last executing test programs: 16.051536553s ago: executing program 1 (id=370): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002740)=ANY=[@ANYBLOB="cc0000001b0001000000000000000000000000000000000000000000000000001b03000000000000000000000000046dbe514dbbdc330000000000000000000036264f08000000094a3b4c5b528f298b4223668ef6c619fb381fe46de0bd067cce43b97f66c9907188b75cb396b4d899138f7742a45222054aa8ed9271464b866f83d6610a30cd07fff0e22f3301ea5321a7189703cf61d414ad275d7644c1a66854141e59fc41d4ae442917acf60800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/116], 0xcc}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0fffdffb7020000080000", @ANYRES32=r2], &(0x7f0000000300)='GPL\x00'}, 0x90) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0}, 0x90) sendmsg$kcm(r3, &(0x7f0000002700)={&(0x7f00000021c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000140)="1ddacfca8300791d5aa08a7ef3179c9d803a6c6c513b9a7405bd0e935713db51f4a830523708272a29", 0x29}, {&(0x7f0000002240)="7c22f35eda9f21a59e59cb3cb1ddf7da673bbb7a8d2567c8189fb664d3e6ab2001bdde3ec04371f6d0f5ad42294b66a45ddd5355fa6e6137c4a27a9dd7c49fa0a92665508bb819c465ae8d2174fd5f48a646b2fd7d29fc1bf7edffa87970d6447ebb933a60f4c75041d585684fc614454f73f3e7880d8efd010f1aed5655a74ad385c14cd88cfb", 0x87}, {&(0x7f0000002300)="67905108018b4a0d3909a161d99b0fe264175ba49b14c7f3fb7da58a256d43263e12a490eab3b6331bc368faf575da0ad0", 0x31}], 0x3, &(0x7f0000002380)=[{0xa8, 0xff, 0x0, "8eec37212c9249c79a9b87a53de93b96a030e1f7e19ea5e7b3cb38d628eef4d1cb6b944defe24c51de69c4175c35f46a4f61850ec20303747995b8bca3e9266c86bf03a529a568ba974286a44c7ec26312791947c592702c1f568cae0eaec11b127ee9639d9d0103119e0eebedee7c708d496e2718645cd2fd6ad9d9f6ad39f850dee1cb180ea73464509cf41f492b4aa6f862b80dfa17"}, {0xa0, 0x2, 0x6, "39dc67273d79311f4222c77797a795bdb94dd77b9e99719b356764ae594710dfa0e974fed84297d66affbb99af79402e9ce90e2dce9c96d93b3149d340d4f4804043aebf86479cd65c90e15ca4bd991fe783102ec3fd042ba13df37301bcab41f6242459c4953fbe088adc39dfddaea3415aa60180b98d3a5a81cbf33b60f75619fc578017d992802134b0"}, {0xb0, 0x110, 0x1, "5dcb304701e8d51d249513dacdbb88fa06419ef04d01cb76f8c6ccdf7f9ade502d875bfa6a1b6d3bbb8d07ef2010ae87cc1bbb9cfcdd7b3a3b823e7d0a60268862822e9cddc53bf4b5507a2ebd10e11dd76378b5665eed0c6d82d385f63a4deb86dc289ed2c9f3c975a55c3e032a5ca5f163e2b03de4b97dd871c8fd2fac5dd57fa27d85e77fa4caeda1041ff01279f53c71363bd6118a13a9d3c9f8"}, {0x60, 0x1, 0xc, "acf66a2bb8e1fc2c761506b080b004667b35e94891858444ef9662eba1e0544f8b46a6ade5852048b15459d2eb1179344d94383c421655c054e647c094d5ea72e97f0f7cdd698965971431d6"}, {0x50, 0x29, 0x8, "7ebf297e226ad4ebe47c3b9f0fc484d71838f6bafebfb9dc87b0c6417d2cbc466eda92952dd5117a94143e92625484bd841ae7ceb73df24cb913236f583fc549"}, {0xd8, 0x111, 0x7, "8b19ec039567951bf2b2e3b4aa9fc93e682fe633ea60fa078a5e227c5a8f0356c705c55a2943b90f4e985641e5975b64f595fbe8ec11d81dc003e1cb14db82ba80e910d6e81d9ad9460cececad00e3009deb0bdef8e6bfb3ed8c4f1706ee2032470e2466ed84994dd6a1aef8eec1a1198383307ce8a76d8d287b33e9ab1f4ab5eb076ec5b0b9c2fd760ed984b21977fce449fff4856024b9ba4c89c1379a6bc0452d3521b040ef98582b51477c2d8563b3181bf88b0a3726fc7050631f438a93e43a46c52a45c7c5"}], 0x380}, 0x20040c84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x1, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x5, 0x6, @random="5a290e2aa07a"}, 0x14) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, 0x0, 0x0) fstat(r4, &(0x7f0000000240)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) r8 = fanotify_init(0x200, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 14.896782534s ago: executing program 1 (id=377): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x29, 0x0, 0x0, {0x0, @hdata="30756cac2b111c09f53f816d345629aa1f8b844c0efd565f3f3fd2e2649dc928df8c61eb14e5e16ba2df2c6361aab7c0a91402ba", {0x0, @link_local}, @ah_ip4_spec={@multicast2, @remote}, {0x0, @local}}}}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x1, [0x300]}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000040), 0x4) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0/file0'}, 0x11) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="010000000000000000000a0000000400018008000a0000000000"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000777000/0x6000)=nil, &(0x7f0000d17000/0x4000)=nil, 0x6000}) 12.741165091s ago: executing program 1 (id=382): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x67, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) 12.447465834s ago: executing program 1 (id=384): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000000c0)={0x5, 0x6, {0x55, 0x7fff, 0x8000, {0x1, 0x3}, {0x3, 0x81}, @const={0x8, {0xffff, 0xe, 0x588, 0x3c7}}}, {0x57, 0x2, 0x4, {0x7, 0x5}, {0xae, 0x2}, @const={0x6, {0x7, 0x400, 0x7, 0x4}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mknod(0x0, 0x4, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000001c0)=""/87, 0x57}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000740)=""/235, 0xeb}], 0x7, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$sg(0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa082, 0x0) syz_emit_ethernet(0xbd, &(0x7f0000000300)=ANY=[@ANYBLOB="5b1a033f331120cd000000000800450000af0000000004119078000000000000000000000000009b9078c2fd49166da82b50db6e9d6992d41a52d713379bf4c314d21bcd12008548521d155c4d09001143875453170759aca285c6a917f424546999c9e94961ab2623fb2b30bf3b36788c035b6e4c1a61eb38c01491c73f94c36a23da84317fa776abdec83053630d29a7d69e162f555d55156096becd584a825abda456823a1a17e3212e6e02b287f79540c62fda5e232a77f21517d3"], 0x0) gettid() r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303050000000000000002000020d3"]) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000240), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 12.002073954s ago: executing program 1 (id=387): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = fcntl$dupfd(r0, 0x0, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5319, &(0x7f0000000000)) 11.692060128s ago: executing program 1 (id=389): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.760789253s ago: executing program 3 (id=391): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c000020000280050004000000000014000300fe880000000000000000000000000001"], 0x50}}, 0x0) syz_80211_inject_frame(&(0x7f0000000240), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x9044d, &(0x7f0000000100)=ANY=[]) read$FUSE(r1, &(0x7f000000a400)={0x2020}, 0x2020) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000080)) r6 = dup(r5) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/117, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000240)={0x1, r6}) close_range(r3, r4, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0xffffffffffffffff, 0x50000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)="e3b1ed39ac10d6da4ca5a755ba202149cfb4a5b960acabc0be0c70ff72bfb0e96439578147e0817949ba825461316a0e39c40cc4d3ac1c2eff7d5430c5426730fe5d12f970e22a61019b5097986ee426b7d56215e8f8123be26be053d654c3c5de4e7a870886e1de74b71eb5eb8500325841c9ecec1f1144e6d3693fc5ef2e3e0e", 0x81}], 0x1, 0x2, 0x0) write$binfmt_aout(r8, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x30, r8, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0a00ff0071106e00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) getsockopt$inet_int(r9, 0x10d, 0x97, 0x0, &(0x7f00000000c0)) 9.739311335s ago: executing program 3 (id=393): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000000000000000000000000001a000000664b8a19e85a06a3c284071f0d1be0a593d38e10b11f746f06505d80f742d21899245b35b3bab2998c3d9001852c20a820a50cc6961c0b9c20cfecb2abcb4a3a275ccb00711897ce764e71815c722be989558f2632ecd130c12735d78f6f5dd81b2f9c8c9f2aad6b7b6e35cb80577f12fd87c944d300d6f997a3ee0b8392e9521483d26662484cbaa28e5d0a", @ANYRES64=r1, @ANYBLOB="00ffffff07000000040012800b0001006970566c616e00000485ceb9cc9881622467e8e8be1780aecac1acaa438c8b66f84a0e4ab4b207a50977bcb89aaaa1e54c78652d477b327f8baf"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20000810) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080), &(0x7f000095dffc)=0x4) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x63, 0x4, {0x0, 0xea60}, {0x77359400}, {0x4, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x8, 0x4, 0x0, 0x0, "d0e0bb9ac3ec38bf"}}, 0x48}}, 0x4000040) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYRESOCT=r3], 0xf) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8800080) r5 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000540)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001900080028bd7000fbdbdf251d01040008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB="08000e00", @ANYRES32=r8, @ANYBLOB="0c000b0001000000010000e015000200030000400502000022f6d700000005000d000000000008000900", @ANYRES32=r9, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000005) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) unshare(0x8020480) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0x80dc5521, &(0x7f0000000040)=0xfffffffc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) close(r0) 9.282308807s ago: executing program 4 (id=395): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000004000100"/24], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x6b2042, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000580)={0x2, 0x9, 0x0, 0xffffffff}) io_uring_setup(0x66b, &(0x7f0000000240)={0x0, 0x0, 0x20, 0xfff, 0x2}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000009410000004c001800080000696200000000000000000000001d"], 0x68}}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b16, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 8.73966445s ago: executing program 0 (id=397): r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) getsockopt(r0, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) 8.438095727s ago: executing program 0 (id=398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000500)={0x40, 0xa, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000009000000b754c4af335c71ba3823e32986d33a52f69fbe20413a6a9d91a46c021207da991a9d2b31d128ab0c3915e695664d1193464fafccfbfd590df88e4af04a9f5ff442b43007000000c0"], 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000080)={0x0, 0x0, 0x1, 'F'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.059081535s ago: executing program 0 (id=401): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x3c, &(0x7f0000000440)=[@in={0x2, 0x0, @private=0xa010101}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e22, 0x0, @mcast2}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.533488281s ago: executing program 3 (id=402): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0xfffffffffffffd68, &(0x7f0000000080)='['}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}]}, 0x28}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/16, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast1}]}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r8, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b000100627269646765"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x3c, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r9}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x600}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x5502000000000000}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa8, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40040) recvmmsg(0xffffffffffffffff, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 5.930847149s ago: executing program 2 (id=404): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x67, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) 5.280309711s ago: executing program 4 (id=405): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) dup3(r3, r2, 0x0) r4 = dup(r1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv4_newaddr={0x4c, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x6}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_FLAGS={0x8, 0x8, 0x30}]}, 