 884.648227][ T30] [ 884.651292][ T30] [ 884.651292][ T30] Showing all locks held in the system: [ 884.669911][ T30] 1 lock held by khungtaskd/30: [ 884.675075][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 884.685018][ T30] 5 locks held by kworker/u8:5/994: [ 884.690236][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 884.701324][ T30] #1: ffffc90003c97d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 884.712004][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 884.721589][ T30] #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0 [ 884.732052][ T30] #4: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 884.743649][ T30] 3 locks held by kworker/u8:8/2528: [ 884.748961][ T30] #0: ffff88802e698148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 884.760632][ T30] #1: ffffc90009137d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 884.774311][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 884.783877][ T30] 2 locks held by kworker/u8:9/2545: [ 884.789179][ T30] 2 locks held by dhcpcd/4902: [ 884.794052][ T30] #0: ffff888066af26c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 884.804557][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 884.813513][ T30] 2 locks held by getty/4989: [ 884.818201][ T30] #0: ffff88814b75c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 884.828071][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 884.838386][ T30] 3 locks held by kworker/u8:0/11689: [ 884.844036][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 884.855888][ T30] #1: ffffc9000310fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 884.888672][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 884.898006][ T30] 7 locks held by syz-executor/18562: [ 884.903526][ T30] #0: ffff88802e470420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 884.912877][ T30] #1: ffff88804dc32088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 884.922763][ T30] #2: ffff8880279b2a58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 884.932985][ T30] #3: ffffffff8f56fea8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 884.943963][ T30] #4: ffff88805f0090e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 884.954763][ T30] #5: ffff88805f008250 (&devlink->lock_key#59){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 884.965013][ T30] #6: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 884.976114][ T30] 1 lock held by syz-executor/18563: [ 884.981404][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 884.990874][ T30] 4 locks held by syz-executor/18564: [ 884.996954][ T30] #0: ffff88802e470420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 885.005946][ T30] #1: ffff88802cdfb088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 885.015831][ T30] #2: ffff8880279b2968 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 885.025947][ T30] #3: ffffffff8f56fea8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 885.036455][ T30] 1 lock held by syz-executor/18567: [ 885.041727][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 885.051419][ T30] 4 locks held by syz-executor/18569: [ 885.056928][ T30] #0: ffff88802e470420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 885.065876][ T30] #1: ffff888069fa5488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 885.075822][ T30] #2: ffff8880279b2968 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 885.085966][ T30] #3: ffffffff8f56fea8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 885.096528][ T30] [ 885.098873][ T30] ============================================= [ 885.098873][ T30] [ 885.109358][ T30] NMI backtrace for cpu 1 [ 885.113805][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 885.124413][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 885.134486][ T30] Call Trace: [ 885.137860][ T30] [ 885.140800][ T30] dump_stack_lvl+0x241/0x360 [ 885.145489][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.150706][ T30] ? __pfx__printk+0x10/0x10 [ 885.155318][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 885.160364][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 885.165827][ T30] ? _printk+0xd5/0x120 [ 885.169975][ T30] ? __pfx__printk+0x10/0x10 [ 885.174565][ T30] ? __wake_up_klogd+0xcc/0x110 [ 885.179432][ T30] ? __pfx__printk+0x10/0x10 [ 885.184045][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 885.189067][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 885.195052][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 885.201027][ T30] watchdog+0xff4/0x1040 [ 885.205266][ T30] ? watchdog+0x1ea/0x1040 [ 885.209679][ T30] ? __pfx_watchdog+0x10/0x10 [ 885.214349][ T30] kthread+0x2f0/0x390 [ 885.218409][ T30] ? __pfx_watchdog+0x10/0x10 [ 885.223093][ T30] ? __pfx_kthread+0x10/0x10 [ 885.227699][ T30] ret_from_fork+0x4b/0x80 [ 885.232127][ T30] ? __pfx_kthread+0x10/0x10 [ 885.236725][ T30] ret_from_fork_asm+0x1a/0x30 [ 885.241507][ T30] [ 885.245209][ T30] Sending NMI from CPU 1 to CPUs 0: [ 885.250882][ C0] NMI backtrace for