last executing test programs: 26.526757162s ago: executing program 0 (id=4058): syz_io_uring_setup(0x0, 0x0, &(0x7f0000000080), 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000f1a000/0x1000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x1000, 0x0, 0x2}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000803}, 0x0) read$FUSE(r1, &(0x7f0000010e40)={0x2020}, 0x2020) 25.388796973s ago: executing program 2 (id=4061): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000160001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ae9000000000000000000000000000000000000000000000000000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x2c6c, &(0x7f00000002c0)={0x0, 0x53f3, 0x80, 0x1, 0x1f6}, &(0x7f0000000880), &(0x7f00000008c0)) io_uring_enter(r2, 0x3ac6, 0xa195, 0x1c, &(0x7f0000000900)={[0x90]}, 0x8) syz_usb_disconnect(r1) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) ioctl$LOOP_CONFIGURE(r3, 0x301, &(0x7f0000000740)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e57b1a9edff60f0a961a1d5f33079eb98000c1378f4832ac567602f7abe07131f47c6fe1c3aa31aaa97985a5a70ea788ebcd9809139c1da9e7b2cb79ac7c2dc9", "8085d0df4f7469a6f5822f0a9f8c3a7bbde6aa0aa4f18c8070568bda6b392ff4ad96169d39485545b41e4cb871267dc8e94fafca2c808b09fa71143b589ac9dd", "c8366410c80ad1bbbf9fd978d55fa79ce0707d9ec20a1464dcb3a5554d49a3cf"}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x7, 0x80, 0x9c, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a736ddc54d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x3, 0x86}, {0x6, 0x24, 0x1a, 0x1000, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xc0, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1e7, 0x18, 0xea, 0x1f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x6, 0x32}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x9, 0x80, 0xff, 0xff, 0x40}, 0x2d, &(0x7f00000000c0)={0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xc, 0x7d81}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xfc, 0x6, 0xa1d}, @ss_container_id={0x14, 0x10, 0x4, 0xec, "7c1f1fd23f8e2f52392f1d6e50dfa2a2"}, @ptm_cap={0x3}]}, 0x1, [{0xd5, &(0x7f0000000100)=ANY=[@ANYBLOB="d503b4ffef7fa18fa96da69897b32e5ec703d216373e3247635ce99fd0b6a7912944c58a34401e51d6bee51a13e90b20eef3dbba0a6a030c990720456441dbc01683174202cbf0605c134e161190579844634b4c4660fe59dd65306b42784e3f8a23b3f8b1ed04c9b2e991a78972c808165a57facbfd9a87784adc552ed515cb7f4fdf8c223ac393efa266d40e49b10fbab6dadfd2ba6ae0519be3fa1fde32d47dae2ed7baee9316a08e481680a9967795a7bf2f76629ab5808808b080846c2dcb88c511ff9d13426eea"]}]}) r4 = syz_usb_connect$cdc_ncm(0x2, 0xdb, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x2, 0x1, 0x8, 0x40, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, '*M\\'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x401, 0x6ed3, 0x20}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mdlm_detail={0x48, 0x24, 0x13, 0x5, "ac0b26d263d6de5c76384784fece6caad12c1dec917f007e04a5ea5a975c4bdbd1857299f8e18d32fe11187241f30f55142184fee85193d0c6d4e547841f698f625719e5"}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x982f, 0x8, 0x18, 0x1ff, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x0, 0x6, 0x5e}, @country_functional={0xa, 0x24, 0x7, 0xf, 0x1000, [0x9, 0x1]}]}, {{0x9, 0x5, 0x81, 0x3, 0x208, 0x81, 0x93, 0x1f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x1f, 0x3d, 0x40, 0x20, 0x20}, 0xbb, &(0x7f0000000340)={0x5, 0xf, 0xbb, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x14, 0x5, 0x9, 0xf000, 0x6, [0x3f0f, 0xff00cf, 0xffc0c0, 0x0, 0xff0000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x1, 0x5, 0x8001, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x2, 0x7, 0x6}, @generic={0x81, 0x10, 0x4, "1842eeb5eeb1d2d3139cf85a1b55b02d577f224c5ce944a891be53f60d4131becea70952074694313c4d14ea2075455887cf0dd975c336cf4188433070735ff0464ce4be0ceddd4e772eb44f632a72813c604c9a14371417d41bed7b2a6c257a9c319047501bc6a90bd95b57f0c8f43c32337106b1d0b1e8c1604969c091"}]}, 0x3, [{0xa7, &(0x7f0000000400)=@string={0xa7, 0x3, "9e41fd55d965401a2afd3a68ed2aee14478318f54d03ac5853eb589b70c216d5259696569e010115bc1270ffd398a9e63120af8ea1aa8bb022eaf2153da3333c5ec9a113a116b7a9a23522799e3dc957400d6691a35c3abea1191c0215232ee43d2654b9489d489b33a47c277a902cbae7a86078ca82d5470cba2c9f6727f8723f860b4317e238c522102eb4d198c32ca9aa8b750d8f2f38d8d889eb5fb18186d720421c85"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x430}}]}) mq_unlink(&(0x7f0000000580)='\'*-\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4048aecb, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000fcffff"]) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) 24.294532451s ago: executing program 0 (id=4062): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) ioprio_set$pid(0x2, 0x0, 0xa00000000000000) 24.028875829s ago: executing program 0 (id=4064): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0], 0x5c}}, 0x40010) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) shutdown(r2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110410000000000060086c6000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x83, &(0x7f0000000300), &(0x7f0000000380)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) shutdown(0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="3a10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getuid() r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x141303, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffecc) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x9c}}, 0x14008000) 23.093379906s ago: executing program 0 (id=4069): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) socket$inet6(0xa, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1c03a59fb6c44f65"], 0xffc9) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a000000000000000000000000000008000a400000000009"], 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003"], 0xec}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) write$ppp(r0, &(0x7f0000000300)="1750f140128afc47eeb98fb3d46f38524c86985bcd112ed70ca211c2ea53ef1a144fe81e7c7336106b6b9fec7109daf21d3141e957d094a55ca305811213544b27a776066e29ecd3a1ca7af1caf9d54318eb0cd254e8682ec56d476c603715f64c01c141a72c81cedc4ad4031648c1bec20ba0c1dff72803153461d8fbc0fa70c971ac3bd5b7d5e7c3036589ff5df56debef67b25d46b41853b036cc1442b30a43e01488244dc7432a46bef62964b528ec0aee8385d141df4e41eeabb451145045c83fd423beab63e5f02a25a423128b0ae85eb3e6b337683bcfc5", 0xdb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x3000000}, 0x0) 22.716776993s ago: executing program 0 (id=4071): syz_usb_connect(0x0, 0x16b, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x21, 0x7a, 0xeb, 0x10, 0x5c6, 0x9047, 0xa8cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x159, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x8, 0xe9, 0xc0, 0x3a, 0x0, [], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x12, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xf0}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0xd1, 0xe8, 0x47}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x32, 0x2, 0xff}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x27, 0xb, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x40, 0x7f, 0x7f, [@generic={0xbb, 0x6, "d7d6cf0e2b2216920f6a511997e0382098c581bdb89e963ff791c3ac0377918ab90881400f931b61435f5ebd6e8e15cf318b454476c8df72da208112c76859b91b21131e50b4bae8948ecc3d224c1a47b3fa23de4b5baad7c34c485e7a90f086707cf6a09bf8134850a1a06037a338e7da77dee5eb682518684cb4a2d36a76774b97c0c444ccbd9985008b2c82c9d7240283edc69c19915786b95023e36321198b2aea5a40733b63b269f3e94fd521cadc772f4414a0e37fb3"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x6, 0x4, 0xa}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xb7, 0x8, 0x5a}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xfe, 0x15, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5}, @generic={0x2f, 0xa, "1f9a9cfbcf45857b0fb6d869361003a1b685a70dd7ee49de55407bf7e51ce027fab7bbba51fd3a1877e68b59e7"}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x4) syz_usb_disconnect(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c831, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xffff}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0xc6ff) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}]}}}}}}}}, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 22.384848639s ago: executing program 0 (id=4073): setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x24, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4}, 0x48) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<', @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x109, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in6=@remote, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000740)={0x18, 0x0, &(0x7f0000000840)=[@acquire, @request_death], 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000680)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0xb38, {{0x7, 0x4, 0x0, 0xd, 0x1c, 0x0, 0x0, 0x7d, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private, {[@lsrr={0x83, 0x3, 0xf8}, @rr={0x7, 0x3}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@private2}, 0x14) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 21.799278189s ago: executing program 1 (id=4074): syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80001) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7f, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x4a, 0x1, 0x0, "a701f6dd566a4ab69e1f83b4051d09a83971e3aece62c53bb500"}) syz_open_procfs(0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000003000001000000000800040001000000", 0x24) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x80, 0xfffffffa, @vifc_lcl_addr=@loopback, @loopback}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x40) r3 = socket(0x840000000002, 0x3, 0x100) r4 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x1cb002, 0x0) write$sequencer(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="0401000000010040850e5d2e1f65bb25fd0bc46b66c0fd3897abfd84827c2966f82dcebecbc0fd3594b6bb4d4d16c1f09da6566bbfb52b88d48ae58e42454907d39854f777310641357ec46bbb79b0c58d5dd8d098f32b04002c0c6ba2316cccc92b78465a08ac06db7920a94b657cf46c155180a4156ede90b58d6bde5dc9c977113f98da48ac6ca38d8afeb3b7261e6e0cbd641b4eae35bd05cefe7a0ba057ef5965fd21ad51c97d5590940e27ba7558b893522e21afbe4ba2d4e3b573c1c1df4c41214698064320dbe99c8f7ccf7785ffc757d399ddd9abf025d723da26bc28e855b21ce676140153c57c4c3274cf000000000000000000"], 0x8) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) pipe2(&(0x7f0000000040), 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000240)={0x0, "d55f3a85a82d3f741f7cd35e9ceb30aba9f0db8dcd9320e105130443d65f78aa"}) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) socket(0x15, 0x5, 0x0) io_setup(0x5, &(0x7f00000000c0)) 20.681540794s ago: executing program 1 (id=4076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @sack_perm, @timestamp, @timestamp, @timestamp, @mss, @sack_perm], 0x8) syz_open_dev$vim2m(&(0x7f0000000100), 0x454, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 20.532949843s ago: executing program 2 (id=4077): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) write$P9_RSTATu(r0, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)) 20.427690742s ago: executing program 1 (id=4078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 20.321767913s ago: executing program 2 (id=4079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x30, r9, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r6, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r11}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x6c}, 0x1, 0x8100}, 0x0) 19.320878563s ago: executing program 1 (id=4081): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x23, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0}, 0x90) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x1, 0xfffffffffffffffe, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000], [0x2], [0x0, 0x5]], '\x00', [{0x0, 0x3}, {0x400000}, {}, {0x3, 0x4}], '\x00', 0x0, 0x0, 0x0, 0x2}) syz_emit_ethernet(0x0, 0x0, 0x0) 19.128779431s ago: executing program 2 (id=4082): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f00000002c0)=""/85, 0x55}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f00000005c0)=""/192, 0xc0}]}, &(0x7f0000000180)="2e1cd343758c", 0x0, 0x7, 0x12, 0x0, 0x0}) r2 = memfd_create(&(0x7f00000008c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000006c0)={0x7, &(0x7f0000000680)=[{0x7ff, 0x5, 0x5}, {0x0, 0x0, 0x3, 0x4}, {0x498a, 0x0, 0x0, 0x7}, {0x3d2, 0x7, 0xf, 0x20}, {0x1ff, 0x4, 0x33, 0x8}, {0x100, 0x0, 0xd0, 0x6}, {0x6, 0x8, 0x3f, 0x8733}]}) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000940)=""/4106, 0x100a}, {&(0x7f00000003c0)=""/23, 0x17}], 0x2}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0)) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000019c0)={0x21, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x98a3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x3b, 0x28, "4a7e9af623ecaed79323ce4d61eb8796bad58dbe9250c6acd6ebb6b2a99035fb724345ceca15f75f"}, @jumbo={0xc2, 0x4, 0x8000}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x9, [0x7f, 0x6, 0x40, 0x9]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x0, [0x4, 0x6]}}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x3, 0x67, "819b9859ad7b74f7bdd4e17d77a7aacb6b6674b2f194f573c8694b4f50396046a234f8b71aa579a084bcd359c3690632351d830a2c1571511192ee9c676e7f7b93173bdb491076e02a734fa693b8cc4c558d18eeac8c952d1934d528463b09152036ef111ce37a"}]}, 0x100) io_uring_enter(r5, 0x30c6, 0x0, 0x0, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f00000000c0)="e036bfe9f6080f3c8a4947f18279b10b307f3efdb5a3b3a7851038a2ef751e948ccfd28db727d49f1959ebbd81a7e52cb5e5afd7", 0x55}, {&(0x7f0000000280)="b3a5ae96edf445f20e24a5bffbb42edda7fb80f90a380fd19bc768466f18eebb24", 0x21}], 0x2) write(r2, &(0x7f0000002140)='i', 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400f6ff0f00010000000000000000000000000a20000008000a03000000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021200011800b0001007461726765740000100002800a00010071756f7461000000140000001000010000000000000000000000000a"], 0xa4}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="aa", 0x1) r8 = socket$netlink(0x10, 0x3, 0x7) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="39000000e55cb79800bb65e1c3e4ffff06000300bf08cc354f0900000045000000250055320000190011000600ad00020000000000000604000000", 0x3b}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="180000000301010100000000008a5f91734b198081a702dd150123b0b0d186b374a4fb163d062d2dfb47029e3246abd655f1840879eadd8a48082472fe6d73041d6e0d2225e6a913ae10cae367ffaebab80fa08983da8dd73e810000008c9167f60d67549019e27b23144288d7d4c81e06366a7a9ea973979485b33518affaf5ca370637c89a3729ffa6b39803a53ad8a5cfbaa05b51ac9f1d88678626ef7c77bea1aee7d86cac9c6db1bcfe759643c5c6ee8afdd3c0612a7db86b75dee686e9a164a0be546f3d966204715872e725af9e85146025063c297941df5df0cea65af7a79c8f74f11ce2006b309ade7a27d53b99cb0bb2c5ee3d4000b434bbdeaa7f6c000000001b00000000000000000000009c1c38a2e9b68f9aafc0f63df54fee37772b2459ea126f4a95ce48a4fb66d946391bb071d8cea455e8849665df877b90f9bac9257a85afcd9ad6a9a08117ee76c227005f4d3e821babe8c8739e6004ad2544bdeec4f52d964511c4283f6853971c9d0c1a61629b5808188fd5a0586c5224920cbb712909c0c12403e74a397f1734bf80b669c126e348dda03e60f996f1d27f20f66e6f9f9e6d84f7ce1e478575da17463b8dffc1781bae6591b7b28916a0d4f700"/467], 0x18}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') fchdir(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) 18.142375172s ago: executing program 2 (id=4085): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000080)=""/102, 0x66}], 0x2, &(0x7f0000000580)=""/4096, 0x1000}, 0x5b}, {{&(0x7f00000002c0)=@caif=@dbg, 0x80, &(0x7f0000000340)=[{&(0x7f0000001580)=""/188, 0xbc}], 0x1}, 0x1}], 0x2, 0x40010100, &(0x7f00000016c0)={0x77359400}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1bc}}, 0x0) 18.138503019s ago: executing program 1 (id=4086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xa) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x95ae6fc20bcad8d5, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x45, &(0x7f00000002c0)=0x4084, 0xfffffffffffffe2b) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="00000000000000003702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000000056080000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x90) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="df511109fd7c"}, 0x1e, {0x2, 0x0, @multicast2}, 'lo\x00'}) r4 = socket(0x3f373fadf19ab0be, 0x2, 0x0) write(r4, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a00000000009500004000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0x0, 0x4007) ioprio_get$pid(0x1, 0x0) 17.267630252s ago: executing program 3 (id=4090): syz_io_uring_setup(0x0, 0x0, &(0x7f0000000080), 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000803}, 0x0) read$FUSE(r1, &(0x7f0000010e40)={0x2020}, 0x2020) 16.027059882s ago: executing program 2 (id=4092): r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000004ff8d978fa7ef9850000000000e5ffffffffffffff000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000013000000e2d0be86000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000799e3b3c00000001000000000000000000ffffffff01000000110000000000000000000300736630000011000000000008000064756d6d793000000000000000000000010000000000000000000000000000006c6f00000000200000000000f8fffffffeffffffffff000000000000ffffffffffff000000000000000070000000a8000000d8000000646e6174000000000000200000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000100000000000000726564697265637400000000f6f678c1bcc95568ee000000000000000000000008000000000000000008000000000000"]}, 0x210) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x50f, 0x24) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x2000000000000145, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfe68}, 0xcd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001940)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x28}}, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x6, 0x80000001, 0x0, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xd9, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x9, 0x30, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0xf8}, [@processing_unit={0x7, 0x24, 0x7, 0x2, 0x6, 0x7}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x3, 0x1, [0x8], 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x0, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x88c, 0x0, 0x7, "ec2205e5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x8, 0xe, {0x7, 0x25, 0x1, 0x2, 0xfd, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x40, 0x0, "90b0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x2, 0x10, "bcc5"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xd1, 0x3, 0x4, "098359014e2f4f3ff3"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xbd, 0x4, 0x4, 0x4, "9fbd8a21e763"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x4, "16be28539eadc5da"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0xc2, 0x2}}}}}}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x41, 0x6, 0xe, 0xe7, 0xff, 0x8}, 0x10d, &(0x7f0000001000)={0x5, 0xf, 0x10d, 0x4, [@generic={0xd6, 0x10, 0xd, "096d9795ac8f1a342365a991beb43e03e51363655fd2880f7fe03505adb97e4834c22eb8090ee154ebb86b580c049b25d1830aa03a6a0c74b54bfc80bc235a85308ef709180182dd36dc582076d19115e8ae81f69d69e17d1d382e844170da722b1cfb16cfc24cf512861a8a7e06798e22a395d9f08bf71d70db83586012e6e01d70b9a51822d83ca57fcd12c0c587e7e2fde34c477b3648c42bae8adf3ce5af361924afedcca56e6964334051d64672828b47f3d2527b537c033056616d798e602978d0a5a304d04bd51abc87a8cf77494a04"}, @ssp_cap={0x20, 0x10, 0xa, 0xfc, 0x5, 0x54c, 0x0, 0x7, [0x3f0f, 0xc0, 0x30, 0x30, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x0, 0x4f37}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x1, 0xc9b4, 0x9}]}, 0x9, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1427}}, {0x63, &(0x7f0000000c80)=@string={0x63, 0x3, "39c98628a0f0d667d4e474c866c0a59ee23f1e51d1c24b81b597039dc6a50e274fa7e3eb42dcab310666a549c96698041efc1f7cda37eaf3799a4da1c5a52eb7af7c338b35da7f4c27eee3a3bddd3a1cc1bb7749d047358ee3bfd8080495b5f7c0"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x444}}, {0x2e, &(0x7f00000009c0)=@string={0x2e, 0x3, "88df71337223adb4ad7b79fd1ea19fceb68b8f7236444e75ace8b09170a888c5ff0c41bf9b5a19b6cb576681"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x843}}, {0x28, &(0x7f0000001140)=@string={0x28, 0x3, "200a27c738d9b53df501895f4f39f65505f9aeb0392110104344a4ee01cf33d6ec6fb33e76de"}}, {0x53, &(0x7f0000001180)=@string={0x53, 0x3, "46eb659f8c47ca12b3e195710d504a94ef247dd54f2d5448a2410382093b9af76ac9b48db31e5502975810981f8776d5e239b47f8a60f92d1542048bda9a6b74d69bbea5c8d9239845cd224d7174e1080f"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x1404}}]}) syz_usb_connect$uac1(0x0, 0xff, &(0x7f0000001340)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x81, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1f3, 0xe}, [@feature_unit={0xd, 0x24, 0x6, 0x3, 0x2, 0x3, [0x9, 0x4, 0x7], 0xfe}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x40, 0x6, '3'}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0xa, 0x4], 