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r10, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e00000021400030076657468315f746f5f626f6e6400300000000000000000000000000000000000fc0963ba531c28ca1f6b823a08419f666bdcdc44618f0ccf77"], 0x70}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x70, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r13}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0xf0000000, 0x0, 0x8e3e}}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0xa, 0x4, 0x8000}}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x70}}, 0x0) r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r14, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) unshare(0x24020400) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.140843795s ago: executing program 2 (id=406): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) unshare(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7ac33883"}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0918, 0x0, '\x00', @p_u32=&(0x7f0000000180)=0xffff7fff}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="4dcdc7d96a766000002f000500000000e80300ff861bc9252feb8fb55c093a44d77cfee9a81370773ef34fc4639580070244fb", 0x33, 0x0, &(0x7f0000000380)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 4.86104886s ago: executing program 2 (id=407): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000880)={0x0, r6}) 4.424232s ago: executing program 2 (id=408): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00033a0000003a0308f7b5ab469af8d740d4714f24d433e3eab9a949f6c1d9dcfb2bd62b68a7bd1ce010b94f3613efd3bfc5e705a7ac250469030ca9b20a360642a6"]}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_emit_ethernet(0x5c, &(0x7f0000000680)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@mpls_mc={0x8848, {[{0x39b, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0xffff9}], @ipv4=@tipc={{0x5, 0x4, 0x1, 0x7, 0x3e, 0x65, 0x0, 0x4, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_direct={{{{0x2a, 0x0, 0x0, 0x1, 0x1, 0x8, 0x1, 0x2, 0x9b0f, 0x0, 0x1, 0x0, 0x7, 0x3, 0x9, 0x0, 0x0, 0x4e24, 0x4e24}, 0x3, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwritev2(r3, &(0x7f0000000600), 0x0, 0x0, 0xffff, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r4, 0x40096101, &(0x7f0000001040)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000100)={0x40, 0x3, 0x7e, {0x7e, 0xa, "6c9c39885802f20b06be48b3a606a5829c6cea1941735d393c40c40581aa73f9f511aa9b3b75f73ec274fca8a48c12e917703ef1ab9bf016c861ec4d533816a7eda8e442ce318bd518328726fc643a92848afded283e753c3bd6f9d270ae389c286132e3005c653db53325a50c75f34ebe699addfa2a21890c7603c3"}}, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "34e239a9"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8001, 0x3, 0x1, {0x22, 0x6f8}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x20, 0x23, "ba4176948d54d6768be67fb6be3f96ff7016b427091a41ab9e1c1cb9d1d7e3b5f24541"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1d}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000340)=ANY=[@ANYBLOB="2001d30000001dc472a99557e6e8f80db79ddec2e63e89d17334002dc2216b31ae5196bf733c13d73d1c444c27d618270b5d906ec1a06ad81644ba9a8c68f684d119b81247d611cfd98bdaf3d23cf75f586b00993d67a6501d79488842e6a4751163f5923f0fc2859b51b615fc790902dae4b7a913bf3b12c80292e28c9bfaba0325d3a798a5718b19b8a78c6fcdfc78407572b19e40f6c0fa875338c22f85212a6797c798525490bd60f0920a2827ba7cebfd3aefd2a609a4ecd3f4919bff2f126289cc6eb67bb1397900"/217], &(0x7f0000000440)={0x20, 0x3, 0x1, 0xe5}}) syz_usb_control_io$hid(r2, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) 4.225213314s ago: executing program 4 (id=409): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000001a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x67, 0x0, 0x0) mlock(&(0x7f0000443000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000001c0)=@srh={0x42, 0xa, 0x4, 0x5, 0x6, 0x58, 0xfb49, [@dev={0xfe, 0x80, '\x00', 0xd}, @dev={0xfe, 0x80, '\x00', 0x1f}, @rand_addr=' \x01\x00', @remote, @dev={0xfe, 0x80, '\x00', 0x11}]}, 0x58) 4.108644485s ago: executing program 0 (id=410): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05000000000000", @ANYRES32=r1, @ANYBLOB="0a10340002020202020200000a000600cee1306b3dae000008003580000000001001040000002000810007007f200000"], 0x4c}}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x2}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000600)=@mgmt_frame=@probe_response={{{}, {0x4}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x6, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0xa14c}, @val={0x2d, 0x1a, {0x10, 0x0, 0x7, 0x0, {0x8, 0xd, 0x0, 0xf, 0x0, 0x1, 0x1, 0x3}, 0x8, 0x6, 0x7}}, @void, @void, [{0xdd, 0x4e, "0e9e67e0d7f61fc28398ebf9d76bea2424af1b92044d2f3b6365d86c2ce64e86f0609a58af860542173857a093f5c0c8140198b377969c4e36761c3f19a6dfaf062f509764c72124c2e5e51c2bdd"}, {0xdd, 0xe6, "04111a12c02ae5320267cc49d69cbbc8fde98274cf51271f3f00e529fd814acfe428401b611b4e9c882e3b24312e2ded68dd3b223def1054d85073b790dd804877501899d5ee0b83d27c3993d7d40fefb22974bbdb1ab5529272397ae4b1afb5d62b8aac1ea1d008d82f9ed38a025451c00c6d47b636cb922c14e6c5aadc53e1e2c2be07402953e16483c4a6fc962db6a581c0c40491b2951213b033c67054746bd12ee208a5d995cca529cf4eeedf6ea802ad132d0786ca705021f0df99d1880977aa610f0024509c9b8d1bb30cebd515fb3e435b783900"/230}, {0xdd, 0x4b, "9e125b2cdb2ab8fbab451166ec16941c060821c153295f4f708a29b2899023c861591d93490525ef968d924ef307dac074e779a5628d19424f20b8dac9332c5740358cee286275be4e1368"}, {0xdd, 0x8f, "7fc238cd2f1c6b815b98206c201ce74b1327fc7b95c8633fba3992e964f7c051588ef3289e294c74e56e4d9bb3682287d9b12a89fe06bf6abcd1cde703b2a9ae8f3403a79e750950fc0a8acac184f993c3f53bad53b337ee61f06834f6624f8dc37fbb68d6b5fffe3de4e0492df0fcefbf80fc0c50556bff9b74c983a5e338baa87fec1d5532738b50d96557c351f5"}, {0xdd, 0xbe, "8b958080ec8c117f2b42c4ee808ffb79b5064f7c55c7159acaa7bab3eef3f0f24462e6cb04b5ad33537c5975fcee7b85053b95eddc264c38907eef03aaa18ebc5bccc22ce609959854c360ceecbf63b4fafcfb1d1f58a48ccf6e83b111779fc5ba4b5264ca873c34d5536de8152d9905c46d1cdb7518c31016fd996ef6e75bd763cbc3efe57f83f44b9802bc6a1ec13067152275786a6e0ad1f6b0861b83373eab1e059ffad079f689605bde4e5489407d735f9ac18867a65442b655d9c8"}, {0xdd, 0x9a, "2ca51fc0d934254ba52cdcd3961cf23160de81e125553e2c8a72e673a46513f273f9b33648768efc7a1e1cfc7fc23cba90e424645ab1c5e9855ec0998b4c1bb9660106e228617c6411766421fe80f5545e2083d53d4d1eed72f9fbba12bb105f7bb12ccf37a9d858d2e7e307d05774b7ea5f7cf9bb5a2ff41781ea2791008e353802054250921e667286f68ade7b0b8bc697620d20ad456d38cf"}]}, 0x3be) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905", @ANYRES16], 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x2d8) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0xb8}}, 0x21) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r4, 0x21, 0x6, &(0x7f0000000100)=0x5, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 3.889652652s ago: executing program 3 (id=411): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000000000000000000000000000001a000000664b8a19e85a06a3c284071f0d1be0a593d38e10b11f746f06505d80f742d21899245b35b3bab2998c3d9001852c20a820a50cc6961c0b9c20cfecb2abcb4a3a275ccb00711897ce764e71815c722be989558f2632ecd130c12735d78f6f5dd81b2f9c8c9f2aad6b7b6e35cb80577f12fd87c944d300d6f997a3ee0b8392e9521483d26662484cbaa28e5d0a", @ANYRES64=r1, @ANYBLOB="00ffffff07000000040012800b0001006970566c616e00000485ceb9cc9881622467e8e8be1780aecac1acaa438c8b66f84a0e4ab4b207a50977bcb89aaaa1e54c78652d477b327f8baf"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x20000810) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080), &(0x7f000095dffc)=0x4) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3, 0x63, 0x4, {0x0, 0xea60}, {0x77359400}, {0x4, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x8, 0x4, 0x0, 0x0, "d0e0bb9ac3ec38bf"}}, 0x48}}, 0x4000040) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x80}}, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYRESOCT=r3], 0xf) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000080)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x8800080) r5 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000500)={'vxcan1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000540)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000001900080028bd7000fbdbdf251d01040008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB="08000e00", @ANYRES32=r8, @ANYBLOB="0c000b0001000000010000e015000200030000400502000022f6d700000005000d000000000008000900", @ANYRES32=r9, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000005) r10 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) unshare(0x8020480) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r10, 0x80dc5521, &(0x7f0000000040)=0xfffffffc) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) close(r0) 3.753521296s ago: executing program 4 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x11c, 0x1, 0x0, 0x74efdfe049b861ab) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) ppoll(&(0x7f0000000240)=[{r3}], 0x1, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f00000008c0)=@name, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, 0x0, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)=',\t', 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x488042) syncfs(r1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 2.487550296s ago: executing program 4 (id=413): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) unshare(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7ac33883"}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0918, 0x0, '\x00', @p_u32=&(0x7f0000000180)=0xffff7fff}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="4dcdc7d96a766000002f000500000000e80300ff861bc9252feb8fb55c093a44d77cfee9a81370773ef34fc4639580070244fb", 0x33, 0x0, &(0x7f0000000380)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1.438933452s ago: executing program 4 (id=414): syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x902, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x161680, 0x0) r2 = dup(r0) sendfile(r2, r1, 0x0, 0xe1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x0, 0x34000}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x0) read$FUSE(r3, &(0x7f0000000a40)={0x2020}, 0x1366) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x6, 0x0, 0x7fffffff}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'bridge0\x00', 0x0}) syz_usb_connect$hid(0x4, 0x54, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000000bd28780040000102030109022400010105f8b2f694ac485fdd46bc6a500009040002000301000409210000000122000009058103000000fe00"], 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x5, 0x1) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x2000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) sendmsg$rds(r3, &(0x7f0000002c40)={&(0x7f00000005c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000940)=""/235, 0xeb}], 0x1, &(0x7f0000002c80)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x9}, &(0x7f0000000700), &(0x7f0000002a80)=0x1, 0xfffffffffffffffe, 0x7, 0x401, 0x9, 0x0, 0x95e}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000240)=""/56, 0x38}, &(0x7f0000000280), 0xe}}, @fadd={0x58, 0x114, 0x6, {{0x32e, 0x800}, &(0x7f0000002ac0)=0x1ff, &(0x7f0000002b00)=0xfffffffffffffffd, 0x9, 0x1, 0xd3ca, 0x9, 0x9, 0x8f9d}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xfffffffa}], 0xf8, 0x800}, 0x80) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f91524fc602f000e0000040000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000540)=0x20, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000002ec0)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000050c00000000000000005c2c2281940800004410000000000000000000000000000000000000110000000000000000011000000000000000000073e10344e46c2a2e40c5d53408563299da77e1a6ecd904146b3bb010b0aa165afd7afdafffac2372748c1a5a4b54edf1449f95c83278d22bef7ea596e13cf86628ffbff74c16a3a537ec44234c3973d2a10f6f93b4468578048d9eb21c55ec64f2f87ece9e4267be5f197aa9b3682eb8ffcb8239adc3ca6e439a048d4c387f26c7fdde908748dfe7fd18"], 