cpu 0 [ 885.250896][ C0] CPU: 0 UID: 0 PID: 2574 Comm: kworker/u8:10 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 885.250917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 885.250927][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 885.250952][ C0] RIP: 0010:kasan_check_range+0x9/0x290 [ 885.250974][ C0] Code: e1 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 <41> 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f [ 885.250988][ C0] RSP: 0018:ffffc90009617958 EFLAGS: 00000046 [ 885.251003][ C0] RAX: 0000000000000003 RBX: 00000000000000c5 RCX: ffffffff8170ce6a [ 885.251014][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c5818 [ 885.251026][ C0] RBP: 0000000000000006 R08: ffffffff942c586f R09: 1ffffffff2858b0d [ 885.251038][ C0] R10: dffffc0000000000 R11: fffffbfff2858b0e R12: ffff88802dcdc700 [ 885.251052][ C0] R13: dffffc0000000000 R14: 0000000000000040 R15: ffff88802dcdc6e0 [ 885.251064][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 885.251079][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 885.251091][ C0] CR2: 00007fe46937a866 CR3: 000000000e734000 CR4: 00000000003526f0 [ 885.251106][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 885.251117][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 885.251128][ C0] Call Trace: [ 885.251134][ C0] [ 885.251142][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 885.251161][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 885.251184][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 885.251207][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 885.251226][ C0] ? nmi_handle+0x14f/0x5a0 [ 885.251243][ C0] ? nmi_handle+0x2a/0x5a0 [ 885.251259][ C0] ? kasan_check_range+0x9/0x290 [ 885.251276][ C0] ? default_do_nmi+0x63/0x160 [ 885.251294][ C0] ? exc_nmi+0x123/0x1f0 [ 885.251311][ C0] ? end_repeat_nmi+0xf/0x53 [ 885.251329][ C0] ? mark_lock+0x9a/0x360 [ 885.251345][ C0] ? kasan_check_range+0x9/0x290 [ 885.251362][ C0] ? kasan_check_range+0x9/0x290 [ 885.251380][ C0] ? kasan_check_range+0x9/0x290 [ 885.251397][ C0] [ 885.251402][ C0] [ 885.251409][ C0] mark_lock+0x9a/0x360 [ 885.251425][ C0] lockdep_hardirqs_on_prepare+0x3a5/0x780 [ 885.251447][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 885.251469][ C0] ? kcov_remote_stop+0x78/0x6e0 [ 885.251487][ C0] ? rcu_is_watching+0x15/0xb0 [ 885.251504][ C0] ? kcov_remote_stop+0x78/0x6e0 [ 885.251522][ C0] trace_hardirqs_on+0x28/0x40 [ 885.251540][ C0] kcov_remote_stop+0x180/0x6e0 [ 885.251557][ C0] ? kmem_cache_free+0x1a2/0x420 [ 885.251576][ C0] ? ieee80211_iface_work+0x272/0xf20 [ 885.251603][ C0] ieee80211_iface_work+0x277/0xf20 [ 885.251625][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 885.251643][ C0] ? process_scheduled_works+0x976/0x1850 [ 885.251663][ C0] process_scheduled_works+0xa63/0x1850 [ 885.251691][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 885.251713][ C0] ? assign_work+0x364/0x3d0 [ 885.251732][ C0] worker_thread+0x870/0xd30 [ 885.251753][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 885.251775][ C0] ? __kthread_parkme+0x169/0x1d0 [ 885.251795][ C0] ? __pfx_worker_thread+0x10/0x10 [ 885.251814][ C0] kthread+0x2f0/0x390 [ 885.251829][ C0] ? __pfx_worker_thread+0x10/0x10 [ 885.251848][ C0] ? __pfx_kthread+0x10/0x10 [ 885.251863][ C0] ret_from_fork+0x4b/0x80 [ 885.251883][ C0] ? __pfx_kthread+0x10/0x10 [ 885.251898][ C0] ret_from_fork_asm+0x1a/0x30 [ 885.251922][ C0] [ 885.607342][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 885.614222][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 885.624759][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 885.634862][ T30] Call Trace: [ 885.638164][ T30] [ 885.641108][ T30] dump_stack_lvl+0x241/0x360 [ 885.645814][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.651026][ T30] ? __pfx__printk+0x10/0x10 [ 885.655620][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 885.661612][ T30] ? vscnprintf+0x5d/0x90 [ 885.665941][ T30] panic+0x349/0x880 [ 885.669838][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 885.675987][ T30] ? __pfx_panic+0x10/0x10 [ 885.680397][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 885.685763][ T30] ? __irq_work_queue_local+0x137/0x410 [ 885.691307][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 885.696680][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 885.702827][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 885.708974][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 885.715122][ T30] watchdog+0x1033/0x1040 [ 885.719472][ T30] ? watchdog+0x1ea/0x1040 [ 885.723887][ T30] ? __pfx_watchdog+0x10/0x10 [ 885.728556][ T30] kthread+0x2f0/0x390 [ 885.732639][ T30] ? __pfx_watchdog+0x10/0x10 [ 885.737309][ T30] ? __pfx_kthread+0x10/0x10 [ 885.741892][ T30] ret_from_fork+0x4b/0x80 [ 885.746303][ T30] ? __pfx_kthread+0x10/0x10 [ 885.750883][ T30] ret_from_fork_asm+0x1a/0x30 [ 885.755649][ T30] [ 885.758886][ T30] Kernel Offset: disabled [ 885.763198][ T30] Rebooting in 86400 seconds..