0x56}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x81, "f90a"}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x5, 0x0, "0e5063be09"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x301, 0x5, 0x3, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2, 0x5, 0x0, "1278190f7c97b78f4b"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x18f, 0x7, 0x3, 0xf, {0x7, 0x25, 0x1, 0x2, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0x1, 0x2}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x2, 0xc, 0x8, "a6", 'Y'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x80, "8795"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd5, 0x1, 0xb}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x1, 0x40, "179a61", "2adb"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x1, 0x5b, 0x57}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x7, 0x9, {0x7, 0x25, 0x1, 0xc0, 0xff, 0x7fff}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001440)={0xa, 0x6, 0x300, 0xf, 0x84, 0x0, 0x8, 0x9e}, 0x31, &(0x7f0000001480)={0x5, 0xf, 0x31, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x0, 0x9, 0x569, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x10, 0x0, 0x101, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x6, 0x80, 0x9, 0xfe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x7, 0x2, 0x3, 0x1}]}, 0x7, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x57, &(0x7f0000001500)=@string={0x57, 0x3, "d8ef16f726c18ba74dbdfb784ab5e4f977e02e8f0d4a2778eeb953729e2cd20f074b8f3376e85a2160126b3111cbcbe958d1d2944b98d8d6dfd20b5c2cef237df7ccde9562bb98d6180660807ad21f05f67d9ec71d"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x480a}}, {0x5c, &(0x7f0000001680)=@string={0x5c, 0x3, "d95d89313c1ba4abf264bda38e687ff1948c44a7bcea434cc351250380361f6147fe391532c63485574b7f6188af58f5caf49890cad6d2819d992294406e947373f515509382bc0a8b0136989ce9403f01f423cfae54e21af4a8"}}]}) r6 = syz_usb_connect(0x5, 0xed6, &(0x7f0000001780)={{0x12, 0x1, 0x200, 0x15, 0x59, 0x95, 0x20, 0x8f2, 0x7f, 0x797a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec4, 0x4, 0x5, 0x1, 0x30, 0x4, [{{0x9, 0x4, 0x60, 0xb, 0x6, 0x9f, 0xe3, 0x44, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x200, 0xdf}, [@mixer_unit={0xb, 0x24, 0x4, 0x3, 0xa, "10b185b91ccc"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0xb1, "b6"}, @selector_unit={0x8, 0x24, 0x5, 0x1, 0x7, '\tJr'}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x2, "358f8b0ede6a"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x6, 0x3, 0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x8, 0x9}, [@mixer_unit={0x9, 0x24, 0x4, 0x4, 0x1, "cc387b3b"}]}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0x2a, 0xe, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x12, 0x18, 0x7, 0x5, 0x9, [@generic={0xe4, 0xa, "cbaa2e48d560d67696ffd4269a315173288e0555bf846d3da8991240590f070429cec1646df9f4770a93fd6275cd5449cafb8f56d00b3e5f61daafcc9c8a9858bd7fe402c133698bdff239a42205601fd40a2c052da1c09dd9aa548a2e6f07e33d05f6f2002da42713d8d327f79d2fd6ca36b548d9fbdf7450171b1ada524d415ff0c16e19ae199d97e796be0cb5068a7e33dae05f95249a55983da7c7a4a6e9540b6bc3a070dfeec5e9a1a55716fe36773f8b999b516a4ef67c6f55e7c56d50d83ed44169ef781b1d9aa215bbefb4d94bbc511841a24c6782e94594925ef7ae71f0"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x10, 0x9, 0x43, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xfff4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x3, 0x0, 0x4, [@generic={0x8c, 0x1, "ea60f9bbfc995037864c3b065d0ecd5b25506257b4a089e7753e1f1e7b5c289e8cfa25c79df49781db6813c2e4bbb2bf496df5d0fe5678fd87cb468666025f8cd66e606b9d5d8a841aa5a0bed249c50eeea7d42aa5d3772424c5a5ad74f8a065056239c733bf0debb4a0b695244e106feba3020587f5da1a5e49d30867398d0b9b959444f514613fca25"}, @generic={0x3d, 0x23, "62641ad923db0bf0cdca03fadc13e26bdaa44bf7bee1a1579b89d5c20ae5791e871bf774ce96cfc19e5c9002230c76c02585d666be85e05fd8c913"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x87, 0xb, 0x47, [@generic={0x1b, 0x6, "674657b900abd7c198e96dc84bd88e2e24eed42a18bea52423"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x60, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x1ba0}]}}]}}, {{0x9, 0x4, 0x66, 0x7f, 0xe, 0x3, 0x0, 0x0, 0x7, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x78e}}], [{{0x9, 0x5, 0x0, 0x10, 0x200, 0xc, 0x10, 0x5, [@generic={0x100, 0xa, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x9}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x2, 0x9, 0x80, [@generic={0x41, 0x1d, "9ec1fa1c74250d430c19fb1633b99bbb10c17ee3555f3e2a80aa7c2388bb88fa202c7f2a7ca58de4eaf10392437472ed23b8efb044da8dd98dc57283223acb"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x7, 0x6, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x7}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0xf3, 0x1, 0x5, [@generic={0x7c, 0x31, "8a1b4aa5e8c1b3428b495f18f5a1b0612b0d0c015e94f7ab164d34b53bbab35914370a7e11b84ab6675ca00498469dfb7b8a14aaacec36614a27d35a0d36bef81555bdf48c3b7100a7ab2f93490f645b408c8a5f842498265695c0b9730e3a7ddbdd43e9c1d81c100e01d3ecc39930872a29eaf3f76f159f7c97"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x0, 0xe4, 0x8, [@generic={0x4e, 0x23, "d1abf62f827c988c5641ac65eebe6a9e76c7b50113d0afac5757269b3f4ee4cb37ff593989e2fac2058e7d0cfc4a29f340b21498e8d4486ab6567fb53ad0aedca8597a5ef91acb8e2bf64751"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x4, 0x5, 0x8, [@generic={0x19, 0x7, "cf58a7ad7a58e6f00a58e70daee7e3620a27dceadcf103"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x4, 0x93, 0x6b, [@generic={0xb3, 0x22, "ce9b040eb4e26822d79f23e4dbf80e5e457dee3cbd441ee59244a530c51fbf2c381e301ab6663a572b3988ac0f886def6928cbc9b468921ef46db90399703adfbe6e5514d148713eabc2baba165c9698f10d9749fc668a46b24044fb7ce1b680d6e5983b8e27324faf223f4fd929fce40a863152760fac72475d41d1aa06df1c5799c1bcad167b7efdc36c8eb078adbf587b13031d609a23e04cbd1d69a5a57f80ac4b5bbedb612fa7d93297c8675ec395"}, @generic={0x6d, 0xf, "12e4656e0de7774ac4faac646b0b7cffb2a56a6817e563249a671db97dbd0c01178bc83cb7299224f43cf53ef16d28476d82bb20cc3e3056764bbab570543f6587f963a762430d974301a35163c61abf8397d97c2987dc012eb4f9b06444942fe3a08178d2a324ac79322a"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7f, 0x2, 0x4, [@generic={0xf7, 0xa, "a874b161463e0a70e28aed029e2335a4b2cb36213edfae83ed2eb2c70a5737e36623f62905d499f2c481aad15bd4beae5c79991536bfefc8787c0feca28bbdc84a31853f85346fd7e72933e9c13934ad9f76bdbc54ff3b27ae3da66246d5c857c9a55de54a74ab520a6d3f17ead2859063427789dfee1f8dfa02e4aef3e2b8466dc29a0ca76afc8bf47494eeeded1680a365d4fa0f21be979a9df54944c512f71c061ce31af433fe7a6685a937d9729faf0334d7d80531fcddab6296da09533222c98c11f7f143886a785d1eeaa7e074d6598685ea4863b86e1ed1875ca62abd2b84393b888f27ba8787b6a10f14d362a1ac8321d1"}, @generic={0x9a, 0x11, "1bde4b0146d62339fd0abb6db2e3cd2c4990169a9a666dd78b90c23f7d8efcb7818c577b51ee1afd37ee0dc86a1cef854e761c76abc926ee2493c52ae3b2c488c20f15d995014625be2cdf32a047d8a00b1ddcbcb8eb88d8f56e4e95557f47bb0aab7359613078d3b195d318bcd4ef5eac600e0a09e959622c2a2b28ef067aa51104d53f8582c76208eb049781343625028f2a8eca036cb7"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x8, 0x7, 0x2, [@generic={0xec, 0x23, "7f27b2e067123ba2468935cba03f63f492a8d20d4ec73d8cea35aef27f05d9bbd22e72098255b25c7389fff1ed022dc6dd0886ee40d96437bf421002783fb8b9de7cc3abe00181fca90e2e3e419d84cc0bbb55a8a427701db0894039cb9b401853b0b3871f9010abd61d3240ea00136dc46d3288ac1bc521875ef27093cfdb13b9429c46e6f5eca938136e8010fefabb4e04077a25db23c5f71a7936de6aa8e4f66f2321d8136cc6506e1a31c7e36550d983581d6bf0ae5d3e8f836e5882358202cb84de47968fc6320033ee2dfb1eefadd2c1624e63bf614ed99bb88652d06480a76dd7c1e2cad95c13"}, @generic={0xa7, 0xc, "77f78ad0b1080b3b242662e6af7dbb9678f6ce2efc2adb364e0eadf812a421be3e9cb3eda39ee5be1314bac0cd5df77656c6f0070eaa4f8541555c7c91cd2f671d60f799d556c247830f12ac9ac863d351cab453d1803ddb252af7ac3e33206326fa8552a031ffdde60743729a62776e5130b2f85993e63c9a372b0e23aa90b0cf9e2e0004e7055ca21d884db9818b96f58e2ed7d9f0a5c09a7affba89629a6fe3ac5bba57"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x15, 0x2, 0xb8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0x1}, @generic={0x85, 0x21, "fb272213c1c048d25f9749245e7998f64f1fc077b2310305c87f0ee2dfbe8791479ce37f0f761a87c15e320235430a693cb4f7d8f7b9c83a8f86d7a22e3d0734c48fb03ad8233a942838e4adb8c2e2246786751ca5c465df2bad7cc87f329c7553f1f903a696745b65b8b964602f53bd93aa2e98e12b8bde14ccb86f1489a9e9011472"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x7, 0x0, 0x3, [@generic={0x69, 0x3, "f6d902ba52f3e15c7870044d9020b614968a11853568930e9832b6c313bab77467df5d1bc3adddb6019d84fa76de4b78bffb1be598e40720d7ae4c07084d730179c64a615ce17b14012393f7c5f2d1c56b1200f02b2b6419cf88a19c3c50815948408a65a1ff1a"}, @generic={0x22, 0x1b, "1f97287228ea58224fa60ff5ab7964c7e55f4f9ddfdfca23b0938199edaa0c79"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x0, 0xb, 0x7, [@generic={0xdf, 0x3, "0c4c026f5f93598eb07fdc912088d7d88ad25d438916683a8fe2ba0c14485ee622560b9be76b3e64df380fc26afd35807c996ff77bb05fd9a6ce4a624614055ea361116ba70699d4c909ea8b97cdd1f95df763b1ebc9381ec0f414603dbb7f776adcdb398939134c7358e0babff9eb94cb0558a1164e0fb6de838c3ee978aeef2d4d4c97913e9a071449833217711e922995e8905ce562195dc6b17f13ab535001078f1f030555be90231c9bf7d9e3f3b82436c15b56a8bca74f2043e3d54e424b409771c04c6d2f3df022b9e751352d03af7954c14d5507c6d19d36bd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x5, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x5}, @generic={0x72, 0x24, "ead64d635ba096a35e9ae9055f78cc20d27744d99204ce119976a82daeca257273296fe8499a8d37c9a8b57e1db03d9383402c4467080b79e48950dedaebdaa20e28ba02ee322d412d5e15b0c7111a1df6b26b23ac4168465d8c36954a4e12e3fc4d88cacb4b1eb646670f9365610a36"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x3, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}]}}, {{0x9, 0x4, 0xd5, 0x4f, 0x1, 0xc6, 0x6a, 0x9c, 0x11, [@generic={0xd1, 0xd, "1b7b44f8702de9cafc77650c5ad0d54e799abd97900782d89c2ea8491ae3db3b63e44980bed2ac514bf140efc7b5f10a5247e866acd5fb7bee730a62c5f80930b980e6d9abb757226337f8e47d34f52d10964fb12a4100e6413e7ab3280f0c4ebabf2150529f7f8aa558e4769ae0bf957adbdd2c95a1615e451e333cc58ac94e4f4261390c54125185318cc03d6d4468528e044c23770a06cc00bb593ade7955add86d7737f4a04f68b497d27cb68d77c3345d4a34c8809e33e0d7070e16c0e4dc9836ea51e7ecae481b4b14954a1f"}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0xf, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}]}}, {{0x9, 0x4, 0x1, 0x0, 0x4, 0x9a, 0xd5, 0x2f, 0x5, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x705a, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xbc, 0x78, 0x7, 0x0, 0x4, 0x6d}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x8, 0x8}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0xd, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfc, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xfa, 0xc, 0xeb, [@generic={0x3f, 0x3, "13066f760029ce3538db9fc0a6eec4a08b8aebde4cfdd2132ce34f870dd914c2ac99aa215a148784681b5d0fd7086877b5bed3a1c7fe1cf6856c85ef4d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x2, 0x1, 0x7, [@generic={0x86, 0x8, "0f1fbdd839e4d879f0de570c9f5d76a3f0556766baa5186e9cf70886f3033682b5b2a213ccaac7e8fc8a1e0b1d7a190397b179c48ef171675d46a848dc50cf4e33457eec4450adf6d8a5e4e835f3c56c6ee90f127ba57d316f984d83db2cb7495a94056eb05028a95858f50aa5048999c68e511ca1ee9f5ca71b682e2ade55b90bee4204"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5b, 0xf, 0x4c, [@generic={0xb7, 0x30, "9344d840bd185392ed0b309b35f434d99e20437178f80223d2ed4c3ac7c3b5cc3e9a50d7f609e4dfe9dbb3ba643f226c2597ec4410eba82488b3ad6511d1811a3a6d6c88e00d4ac44cb6ca0f32086d4ce311fbbecf3d632da928722bf37120a8e63fbdcfa0642eb3a977e4e4429954553e4d26ad6dbe3616ddf8f0db0647bf724005ec6fe7b429b1f51825bb7a5c80874b5169c643e3ee2500e9c34b0b1b0df56814ea9bd5342bf684faf0b76601a72f0793a2770e"}]}}]}}]}}]}}, &(0x7f0000002900)={0xa, &(0x7f0000002680)={0xa, 0x6, 0x300, 0x0, 0xb5, 0x8, 0x20, 0xa4}, 0xc9, &(0x7f00000026c0)={0x5, 0xf, 0xc9, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x9, 0x88f, 0x2, [0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xa, 0x6, 0xf0}, @ptm_cap={0x3}, @generic={0xaa, 0x10, 0xb, "ee899b81e984e5ff0bf68189279c808f50834bee1aec03ebd1c8143ba7b18648ba1bb02a7c3c9e0e43f92e81fa016a684a8688c830fc4d00a0a92b5ea7c4db6c415ffd15f9ee76478b370df37d7a72eab073d7a23f5b3693f499e8aaea58751edb0062f87f21f8abedd1875426d5f9bb930d64db5c74e196be0d478c7d3792cc753cd0ffad0e803c68010674ccc41bd8940f00703185d1d9da14c415ee33982ef5bfa3b126d47a"}]}, 0x3, [{0x59, &(0x7f00000027c0)=@string={0x59, 0x3, "926360963626a6360d40bc9c839b5f7bfcacf1215b539eae31bcb0477eaa39746157b5dd2ab72e8b19e17e66ec98db6d1cb539a531cc1b2fec651bedb96939e5365678ffa52e977aba83b9bcd2262faea409767068c6f9"}}, {0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x455}}, {0x6a, &(0x7f0000002880)=@string={0x6a, 0x3, "52c962978fd87ba02fd086a959438ac562675998e2e271561eb621f71fab67357f18297f4addee9e77b70362c40f37c9d2d1f8744c296f647beb618c220ccec34bebd5c61565e8b1c25f0048c8a5717b5f055b803575bf8d6d4f8e3e00407cf9a5a827b38208aa8b"}}]}) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$snddsp(r7, &(0x7f0000000740)=""/56, 0x38) ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000002940)={0xffffffffffffffff, 0x9, 0x3, r7}) syz_usb_control_io(r5, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000100000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x3231564e}}) syz_usb_control_io(r5, &(0x7f0000000700)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="40217b0000007b240a5097ccf6015a6932806b3275520179189617f3518a2486ed73f81bf29c017bfd0cab6c3d598396c6c693dd1175f69c50a90e990648322bae846e079c63d0fd350b5de8c544d16b56414b0047641f2286eade33020563da0fc605a5533ac0b8f30d905c3c3bb8515cea77859900"/129], &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x80, 0xcf, 0x3, "1387a668", "d45caed7"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x2, 0x6, 0x1, 0x6, 0x9}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20059f0000009db73eecaade449a1bdb471bf177c5b1b9bd728f20ceb96c3c04e5d4c48dbe439fe1aba0f57a75f0833f51a81d0fdc637346fd5de966134ec14ef81e28091bbfae64c4541958bdd2f93948e3316c74c704c992599785b117956372ebe845512d090d2c391b497d1f64871cd1e3f5cd7bcb9477fc373f0a2ba73ac2a2225b7eb905ccaacc83725140e677a4561459e949ee0d3a347e94f6c6ac3ac54a9976dd"], &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xfff0]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "b319"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="b1c865b2f5df"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "e384"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xb0e9}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x6f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xb3}}) syz_usb_control_io$printer(r5, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x7, 0x94, {0x94, 0x31, "abb2821e2ecea26d44acbfb2d1be7993c75270e68f5242d53aea20452a654dc07ed80e3e5b5308215526321687642b77238eb582c38a819cb523f0673519e2d5b11340c1966cccf468c4dcf5736890d1056b6c0dc535b9db3658ae539570b1d41f6ce7fcdda7a8bbbfa02dacb7b90d5ee6d3480beaa0b1f6997977ef4a9ced893566d6b36dbbc92408429b948e8e886af38c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0xb5, "f2db70d613de9615bda844a7865b121964443143e8e6e36bd07f21b1cc3d1beaa37edc1e607b9215161a66653f7c08f8aa734766a63e380728c73672c349ef8448a0e6f38d2fa2a75baa05b64539953ae799756980822bed20c4cdf1dba07a0d3529c55ef9100e0be77937bfe7b76716413b657dba7c3f228e63e78329045d0c172a5bdcb1fe3fbb789695545e4119146b1016271ef5bc5df1fb9bd09db8713fbae54654d457cfd78e404b5944421bd29d0b9402a6"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000380)={0x20, 0x0, 0x6d, {0x6b, "acde4b23d263a0f66e4f8efcf45d127d7c070e538f3e63e85e57c7063baa1ecd96fec8045fc044a6ee115542b1e76d31a6d789eb55acc4a4fbe22107fd24441b3404beb7a4743717b80fc511d96e94dffe5fb1999d826b073ccf8d9b8ecc9dc123d86cde07a185e50f35df"}}, &(0x7f0000000400)={0x20, 0x1, 0x1, 0xd8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x2}}) 15.620120397s ago: executing program 1 (id=4096): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x700, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "db92055e3ef6ca7420a1a3e3e84589fa"}, @md5sig={0x1d, 0x12, "7600f1000000006f00000100"}]}}}}}}}, 0x0) 15.072527319s ago: executing program 3 (id=4099): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @sack_perm, @timestamp, @timestamp, @timestamp, @mss, @sack_perm], 0x8) syz_open_dev$vim2m(&(0x7f0000000100), 0x454, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 14.931117775s ago: executing program 4 (id=4100): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)) 14.820443828s ago: executing program 3 (id=4101): r0 = creat(0x0, 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x69) r1 = inotify_init() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = gettid() r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x1, 0x1, 0x0, 0x0, 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, r6, 0x3}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0xfffffffe, r7}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) rt_sigqueueinfo(r2, 0x801c, &(0x7f00000002c0)={0x10000001, 0x2}) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1) close(r0) 14.701586186s ago: executing program 4 (id=4102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)='D', 0xc}, {&(0x7f00000000c0)="d711eccf81", 0x7fffefff}], 0x2}}], 0x1, 0x8000000) 14.204264663s ago: executing program 4 (id=4103): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000210484d70000ffffffffffffff7f", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007866726d0000000004000280050011000000000008001b0000000000"], 0x44}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) (async) setreuid(0x0, 0x0) (async) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, r5}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) syz_emit_ethernet(0x3b6, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) gettid() 13.85176169s ago: executing program 3 (id=4104): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x3, 0x0, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0xffffffffffff692d, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={0x0, 0x108}, 0x1, 0x0, 0x0, 0x8041}, 0x4000805) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000240)="c4", 0x1, 0x20000845, &(0x7f0000b63fe4), 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@bridge_dellink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}, @AF_BRIDGE={0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x3, 0x4e23, 0xffff, 0xa, 0x20, 0x80, 0x3b, 0x0, 0xffffffffffffffff}, {0x401, 0x7fffffffffffffff, 0x2, 0x1d20, 0x6, 0x0, 0x2, 0x8}, {0x6, 0xffffffff, 0x1, 0x2}, 0x20, 0x6e6bbe, 0x2, 0x0, 0x3, 0x2}, {{@in=@remote, 0x4d2, 0x3c}, 0x0, @in=@remote, 0x3503, 0x2, 0x2, 0x46, 0x3, 0xfffffff7, 0x8}}, 0xe8) 12.980869875s ago: executing program 4 (id=4105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x3c, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) 11.85328977s ago: executing program 4 (id=4106): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x500}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.567863433s ago: executing program 3 (id=4107): syz_usb_connect(0x0, 0x61, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x45, 0x8e, 0x4f, 0x40, 0x595a, 0x1, 0xe71a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x2, 0xf3, 0x7f, 0xf7, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x0, 0x9, 0xd6}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3, 0x1, 0x4, [@generic={0x2b, 0x1, "97cb56de502a3e6a252490ad7fe9f51319a04afe8a3d4b1d8311c293129c1962b949337968c0f86f3e"}]}}]}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\f\x00'/19], 0x5c}}, 0x0) set_mempolicy(0x4005, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0xfffffffffffffc58}}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000000)="11", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x40}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000240), 0x80) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) membarrier(0x4, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r7, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) 4.14640046s ago: executing program 4 (id=4108): syz_io_uring_setup(0x0, 0x0, &(0x7f0000000080), 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0x20000803}, 0x0) read$FUSE(r1, &(0x7f0000010e40)={0x2020}, 0x2020) 0s ago: executing program 3 (id=4110): arch_prctl$ARCH_GET_GS(0x1004, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r3) socket$key(0xf, 0x3, 0x2) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r6 = open_tree(r5, &(0x7f0000000400)='.