0x98}, 0x83c2) sendmsg$sock(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000840)}, 0x4c880) 1.160764078s ago: executing program 2 (id=415): r0 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x67, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x0) 896.719823ms ago: executing program 0 (id=416): r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) unshare(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000013c0), 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7ac33883"}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0918, 0x0, '\x00', @p_u32=&(0x7f0000000180)=0xffff7fff}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="4dcdc7d96a766000002f000500000000e80300ff861bc9252feb8fb55c093a44d77cfee9a81370773ef34fc4639580070244fb", 0x33, 0x0, &(0x7f0000000380)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x43a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 671.928353ms ago: executing program 3 (id=417): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESHEX=r0], 0x102) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x1, 0x0, 0xb}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xca, &(0x7f0000000500)=""/202}, 0x90) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = dup(r1) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x28d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000000903e3ff0300000000e2ffca1b1f0000000004c00e72f7503753d08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 318.263246ms ago: executing program 0 (id=418): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000001240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_connect(0x3, 0x5cc, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x5, 0x5, 0x4, 0x40, 0xa8}, 0x19, &(0x7f0000000a80)=ANY=[]}) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000054634b00c6054790fe600102030115c8662b288709021200000000000009040000002bcc"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000740)=""/234, 0xea, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000000)=""/106, 0xfe4e, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg(r4, &(0x7f00000005c0)={0x1, {&(0x7f0000000500)=""/182, 0xb6, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000008c0)=""/174, 0xae, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0xc1}, @rumble}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2778) syz_usb_disconnect(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4a802, 0x0) 118.721026ms ago: executing program 2 (id=419): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200008f, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007f80), 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}, {&(0x7f00000004c0)=""/153, 0x99}], 0x2}, 0x0) recvmsg$unix(r5, &(0x7f0000008640)={0x0, 0x0, 0x0}, 0x40000002) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)={0x3, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x1, 0x1}}, {0x6, 0x3, 0x0, 0x0, @adapter={0x9, 0x3, 0x4, 0x8, 0xe}}, {0x100, 0x2, 0x0, 0x0, @irqchip={0x7, 0x7}}]}) 0s ago: executing program 3 (id=420): bpf$MAP_CREATE(0x0, 0x0, 0xffffff79) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @random="030720e5c63e"}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x40045304, &(0x7f0000000140)) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0), 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000001200)={'bridge0\x00', {0x2, 0x0, @broadcast}}) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r8, @ANYRESOCT=r2, @ANYRES32=r8, @ANYBLOB="00000000ffffff3c4314601370068294ff18440000040000000000000000000000185100000900000200000000000000cc8500000000000059f30000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000000002f02b34ecfe71930fb7351eed58fec1ef42628c731bc756ef649307423413eefc3b41a556a5259913ed9f1cb23bc9a16df103d905434a790c46ed3f27aabb7c8a1b3ca5c730fcae92d246112c181dc21a9039fd80b011da658ece"], &(0x7f00000003c0)='syzkaller\x00'}, 0x90) kernel console output (not intermixed with test programs): usb-dummy_hcd.3-1/input0 [ 212.772301][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 212.818571][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 213.005553][ T6879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.100712][ T5249] Bluetooth: hci2: command tx timeout [ 213.270325][ T5289] usb 2-1: USB disconnect, device number 12 [ 213.606961][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 213.761865][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 213.820625][ T5375] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 213.828347][ T5293] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 214.033424][ T5375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.067315][ T5375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.082772][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.087981][ T5375] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 214.103513][ T5375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.121167][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.143035][ T5375] usb 5-1: config 0 descriptor?? [ 214.249523][ T6836] bridge_slave_0: entered allmulticast mode [ 214.275898][ T6836] bridge_slave_0: entered promiscuous mode [ 214.374678][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.402183][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.422363][ T5249] Bluetooth: hci3: command tx timeout [ 214.439167][ T6836] bridge_slave_1: entered allmulticast mode [ 214.465783][ T6836] bridge_slave_1: entered promiscuous mode [ 214.609233][ T5375] hid-steam 0003:28DE:1142.0022: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 214.690808][ T5375] hid-steam 0003:28DE:1142.0022: Steam wireless receiver connected [ 214.795965][ T5375] hid-steam 0003:28DE:1142.0023: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 214.847296][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.869940][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.902684][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 214.902702][ T29] audit: type=1326 audit(1723111763.063:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 214.952158][ T6845] bridge_slave_0: entered allmulticast mode [ 214.959547][ T5293] usb 4-1: device descriptor read/64, error -71 [ 214.969608][ T6845] bridge_slave_0: entered promiscuous mode [ 215.040851][ T29] audit: type=1326 audit(1723111763.063:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.098908][ T29] audit: type=1326 audit(1723111763.103:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.140275][ T29] audit: type=1326 audit(1723111763.103:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.168598][ T29] audit: type=1326 audit(1723111763.103:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.191018][ T5249] Bluetooth: hci2: command tx timeout [ 215.198480][ T29] audit: type=1326 audit(1723111763.113:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.202744][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.226710][ T6886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.243326][ T29] audit: type=1326 audit(1723111763.113:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.253565][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.282233][ T29] audit: type=1326 audit(1723111763.113:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.305889][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.313228][ T5293] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 215.322194][ T5293] usb 4-1: device reset changed ep0 maxpacket size! [ 215.341054][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.350011][ T29] audit: type=1326 audit(1723111763.113:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.373226][ T8] usb 4-1: USB disconnect, device number 12 [ 215.380948][ T6845] bridge_slave_1: entered allmulticast mode [ 215.394864][ T6845] bridge_slave_1: entered promiscuous mode [ 215.402921][ T8] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 215.427744][ T29] audit: type=1326 audit(1723111763.113:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz.4.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 215.546460][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.593700][ T1070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.605382][ T1070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.620520][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 215.639764][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.681127][ T6836] team0: Port device team_slave_0 added [ 215.689890][ T6836] team0: Port device team_slave_1 added [ 215.715140][ T1070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.725744][ T1070] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.760493][ T5295] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 215.765521][ T6845] team0: Port device team_slave_0 added [ 215.808860][ T6845] team0: Port device team_slave_1 added [ 215.819263][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 215.837356][ T8] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 215.849130][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.863201][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.874955][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.880466][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.887154][ T8] usb 4-1: config 0 descriptor?? [ 215.900876][ T5288] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 215.909231][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.936066][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.949432][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 215.955436][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 215.967258][ T5295] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 215.971624][ T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 215.983651][ T5295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.983680][ T5295] usb 2-1: Product: syz [ 215.983698][ T5295] usb 2-1: Manufacturer: syz [ 215.983716][ T5295] usb 2-1: SerialNumber: syz [ 216.009574][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.016967][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.049076][ T5295] usb 2-1: config 0 descriptor?? [ 216.050506][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.128297][ T1070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.153540][ T1070] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.344232][ T1070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.361834][ T1070] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.386390][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.394072][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.424240][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.442337][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.451490][ T5249] Bluetooth: hci3: command tx timeout [ 216.466846][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.499188][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.616301][ T6924] rose0: tun_chr_ioctl cmd 1074025677 [ 216.640025][ T6924] rose0: linktype set to 825 [ 216.668573][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 216.742657][ T6836] hsr_slave_0: entered promiscuous mode [ 216.752303][ T6836] hsr_slave_1: entered promiscuous mode [ 216.759945][ T6836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.768776][ T6836] Cannot create hsr debugfs directory [ 216.810497][ T5295] usb 4-1: USB disconnect, device number 13 [ 216.919555][ T6845] hsr_slave_0: entered promiscuous mode [ 216.943423][ T6845] hsr_slave_1: entered promiscuous mode [ 216.959785][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.982058][ T6845] Cannot create hsr debugfs directory [ 217.250427][ T5249] Bluetooth: hci2: command tx timeout [ 217.403319][ T5293] usb 5-1: USB disconnect, device number 12 [ 217.416746][ T1070] bridge_slave_1: left allmulticast mode [ 217.423278][ T1070] bridge_slave_1: left promiscuous mode [ 217.429725][ T1070] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.445685][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.260'. [ 217.461724][ T5293] hid-steam 0003:28DE:1142.0022: Steam wireless receiver disconnected [ 217.477916][ T1070] bridge_slave_0: left allmulticast mode [ 217.515275][ T1070] bridge_slave_0: left promiscuous mode [ 217.540427][ T1070] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.422443][ T5295] usb 2-1: USB disconnect, device number 13 [ 218.533070][ T5249] Bluetooth: hci3: command tx timeout [ 218.558972][ T1070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.630882][ T1070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.676277][ T1070] bond0 (unregistering): Released all slaves [ 218.738019][ T1070] bond1 (unregistering): Released all slaves [ 218.871428][ T5292] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 219.100718][ T5292] usb 4-1: Using ep0 maxpacket: 16 [ 219.111650][ T5295] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 219.142423][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 219.173436][ T5292] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 219.223994][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.248152][ T5292] usb 4-1: config 0 descriptor?? [ 219.282237][ T5292] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 219.350324][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 219.368919][ T5295] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 219.401546][ T5295] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 219.416052][ T5295] usb 2-1: can't read configurations, error -61 [ 219.584555][ T5295] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.695588][ T8] usb 4-1: USB disconnect, device number 14 [ 219.818449][ T1070] hsr_slave_0: left promiscuous mode [ 219.830291][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 219.839629][ T5295] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 219.841515][ T1070] hsr_slave_1: left promiscuous mode [ 219.859934][ T5295] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 219.870056][ T5295] usb 2-1: can't read configurations, error -61 [ 219.887000][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.896274][ T5295] usb usb2-port1: attempt power cycle [ 219.910219][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.925765][ T1070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.934933][ T1070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.989643][ T1070] veth1_macvtap: left promiscuous mode [ 219.995448][ T1070] veth0_macvtap: left promiscuous mode [ 220.011206][ T1070] veth1_vlan: left promiscuous mode [ 220.016597][ T1070] veth0_vlan: left promiscuous mode [ 220.331009][ T5295] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.387779][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 220.402163][ T5295] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 220.418334][ T5295] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.426750][ T5295] usb 2-1: can't read configurations, error -61 [ 220.584887][ T5295] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 220.623296][ T5295] usb 2-1: Using ep0 maxpacket: 32 [ 220.635169][ T5295] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 220.646081][ T5295] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 220.654141][ T5292] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 220.670396][ T5295] usb 2-1: can't read configurations, error -61 [ 220.682270][ T5295] usb usb2-port1: unable to enumerate USB device [ 220.775954][ T1070] team0 (unregistering): Port device team_slave_1 removed [ 220.813343][ T1070] team0 (unregistering): Port device team_slave_0 removed [ 220.861667][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.872995][ T5292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.882908][ T5292] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 220.892246][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.911044][ T5292] usb 4-1: config 0 descriptor?? [ 221.349464][ T5292] hid-steam 0003:28DE:1142.0024: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 221.450211][ T5292] hid-steam 0003:28DE:1142.0024: Steam wireless receiver connected [ 221.501706][ T5292] hid-steam 0003:28DE:1142.0025: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 221.692558][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 221.692579][ T29] audit: type=1326 audit(1723111769.843:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 221.779862][ T29] audit: type=1326 audit(1723111769.843:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 221.802487][ T5293] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 221.832348][ T29] audit: type=1326 audit(1723111769.843:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 221.875381][ T6987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.897117][ T29] audit: type=1326 audit(1723111769.853:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 221.944786][ T29] audit: type=1326 audit(1723111769.853:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 221.987377][ T6836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.025070][ T6836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.040220][ T5293] usb 5-1: Using ep0 maxpacket: 32 [ 222.047941][ T29] audit: type=1326 audit(1723111769.853:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 222.048049][ T5293] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 222.105506][ T29] audit: type=1326 audit(1723111769.853:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 222.125767][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.178806][ T5293] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.199336][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.209710][ T29] audit: type=1326 audit(1723111769.853:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 222.262536][ T6836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.278157][ T5293] usb 5-1: config 0 descriptor?? [ 222.287575][ T6836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.307962][ T29] audit: type=1326 audit(1723111769.853:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 222.311512][ T5293] hub 5-1:0.0: bad descriptor, ignoring hub [ 222.378547][ T5293] hub 5-1:0.0: probe with driver hub failed with error -5 [ 222.379977][ T29] audit: type=1326 audit(1723111769.883:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6981 comm="syz.3.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 222.398583][ T5293] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 222.633038][ T5295] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 222.657300][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'. [ 222.925287][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.962524][ T5289] usb 5-1: USB disconnect, device number 13 [ 223.046275][ T6845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.119512][ T6845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.194188][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.218549][ T6845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.281421][ T5293] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.288640][ T5293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.333723][ T6845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.445756][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.453020][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.670243][ T5293] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 223.865832][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.884506][ T5293] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 223.924510][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.957166][ T5293] usb 5-1: Product: syz [ 223.963939][ T5293] usb 5-1: Manufacturer: syz [ 223.968595][ T5293] usb 5-1: SerialNumber: syz [ 224.010979][ T5293] usb 5-1: config 0 descriptor?? [ 224.034580][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.156090][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.259080][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.335414][ T2639] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.342670][ T2639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.361096][ T5295] usb 4-1: device descriptor read/64, error -71 [ 224.430011][ T2639] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.437234][ T2639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.534776][ T6836] veth0_vlan: entered promiscuous mode [ 224.604277][ T6836] veth1_vlan: entered promiscuous mode [ 224.650324][ T5295] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 224.672995][ T5295] usb 4-1: device reset changed ep0 maxpacket size! [ 224.693627][ T5290] usb 4-1: USB disconnect, device number 15 [ 224.731065][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.746939][ T5290] hid-steam 0003:28DE:1142.0024: Steam wireless receiver disconnected [ 224.783644][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.783649][ T6836] veth0_macvtap: entered promiscuous mode [ 224.788761][ T6836] veth1_macvtap: entered promiscuous mode [ 224.868062][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.887860][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.898988][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.915888][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.926632][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.948896][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.961589][ T5290] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 224.973334][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.999451][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.011187][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.022483][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.036426][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.047394][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.066552][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.079272][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.115730][ T6836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.126625][ T6836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.137145][ T6836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.152423][ T6836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.170733][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 225.180434][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 225.194285][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.218233][ T6845] veth0_vlan: entered promiscuous mode [ 225.224455][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.239885][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.268252][ T6845] veth1_vlan: entered promiscuous mode [ 225.279107][ T5290] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.289582][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.314433][ T5290] usb 4-1: Product: syz [ 225.318724][ T5290] usb 4-1: Manufacturer: syz [ 225.356378][ T5290] usb 4-1: SerialNumber: syz [ 225.370302][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 225.383031][ T5290] usb 4-1: config 0 descriptor?? [ 225.386244][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.405098][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.438667][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 225.438738][ T6845] veth0_macvtap: entered promiscuous mode [ 225.475928][ T6845] veth1_macvtap: entered promiscuous mode [ 225.501641][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 225.512179][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.523077][ T8] usb 2-1: Product: syz [ 225.527390][ T8] usb 2-1: Manufacturer: syz [ 225.532429][ T8] usb 2-1: SerialNumber: syz [ 225.544159][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.548337][ T8] usb 2-1: config 0 descriptor?? [ 