\x00', 0x0) fchdir(r6) umount2(&(0x7f0000000180)='./mnt\x00', 0x8) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0x33fe0}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x80001) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x25}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$UFFDIO_ZEROPAGE(r10, 0xc018aa06, &(0x7f0000000100)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xba, 0xf5, 0x97, 0x20, 0x2201, 0x12c, 0xe787, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x67, 0xa8}}]}}]}}, 0x0) io_uring_enter(r0, 0xec4, 0x0, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)=0x0) r12 = syz_io_uring_setup(0x2408, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) io_submit(r11, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}]) kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1082.293755][T24143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.305994][T24143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.318206][ T29] audit: type=1326 audit(1720247500.769:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1082.359051][T24143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.379240][T24201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.427931][T10859] hsr_slave_0: left promiscuous mode [ 1082.434511][T10859] hsr_slave_1: left promiscuous mode [ 1082.445365][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.455633][T10859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.463749][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.473354][T10859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.486793][T24202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.497204][ T5095] Bluetooth: hci0: command tx timeout [ 1082.515322][T10859] hsr_slave_0: left promiscuous mode [ 1082.522663][T10859] hsr_slave_1: left promiscuous mode [ 1082.529241][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.537839][T10859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.548447][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.557838][T10859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.567840][T24202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1082.621764][T10859] veth1_macvtap: left promiscuous mode [ 1082.627287][T10859] veth0_macvtap: left promiscuous mode [ 1082.637569][T10859] veth1_vlan: left promiscuous mode [ 1082.642959][T10859] veth0_vlan: left promiscuous mode [ 1082.661237][T10859] veth1_macvtap: left promiscuous mode [ 1082.667307][T10859] veth0_macvtap: left promiscuous mode [ 1082.676031][T10859] veth1_vlan: left promiscuous mode [ 1082.681682][T10859] veth0_vlan: left promiscuous mode [ 1083.212418][ T5095] Bluetooth: hci3: command tx timeout [ 1083.489192][T10859] team0 (unregistering): Port device team_slave_1 removed [ 1083.533898][T10859] team0 (unregistering): Port device team_slave_0 removed [ 1084.248625][ T5095] Bluetooth: hci1: command tx timeout [ 1084.317047][T10859] team0 (unregistering): Port device team_slave_1 removed [ 1084.363816][T10859] team0 (unregistering): Port device team_slave_0 removed [ 1084.914582][T24143] hsr_slave_0: entered promiscuous mode [ 1084.921854][T24143] hsr_slave_1: entered promiscuous mode [ 1084.930388][T24068] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1084.958368][T24068] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1085.056649][T24068] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1085.103644][T24068] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1085.228502][ T5141] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1085.296317][ T5095] Bluetooth: hci3: command tx timeout [ 1085.420477][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 1085.451658][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1085.477704][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1085.499041][ T5141] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 1085.518653][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.539574][ T5141] usb 2-1: config 0 descriptor?? [ 1085.551711][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.570462][T24206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1085.584901][ T5141] appletouch 2-1:0.0: Could not find int-in endpoint [ 1085.607554][ T5141] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 1085.626341][ T5141] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1085.735481][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.766886][T24119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1085.797243][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.804434][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.816640][T24206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.827497][T24206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.844074][ T57] usb 2-1: USB disconnect, device number 112 [ 1085.881056][T24143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.899606][T24119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1085.924230][ T5322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.931433][ T5322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.948715][T24119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1085.959725][T24119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1086.004725][T24143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.030277][T24068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.080449][T24068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.129976][T24143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.166282][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.173468][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.207900][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.215072][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.276358][T24143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.330498][ T5095] Bluetooth: hci1: command tx timeout [ 1086.492211][T10859] bridge_slave_0: left allmulticast mode [ 1086.497913][T10859] bridge_slave_0: left promiscuous mode [ 1086.526228][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.915159][T10859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.926064][T10859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1086.936672][T10859] bond0 (unregistering): Released all slaves [ 1087.201766][T24119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.275671][T23998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.311030][T24143] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1087.367132][T24119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.424142][T24143] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1087.447602][T24143] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1087.475646][T10859] hsr_slave_0: left promiscuous mode [ 1087.495867][T10859] hsr_slave_1: left promiscuous mode [ 1087.502635][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.518412][T10859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.526259][T10859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.534147][T10859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.553873][T10859] veth1_macvtap: left promiscuous mode [ 1087.560040][T10859] veth0_macvtap: left promiscuous mode [ 1087.565591][T10859] veth1_vlan: left promiscuous mode [ 1087.723457][ T785] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1087.927799][ T785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xCB has invalid wMaxPacketSize 0 [ 1087.948004][ T785] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xCB has invalid maxpacket 0 [ 1087.985576][ T785] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 1088.003786][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.012905][ T785] usb 2-1: Product: syz [ 1088.025062][ T785] usb 2-1: Manufacturer: syz [ 1088.029806][ T785] usb 2-1: SerialNumber: syz [ 1088.045450][ T785] usb 2-1: config 0 descriptor?? [ 1088.054979][ T785] usbtest 2-1:0.0: couldn't get endpoints, -22 [ 1088.061622][ T785] usbtest 2-1:0.0: probe with driver usbtest failed with error -22 [ 1088.072024][T10859] team0 (unregistering): Port device team_slave_1 removed [ 1088.127924][T10859] team0 (unregistering): Port device team_slave_0 removed [ 1088.258032][ T785] usb 2-1: USB disconnect, device number 113 [ 1088.545519][T24143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1088.572782][T24068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.600849][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.608009][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.627597][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.634822][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.789779][T23998] veth0_vlan: entered promiscuous mode [ 1088.855687][T24068] veth0_vlan: entered promiscuous mode [ 1088.887353][T23998] veth1_vlan: entered promiscuous mode [ 1088.999700][T24068] veth1_vlan: entered promiscuous mode [ 1089.136160][T10859] IPVS: stop unused estimator thread 0... [ 1089.141872][T24119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.165712][T24068] veth0_macvtap: entered promiscuous mode [ 1089.181705][T23998] veth0_macvtap: entered promiscuous mode [ 1089.216358][T24068] veth1_macvtap: entered promiscuous mode [ 1089.234786][T23998] veth1_macvtap: entered promiscuous mode [ 1089.303406][T24143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.353656][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.372627][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.387684][T24068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.435293][T24068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.467849][T24068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.493155][T24068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.518879][T23998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.535327][T23998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.557217][T23998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1089.574323][T23998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.659597][T23998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.683762][T23998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.704637][T23998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.714755][T23998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1089.735031][T23998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1089.747777][T23998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.795031][T24143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.824618][T23998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.845977][T23998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.875805][T23998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.885608][T23998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.926470][T24068] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.942816][T24068] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.964062][T24068] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.985205][T24068] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.045042][T24119] veth0_vlan: entered promiscuous mode [ 1090.059865][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.066950][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.081036][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.088206][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.165045][T24119] veth1_vlan: entered promiscuous mode [ 1090.200231][T24295] dccp_v4_rcv: dropped packet with invalid checksum [ 1090.257672][T24295] kvm: pic: non byte write [ 1090.384594][T24143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1090.454555][T24119] veth0_macvtap: entered promiscuous mode [ 1090.490193][T24119] veth1_macvtap: entered promiscuous mode [ 1090.548029][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.578319][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.659222][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.667082][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.692510][T24143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.717755][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.729717][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.748045][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.765817][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.776417][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.793913][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.805858][T24119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.837640][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.859013][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.874680][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.886629][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.908044][T24119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.924386][T24119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.936401][T24119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.957218][T10859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.981342][T10859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.035537][T24119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.047601][T24119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.069278][T24119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.078007][T24119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.138861][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.147694][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.214686][T24143] veth0_vlan: entered promiscuous mode [ 1091.266632][T24325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1091.279644][T24143] veth1_vlan: entered promiscuous mode [ 1091.461876][T10859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.525288][T10859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.610187][T24143] veth0_macvtap: entered promiscuous mode [ 1091.669293][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.702252][T24143] veth1_macvtap: entered promiscuous mode [ 1091.724205][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.794266][T24339] netlink: 'syz.1.3858': attribute type 10 has an invalid length. [ 1091.816541][T24339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3858'. [ 1091.835103][T24339] batadv0: entered promiscuous mode [ 1091.844170][T24339] batadv0: entered allmulticast mode [ 1091.857536][T24339] bridge0: port 3(batadv0) entered blocking state [ 1091.864977][T24339] bridge0: port 3(batadv0) entered disabled state [ 1091.884716][T24339] bridge0: port 3(batadv0) entered blocking state [ 1091.891395][T24339] bridge0: port 3(batadv0) entered forwarding state [ 1091.940427][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1091.981451][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.033462][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.059400][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1092.068754][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1092.084836][ T5138] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1092.100567][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.137760][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.188821][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.213742][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.258312][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.298167][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 1092.309072][T24143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.319682][ T5138] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.335781][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.352984][ T5138] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1092.367731][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1092.376014][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.387086][ T5138] usb 1-1: SerialNumber: syz [ 1092.393220][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.406642][ T5138] usb 1-1: config 0 descriptor?? [ 1092.426729][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.461848][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.474971][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.486623][T24143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.515057][T24143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.580323][T24143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.647828][T24143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.670113][T24341] loop7: detected capacity change from 0 to 1036 [ 1092.697363][T24143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.721552][T24143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.749126][ T5138] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1092.756030][T24143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.770126][ T5138] usb 1-1: No valid video chain found. [ 1093.166724][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.224856][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.383514][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.445364][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.557420][T24341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3859'. [ 1093.773825][T24394] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 1093.789205][T24394] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1093.808392][T24394] batadv0: entered promiscuous mode [ 1093.818641][T24394] batadv0: entered allmulticast mode [ 1093.829127][T24394] bridge0: port 3(batadv0) entered blocking state [ 1093.835635][ T57] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1093.849796][T24394] bridge0: port 3(batadv0) entered disabled state [ 1093.872119][T24394] bridge0: port 3(batadv0) entered blocking state [ 1093.878713][T24394] bridge0: port 3(batadv0) entered forwarding state [ 1094.038985][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 1094.053185][ T57] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1094.054215][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1094.075726][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1094.110751][ T57] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1094.124810][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.141950][T24404] netlink: 'syz.3.3876': attribute type 10 has an invalid length. [ 1094.145670][ T57] usb 5-1: Product: syz [ 1094.155606][ T57] usb 5-1: SerialNumber: syz [ 1094.155744][T24404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1094.178594][T20842] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1094.190137][ T57] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1094.227284][T24404] batadv0: entered promiscuous mode [ 1094.257824][T24404] batadv0: entered allmulticast mode [ 1094.271655][T24404] bridge0: port 3(batadv0) entered blocking state [ 1094.286585][T24404] bridge0: port 3(batadv0) entered disabled state [ 1094.302813][T24404] bridge0: port 3(batadv0) entered blocking state [ 1094.309410][T24404] bridge0: port 3(batadv0) entered forwarding state [ 1094.388297][T20842] usb 2-1: Using ep0 maxpacket: 32 [ 1094.433041][T20842] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1094.458961][T20842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.496731][T20842] usb 2-1: Product: syz [ 1094.509620][T20842] usb 2-1: Manufacturer: syz [ 1094.515586][T20842] usb 2-1: SerialNumber: syz [ 1094.525524][T20842] usb 2-1: config 0 descriptor?? [ 1094.547733][T20842] usb 2-1: selecting invalid altsetting 3 [ 1094.553758][T20842] comedi comedi0: could not set alternate setting 3 in high speed [ 1094.562453][T20842] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1094.577894][T20842] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 1094.671929][ T5098] usb 5-1: USB disconnect, device number 106 [ 1094.731653][T10859] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1094.741036][T10859] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1094.922741][T24411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 1095.006473][ T45] usb 1-1: USB disconnect, device number 77 [ 1095.198246][ T57] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1095.313076][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1095.313093][ T29] audit: type=1326 audit(1720247514.109:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.353401][ T29] audit: type=1326 audit(1720247514.109:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.381520][ T29] audit: type=1326 audit(1720247514.109:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.409329][ T29] audit: type=1326 audit(1720247514.109:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.436216][ T29] audit: type=1326 audit(1720247514.109:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.463656][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.474749][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.491730][ T29] audit: type=1326 audit(1720247514.139:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.517696][ T57] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1095.528830][ T45] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1095.550979][ T29] audit: type=1326 audit(1720247514.139:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.574532][ T29] audit: type=1326 audit(1720247514.139:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.610132][ T29] audit: type=1326 audit(1720247514.139:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.634443][ T57] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1095.646968][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.665429][ T57] usb 3-1: Product: syz [ 1095.675742][ T29] audit: type=1326 audit(1720247514.139:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.3.