225.560826][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.562613][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.590494][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.621634][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.633298][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.643817][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.656388][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.666891][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.678070][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.691388][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.717254][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.733531][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.747401][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.758597][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.773744][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.786924][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.803108][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.819686][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.839897][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.908285][ T6845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.923335][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.929798][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.933936][ T6845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.967609][ T6845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.979393][ T6845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.999564][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.019726][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.020796][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.330972][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.367620][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.449425][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.476475][ T8] usb 5-1: USB disconnect, device number 14 [ 226.479459][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.692480][ T7059] netlink: 'syz.2.239': attribute type 6 has an invalid length. [ 227.104267][ T5290] usb 4-1: USB disconnect, device number 16 [ 227.290206][ T5293] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 227.391576][ T7076] FAULT_INJECTION: forcing a failure. [ 227.391576][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 227.404469][ T7076] CPU: 0 UID: 0 PID: 7076 Comm: syz.3.279 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 227.415068][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 227.425131][ T7076] Call Trace: [ 227.428502][ T7076] [ 227.431440][ T7076] dump_stack_lvl+0x241/0x360 [ 227.436157][ T7076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.441386][ T7076] ? __pfx__printk+0x10/0x10 [ 227.445996][ T7076] should_fail_ex+0x3b0/0x4e0 [ 227.450679][ T7076] ? skb_clone+0x20c/0x390 [ 227.455101][ T7076] should_failslab+0xac/0x100 [ 227.459793][ T7076] ? skb_clone+0x20c/0x390 [ 227.464215][ T7076] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 227.469598][ T7076] skb_clone+0x20c/0x390 [ 227.473841][ T7076] ? dev_queue_xmit_nit+0x220/0xc10 [ 227.479112][ T7076] dev_queue_xmit_nit+0x419/0xc10 [ 227.484158][ T7076] ? dev_queue_xmit_nit+0x2b/0xc10 [ 227.489284][ T7076] ? validate_xmit_skb+0x9f9/0x1120 [ 227.494494][ T7076] dev_hard_start_xmit+0x15f/0x7e0 [ 227.499626][ T7076] ? __pfx_validate_xmit_skb+0x10/0x10 [ 227.505116][ T7076] __dev_queue_xmit+0x1b63/0x3e90 [ 227.510151][ T7076] ? kasan_save_track+0x51/0x80 [ 227.515027][ T7076] ? do_syscall_64+0xf3/0x230 [ 227.519710][ T7076] ? __dev_queue_xmit+0x2da/0x3e90 [ 227.524844][ T7076] ? __pfx___dev_queue_xmit+0x10/0x10 [ 227.530255][ T7076] ? __copy_skb_header+0x437/0x5b0 [ 227.535376][ T7076] ? __asan_memcpy+0x40/0x70 [ 227.539969][ T7076] ? __copy_skb_header+0x437/0x5b0 [ 227.545087][ T7076] ? __skb_clone+0x454/0x6c0 [ 227.549681][ T7076] ? skb_clone+0x240/0x390 [ 227.554103][ T7076] __netlink_deliver_tap+0x54d/0x7c0 [ 227.559430][ T7076] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.564635][ T7076] netlink_deliver_tap+0x19d/0x1b0 [ 227.569753][ T7076] netlink_unicast+0x7be/0x990 [ 227.574526][ T7076] ? __pfx_netlink_unicast+0x10/0x10 [ 227.579814][ T7076] ? __virt_addr_valid+0x183/0x530 [ 227.584928][ T7076] ? __check_object_size+0x49c/0x900 [ 227.590212][ T7076] ? bpf_lsm_netlink_send+0x9/0x10 [ 227.595334][ T7076] netlink_sendmsg+0x8e4/0xcb0 [ 227.600133][ T7076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.605445][ T7076] ? __import_iovec+0x536/0x820 [ 227.610306][ T7076] ? aa_sock_msg_perm+0x91/0x160 [ 227.615263][ T7076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 227.620552][ T7076] ? security_socket_sendmsg+0x87/0xb0 [ 227.626105][ T7076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.631395][ T7076] __sock_sendmsg+0x221/0x270 [ 227.636082][ T7076] ____sys_sendmsg+0x525/0x7d0 [ 227.640855][ T7076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.646157][ T7076] __sys_sendmsg+0x2b0/0x3a0 [ 227.650756][ T7076] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.655864][ T7076] ? vfs_write+0x7c4/0xc90 [ 227.660319][ T7076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.666651][ T7076] ? do_syscall_64+0x100/0x230 [ 227.671424][ T7076] ? do_syscall_64+0xb6/0x230 [ 227.676109][ T7076] do_syscall_64+0xf3/0x230 [ 227.680631][ T7076] ? clear_bhb_loop+0x35/0x90 [ 227.685331][ T7076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.691261][ T7076] RIP: 0033:0x7f432db779f9 [ 227.695673][ T7076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.715281][ T7076] RSP: 002b:00007f432e937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.723701][ T7076] RAX: ffffffffffffffda RBX: 00007f432dd05f80 RCX: 00007f432db779f9 [ 227.731675][ T7076] RDX: 0000000000000000 RSI: 0000000020001540 RDI: 0000000000000006 [ 227.739645][ T7076] RBP: 00007f432e937090 R08: 0000000000000000 R09: 0000000000000000 [ 227.747630][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.755601][ T7076] R13: 0000000000000000 R14: 00007f432dd05f80 R15: 00007f432de2fa38 [ 227.763585][ T7076] [ 227.809129][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 227.956066][ T5243] usb 2-1: USB disconnect, device number 18 [ 227.974128][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 228.047016][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 228.087457][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.145284][ T5293] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.185808][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.228935][ T5293] usb 5-1: config 0 descriptor?? [ 228.253428][ T7068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 228.540983][ T5243] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.556081][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 228.740409][ T5243] usb 2-1: Using ep0 maxpacket: 32 [ 228.752882][ T5243] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 228.801958][ T5243] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.827000][ T5293] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 228.870815][ T5293] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 228.886309][ T5243] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.923684][ T5293] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 228.939162][ T5243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.978044][ T5243] usb 2-1: config 0 descriptor?? [ 229.009327][ T5243] hub 2-1:0.0: bad descriptor, ignoring hub [ 229.038971][ T5243] hub 2-1:0.0: probe with driver hub failed with error -5 [ 229.074573][ T5243] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 229.195708][ T7072] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 229.234895][ T7072] ALSA: mixer_oss: invalid OSS volume '' [ 229.475268][ T7086] rose0: tun_chr_ioctl cmd 1074025677 [ 229.500966][ T7086] rose0: linktype set to 825 [ 229.693339][ T5290] usb 2-1: USB disconnect, device number 19 [ 230.352199][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 230.400386][ T5243] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 230.582624][ T5243] usb 5-1: device descriptor read/64, error -32 [ 230.710695][ T5288] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 230.880342][ T5243] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 230.941570][ T5288] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 230.965977][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.995185][ T5288] usb 1-1: Product: syz [ 231.007610][ T5288] usb 1-1: Manufacturer: syz [ 231.028605][ T5288] usb 1-1: SerialNumber: syz [ 231.039556][ T5288] usb 1-1: config 0 descriptor?? [ 231.060320][ T5243] usb 5-1: device descriptor read/64, error -32 [ 231.360436][ T5243] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 231.434824][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.479298][ T5243] usb 5-1: device descriptor read/8, error -71 [ 231.660331][ T5291] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 231.724573][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.734066][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.824041][ T5292] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.866797][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 231.872282][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 231.872332][ T5291] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 231.872359][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.877329][ T5291] usb 4-1: config 0 descriptor?? [ 231.884021][ T5291] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 232.000358][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 232.002435][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.002473][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 232.002505][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 232.012020][ T5292] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.012055][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.012080][ T5292] usb 2-1: Product: syz [ 232.012108][ T5292] usb 2-1: Manufacturer: syz [ 232.012126][ T5292] usb 2-1: SerialNumber: syz [ 232.014806][ T5292] usb 2-1: config 0 descriptor?? [ 232.118241][ T5292] usb 4-1: USB disconnect, device number 17 [ 232.231652][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.286930][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.455444][ T5293] usb 5-1: USB disconnect, device number 15 [ 233.162234][ T5293] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 233.399096][ T5292] usb 1-1: USB disconnect, device number 21 [ 233.409521][ T5293] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 233.472944][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.538955][ T5293] usb 4-1: config 0 descriptor?? [ 233.573562][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 233.585499][ T5293] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 234.379103][ T5293] cpia1 4-1:0.0: only firmware version 1 is supported (got: 4) [ 234.470224][ T5292] usb 2-1: USB disconnect, device number 20 [ 234.640210][ T5291] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.842275][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.880207][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.890055][ T5291] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 234.920188][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.941225][ T5291] usb 5-1: config 0 descriptor?? [ 234.962690][ T5292] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.176569][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.223520][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 235.295017][ T5292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 235.359214][ T5292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.396338][ T5292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.413961][ T5291] hid-steam 0003:28DE:1142.0027: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 235.426352][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.440711][ T5292] usb 2-1: config 0 descriptor?? [ 235.453248][ T7197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 235.500210][ T5291] hid-steam 0003:28DE:1142.0027: Steam wireless receiver connected [ 235.559408][ T5291] hid-steam 0003:28DE:1142.0028: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 235.847954][ T29] audit: type=1326 audit(1723111784.003:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 235.890514][ T29] audit: type=1326 audit(1723111784.003:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 235.925548][ T29] audit: type=1326 audit(1723111784.003:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 235.957396][ T5292] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 235.958921][ T29] audit: type=1326 audit(1723111784.003:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 235.990219][ T29] audit: type=1326 audit(1723111784.003:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.004408][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.022561][ T29] audit: type=1326 audit(1723111784.003:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.022629][ T29] audit: type=1326 audit(1723111784.003:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.092974][ T5292] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 236.123711][ T29] audit: type=1326 audit(1723111784.003:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.149014][ T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 236.183787][ T5243] usb 2-1: USB disconnect, device number 21 [ 236.235223][ T29] audit: type=1326 audit(1723111784.003:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.304755][ T29] audit: type=1326 audit(1723111784.003:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7193 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 236.360211][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 236.368238][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 236.390783][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.413986][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 236.437153][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.463835][ T8] usb 1-1: config 0 descriptor?? [ 236.476575][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 236.479349][ T5292] usb 4-1: USB disconnect, device number 18 [ 236.509987][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 236.546676][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 236.680382][ T2639] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 237.020348][ T5243] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 237.030521][ T5292] usb 1-1: USB disconnect, device number 22 [ 237.234574][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.253834][ T5243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.276244][ T5243] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 237.299048][ T5243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.339219][ T5243] usb 4-1: config 0 descriptor?? [ 237.682019][ T7213] dccp_close: ABORT with 32 bytes unread [ 237.823264][ T7221] fuse: Unknown parameter 'fD' [ 237.833940][ T5243] hid-steam 0003:28DE:1142.002A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 237.960920][ T5243] hid-steam 0003:28DE:1142.002A: Steam wireless receiver connected [ 237.991177][ T5243] hid-steam 0003:28DE:1142.002B: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 238.371198][ T5243] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 238.391808][ T5291] usb 5-1: USB disconnect, device number 16 [ 238.431276][ T5291] hid-steam 0003:28DE:1142.0027: Steam wireless receiver disconnected [ 238.449053][ T5293] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.512613][ T7212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.588079][ T5243] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 238.615283][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.640246][ T5243] usb 2-1: Product: syz [ 238.655659][ T5243] usb 2-1: Manufacturer: syz [ 238.663473][ T5293] usb 1-1: Using ep0 maxpacket: 8 [ 238.673436][ T5243] usb 2-1: SerialNumber: syz [ 238.682639][ T5293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.721921][ T5243] usb 2-1: config 0 descriptor?? [ 238.743227][ T5293] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 238.781404][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 238.818382][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 238.839988][ T5293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 238.910769][ T5293] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 238.929712][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.930316][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 238.952431][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.963971][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.979039][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.983914][ T5293] usb 1-1: Product: syz [ 238.995838][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.004110][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.024336][ T5293] usb 1-1: Manufacturer: syz [ 239.049131][ T5293] usb 1-1: SerialNumber: syz [ 239.062996][ T5293] usb 1-1: config 0 descriptor?? [ 239.150671][ T5243] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 239.194630][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.220039][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.304991][ T5293] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 239.312219][ T5293] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 239.365768][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.459197][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.540689][ T5292] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 239.568742][ T5293] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 239.579442][ T5293] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 239.592578][ T5293] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 239.646061][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.730400][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 239.762540][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.846372][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.860957][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 239.893137][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 239.926371][ T5292] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.942798][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.961341][ T5292] usb 5-1: Product: syz [ 239.969329][ T5292] usb 5-1: Manufacturer: syz [ 239.974742][ T5292] usb 5-1: SerialNumber: syz [ 239.990998][ T5292] usb 5-1: config 0 descriptor?? [ 240.108998][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.117495][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.120664][ T5293] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 240.124915][ T7233] bridge_slave_0: entered allmulticast mode [ 240.140940][ T7233] bridge_slave_0: entered promiscuous mode [ 240.144501][ T5293] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 240.158584][ T5293] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 240.170559][ T5293] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 240.200741][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.222946][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.228207][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.245889][ T7233] bridge_slave_1: entered allmulticast mode [ 240.253479][ T7233] bridge_slave_1: entered promiscuous mode [ 240.261517][ T35] bridge_slave_1: left allmulticast mode [ 240.267194][ T35] bridge_slave_1: left promiscuous mode [ 240.273516][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.280245][ T5243] usb 4-1: device descriptor read/64, error -71 [ 240.288727][ T35] bridge_slave_0: left allmulticast mode [ 240.298353][ T7237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.300416][ T35] bridge_slave_0: left promiscuous mode [ 240.320425][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.576084][ T5243] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 240.605280][ T5243] usb 4-1: device reset changed ep0 maxpacket size! [ 240.628579][ T8] usb 4-1: USB disconnect, device number 19 [ 240.656973][ T8] hid-steam 0003:28DE:1142.002A: Steam wireless receiver disconnected [ 240.840683][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.981019][ T5293] usb 2-1: USB disconnect, device number 22 [ 241.017090][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.060196][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 241.077549][ T8] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 241.097014][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.108147][ T54] Bluetooth: hci2: command tx timeout [ 241.114625][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.114654][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.116219][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.189610][ T35] bond0 (unregistering): Released all slaves [ 241.233276][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.281376][ T2639] usb 1-1: USB disconnect, device number 23 [ 241.326865][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.346913][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 241.353130][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.431428][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.466286][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.501938][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.526051][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.551540][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.562667][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.578413][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.601704][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.644930][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.669061][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.693385][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 241.727612][ T8] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 241.759952][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.775519][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 241.790183][ T8] usb 4-1: Product: syz [ 241.819009][ T8] usb 4-1: Manufacturer: syz [ 241.846016][ T8] usb 4-1: SerialNumber: syz [ 241.882732][ T8] usb 4-1: config 0 descriptor?? [ 242.212225][ T5293] usb 5-1: USB disconnect, device number 17 [ 242.329873][ T7233] team0: Port device team_slave_0 added [ 242.554613][ T7233] team0: Port device team_slave_1 added [ 242.738546][ T8] usb 4-1: USB disconnect, device number 20 [ 242.748780][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 242.866980][ T35] hsr_slave_0: left promiscuous mode [ 242.938899][ T35] hsr_slave_1: left promiscuous mode [ 242.999101][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.092701][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.132296][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.161068][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.171209][ T5249] Bluetooth: hci2: command tx timeout [ 243.177248][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.187245][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.198585][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.213287][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.221489][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 243.229831][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.340455][ T35] veth1_macvtap: left promiscuous mode [ 243.346409][ T35] veth0_macvtap: left promiscuous mode [ 243.356747][ T35] veth1_vlan: left promiscuous mode [ 243.362454][ T35] veth0_vlan: left promiscuous mode [ 244.038734][ T35] team0 (unregistering): Port device team_slave_1 removed [ 244.107810][ T35] team0 (unregistering): Port device