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5634775bd9 code=0x7ffc0000 [ 1095.681620][T24425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.712097][ T57] usb 3-1: Manufacturer: syz [ 1095.728318][ T57] usb 3-1: SerialNumber: syz [ 1095.738196][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 1095.745209][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.757015][ T45] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.775039][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1095.784894][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.813621][T24425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.829347][ T45] hub 1-1:4.0: USB hub found [ 1095.899129][T24425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.974671][T24411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.055476][ T45] hub 1-1:4.0: 2 ports detected [ 1096.230730][T24415] ptrace attach of "./syz-executor exec"[24068] was attempted by "./syz-executor exec"[24415] [ 1096.600867][T24411] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.782895][ T5142] usb 2-1: USB disconnect, device number 114 [ 1096.899900][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.908700][ T57] cdc_ncm 3-1:1.0: bind() failure [ 1096.919912][ T57] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1096.927466][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.942351][ T57] cdc_ncm 3-1:1.1: bind() failure [ 1096.957028][T24454] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1097.018623][T23334] usb 3-1: USB disconnect, device number 125 [ 1097.132018][ T45] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 1097.138768][ T45] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 1097.148715][ T8] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1097.298245][ T57] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1097.358996][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1097.367719][ T8] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1097.379366][ T8] usb 5-1: config 0 has no interface number 0 [ 1097.387430][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1097.409814][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1097.424791][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xE has an invalid bInterval 50, changing to 9 [ 1097.436874][ T8] usb 5-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1097.455261][ T8] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 1097.468469][ T8] usb 5-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1097.479720][ T8] usb 5-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1097.484591][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 1097.494132][ T8] usb 5-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=a8.cb [ 1097.497741][ T57] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.505329][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.521018][ T57] usb 4-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 1097.523589][T23334] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1097.543385][ T57] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1097.566063][ T8] usb 5-1: Product: syz [ 1097.571633][ T8] usb 5-1: Manufacturer: syz [ 1097.576464][ T8] usb 5-1: SerialNumber: syz [ 1097.602763][ T57] usb 4-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 1097.615992][ T8] usb 5-1: config 0 descriptor?? [ 1097.647478][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.657505][ T57] usb 4-1: Product: syz [ 1097.666141][ T57] usb 4-1: Manufacturer: syz [ 1097.671908][ T57] usb 4-1: SerialNumber: syz [ 1097.684220][ T57] usb 4-1: config 0 descriptor?? [ 1097.697509][ T57] sierra 4-1:0.0: Sierra USB modem converter detected [ 1097.748211][T23334] usb 3-1: Using ep0 maxpacket: 32 [ 1097.767709][T23334] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1097.777214][T23334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.785540][T23334] usb 3-1: Product: syz [ 1097.792380][T23334] usb 3-1: Manufacturer: syz [ 1097.797353][T23334] usb 3-1: SerialNumber: syz [ 1097.824445][T23334] usb 3-1: config 0 descriptor?? [ 1098.040194][ T57] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 1098.040528][T23334] f81534a_ctrl 3-1:0.0: failed to set register 0x116: -5 [ 1098.057104][T23334] f81534a_ctrl 3-1:0.0: failed to enable ports: -5 [ 1098.064523][T23334] f81534a_ctrl 3-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 1098.086869][ T57] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 1098.101577][T23334] usb 3-1: USB disconnect, device number 126 [ 1098.109518][ T57] usb 4-1: USB disconnect, device number 121 [ 1098.146322][ T57] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1098.191947][ T57] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1098.206641][ T57] sierra 4-1:0.0: device disconnected [ 1098.378522][ T785] usb 1-1: USB disconnect, device number 78 [ 1098.534109][T24482] xt_nfacct: accounting object `syz1' does not exists [ 1098.541842][T24482] xt_TCPMSS: Only works on TCP SYN packets [ 1098.765178][T24494] netlink: 'syz.3.3905': attribute type 10 has an invalid length. [ 1098.794918][T24494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3905'. [ 1098.819789][ T8] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1098.998249][T23334] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1099.038405][ T785] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1099.052502][ T8] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1099.063063][ T8] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1099.083296][ T8] usb 1-1: config 0 has no interface number 0 [ 1099.095303][ T8] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1099.107268][ T8] usb 1-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=e7.1a [ 1099.116493][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.153773][ T8] usb 1-1: config 0 descriptor?? [ 1099.163151][T24484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1099.191058][T23334] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1099.213307][T23334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.234172][T23334] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1099.244546][T23334] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1099.257740][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.275488][T23334] usb 2-1: Manufacturer: syz [ 1099.281119][ T785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.297954][T23334] usb 2-1: config 0 descriptor?? [ 1099.313960][ T785] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.327490][ T785] usb 3-1: New USB device found, idVendor=1a34, idProduct=0402, bcdDevice= 0.00 [ 1099.347241][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.412272][ T785] usb 3-1: config 0 descriptor?? [ 1099.509158][T23334] rc_core: IR keymap rc-hauppauge not found [ 1099.516541][T23334] Registered IR keymap rc-empty [ 1099.546363][T23334] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1099.566722][T23334] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 1099.842182][ T785] hid-generic 0003:1A34:0402.001E: item fetching failed at offset 3/5 [ 1099.884846][ T785] hid-generic 0003:1A34:0402.001E: probe with driver hid-generic failed with error -22 [ 1099.886309][ T57] usb 5-1: USB disconnect, device number 107 [ 1100.331902][T24506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3908'. [ 1100.458336][ T57] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1100.668181][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 1100.682015][ T57] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1100.694047][ T57] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1100.718853][ T57] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1100.728495][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.780022][ T57] hub 5-1:4.0: USB hub found [ 1100.978399][T11000] Bluetooth: hci1: command 0x0406 tx timeout [ 1100.991450][ T57] hub 5-1:4.0: 2 ports detected [ 1101.190948][T24503] ptrace attach of "./syz-executor exec"[24119] was attempted by "./syz-executor exec"[24503] [ 1101.697712][ T785] usb 3-1: USB disconnect, device number 127 [ 1101.774504][ T5098] usb 2-1: USB disconnect, device number 115 [ 1101.810954][ T45] usb 1-1: USB disconnect, device number 79 [ 1102.098280][ T57] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 1102.128191][ T57] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 1102.443476][ T951] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.498444][ T5098] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1102.524957][ T57] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1102.576767][ T951] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.608469][T24528] netlink: 'syz.0.3913': attribute type 21 has an invalid length. [ 1102.628184][T24528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1102.692310][ T951] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.710283][ T5098] usb 2-1: Using ep0 maxpacket: 16 [ 1102.722246][ T5098] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1102.731095][ T57] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1102.731124][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.733440][ T57] usb 3-1: config 0 descriptor?? [ 1102.742679][ T5098] usb 2-1: config 0 has no interface number 0 [ 1102.761379][ T5098] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1102.773374][ T5098] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1102.785801][T24529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.796623][T24529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.813028][T24529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.821902][T24529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.829779][T24529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1102.839622][T24529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.843748][ T951] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.848066][ T5098] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xE has an invalid bInterval 50, changing to 9 [ 1102.867851][ T5098] usb 2-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1102.878575][ T5098] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 1102.893125][T24529] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.905372][ T5098] usb 2-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.916129][ T5098] usb 2-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1102.931060][ T5098] usb 2-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=a8.cb [ 1102.948387][ T5098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.956531][ T5098] usb 2-1: Product: syz [ 1102.961078][ T5098] usb 2-1: Manufacturer: syz [ 1102.965693][ T5098] usb 2-1: SerialNumber: syz [ 1102.973087][ T5098] usb 2-1: config 0 descriptor?? [ 1103.077211][T24535] netlink: 'syz.0.3920': attribute type 10 has an invalid length. [ 1103.085375][T24535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1103.095018][T24535] batadv0: entered promiscuous mode [ 1103.100528][T24535] batadv0: entered allmulticast mode [ 1103.109353][T24535] bridge0: port 3(batadv0) entered blocking state [ 1103.121209][T24535] bridge0: port 3(batadv0) entered disabled state [ 1103.133724][T24535] bridge0: port 3(batadv0) entered blocking state [ 1103.140291][T24535] bridge0: port 3(batadv0) entered forwarding state [ 1103.218514][T23334] usb 5-1: USB disconnect, device number 108 [ 1103.259818][T24521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.290155][T24521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.346017][T24521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.365459][T24521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.409703][T24521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.461091][T24521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.577040][ T951] bridge0: port 3(batadv0) entered disabled state [ 1103.616827][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1103.626376][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1103.661991][ T951] bridge_slave_1: left allmulticast mode [ 1103.676451][ T951] bridge_slave_1: left promiscuous mode [ 1103.700129][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.733756][ T951] bridge_slave_0: left allmulticast mode [ 1103.744565][ T951] bridge_slave_0: left promiscuous mode [ 1103.766648][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.868288][ T5098] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1104.100838][ T5098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.155273][ T5098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1104.196513][ T5098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1104.247683][ T5098] usb 5-1: New USB device found, idVendor=1a34, idProduct=0402, bcdDevice= 0.00 [ 1104.277615][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.313701][ T5098] usb 5-1: config 0 descriptor?? [ 1104.351206][ T57] pegasus 3-1:0.0: can't reset MAC [ 1104.358353][ T57] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1104.415855][ T57] usb 3-1: USB disconnect, device number 2 [ 1104.528184][T20842] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1104.568466][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 1104.720240][T20842] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1104.748240][T20842] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1104.756957][T20842] usb 1-1: config 0 has no interface number 0 [ 1104.772962][T20842] usb 1-1: config 0 interface 231 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1104.790339][T20842] usb 1-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=e7.1a [ 1104.819970][ T5098] hid-generic 0003:1A34:0402.001F: item fetching failed at offset 3/5 [ 1104.828292][T20842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.844933][T20842] usb 1-1: config 0 descriptor?? [ 1104.866206][ T5098] hid-generic 0003:1A34:0402.001F: probe with driver hid-generic failed with error -22 [ 1104.866795][T24548] raw-gadget.6 gadget.0: fail, usb_ep_enable returned -22 [ 1104.892790][ T5095] Bluetooth: hci2: command tx timeout [ 1105.040992][ T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.076873][ T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.108311][ T951] bond0 (unregistering): Released all slaves [ 1105.365469][T24550] delete_channel: no stack [ 1105.389314][T24549] delete_channel: no stack [ 1105.594650][T20842] usb 2-1: USB disconnect, device number 116 [ 1105.776395][T24533] chnl_net:caif_netlink_parms(): no params data found [ 1105.933084][ T951] hsr_slave_0: left promiscuous mode [ 1105.946043][ T951] hsr_slave_1: left promiscuous mode [ 1105.963022][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.980545][ T951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.008554][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.029565][ T951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.058565][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1106.058581][ T29] audit: type=1326 audit(1720247524.839:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.180919][ T951] veth1_macvtap: left promiscuous mode [ 1106.202838][ T29] audit: type=1326 audit(1720247524.849:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.231435][ T951] veth0_macvtap: left promiscuous mode [ 1106.236995][ T951] veth1_vlan: left promiscuous mode [ 1106.253299][ T951] veth0_vlan: left promiscuous mode [ 1106.263754][ T29] audit: type=1326 audit(1720247524.849:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.291656][ T29] audit: type=1326 audit(1720247524.849:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.323517][ T29] audit: type=1326 audit(1720247524.849:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.365487][ T29] audit: type=1326 audit(1720247524.889:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.402094][ T29] audit: type=1326 audit(1720247524.889:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.431398][ T29] audit: type=1326 audit(1720247524.889:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.513750][ T29] audit: type=1326 audit(1720247524.889:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.577618][T24584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.609815][ T29] audit: type=1326 audit(1720247524.889:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24566 comm="syz.1.3928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f78975bd9 code=0x7ffc0000 [ 1106.712656][T24584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.858915][T24584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.969527][ T5095] Bluetooth: hci2: command tx timeout [ 1107.109884][ T57] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1107.174188][ T5140] usb 5-1: USB disconnect, device number 109 [ 1107.362597][ T57] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 1107.387408][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.411938][ T57] usb 3-1: config 0 descriptor?? [ 1107.736909][ T45] usb 1-1: USB disconnect, device number 80 [ 1107.889861][ T951] team0 (unregistering): Port device team_slave_1 removed [ 1107.963944][ T951] team0 (unregistering): Port device team_slave_0 removed [ 1108.042328][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1108.201089][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1108.378655][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1108.388870][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1108.439722][T23334] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1108.642085][T23334] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1108.679466][T23334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.713095][T23334] usb 1-1: config 0 descriptor?? [ 1108.747854][ T57] asix 3-1:0.0 eth5: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:aa [ 1108.803465][ T57] usb 3-1: USB disconnect, device number 3 [ 1108.810459][ T57] asix 3-1:0.0 eth5: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 1109.048254][ T5095] Bluetooth: hci2: command tx timeout [ 1109.077913][T24533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.099519][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1109.136989][T24533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.153487][T24594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.188454][T24594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.196607][T24533] bridge_slave_0: entered allmulticast mode [ 1109.206894][T24594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.217130][T24533] bridge_slave_0: entered promiscuous mode [ 1109.245161][T24594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.271730][T24533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.291463][T24533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.301291][T24594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.325037][T24533] bridge_slave_1: entered allmulticast mode [ 1109.350678][T24594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.362426][T24533] bridge_slave_1: entered promiscuous mode [ 1109.406147][T24618] netlink: 'syz.1.3940': attribute type 10 has an invalid length. [ 1109.453403][T24618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1109.554748][T24533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.592725][T24533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.770895][T24621] netlink: 'syz.4.3941': attribute type 2 has an invalid length. [ 1109.789531][T24621] netlink: 723 bytes leftover after parsing attributes in process `syz.4.3941'. [ 1109.892333][T24533] team0: Port device team_slave_0 added [ 1109.921952][T24533] team0: Port device team_slave_1 added [ 1110.086474][T24533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.108266][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.183176][T23334] pegasus 1-1:0.0: can't reset MAC [ 1110.199554][T23334] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 1110.220794][T24533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.262340][T23334] usb 1-1: USB disconnect, device number 81 [ 1110.349111][T24533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.356089][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.448155][T24533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1110.642479][T24533] hsr_slave_0: entered promiscuous mode [ 1110.657222][T24533] hsr_slave_1: entered promiscuous mode [ 1110.664006][T24533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1110.680857][T24533] Cannot create hsr debugfs directory [ 1110.738416][T24657] usb usb7: usbfs: process 24657 (syz.4.3948) did not claim interface 0 before use [ 1111.129496][ T5095] Bluetooth: hci2: command tx timeout [ 1111.197052][T24671] No such timeout policy "syz1" [ 1111.250251][ T5095] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1111.414058][T24671] netlink: 'syz.0.3953': attribute type 2 has an invalid length. [ 1111.489204][T24671] netlink: 723 bytes leftover after parsing attributes in process `syz.0.3953'. [ 1111.837532][T24692] usb usb7: usbfs: process 24692 (syz.4.3958) did not claim interface 0 before use [ 1112.385981][T24533] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1112.498257][T23334] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1112.564695][T24533] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1112.584798][T24533] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1112.614082][T24533] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1112.678807][ T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1112.708506][T23334] usb 2-1: Using ep0 maxpacket: 16 [ 1112.735867][T23334] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1112.753526][T23334] usb 2-1: config 0 has no interface number 0 [ 1112.769250][T23334] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1112.784382][T24728] dccp_v4_rcv: dropped packet with invalid checksum [ 1112.806260][T23334] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1112.838656][T23334] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0xE has an invalid bInterval 50, changing to 9 [ 1112.854275][T24533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.878382][T23334] usb 2-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1112.891758][T23334] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 1112.925953][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1112.936832][T23334] usb 2-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1112.954101][T24533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.961851][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.976871][T23334] usb 2-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1112.977044][T24732] usb usb7: usbfs: process 24732 (syz.4.3970) did not claim interface 0 before use [ 1112.989253][ T8] usb 3-1: config 0 descriptor?? [ 1113.013986][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.021168][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.041560][T23334] usb 2-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=a8.cb [ 1113.052282][T23334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.078004][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.085181][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.099177][T23334] usb 2-1: Product: syz [ 1113.103422][T23334] usb 2-1: Manufacturer: syz [ 1113.108052][T23334] usb 2-1: SerialNumber: syz [ 1113.164757][T23334] usb 2-1: config 0 descriptor?? [ 1113.240509][T24533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.340839][ T5095] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1113.357008][T24533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.459728][T24708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.523702][T24708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.571615][T24533] veth0_vlan: entered promiscuous mode [ 1113.586805][T24708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.615024][T24708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.654635][T24533] veth1_vlan: entered promiscuous mode [ 1113.663257][T24708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1113.732798][T24708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1113.775894][T24533] veth0_macvtap: entered promiscuous mode [ 1113.807732][T24533] veth1_macvtap: entered promiscuous mode [ 1113.872022][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.887024][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.918625][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.957229][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.996157][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.063427][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.091282][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1114.122173][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.220523][T24533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.276354][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.305517][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.330291][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.354449][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.366155][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.378613][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.388629][T24533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1114.399836][T24533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1114.412361][T24533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.435725][T24533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.476590][T24533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.505593][T24533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.533804][T24533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.633656][ T8] pegasus 3-1:0.0: can't reset MAC [ 1114.642330][ T8] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1114.670846][ T8] usb 3-1: USB disconnect, device number 4 [ 1114.860408][T24786] usb usb7: usbfs: process 24786 (syz.0.3980) did not claim interface 0 before use [ 1114.932272][T14473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.956755][T14473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.012149][T14473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.033224][T14473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.233418][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1115.233436][ T29] audit: type=1326 audit(1720247534.029:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24800 comm="syz.4.3984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbe4b75bd9 code=0x0 [ 1115.283180][ T57] usb 2-1: USB disconnect, device number 117 [ 1115.371687][T24808] netlink: 'syz.4.3984': attribute type 31 has an invalid length. [ 1115.627684][T24824] usb usb7: usbfs: process 24824 (syz.0.3990) did not claim interface 0 before use [ 1115.757987][T24827] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1115.799845][T24834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1116.183041][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.191061][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.280810][T24851] fuse: Unknown parameter '00000000000000000000' [ 1116.583296][ T45] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1116.788424][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 1116.833223][ T45] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1116.858175][ T45] usb 1-1: config 0 has no interface number 0 [ 1116.878231][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1116.908606][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1116.935480][T24882] usb usb7: usbfs: process 24882 (syz.1.4002) did not claim interface 0 before use [ 1116.950585][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xE has an invalid bInterval 50, changing to 9 [ 1116.975514][ T45] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1116.991714][ T45] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 1117.025288][ T45] usb 1-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1117.037479][ T45] usb 1-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1117.050763][T20842] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1117.083866][ T45] usb 1-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=a8.cb [ 1117.096864][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.121442][ T45] usb 1-1: Product: syz [ 1117.135093][ T45] usb 1-1: Manufacturer: syz [ 1117.150539][ T45] usb 1-1: SerialNumber: syz [ 1117.163344][ T45] usb 1-1: config 0 descriptor?? [ 1117.252354][T20842] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1117.268248][T20842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.299226][T20842] usb 5-1: config 0 descriptor?? [ 1117.635469][ T5142] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1117.722818][T24858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.757347][T24858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.787017][T24858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.820358][T24858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.862735][T24858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.871812][ T5142] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1117.892814][ T5142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.910123][T24858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.919257][ T5142] usb 2-1: config 0 descriptor?? [ 1117.940515][ T5142] cp210x 2-1:0.0: cp210x converter detected [ 1118.010770][T24917] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 1118.024425][T24917] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1118.034430][T24917] openvswitch: netlink: IP tunnel dst address not specified [ 1118.342376][ T5142] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1118.378355][ T5142] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1118.750304][T20842] pegasus 5-1:0.0: can't reset MAC [ 1118.782648][T20842] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 1118.816099][T20842] usb 5-1: USB disconnect, device number 110 [ 1118.882261][ T57] usb 2-1: USB disconnect, device number 118 [ 1118.912782][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1118.967029][ T57] cp210x 2-1:0.0: device disconnected [ 1119.146265][ T5144] usb 1-1: USB disconnect, device number 82 [ 1119.921866][T20557] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.114059][T20557] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.207561][T24956] FAULT_INJECTION: forcing a failure. [ 1120.207561][T24956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.257504][T24956] CPU: 0 PID: 24956 Comm: syz.4.4025 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1120.267691][T24956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1120.277756][T24956] Call Trace: [ 1120.281048][T24956] [ 1120.283989][T24956] dump_stack_lvl+0x241/0x360 [ 1120.288709][T24956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.293933][T24956] ? __pfx__printk+0x10/0x10 [ 1120.298554][T24956] ? __pfx_lock_release+0x10/0x10 [ 1120.303598][T24956] ? __lock_acquire+0x1346/0x1fd0 [ 1120.308643][T24956] should_fail_ex+0x3b0/0x4e0 [ 1120.313344][T24956] _copy_from_user+0x2f/0xe0 [ 1120.317959][T24956] kstrtouint_from_user+0xc6/0x190 [ 1120.323093][T24956] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1120.328831][T24956] ? __pfx_lock_acquire+0x10/0x10 [ 1120.333878][T24956] proc_fail_nth_write+0xaa/0x2d0 [ 1120.338917][T24956] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1120.344847][T24956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1120.350501][T24956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1120.356149][T24956] vfs_write+0x2a2/0xc90 [ 1120.360410][T24956] ? __pfx_vfs_write+0x10/0x10 [ 1120.365170][T24956] ? __fget_files+0x29/0x470 [ 1120.369757][T24956] ? __fget_files+0x3f6/0x470 [ 1120.374433][T24956] ksys_write+0x1a0/0x2c0 [ 1120.378758][T24956] ? __pfx_ksys_write+0x10/0x10 [ 1120.383597][T24956] ? do_syscall_64+0x100/0x230 [ 1120.388356][T24956] ? do_syscall_64+0xb6/0x230 [ 1120.393026][T24956] do_syscall_64+0xf3/0x230 [ 1120.397522][T24956] ? clear_bhb_loop+0x35/0x90 [ 1120.402190][T24956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.408077][T24956] RIP: 0033:0x7fbbe4b7475f [ 1120.412492][T24956] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1120.432088][T24956] RSP: 002b:00007fbbe59bc040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1120.440492][T24956] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbbe4b7475f [ 1120.448451][T24956] RDX: 0000000000000001 RSI: 00007fbbe59bc0b0 RDI: 0000000000000005 [ 1120.456408][T24956] RBP: 00007fbbe59bc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.464367][T24956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1120.472332][T24956] R13: 000000000000000b R14: 00007fbbe4d03f60 R15: 00007fbbe4e2fa68 [ 1120.480303][T24956] [ 1120.628321][ T5144] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1120.696282][T20557] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.822014][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 1120.842840][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1120.850861][ T5144] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1120.861241][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1120.878976][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.879281][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1120.895597][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1120.903127][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1120.911138][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1120.981741][T20557] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.017789][ T5144] usb 4-1: config 0 descriptor?? [ 1121.238406][ T5142] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1121.455402][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.480342][ T5144] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1121.491918][ T5144] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1121.508526][ T5144] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1121.518367][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.522993][ T5144] usb 4-1: USB disconnect, device number 122 [ 1121.530132][T20557] bridge0: port 3(batadv0) entered disabled state [ 1121.605333][ T5142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.669971][T20557] bridge_slave_1: left allmulticast mode [ 1121.688363][ T5142] usb 5-1: New USB device found, idVendor=1a34, idProduct=0402, bcdDevice= 0.00 [ 1121.706104][T20557] bridge_slave_1: left promiscuous mode [ 1121.716382][T20557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.717775][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.764278][ T5142] usb 5-1: config 0 descriptor?? [ 1121.788331][ T57] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1121.799782][T20557] bridge_slave_0: left allmulticast mode [ 1121.838277][T20557] bridge_slave_0: left promiscuous mode [ 1121.844062][T20557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.979985][ T57] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1122.011781][ T57] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1122.063031][ T57] usb 3-1: config 0 has no interface number 0 [ 1122.099346][ T57] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1122.159136][ T57] usb 3-1: New USB device found, idVendor=595a, idProduct=0001, bcdDevice=e7.1a [ 1122.195931][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.252272][ T57] usb 3-1: config 0 descriptor?? [ 1122.257313][ T5142] hid-generic 0003:1A34:0402.0020: item fetching failed at offset 3/5 [ 1122.277980][T24976] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1122.346492][ T5142] hid-generic 0003:1A34:0402.0020: probe with driver hid-generic failed with error -22 [ 1122.508262][ T5140] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1122.742941][ T5140] usb 1-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 1122.762668][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.827964][ T5140] usb 1-1: config 0 descriptor?? [ 1122.874497][ T5140] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1122.919176][ T57] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1122.968228][ T5096] Bluetooth: hci4: command tx timeout [ 1123.140149][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 1123.182551][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.229050][ T57] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.258137][ T57] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.336618][ T57] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1123.396717][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.464411][ T57] usb 4-1: config 0 descriptor?? [ 1123.911327][T20557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.958564][T20557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.975427][T20557] bond0 (unregistering): Released all slaves [ 1124.072342][ T57] usbhid 4-1:0.0: can't add hid device: -71 [ 1124.125695][ T57] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1124.170551][ T57] usb 4-1: USB disconnect, device number 123 [ 1124.324149][T20842] usb 5-1: USB disconnect, device number 111 [ 1124.392021][T25000] FAULT_INJECTION: forcing a failure. [ 1124.392021][T25000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1124.536392][T25000] CPU: 0 PID: 25000 Comm: syz.3.4035 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1124.536640][ T57] usb 3-1: USB disconnect, device number 5 [ 1124.546555][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1124.546571][T25000] Call Trace: [ 1124.546581][T25000] [ 1124.546589][T25000] dump_stack_lvl+0x241/0x360 [ 1124.546623][T25000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.546648][T25000] ? __pfx__printk+0x10/0x10 [ 1124.546673][T25000] ? get_sigframe+0x566/0x700 [ 1124.546695][T25000] ? __pfx_lock_release+0x10/0x10 [ 1124.546724][T25000] should_fail_ex+0x3b0/0x4e0 [ 1124.546754][T25000] _copy_to_user+0x2f/0xb0 [ 1124.546776][T25000] copy_siginfo_to_user+0x24/0xa0 [ 1124.606849][T25000] x64_setup_rt_frame+0x75d/0xcc0 [ 1124.611862][T25000] ? _raw_spin_unlock_irq+0x29/0x50 [ 1124.617053][T25000] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1124.622258][T25000] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1124.627797][T25000] arch_do_signal_or_restart+0x458/0x860 [ 1124.633421][T25000] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1124.639577][T25000] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1124.645548][T25000] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1124.651283][T25000] syscall_exit_to_user_mode+0xc9/0x360 [ 1124.656842][T25000] do_syscall_64+0x100/0x230 [ 1124.661421][T25000] ? clear_bhb_loop+0x35/0x90 [ 1124.666099][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.671996][T25000] RIP: 0033:0x7fea76b75bd7 [ 1124.676397][T25000] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1124.695997][T25000] RSP: 002b:00007fea77991048 EFLAGS: 00000246 [ 1124.702070][T25000] RAX: 0000000000000000 RBX: 00007fea76d03f60 RCX: 00007fea76b75bd9 [ 1124.710025][T25000] RDX: 000000000000010b RSI: 0000000020000200 RDI: 0000000000000003 [ 1124.717993][T25000] RBP: 00007fea779910a0 R08: 0000000000000000 R09: 0000000000000000 [ 1124.725948][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1124.733904][T25000] R13: 000000000000000b R14: 00007fea76d03f60 R15: 00007fea76e2fa68 [ 1124.741870][T25000] [ 1124.861232][T24972] chnl_net:caif_netlink_parms(): no params data found [ 1125.048266][ T5096] Bluetooth: hci4: command tx timeout [ 1125.223260][T25012] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1125.500715][ T8] usb 1-1: USB disconnect, device number 83 [ 1125.506511][T20557] hsr_slave_0: left promiscuous mode [ 1125.568470][ T785] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1125.590708][T20557] hsr_slave_1: left promiscuous mode [ 1125.608640][T20557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.629188][T25022] FAULT_INJECTION: forcing a failure. [ 1125.629188][T25022] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.642521][T20557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1125.664661][T25022] CPU: 0 PID: 25022 Comm: syz.0.4039 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1125.674839][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1125.684904][T25022] Call Trace: [ 1125.688204][T25022] [ 1125.691150][T25022] dump_stack_lvl+0x241/0x360 [ 1125.695853][T25022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.701077][T25022] ? __pfx__printk+0x10/0x10 [ 1125.705780][T25022] ? __pfx___might_resched+0x10/0x10 [ 1125.711073][T25022] ? stack_trace_save+0x118/0x1d0 [ 1125.716214][T25022] should_fail_ex+0x3b0/0x4e0 [ 1125.720921][T25022] should_failslab+0x9/0x20 [ 1125.725443][T25022] __kmalloc_node_noprof+0xdf/0x440 [ 1125.730655][T25022] ? kvmalloc_node_noprof+0x72/0x190 [ 1125.735961][T25022] kvmalloc_node_noprof+0x72/0x190 [ 1125.741094][T25022] translate_table+0x174/0x2260 [ 1125.745993][T25022] ? __pfx_translate_table+0x10/0x10 [ 1125.751296][T25022] ? __might_fault+0xaa/0x120 [ 1125.756251][T25022] ? __pfx_lock_release+0x10/0x10 [ 1125.761297][T25022] ? __might_fault+0xaa/0x120 [ 1125.765994][T25022] ? __might_fault+0xc6/0x120 [ 1125.770695][T25022] ? _copy_from_user+0xa6/0xe0 [ 1125.775472][T25022] ? copy_from_sockptr_offset+0x6b/0xb0 [ 1125.781028][T25022] do_ipt_set_ctl+0xe3d/0x1250 [ 1125.785791][T25022] ? __pfx___might_resched+0x10/0x10 [ 1125.791068][T25022] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1125.796253][T25022] ? __pfx_lock_release+0x10/0x10 [ 1125.801276][T25022] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1125.806902][T25022] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1125.812268][T25022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1125.818242][T25022] ? __pfx___mutex_lock+0x10/0x10 [ 1125.823260][T25022] ? module_put+0x13a/0x2d0 [ 1125.827756][T25022] nf_setsockopt+0x295/0x2c0 [ 1125.832342][T25022] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1125.838229][T25022] smc_setsockopt+0x275/0xe50 [ 1125.842896][T25022] ? __pfx_smc_setsockopt+0x10/0x10 [ 1125.848079][T25022] ? aa_sock_opt_perm+0x79/0x120 [ 1125.853025][T25022] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1125.858556][T25022] ? security_socket_setsockopt+0x87/0xb0 [ 1125.864472][T25022] ? __pfx_smc_setsockopt+0x10/0x10 [ 1125.869816][T25022] do_sock_setsockopt+0x3af/0x720 [ 1125.874973][T25022] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1125.880698][T25022] ? __fget_files+0x29/0x470 [ 1125.885289][T25022] ? __fget_files+0x3f6/0x470 [ 1125.889968][T25022] __sys_setsockopt+0x1ae/0x250 [ 1125.894816][T25022] __x64_sys_setsockopt+0xb5/0xd0 [ 1125.899839][T25022] do_syscall_64+0xf3/0x230 [ 1125.904347][T25022] ? clear_bhb_loop+0x35/0x90 [ 1125.909019][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.914906][T25022] RIP: 0033:0x7fe09ad75bd9 [ 1125.919314][T25022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.939001][T25022] RSP: 002b:00007fe09a7ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1125.947408][T25022] RAX: ffffffffffffffda RBX: 00007fe09af03f60 RCX: 00007fe09ad75bd9 [ 1125.955369][T25022] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 1125.963328][T25022] RBP: 00007fe09a7ff0a0 R08: 000000000000ff9c R09: 0000000000000000 [ 1125.971287][T25022] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1125.979245][T25022] R13: 000000000000000b R14: 00007fe09af03f60 R15: 00007fe09b02fa68 [ 1125.987215][T25022] [ 1125.993770][T20557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.001398][T20557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.178268][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 1126.185374][ T785] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1126.205671][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.236259][T20557] veth1_macvtap: left promiscuous mode [ 1126.271338][ T785] usb 5-1: config 0 descriptor?? [ 1126.276567][T20557] veth0_macvtap: left promiscuous mode [ 1126.290252][ T785] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1126.296899][T20557] veth1_vlan: left promiscuous mode [ 1126.309496][T20557] veth0_vlan: left promiscuous mode [ 1126.713169][ T785] gspca_sunplus: reg_w_riv err -71 [ 1126.734408][ T5140] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1126.738177][ T785] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1126.780875][ T57] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1126.787550][ T785] usb 5-1: USB disconnect, device number 112 [ 1126.962596][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 1126.978545][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 1126.985504][ T5140] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1127.010078][ T57] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1127.028341][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.036465][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.069104][ T5140] usb 4-1: config 0 descriptor?? [ 1127.089093][ T57] usb 3-1: config 0 descriptor?? [ 1127.133206][ T5096] Bluetooth: hci4: command tx timeout [ 1127.366525][ T45] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1127.547519][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1127.559007][ T57] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1127.581718][ T5140] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1127.592247][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 1127.601427][ T5140] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1127.613209][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1127.633557][ T57] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1127.641400][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.657111][ T57] usb 3-1: USB disconnect, device number 6 [ 1127.663229][ T5140] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1127.675156][ T45] usb 5-1: config 0 descriptor?? [ 1127.694717][ T45] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1127.710998][ T5140] usb 4-1: USB disconnect, device number 124 [ 1127.928589][T25012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1127.944432][T25012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1127.953620][T20557] team0 (unregistering): Port device team_slave_1 removed [ 1128.054868][T20557] team0 (unregistering): Port device team_slave_0 removed [ 1128.233002][ T45] gspca_sunplus: reg_w_riv err -110 [ 1128.258940][ T45] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 1128.578961][ T45] usb 5-1: USB disconnect, device number 113 [ 1128.951001][ T5142] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1129.168283][ T5142] usb 4-1: Using ep0 maxpacket: 16 [ 1129.176640][T25041] netlink: 'syz.0.4045': attribute type 21 has an invalid length. [ 1129.184094][ T5142] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1129.197992][ T5142] usb 4-1: config 0 has no interface number 0 [ 1129.207227][ T5142] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1129.218551][ T5096] Bluetooth: hci4: command tx timeout [ 1129.229791][ T5142] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1129.240829][ T5142] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xE has an invalid bInterval 50, changing to 9 [ 1129.259031][ T5142] usb 4-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1129.269818][ T5142] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 7 [ 1129.280927][ T5142] usb 4-1: config 0 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1129.292052][ T5142] usb 4-1: config 0 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1129.315157][ T5142] usb 4-1: New USB device found, idVendor=05c6, idProduct=9047, bcdDevice=a8.cb [ 1129.355079][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.365940][ T5142] usb 4-1: Product: syz [ 1129.478179][ T5142] usb 4-1: Manufacturer: syz [ 1129.494559][ T5142] usb 4-1: SerialNumber: syz [ 1129.548882][ T5142] usb 4-1: config 0 descriptor?? [ 1129.603475][T24972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.627320][T24972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.635870][T24972] bridge_slave_0: entered allmulticast mode [ 1129.643676][T24972] bridge_slave_0: entered promiscuous mode [ 1129.662015][T24972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.671836][T24972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.682251][T24972] bridge_slave_1: entered allmulticast mode [ 1129.686120][T25064] netlink: 'syz.2.4051': attribute type 6 has an invalid length. [ 1129.689823][T24972] bridge_slave_1: entered promiscuous mode [ 1129.844940][T24972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.903417][T24972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.952978][T25068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4052'. [ 1130.026701][T24972] team0: Port device team_slave_0 added [ 1130.047220][T24972] team0: Port device team_slave_1 added [ 1130.113810][T24972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.129006][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.164802][T24972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.199627][T24972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.219835][T24972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1130.247553][ T5142] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1130.277692][T24972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.391884][T24972] hsr_slave_0: entered promiscuous mode [ 1130.408044][T24972] hsr_slave_1: entered promiscuous mode [ 1130.423273][T24972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.434819][T24972] Cannot create hsr debugfs directory [ 1130.495043][ T5142] usb 3-1: config 1 has an invalid descriptor of length 178, skipping remainder of the config [ 1130.514542][ T5142] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.537504][ T5142] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1130.592463][ T5142] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.625999][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.653347][ T5142] usb 3-1: Product: ⬣ꦇ섕왠僙殇앢秦稈핇銾塙瘴柃繃Ɀ쒼ꨤ᷂ [ 1130.663128][ T5142] usb 3-1: Manufacturer: Ь [ 1130.668654][ T5142] usb 3-1: SerialNumber: 灥 [ 1130.679613][T25072] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1131.058858][ T785] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1131.131321][ T5142] usb 3-1: 0:2 : does not exist [ 1131.186542][ T5142] usb 3-1: USB disconnect, device number 7 [ 1131.218366][T20842] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1131.268950][ T785] usb 1-1: Using ep0 maxpacket: 8 [ 1131.305416][ T785] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1131.336084][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.374444][ T785] usb 1-1: config 0 descriptor?? [ 1131.428259][T20842] usb 5-1: Using ep0 maxpacket: 32 [ 1131.445197][T24972] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1131.446970][T20842] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1131.456301][T20802] udevd[20802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.491720][T20842] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1131.491856][T24972] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1131.516429][T24972] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1131.530849][T24972] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1131.541668][T20842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1131.578597][T20842] usb 5-1: config 1 has no interface number 0 [ 1131.595323][T20842] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1131.630262][T20842] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1131.652134][T20842] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1131.687975][ T45] usb 4-1: USB disconnect, device number 125 [ 1131.717247][T20842] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1131.756244][T20842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.791364][T25105] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1131.821162][T20842] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1131.836117][T25121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1131.897689][ T785] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1131.927328][T25122] netlink: 'syz.3.4060': attribute type 21 has an invalid length. [ 1131.943465][ T785] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1131.957976][T24972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.972535][ T785] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1132.009314][T24972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.017415][ T785] usb 1-1: USB disconnect, device number 84 [ 1132.019962][T25105] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1132.055901][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.063084][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.074811][T20842] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1132.099747][T23334] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.106894][T23334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.188644][ T5098] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1132.280818][T23334] usb 5-1: USB disconnect, device number 114 [ 1132.293940][T24972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.320735][T23334] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1132.419357][ T5098] usb 3-1: Using ep0 maxpacket: 32 [ 1132.434477][ T5098] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1132.451886][ T5098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.468643][T24972] veth0_vlan: entered promiscuous mode [ 1132.489329][ T5098] usb 3-1: config 0 descriptor?? [ 1132.502274][ T5098] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1132.517430][T24972] veth1_vlan: entered promiscuous mode [ 1132.605951][T24972] veth0_macvtap: entered promiscuous mode [ 1132.642466][T24972] veth1_macvtap: entered promiscuous mode [ 1132.689549][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.715537][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.740335][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.776331][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.802952][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.833568][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.855443][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.878147][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.925492][T24972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.969442][ T5098] gspca_sunplus: reg_w_riv err -71 [ 1132.974668][ T5098] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1132.983910][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.017070][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.026854][ T5098] usb 3-1: USB disconnect, device number 8 [ 1133.047428][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.086628][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.131459][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.186256][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.239049][T24972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.282124][T24972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.321876][T24972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.386011][T24972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.394983][ T5140] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1133.429198][T24972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.456939][T24972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.469191][T24972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.600414][ T5140] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.624890][ T5140] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1133.635621][T14473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.650572][T14473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.653121][ T5140] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1133.684370][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1133.698555][T23334] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1133.703420][ T5140] usb 5-1: SerialNumber: syz [ 1133.723663][T20557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.736375][T20557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.913118][T23334] usb 3-1: Using ep0 maxpacket: 32 [ 1133.933749][T23334] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1133.962498][T23334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.970542][ T5140] usb 5-1: 0:2 : does not exist [ 1133.970612][ T5140] usb 5-1: unit 5 not found! [ 1134.004544][ T5140] usb 5-1: USB disconnect, device number 115 [ 1134.021628][T23334] usb 3-1: config 0 descriptor?? [ 1134.088471][T23334] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1134.174995][T25174] random: crng reseeded on system resumption [ 1134.190960][T25180] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1134.252221][T25180] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4069'. [ 1134.267033][T25185] netlink: 'syz.0.4069': attribute type 23 has an invalid length. [ 1134.339874][T20802] udevd[20802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1134.619564][T23334] gspca_sunplus: reg_w_riv err -110 [ 1134.633228][T23334] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 1134.877879][ T951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.976737][T25121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.004878][T25121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.157426][ T951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.248331][T23334] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1135.333741][ T951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.489316][T23334] usb 5-1: Using ep0 maxpacket: 8 [ 1135.522646][T23334] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1135.568222][T23334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.619647][T23334] usb 5-1: config 0 descriptor?? [ 1135.669787][ T45] usb 3-1: USB disconnect, device number 9 [ 1135.670307][ T951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.068738][ T785] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1136.125958][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1136.137833][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1136.172436][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1136.180193][ T951] bridge0: port 3(batadv0) entered disabled state [ 1136.190400][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1136.200051][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1136.207517][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.275911][T23334] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1136.297920][T23334] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1136.321323][ T785] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 1136.335310][T23334] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1136.353012][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.367851][ T951] bridge_slave_1: left allmulticast mode [ 1136.380329][T23334] usb 5-1: USB disconnect, device number 116 [ 1136.400771][ T785] usb 4-1: config 0 descriptor?? [ 1136.417553][ T785] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1136.451981][ T951] bridge_slave_1: left promiscuous mode [ 1136.482681][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.538662][ T951] bridge_slave_0: left allmulticast mode [ 1136.565618][ T951] bridge_slave_0: left promiscuous mode [ 1136.623152][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.628962][ T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1137.661594][ T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1137.710358][ T951] bond0 (unregistering): Released all slaves [ 1137.754816][T25241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1137.767868][T25241] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1138.086389][T25259] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 1138.201788][T25259] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 1138.248330][ T5095] Bluetooth: hci0: command tx timeout [ 1138.284942][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1138.586248][T25278] vivid-008: disconnect [ 1138.594111][T25263] netlink: 'syz.2.4082': attribute type 29 has an invalid length. [ 1138.606673][T25278] FAULT_INJECTION: forcing a failure. [ 1138.606673][T25278] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.642982][T25278] CPU: 1 PID: 25278 Comm: syz.4.4084 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1138.653151][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1138.663219][T25278] Call Trace: [ 1138.666516][T25278] [ 1138.669461][T25278] dump_stack_lvl+0x241/0x360 [ 1138.674172][T25278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.679396][T25278] ? __pfx__printk+0x10/0x10 [ 1138.684012][T25278] ? __pfx___might_resched+0x10/0x10 [ 1138.689324][T25278] should_fail_ex+0x3b0/0x4e0 [ 1138.694030][T25278] should_failslab+0x9/0x20 [ 1138.698551][T25278] __kmalloc_node_noprof+0xdf/0x440 [ 1138.703769][T25278] ? kvmalloc_node_noprof+0x72/0x190 [ 1138.709067][T25278] kvmalloc_node_noprof+0x72/0x190 [ 1138.714175][T25278] seq_read_iter+0x202/0xd60 [ 1138.718761][T25278] ? aa_file_perm+0x137/0xf60 [ 1138.723429][T25278] ? __lock_acquire+0x1346/0x1fd0 [ 1138.728468][T25278] seq_read+0x3a4/0x4f0 [ 1138.732631][T25278] ? __pfx_seq_read+0x10/0x10 [ 1138.737306][T25278] ? __mutex_trylock_common+0x183/0x2e0 [ 1138.742843][T25278] ? end_current_label_crit_section+0x14e/0x180 [ 1138.749092][T25278] ? __pfx_seq_read+0x10/0x10 [ 1138.753762][T25278] proc_reg_read+0x204/0x2f0 [ 1138.758342][T25278] ? __pfx_proc_reg_read+0x10/0x10 [ 1138.763444][T25278] vfs_read+0x204/0xbc0 [ 1138.767596][T25278] ? __pfx_lock_release+0x10/0x10 [ 1138.772614][T25278] ? __pfx_vfs_read+0x10/0x10 [ 1138.777282][T25278] ? __fget_files+0x29/0x470 [ 1138.781864][T25278] ? __fget_files+0x3f6/0x470 [ 1138.786543][T25278] ksys_read+0x1a0/0x2c0 [ 1138.790778][T25278] ? __pfx_ksys_read+0x10/0x10 [ 1138.795532][T25278] ? do_syscall_64+0x100/0x230 [ 1138.800293][T25278] ? do_syscall_64+0xb6/0x230 [ 1138.804963][T25278] do_syscall_64+0xf3/0x230 [ 1138.809461][T25278] ? clear_bhb_loop+0x35/0x90 [ 1138.814126][T25278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.820011][T25278] RIP: 0033:0x7fbbe4b75bd9 [ 1138.824415][T25278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1138.844012][T25278] RSP: 002b:00007fbbe59bc048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.852424][T25278] RAX: ffffffffffffffda RBX: 00007fbbe4d03f60 RCX: 00007fbbe4b75bd9 [ 1138.860391][T25278] RDX: 0000000000002020 RSI: 0000000020000f40 RDI: 0000000000000007 [ 1138.868353][T25278] RBP: 00007fbbe59bc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1138.876312][T25278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.884282][T25278] R13: 000000000000000b R14: 00007fbbe4d03f60 R15: 00007fbbe4e2fa68 [ 1138.892282][T25278] [ 1138.981750][ T951] hsr_slave_0: left promiscuous mode [ 1139.020954][ T951] hsr_slave_1: left promiscuous mode [ 1139.037504][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1139.046178][T25276] vivid-008: reconnect [ 1139.052984][ T951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.078291][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1139.086393][ T951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.192660][T25290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4085'. [ 1139.218364][ T951] veth1_macvtap: left promiscuous mode [ 1139.226508][ T951] veth0_macvtap: left promiscuous mode [ 1139.238827][ T951] veth1_vlan: left promiscuous mode [ 1139.244226][ T951] veth0_vlan: left promiscuous mode [ 1139.532280][ T45] usb 4-1: USB disconnect, device number 126 [ 1140.226640][ T951] team0 (unregistering): Port device team_slave_1 removed [ 1140.278220][T20842] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1140.334660][ T5095] Bluetooth: hci0: command tx timeout [ 1140.371465][ T951] team0 (unregistering): Port device team_slave_0 removed [ 1140.478391][T20842] usb 4-1: Using ep0 maxpacket: 8 [ 1140.485910][T20842] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1140.504053][T20842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.528592][T20842] usb 4-1: config 0 descriptor?? [ 1140.985222][T20842] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1141.003200][T20842] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1141.030485][T20842] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1141.071656][T20842] usb 4-1: USB disconnect, device number 127 [ 1141.314807][T25226] chnl_net:caif_netlink_parms(): no params data found [ 1141.588177][ T8] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 1141.735217][T25226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.781100][T25226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.812108][T25226] bridge_slave_0: entered allmulticast mode [ 1141.828457][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1141.837522][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.839481][T25226] bridge_slave_0: entered promiscuous mode [ 1141.903022][ T8] usb 3-1: config 0 descriptor?? [ 1141.942177][T25226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.955610][T25226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.968389][T25226] bridge_slave_1: entered allmulticast mode [ 1141.980635][T25226] bridge_slave_1: entered promiscuous mode [ 1142.175673][T25226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.216764][T25226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.320251][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1142.333460][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1142.342150][T25307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.353066][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1142.363125][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1142.375735][T25307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.380688][ T29] audit: type=1326 audit(1720247561.169:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.413817][T25307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.420307][ T5096] Bluetooth: hci0: command tx timeout [ 1142.429531][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1142.437694][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1142.454119][T25307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.463957][ T29] audit: type=1326 audit(1720247561.229:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.505817][ T951] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.522081][T25307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.545978][ T29] audit: type=1326 audit(1720247561.239:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.570115][ T29] audit: type=1326 audit(1720247561.239:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.604381][T25307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.605908][ T29] audit: type=1326 audit(1720247561.239:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.677521][ T29] audit: type=1326 audit(1720247561.239:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.739212][ T29] audit: type=1326 audit(1720247561.239:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.786571][ T951] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.788692][ T29] audit: type=1326 audit(1720247561.259:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.832120][T25226] team0: Port device team_slave_0 added [ 1142.864434][ T29] audit: type=1326 audit(1720247561.259:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.887700][ T29] audit: type=1326 audit(1720247561.259:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25348 comm="syz.3.4101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea76b75bd9 code=0x7ffc0000 [ 1142.953753][ T951] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.979919][T25226] team0: Port device team_slave_1 added [ 1145.233112][ T5095] Bluetooth: hci0: command tx timeout [ 1145.233176][ T5096] Bluetooth: hci4: command tx timeout [ 1146.508994][ T951] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.527687][T25226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.535191][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.561814][T25226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.973560][T24529] Bluetooth: hci4: command tx timeout [ 1147.974155][ T8] pegasus 3-1:0.0: can't reset MAC [ 1147.986305][ T8] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1147.995072][T25226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.002172][T25226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.002307][ T8] usb 3-1: USB disconnect, device number 10 [ 1148.028186][T25226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1150.183564][T24529] Bluetooth: hci4: command tx timeout [ 1152.948215][ T57] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1153.011908][ T5096] Bluetooth: hci4: command tx timeout [ 1156.788342][ T57] usb 4-1: device descriptor read/64, error -71 [ 1156.939556][T24529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1156.955744][T24529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1156.964472][T24529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1156.973485][T24529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1156.983704][T24529] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1156.991735][T24529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1157.078527][ T57] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1157.268185][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 1157.275362][ T57] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87 [ 1157.285427][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.306368][ T57] usb 4-1: config 0 descriptor?? [ 1157.319269][ T57] usb 4-1: probing VID:PID(2201:012C) [ 1157.330776][ T57] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1163.496065][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1163.508041][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1163.517091][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1163.525231][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1163.546825][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1163.554400][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1166.525039][T11000] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1166.537540][T11000] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1166.546264][T11000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1166.554388][T11000] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1166.563363][T11000] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1166.571022][T11000] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1168.189793][ T57] vub300 4-1:0.0: probe with driver vub300 failed with error -22 [ 1168.193892][T25226] hsr_slave_0: entered promiscuous mode [ 1168.647146][ T57] usb 4-1: USB disconnect, device number 3 [ 1168.661691][T25226] hsr_slave_1: entered promiscuous mode [ 1168.672266][T25226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1168.679843][T25226] Cannot create hsr debugfs directory [ 1170.079416][ T5322] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1170.259156][T11000] Bluetooth: hci7: command tx timeout [ 1170.267339][T24529] Bluetooth: hci6: command tx timeout [ 1170.729513][T24529] Bluetooth: hci5: command tx timeout [ 1172.329704][T24529] Bluetooth: hci6: command tx timeout [ 1172.335157][T24529] Bluetooth: hci7: command tx timeout [ 1172.355093][T25353] chnl_net:caif_netlink_parms(): no params data found [ 1175.201716][T24529] Bluetooth: hci5: command tx timeout [ 1175.207162][T24529] Bluetooth: hci7: command tx timeout [ 1175.212696][T24529] Bluetooth: hci6: command tx timeout [ 1177.288566][T11000] Bluetooth: hci6: command tx timeout [ 1177.294042][T11000] Bluetooth: hci7: command tx timeout [ 1177.307737][T24529] Bluetooth: hci5: command tx timeout [ 1179.702059][T11000] Bluetooth: hci5: command tx timeout [ 1179.709964][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.716277][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.177012][ T951] bridge_slave_1: left allmulticast mode [ 1193.182725][ T951] bridge_slave_1: left promiscuous mode [ 1193.190422][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.971196][ T951] bridge_slave_0: left allmulticast mode [ 1194.990345][ T951] bridge_slave_0: left promiscuous mode [ 1194.996117][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.887774][T24529] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1200.904822][T24529] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1200.915084][T24529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1200.930693][T24529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1200.943141][T24529] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1200.952812][T24529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1202.807183][T24529] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1202.816847][T24529] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1202.825570][T24529] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1202.835461][T24529] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1202.844544][T24529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1202.855321][T24529] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1203.048295][T24529] Bluetooth: hci1: command tx timeout [ 1206.579930][T24529] Bluetooth: hci2: command tx timeout [ 1206.586671][T24529] Bluetooth: hci1: command tx timeout [ 1208.648646][T11000] Bluetooth: hci1: command tx timeout [ 1208.654095][T11000] Bluetooth: hci2: command tx timeout [ 1210.755943][T11000] Bluetooth: hci2: command tx timeout [ 1210.761407][T11000] Bluetooth: hci1: command tx timeout [ 1210.800542][ T951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1210.811196][ T951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1210.821369][ T951] bond0 (unregistering): Released all slaves [ 1212.377623][T25353] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1214.030842][T11000] Bluetooth: hci2: command tx timeout [ 1214.147367][T25414] chnl_net:caif_netlink_parms(): no params data found [ 1215.840032][T25409] chnl_net:caif_netlink_parms(): no params data found [ 1223.094649][T24529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1223.110913][T24529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1223.119895][T24529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1223.128665][T24529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1223.136333][T24529] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1223.143708][T24529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1224.888777][T24529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1224.899466][T24529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1224.907421][T24529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1224.915921][T24529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1224.923879][T24529] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1224.932372][T24529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1225.208318][T24529] Bluetooth: hci3: command tx timeout [ 1225.451353][T25414] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1228.099496][T24529] Bluetooth: hci4: command tx timeout [ 1228.115415][T24529] Bluetooth: hci3: command tx timeout [ 1230.328694][T24529] Bluetooth: hci4: command tx timeout [ 1230.334540][T11000] Bluetooth: hci3: command tx timeout [ 1232.409508][T11000] Bluetooth: hci3: command tx timeout [ 1232.414958][T11000] Bluetooth: hci4: command tx timeout [ 1233.936560][T24529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1233.949565][T24529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1233.958293][T24529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1233.966451][T24529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1233.974199][T24529] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1233.981605][T24529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1235.541707][T24529] Bluetooth: hci4: command tx timeout [ 1239.369516][T11000] Bluetooth: hci5: command tx timeout [ 1242.075623][T11000] Bluetooth: hci5: command tx timeout [ 1243.238839][T25443] chnl_net:caif_netlink_parms(): no params data found [ 1244.484117][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.490453][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.507698][T11000] Bluetooth: hci5: command tx timeout [ 1244.571156][T25468] chnl_net:caif_netlink_parms(): no params data found [ 1244.749771][T25449] chnl_net:caif_netlink_parms(): no params data found [ 1246.721557][ T5095] Bluetooth: hci5: command tx timeout [ 1249.626714][T25471] chnl_net:caif_netlink_parms(): no params data found [ 1252.826649][T25443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.848308][T25443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1252.855572][T25443] bridge_slave_0: entered allmulticast mode [ 1252.899655][T25443] bridge_slave_0: entered promiscuous mode [ 1252.933977][T25443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.968215][T25443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.975430][T25443] bridge_slave_1: entered allmulticast mode [ 1253.006481][T25443] bridge_slave_1: entered promiscuous mode [ 1266.820238][ T5095] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1272.738678][ T5095] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1272.759003][ T5095] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1272.769924][ T5095] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1272.778842][ T5095] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1272.786213][ T5095] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1286.660788][ T951] hsr_slave_0: left promiscuous mode [ 1286.686859][T24529] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1286.712206][ T5096] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1286.721568][ T951] hsr_slave_1: left promiscuous mode [ 1294.778254][ T5096] Bluetooth: hci6: command tx timeout [ 1294.848387][T11000] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1295.079232][T24529] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1295.184581][T24529] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1295.338229][T24529] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1295.346176][T24529] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1295.427122][T24529] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1295.440952][T25519] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1295.449585][T25519] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1295.462574][T24529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1295.470228][T24529] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1295.477301][T24529] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1295.486650][T25519] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1295.493894][T25519] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1295.502470][T24529] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1295.513350][T25519] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1295.525954][T24529] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1295.534661][T25519] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1295.543825][T24529] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1295.578202][T25519] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1304.318825][T24529] Bluetooth: hci6: command tx timeout [ 1304.324351][T24529] Bluetooth: hci0: command 0x0c39 tx timeout [ 1304.331628][T24529] Bluetooth: hci9: command 0x0c14 tx timeout [ 1304.339445][T24529] Bluetooth: hci7: command tx timeout [ 1304.370086][ T5095] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1304.377434][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.402601][ T951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.417894][T19909] Bluetooth: hci9: Opcode 0x0c14 failed: -110 [ 1304.424466][ T5096] Bluetooth: hci0: Opcode 0x0c39 failed: -110 [ 1304.434195][T19909] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1304.442084][T19909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1304.451687][T19909] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1304.461284][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1314.873557][T25511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1314.888156][T25516] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 1314.898573][ T5096] Bluetooth: hci7: command tx timeout [ 1314.903990][ T5096] Bluetooth: hci6: command tx timeout [ 1315.002495][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.018318][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1338.783148][T19909] Bluetooth: hci6: command tx timeout [ 1338.788759][T19909] Bluetooth: hci8: command tx timeout [ 1338.795501][T19909] Bluetooth: hci7: command tx timeout [ 1339.033317][ T951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.070030][ T951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.129490][T11000] Bluetooth: hci7: command tx timeout [ 1352.134954][T11000] Bluetooth: hci8: command tx timeout [ 1352.143525][T11000] Bluetooth: hci1: command 0x0406 tx timeout [ 1352.150016][T11000] Bluetooth: hci2: command 0x0406 tx timeout [ 1366.379292][T24529] Bluetooth: hci8: command tx timeout [ 1366.384747][T24529] Bluetooth: hci3: command 0x0406 tx timeout [ 1366.395860][T24529] Bluetooth: hci4: command 0x0406 tx timeout [ 1366.808652][ T951] veth1_macvtap: left promiscuous mode [ 1366.814238][ T951] veth0_macvtap: left promiscuous mode [ 1366.820150][ T951] veth1_vlan: left promiscuous mode [ 1366.825641][ T951] veth0_vlan: left promiscuous mode [ 1368.046642][T25538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1368.115306][T25543] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1368.141946][T25543] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1368.151337][T25543] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1368.160369][T25543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1368.171775][T25543] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1368.186160][T25544] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1368.194452][T25544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1368.201838][T25544] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1368.212612][T25544] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1368.220698][T25544] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1368.231592][T25544] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1368.239535][T25544] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1368.246857][T25544] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1368.254785][T25543] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1368.270556][T25544] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1368.289246][T25544] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1368.297530][T25544] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1368.305401][T25544] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1368.314733][T25544] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1368.328285][T25544] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1368.338299][T25544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.345739][T25544] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1368.353045][T25544] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1368.360630][T25544] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1368.369041][T25544] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1368.391900][T25544] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1368.399339][T25544] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1368.406615][T25544] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1368.416502][T25544] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1368.423847][T25544] Bluetooth: hci8: command tx timeout [ 1384.002422][T25544] Bluetooth: hci5: command 0x0406 tx timeout [ 1384.008968][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1384.015270][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1408.001276][T24529] Bluetooth: hci0: command tx timeout [ 1408.008014][T24529] Bluetooth: hci11: command tx timeout [ 1408.014765][T24529] Bluetooth: hci9: command tx timeout [ 1408.022506][T24529] Bluetooth: hci10: command tx timeout [ 1408.029451][T24529] Bluetooth: hci12: command tx timeout [ 1408.048287][ T30] INFO: task dhcpcd:4761 blocked for more than 155 seconds. [ 1408.055683][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1408.090795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1408.128373][ T30] task:dhcpcd state:D stack:20384 pid:4761 tgid:4761 ppid:4760 flags:0x00000002 [ 1408.158179][ T30] Call Trace: [ 1408.161496][ T30] [ 1408.164436][ T30] __schedule+0x17e8/0x4a20 [ 1408.181911][ T30] ? __pfx___schedule+0x10/0x10 [ 1408.186792][ T30] ? __pfx_lock_release+0x10/0x10 [ 1408.192098][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1408.197580][ T30] ? schedule+0x90/0x320 [ 1408.202015][ T30] schedule+0x14b/0x320 [ 1408.206194][ T30] schedule_preempt_disabled+0x13/0x30 [ 1408.212361][ T30] __mutex_lock+0x6a4/0xd70 [ 1408.216883][ T30] ? __mutex_lock+0x527/0xd70 [ 1408.221637][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1408.226853][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1408.231959][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 1408.237002][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1408.242905][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.249075][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 1408.254497][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.260288][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.265515][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 1408.285443][ T30] ? mark_lock+0x9a/0x350 [ 1408.290892][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.296121][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1408.301427][ T30] ? mark_lock+0x9a/0x350 [ 1408.305775][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1408.310898][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1408.315683][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.321243][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.326565][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.331859][ T30] netlink_unicast+0x7ea/0x980 [ 1408.336644][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1408.341977][ T30] ? __virt_addr_valid+0x183/0x520 [ 1408.348282][ T30] ? __check_object_size+0x49c/0x900 [ 1408.353588][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 1408.358795][ T30] netlink_sendmsg+0x8db/0xcb0 [ 1408.363596][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.368929][ T30] ? __import_iovec+0x536/0x820 [ 1408.373790][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1408.378796][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1408.384093][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 1408.389614][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.394909][ T30] __sock_sendmsg+0x221/0x270 [ 1408.408196][ T30] ____sys_sendmsg+0x525/0x7d0 [ 1408.413003][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.428231][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1408.437618][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 1408.442500][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1408.448262][ T30] ? netlink_bind+0xaeb/0xc90 [ 1408.452983][ T30] ? __pfx___sys_bind+0x10/0x10 [ 1408.457839][ T30] ? fd_install+0x35c/0x5d0 [ 1408.463324][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1408.469711][ T30] ? do_syscall_64+0x100/0x230 [ 1408.474515][ T30] ? do_syscall_64+0xb6/0x230 [ 1408.479261][ T30] do_syscall_64+0xf3/0x230 [ 1408.483780][ T30] ? clear_bhb_loop+0x35/0x90 [ 1408.488506][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.494411][ T30] RIP: 0033:0x7f8f086a8a4b [ 1408.499095][ T30] RSP: 002b:00007ffda4cf8348 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.507519][ T30] RAX: ffffffffffffffda RBX: 00007f8f085d06c0 RCX: 00007f8f086a8a4b [ 1408.515702][ T30] RDX: 0000000000000000 RSI: 00007ffda4d0c4f8 RDI: 0000000000000005 [ 1408.523771][ T30] RBP: 0000000000000005 R08: 0000000000000000 R09: 00007ffda4d0c4f8 [ 1408.532457][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: ffffffffffffffff [ 1408.540760][ T30] R13: 00007ffda4d0c4f8 R14: 0000000000000048 R15: 0000000000000001 [ 1408.549420][ T30] [ 1408.552483][ T30] INFO: task syz-executor:25471 blocked for more than 155 seconds. [ 1408.560923][ T30] Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1408.568600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1408.577271][ T30] task:syz-executor state:D stack:21024 pid:25471 tgid:25471 ppid:1 flags:0x00000004 [ 1408.587525][ T30] Call Trace: [ 1408.590846][ T30] [ 1408.593790][ T30] __schedule+0x17e8/0x4a20 [ 1408.598383][ T30] ? __pfx___schedule+0x10/0x10 [ 1408.603245][ T30] ? __pfx_lock_release+0x10/0x10 [ 1408.608333][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1408.613816][ T30] ? schedule+0x90/0x320 [ 1408.618062][ T30] schedule+0x14b/0x320 [ 1408.622322][ T30] schedule_preempt_disabled+0x13/0x30 [ 1408.627792][ T30] __mutex_lock+0x6a4/0xd70 [ 1408.632371][ T30] ? __mutex_lock+0x527/0xd70 [ 1408.637152][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1408.642424][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1408.647486][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 1408.653166][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1408.658934][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.664407][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 1408.669747][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.674960][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.680255][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 1408.685218][ T30] ? mark_lock+0x9a/0x350 [ 1408.689596][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1408.694814][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1408.699932][ T30] ? mark_lock+0x9a/0x350 [ 1408.704276][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1408.709364][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1408.714231][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1408.719803][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1408.725215][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 1408.730611][ T30] netlink_unicast+0x7ea/0x980 [ 1408.735403][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1408.740754][ T30] ? __virt_addr_valid+0x183/0x520 [ 1408.745882][ T30] ? __check_object_size+0x49c/0x900 [ 1408.751214][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 1408.757405][ T30] netlink_sendmsg+0x8db/0xcb0 [ 1408.762273][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.767575][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 1408.772584][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1408.777874][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 1408.783397][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.788727][ T30] __sock_sendmsg+0x221/0x270 [ 1408.793427][ T30] __sys_sendto+0x3a4/0x4f0 [ 1408.797945][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 1408.803043][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1408.808301][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1408.814391][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1408.820559][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1408.827162][ T30] __x64_sys_sendto+0xde/0x100 [ 1408.831996][ T30] do_syscall_64+0xf3/0x230 [ 1408.836514][ T30] ? clear_bhb_loop+0x35/0x90 [ 1408.841261][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.847225][ T30] RIP: 0033:0x7f293c37796c [ 1408.851701][ T30] RSP: 002b:00007f293c62f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1408.860796][ T30] RAX: ffffffffffffffda RBX: 00007f293d034620 RCX: 00007f293c37796c [ 1408.869306][ T30] RDX: 000000000000003c RSI: 00007f293d034670 RDI: 0000000000000003 [ 1408.877375][ T30] RBP: 0000000000000000 R08: 00007f293c62f704 R09: 000000000000000c [ 1408.885442][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1408.893896][ T30] R13: 0000000000000000 R14: 00007f293d034670 R15: 0000000000000000 [ 1408.901950][ T30] [ 1408.905001][ T30] [ 1408.905001][ T30] Showing all locks held in the system: [ 1408.912778][ T30] 1 lock held by khungtaskd/30: [ 1408.917632][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1408.927597][ T30] 5 locks held by kworker/u8:5/951: [ 1408.932826][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1408.943801][ T30] #1: ffffc90003fffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1408.954404][ T30] #2: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1408.964495][ T30] #3: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 1408.975838][ T30] #4: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1408.986892][ T30] 3 locks held by kworker/u8:11/2879: [ 1408.992324][ T30] #0: ffff888029e6f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1409.004017][ T30] #1: ffffc9000a13fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1409.016883][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1409.026418][ T30] 1 lock held by dhcpcd/4761: [ 1409.031149][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.040739][ T30] 2 locks held by getty/4844: [ 1409.045431][ T30] #0: ffff88802ac850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1409.055368][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1409.066182][ T30] 3 locks held by kworker/1:6/5141: [ 1409.071933][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1409.083002][ T30] #1: ffffc900036d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1409.094069][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1409.104539][ T30] 2 locks held by kworker/0:6/5322: [ 1409.109777][ T30] 3 locks held by kworker/1:0/20842: [ 1409.115062][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1409.126153][ T30] #1: ffffc90003787d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1409.137392][ T30] #2: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1409.146457][ T30] 3 locks held by kworker/u9:2/24529: [ 1409.151880][ T30] #0: ffff88805db07948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1409.162770][ T30] #1: ffffc90002dc7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1409.176414][ T30] #2: ffff888051ed4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1409.186854][ T30] 1 lock held by syz-executor/25226: [ 1409.192176][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1409.201246][ T30] 1 lock held by syz-executor/25443: [ 1409.206531][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.216113][ T30] 1 lock held by syz-executor/25449: [ 1409.221505][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.231060][ T30] 1 lock held by syz-executor/25468: [ 1409.236346][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.245916][ T30] 1 lock held by syz-executor/25471: [ 1409.251256][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.260834][ T30] 1 lock held by syz-executor/25478: [ 1409.267408][ T30] #0: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 1409.277013][ T30] 5 locks held by kworker/u8:4/25481: [ 1409.282438][ T30] 2 locks held by syz-executor/25512: [ 1409.287816][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.297469][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.307658][ T30] 2 locks held by syz-executor/25520: [ 1409.313061][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.322569][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.332645][ T30] 2 locks held by syz-executor/25521: [ 1409.338014][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.347508][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.357582][ T30] 2 locks held by syz-executor/25548: [ 1409.362999][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.373074][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.383701][ T30] 2 locks held by syz-executor/25545: [ 1409.389136][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.398619][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.408714][ T30] 2 locks held by syz-executor/25546: [ 1409.414087][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.423600][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.433762][ T30] 2 locks held by syz-executor/25549: [ 1409.439186][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.448650][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.458741][ T30] 2 locks held by syz-executor/25547: [ 1409.464120][ T30] #0: ffffffff8f5da5d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 1409.474186][ T30] #1: ffffffff8f5e6e08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1409.484899][ T30] [ 1409.487228][ T30] ============================================= [ 1409.487228][ T30] [ 1409.495717][ T30] NMI backtrace for cpu 1 [ 1409.500045][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1409.509935][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1409.519992][ T30] Call Trace: [ 1409.523275][ T30] [ 1409.526211][ T30] dump_stack_lvl+0x241/0x360 [ 1409.530903][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.536110][ T30] ? __pfx__printk+0x10/0x10 [ 1409.540792][ T30] ? vprintk_emit+0x631/0x770 [ 1409.545486][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1409.550531][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1409.555517][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1409.560977][ T30] ? _printk+0xd5/0x120 [ 1409.565136][ T30] ? __pfx__printk+0x10/0x10 [ 1409.569734][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1409.574597][ T30] ? __pfx__printk+0x10/0x10 [ 1409.579194][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1409.584231][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1409.590216][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1409.596204][ T30] watchdog+0xfde/0x1020 [ 1409.600460][ T30] ? watchdog+0x1ea/0x1020 [ 1409.604884][ T30] ? __pfx_watchdog+0x10/0x10 [ 1409.609565][ T30] kthread+0x2f0/0x390 [ 1409.613643][ T30] ? __pfx_watchdog+0x10/0x10 [ 1409.618325][ T30] ? __pfx_kthread+0x10/0x10 [ 1409.623013][ T30] ret_from_fork+0x4b/0x80 [ 1409.627441][ T30] ? __pfx_kthread+0x10/0x10 [ 1409.632081][ T30] ret_from_fork_asm+0x1a/0x30 [ 1409.636957][ T30] [ 1409.640694][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1409.645924][ C0] NMI backtrace for cpu 0 [ 1409.645936][ C0] CPU: 0 PID: 5322 Comm: kworker/0:6 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1409.645955][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1409.645966][ C0] Workqueue: events_power_efficient gc_worker [ 1409.645988][ C0] RIP: 0010:validate_chain+0x1a0/0x5900 [ 1409.646010][ C0] Code: c7 c7 e0 b9 ca 8b 48 c7 c6 80 bc ca 8b e8 68 3a e5 ff 90 0f 0b 90 90 90 48 b8 eb 83 b5 80 46 86 c8 61 49 0f af c6 48 c1 e8 2f <48> 8d 1c c5 00 75 e6 92 48 89 d8 48 c1 e8 03 48 89 44 24 68 42 80 [ 1409.646024][ C0] RSP: 0018:ffffc90000007600 EFLAGS: 00000807 [ 1409.646038][ C0] RAX: 0000000000017165 RBX: 0000000000000001 RCX: ffffffff81731abe [ 1409.646050][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa7580 [ 1409.646061][ C0] RBP: ffffc90000007900 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 1409.646073][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: dffffc0000000000 [ 1409.646086][ C0] R13: ffff888020f60b78 R14: d4c9f0e422e098f3 R15: ffff888020f60000 [ 1409.646099][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1409.646114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1409.646126][ C0] CR2: 00007f915318ffb0 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1409.646142][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1409.646152][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1409.646163][ C0] Call Trace: [ 1409.646169][ C0] [ 1409.646177][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1409.646195][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1409.646212][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1409.646236][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1409.646253][ C0] ? nmi_handle+0x14f/0x5a0 [ 1409.646275][ C0] ? nmi_handle+0x2a/0x5a0 [ 1409.646295][ C0] ? validate_chain+0x1a0/0x5900 [ 1409.646313][ C0] ? default_do_nmi+0x63/0x160 [ 1409.646330][ C0] ? exc_nmi+0x123/0x1f0 [ 1409.646346][ C0] ? end_repeat_nmi+0xf/0x53 [ 1409.646370][ C0] ? validate_chain+0x11e/0x5900 [ 1409.646389][ C0] ? validate_chain+0x1a0/0x5900 [ 1409.646407][ C0] ? validate_chain+0x1a0/0x5900 [ 1409.646425][ C0] ? validate_chain+0x1a0/0x5900 [ 1409.646444][ C0] [ 1409.646450][ C0] [ 1409.646458][ C0] ? validate_chain+0x11e/0x5900 [ 1409.646481][ C0] ? stack_trace_save+0x118/0x1d0 [ 1409.646503][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1409.646525][ C0] ? validate_chain+0x11e/0x5900 [ 1409.646544][ C0] ? validate_chain+0x11e/0x5900 [ 1409.646562][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1409.646581][ C0] ? mark_lock+0x9a/0x350 [ 1409.646597][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1409.646616][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 1409.646640][ C0] ? mark_lock+0x9a/0x350 [ 1409.646658][ C0] __lock_acquire+0x1346/0x1fd0 [ 1409.646686][ C0] lock_acquire+0x1ed/0x550 [ 1409.646701][ C0] ? debug_object_activate+0x16d/0x510 [ 1409.646722][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 1409.646741][ C0] ? debug_objects_fill_pool+0x80/0x9b0 [ 1409.646762][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1409.646778][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 1409.646798][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1409.646821][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1409.646842][ C0] ? debug_object_activate+0x16d/0x510 [ 1409.646862][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1409.646888][ C0] debug_object_activate+0x16d/0x510 [ 1409.646909][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1409.646929][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1409.646948][ C0] ? advance_sched+0xa02/0xca0 [ 1409.646971][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1409.646986][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1409.647009][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1409.647031][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 1409.647051][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1409.647075][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1409.647099][ C0] hrtimer_interrupt+0x396/0x990 [ 1409.647128][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1409.647150][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1409.647170][ C0] [ 1409.647176][ C0] [ 1409.647182][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1409.647203][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 1409.647222][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1409.647235][ C0] RSP: 0018:ffffc90004b6f8f8 EFLAGS: 00000206 [ 1409.647249][ C0] RAX: 0f261b505cb1af00 RBX: 0000000000000000 RCX: ffff888020f60000 [ 1409.647262][ C0] RDX: 0000000000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe9c0 [ 1409.647273][ C0] RBP: 0000000000000002 R08: ffffffff8fad496f R09: 1ffffffff1f5a92d [ 1409.647285][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a92e R12: 0000000000000246 [ 1409.647298][ C0] R13: ffff888020f60000 R14: 00000000ffffffff R15: ffffffff8e333f80 [ 1409.647318][ C0] ? gc_worker+0x26b/0x1530 [ 1409.647352][ C0] __might_resched+0xa5/0x780 [ 1409.647372][ C0] ? gc_worker+0x26b/0x1530 [ 1409.647390][ C0] ? __pfx___might_resched+0x10/0x10 [ 1409.647407][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 1409.647429][ C0] ? gc_worker+0x26b/0x1530 [ 1409.647448][ C0] gc_worker+0xdda/0x1530 [ 1409.647466][ C0] ? gc_worker+0x26b/0x1530 [ 1409.647486][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1409.647504][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1409.647522][ C0] ? __pfx_gc_worker+0x10/0x10 [ 1409.647543][ C0] ? process_scheduled_works+0x945/0x1830 [ 1409.647560][ C0] process_scheduled_works+0xa2c/0x1830 [ 1409.647588][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1409.647607][ C0] ? assign_work+0x364/0x3d0 [ 1409.647625][ C0] worker_thread+0x86d/0xd50 [ 1409.647648][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1409.647666][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1409.647686][ C0] kthread+0x2f0/0x390 [ 1409.647704][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1409.647720][ C0] ? __pfx_kthread+0x10/0x10 [ 1409.647738][ C0] ret_from_fork+0x4b/0x80 [ 1409.647756][ C0] ? __pfx_kthread+0x10/0x10 [ 1409.647773][ C0] ret_from_fork_asm+0x1a/0x30 [ 1409.647799][ C0] [ 1409.647930][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1410.258336][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 1410.268232][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1410.278295][ T30] Call Trace: [ 1410.281578][ T30] [ 1410.284511][ T30] dump_stack_lvl+0x241/0x360 [ 1410.289205][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1410.294416][ T30] ? __pfx__printk+0x10/0x10 [ 1410.299012][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1410.305018][ T30] ? vscnprintf+0x5d/0x90 [ 1410.309370][ T30] panic+0x349/0x860 [ 1410.313280][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1410.319454][ T30] ? __pfx_panic+0x10/0x10 [ 1410.323889][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1410.329270][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1410.334821][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1410.340209][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1410.346374][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1410.352534][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1410.358698][ T30] watchdog+0x101d/0x1020 [ 1410.363035][ T30] ? watchdog+0x1ea/0x1020 [ 1410.367460][ T30] ? __pfx_watchdog+0x10/0x10 [ 1410.372142][ T30] kthread+0x2f0/0x390 [ 1410.376306][ T30] ? __pfx_watchdog+0x10/0x10 [ 1410.380988][ T30] ? __pfx_kthread+0x10/0x10 [ 1410.385590][ T30] ret_from_fork+0x4b/0x80 [ 1410.390014][ T30] ? __pfx_kthread+0x10/0x10 [ 1410.394611][ T30] ret_from_fork_asm+0x1a/0x30 [ 1410.399399][ T30] [ 1411.516049][ T30] Shutting down cpus with NMI [ 1411.520973][ T30] Kernel Offset: disabled [ 1411.525288][ T30] Rebooting in 86400 seconds..