team_slave_0 removed [ 244.938276][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.955153][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.982270][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.154476][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.161782][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.199489][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.225795][ T2639] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.251960][ T54] Bluetooth: hci2: command tx timeout [ 245.333693][ T54] Bluetooth: hci3: command tx timeout [ 245.411977][ T7233] hsr_slave_0: entered promiscuous mode [ 245.437321][ T7233] hsr_slave_1: entered promiscuous mode [ 245.442445][ T2639] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.456464][ T2639] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.466332][ T2639] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 245.475613][ T2639] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.485407][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.491490][ T2639] usb 5-1: config 0 descriptor?? [ 245.505800][ T7233] Cannot create hsr debugfs directory [ 245.520228][ T5292] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 245.745431][ T5292] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 245.761804][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.769871][ T5292] usb 2-1: Product: syz [ 245.776827][ T5292] usb 2-1: Manufacturer: syz [ 245.781665][ T5292] usb 2-1: SerialNumber: syz [ 245.796978][ T5292] usb 2-1: config 0 descriptor?? [ 245.966016][ T2639] hid-steam 0003:28DE:1142.002C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 246.070410][ T2639] hid-steam 0003:28DE:1142.002C: Steam wireless receiver connected [ 246.094059][ T2639] hid-steam 0003:28DE:1142.002D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 246.423401][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.486761][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 246.486781][ T29] audit: type=1326 audit(1723111794.643:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.517478][ T29] audit: type=1326 audit(1723111794.643:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.567187][ T29] audit: type=1326 audit(1723111794.643:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.595395][ T29] audit: type=1326 audit(1723111794.643:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.626225][ T7277] chnl_net:caif_netlink_parms(): no params data found [ 246.646614][ T29] audit: type=1326 audit(1723111794.653:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.686103][ T29] audit: type=1326 audit(1723111794.653:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.719313][ T29] audit: type=1326 audit(1723111794.653:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.755645][ T29] audit: type=1326 audit(1723111794.653:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.757930][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.786339][ T29] audit: type=1326 audit(1723111794.653:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.815328][ T29] audit: type=1326 audit(1723111794.653:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7290 comm="syz.4.316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 246.887364][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.005004][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.238089][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.252637][ T2639] usb 5-1: reset high-speed USB device number 18 using dummy_hcd [ 247.330626][ T54] Bluetooth: hci2: command tx timeout [ 247.410267][ T54] Bluetooth: hci3: command tx timeout [ 247.501556][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.509632][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.517235][ T7277] bridge_slave_0: entered allmulticast mode [ 247.524545][ T8] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 247.539419][ T7277] bridge_slave_0: entered promiscuous mode [ 247.557970][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.568044][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.578768][ T7277] bridge_slave_1: entered allmulticast mode [ 247.597464][ T7277] bridge_slave_1: entered promiscuous mode [ 247.732690][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.755479][ T7277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.771651][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.804360][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 247.833046][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.856790][ T8] usb 4-1: config 0 descriptor?? [ 247.867781][ T7277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.029251][ T7277] team0: Port device team_slave_0 added [ 248.123048][ T7277] team0: Port device team_slave_1 added [ 248.178886][ T5295] usb 2-1: USB disconnect, device number 23 [ 248.193431][ T35] bridge_slave_1: left allmulticast mode [ 248.199160][ T35] bridge_slave_1: left promiscuous mode [ 248.213819][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.237605][ T35] bridge_slave_0: left allmulticast mode [ 248.250467][ T35] bridge_slave_0: left promiscuous mode [ 248.259025][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.285119][ T8] hid-steam 0003:28DE:1142.002E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 248.410159][ T8] hid-steam 0003:28DE:1142.002E: Steam wireless receiver connected [ 248.474946][ T8] hid-steam 0003:28DE:1142.002F: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 248.488789][ T7344] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 248.495424][ T7344] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.511411][ T7344] vhci_hcd vhci_hcd.0: Device attached [ 248.870629][ T5295] usb 18-1: SetAddress Request (2) to port 0 [ 248.883003][ T7353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.908772][ T5295] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 248.938067][ T5292] usb 5-1: USB disconnect, device number 18 [ 248.991776][ T5292] hid-steam 0003:28DE:1142.002C: Steam wireless receiver disconnected [ 249.044325][ T7347] vhci_hcd: connection reset by peer [ 249.054943][ T64] vhci_hcd: stop threads [ 249.074589][ T64] vhci_hcd: release socket [ 249.103009][ T64] vhci_hcd: disconnect device [ 249.491723][ T54] Bluetooth: hci3: command tx timeout [ 249.605976][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.615133][ T8] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 249.632702][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.667769][ T35] bond0 (unregistering): Released all slaves [ 249.785702][ T7233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.867977][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.877485][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.906598][ T7277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.945963][ T7233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.972924][ T7233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.038232][ T7277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.047884][ T7277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.074590][ T7277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.086012][ T5304] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 250.099227][ T7233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.258363][ T7277] hsr_slave_0: entered promiscuous mode [ 250.273096][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 250.278802][ T7277] hsr_slave_1: entered promiscuous mode [ 250.286491][ T7277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.294759][ T5304] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.294834][ T7277] Cannot create hsr debugfs directory [ 250.316046][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 250.333439][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 250.349909][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 250.360454][ T5304] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.379865][ T35] hsr_slave_0: left promiscuous mode [ 250.389525][ T35] hsr_slave_1: left promiscuous mode [ 250.396075][ T5304] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 250.405769][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.413568][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.417204][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 250.430499][ T5304] usb 2-1: Product: syz [ 250.434866][ T5304] usb 2-1: Manufacturer: syz [ 250.436310][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.439899][ T5304] usb 2-1: SerialNumber: syz [ 250.461048][ T5304] usb 2-1: config 0 descriptor?? [ 250.464813][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.505137][ T35] veth1_macvtap: left promiscuous mode [ 250.510920][ T35] veth0_macvtap: left promiscuous mode [ 250.516810][ T35] veth1_vlan: left promiscuous mode [ 250.523168][ T35] veth0_vlan: left promiscuous mode [ 250.711040][ T5304] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 250.725172][ T5304] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 250.911871][ T5304] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 250.926798][ T5304] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 250.940501][ T5304] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 251.171196][ T7373] kvm: pic: non byte write [ 251.317582][ T5292] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 251.342585][ T5304] usb 2-1: USB disconnect, device number 24 [ 251.504960][ T5292] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 251.514518][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.524384][ T35] team0 (unregistering): Port device team_slave_1 removed [ 251.530215][ T5292] usb 5-1: Product: syz [ 251.538512][ T5292] usb 5-1: Manufacturer: syz [ 251.544695][ T5292] usb 5-1: SerialNumber: syz [ 251.556504][ T5292] usb 5-1: config 0 descriptor?? [ 251.590388][ T54] Bluetooth: hci3: command tx timeout [ 251.606895][ T35] team0 (unregistering): Port device team_slave_0 removed [ 251.893420][ T5243] usb 4-1: USB disconnect, device number 21 [ 251.905125][ T5243] hid-steam 0003:28DE:1142.002E: Steam wireless receiver disconnected [ 252.046825][ T7381] FAULT_INJECTION: forcing a failure. [ 252.046825][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 252.060507][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.1.336 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 252.071135][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 252.081239][ T7381] Call Trace: [ 252.084537][ T7381] [ 252.087465][ T7381] dump_stack_lvl+0x241/0x360 [ 252.092170][ T7381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.097405][ T7381] ? __pfx__printk+0x10/0x10 [ 252.102025][ T7381] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 252.107490][ T7381] ? __pfx___might_resched+0x10/0x10 [ 252.112794][ T7381] should_fail_ex+0x3b0/0x4e0 [ 252.117492][ T7381] should_failslab+0xac/0x100 [ 252.122178][ T7381] ? alloc_pipe_info+0xeb/0x4d0 [ 252.127043][ T7381] __kmalloc_cache_noprof+0x6c/0x2c0 [ 252.132441][ T7381] alloc_pipe_info+0xeb/0x4d0 [ 252.137169][ T7381] splice_direct_to_actor+0xaac/0xc90 [ 252.142574][ T7381] ? aa_file_perm+0x3ef/0xf60 [ 252.147268][ T7381] ? __pfx_aa_file_perm+0x10/0x10 [ 252.152308][ T7381] ? __pfx_direct_splice_actor+0x10/0x10 [ 252.157979][ T7381] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 252.163895][ T7381] ? __fget_files+0x29/0x470 [ 252.168493][ T7381] ? __pfx_lock_release+0x10/0x10 [ 252.173541][ T7381] do_splice_direct+0x28c/0x3e0 [ 252.178429][ T7381] ? __pfx_do_splice_direct+0x10/0x10 [ 252.183822][ T7381] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 252.189734][ T7381] ? rw_verify_area+0x1d2/0x6b0 [ 252.194609][ T7381] do_sendfile+0x56d/0xe20 [ 252.199052][ T7381] ? __pfx_do_sendfile+0x10/0x10 [ 252.204017][ T7381] __se_sys_sendfile64+0x17c/0x1e0 [ 252.209165][ T7381] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 252.214821][ T7381] ? do_syscall_64+0x100/0x230 [ 252.219607][ T7381] ? do_syscall_64+0xb6/0x230 [ 252.224300][ T7381] do_syscall_64+0xf3/0x230 [ 252.228819][ T7381] ? clear_bhb_loop+0x35/0x90 [ 252.233510][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.239422][ T7381] RIP: 0033:0x7f645f3779f9 [ 252.243850][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.263468][ T7381] RSP: 002b:00007f6460064038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 252.271893][ T7381] RAX: ffffffffffffffda RBX: 00007f645f505f80 RCX: 00007f645f3779f9 [ 252.279869][ T7381] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 252.287843][ T7381] RBP: 00007f6460064090 R08: 0000000000000000 R09: 0000000000000000 [ 252.295819][ T7381] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 252.303803][ T7381] R13: 0000000000000000 R14: 00007f645f505f80 R15: 00007f645f62fa38 [ 252.311801][ T7381] [ 253.272327][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.352185][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.391761][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.398969][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.459541][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.466854][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.638009][ T7277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.674984][ T7277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.706730][ T7277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.746028][ T7277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.888299][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.973720][ T8] usb 5-1: USB disconnect, device number 19 [ 254.051923][ T5295] usb 18-1: device descriptor read/8, error -110 [ 254.120477][ T5293] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 254.146589][ T7233] veth0_vlan: entered promiscuous mode [ 254.233682][ T7233] veth1_vlan: entered promiscuous mode [ 254.295787][ T7277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.356599][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.395276][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.415203][ T5293] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 254.432092][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.435334][ T7233] veth0_macvtap: entered promiscuous mode [ 254.446595][ T7430] usb usb9: usbfs: process 7430 (syz.1.347) did not claim interface 0 before use [ 254.467462][ T5293] usb 4-1: config 0 descriptor?? [ 254.484429][ T5295] usb usb18-port1: attempt power cycle [ 254.512669][ T7277] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.529455][ T7233] veth1_macvtap: entered promiscuous mode [ 254.578377][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.585631][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.634759][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.652803][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.669027][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.708289][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.728137][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.751351][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.779813][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.818612][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.825839][ T5290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.917999][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.922522][ T5293] hid-steam 0003:28DE:1142.0030: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 254.946968][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.988004][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.018495][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.038921][ T5293] hid-steam 0003:28DE:1142.0030: Steam wireless receiver connected [ 255.044705][ T7233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.073404][ T5293] hid-steam 0003:28DE:1142.0031: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 255.080149][ T7233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.125448][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.158656][ T7233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.171961][ T5295] usb usb18-port1: unable to enumerate USB device [ 255.206868][ T7233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.218154][ T7233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.232740][ T7233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.232827][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 255.232851][ T29] audit: type=1326 audit(1723111803.363:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.347196][ T29] audit: type=1326 audit(1723111803.363:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.448156][ T7416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.470157][ T29] audit: type=1326 audit(1723111803.363:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.561664][ T29] audit: type=1326 audit(1723111803.363:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.624420][ T29] audit: type=1326 audit(1723111803.363:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.685644][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.690019][ T7277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.713963][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.727206][ T29] audit: type=1326 audit(1723111803.363:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.808738][ T29] audit: type=1326 audit(1723111803.363:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.875711][ T29] audit: type=1326 audit(1723111803.373:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 255.933511][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.957568][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.967864][ T29] audit: type=1326 audit(1723111803.373:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 256.002696][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016806][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.049012][ T29] audit: type=1326 audit(1723111803.393:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7415 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f432db779f9 code=0x7ffc0000 [ 256.113605][ T7277] veth0_vlan: entered promiscuous mode [ 256.141511][ T5293] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 256.167137][ T7277] veth1_vlan: entered promiscuous mode [ 256.315040][ T7277] veth0_macvtap: entered promiscuous mode [ 256.348242][ T7457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.305'. [ 256.386845][ T7277] veth1_macvtap: entered promiscuous mode [ 256.475712][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.506687][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.528401][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.566629][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.592607][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.618256][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.641541][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.666253][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.709391][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.761172][ T7468] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.305'. [ 256.792920][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.850542][ T7468] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.305'. [ 256.891694][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.917081][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.958428][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.006345][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.034436][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.060243][ T7277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.080142][ T7277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.092759][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 257.112533][ T7277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.165743][ T7460] syz.2.305: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 257.198462][ T7277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.221445][ T7277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.221946][ T7460] CPU: 1 UID: 0 PID: 7460 Comm: syz.2.305 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 257.232634][ T7277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.241116][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 257.241135][ T7460] Call Trace: [ 257.241145][ T7460] [ 257.241157][ T7460] dump_stack_lvl+0x241/0x360 [ 257.258104][ T7277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.259887][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.284742][ T7460] ? __pfx__printk+0x10/0x10 [ 257.289427][ T7460] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 257.295891][ T7460] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 257.302438][ T7460] warn_alloc+0x278/0x410 [ 257.306815][ T7460] ? __pfx_warn_alloc+0x10/0x10 [ 257.311711][ T7460] ? vb2_vmalloc_alloc+0xf2/0x340 [ 257.316775][ T7460] ? __get_vm_area_node+0x23d/0x270 [ 257.322021][ T7460] __vmalloc_node_range_noprof+0x69f/0x1460 [ 257.327975][ T7460] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.334342][ T7460] ? __kasan_kmalloc+0x98/0xb0 [ 257.339126][ T7460] ? vb2_vmalloc_alloc+0xb5/0x340 [ 257.344167][ T7460] vmalloc_user_noprof+0x74/0x80 [ 257.349113][ T7460] ? vb2_vmalloc_alloc+0xf2/0x340 [ 257.354174][ T7460] vb2_vmalloc_alloc+0xf2/0x340 [ 257.359071][ T7460] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 257.364636][ T7460] __vb2_queue_alloc+0xa0f/0x16f0 [ 257.369702][ T7460] vb2_core_reqbufs+0xd2e/0x17c0 [ 257.374689][ T7460] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 257.380109][ T7460] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 257.385528][ T7460] __video_do_ioctl+0xc26/0xde0 [ 257.390420][ T7460] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.395898][ T7460] ? __might_fault+0xc6/0x120 [ 257.400597][ T7460] video_usercopy+0x89b/0x1180 [ 257.405398][ T7460] ? __pfx___video_do_ioctl+0x10/0x10 [ 257.410808][ T7460] ? __pfx_video_usercopy+0x10/0x10 [ 257.416054][ T7460] ? __fget_files+0x29/0x470 [ 257.420665][ T7460] ? __fget_files+0x3f6/0x470 [ 257.425352][ T7460] ? __fget_files+0x29/0x470 [ 257.429963][ T7460] v4l2_ioctl+0x18c/0x1e0 [ 257.434308][ T7460] ? __pfx_v4l2_ioctl+0x10/0x10 [ 257.439204][ T7460] __se_sys_ioctl+0xfc/0x170 [ 257.443897][ T7460] do_syscall_64+0xf3/0x230 [ 257.448430][ T7460] ? clear_bhb_loop+0x35/0x90 [ 257.453116][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.459045][ T7460] RIP: 0033:0x7f5b665779f9 [ 257.463471][ T7460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.483177][ T7460] RSP: 002b:00007f5b672c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.491602][ T7460] RAX: ffffffffffffffda RBX: 00007f5b66706058 RCX: 00007f5b665779f9 [ 257.499575][ T7460] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 257.507546][ T7460] RBP: 00007f5b665e58ee R08: 0000000000000000 R09: 0000000000000000 [ 257.515521][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.523498][ T7460] R13: 0000000000000000 R14: 00007f5b66706058 R15: 00007f5b6682fa38 [ 257.531490][ T7460] [ 257.591788][ T7460] Mem-Info: [ 257.605544][ T7460] active_anon:8854 inactive_anon:0 isolated_anon:0 [ 257.605544][ T7460] active_file:2283 inactive_file:38255 isolated_file:0 [ 257.605544][ T7460] unevictable:768 dirty:155 writeback:0 [ 257.605544][ T7460] slab_reclaimable:8993 slab_unreclaimable:94884 [ 257.605544][ T7460] mapped:28079 shmem:5339 pagetables:904 [ 257.605544][ T7460] sec_pagetables:0 bounce:0 [ 257.605544][ T7460] kernel_misc_reclaimable:0 [ 257.605544][ T7460] free:1381879 free_pcp:1099 free_cma:0 [ 257.650741][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.709964][ T7460] Node 0 active_anon:36116kB inactive_anon:0kB active_file:9132kB inactive_file:152940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112316kB dirty:616kB writeback:0kB shmem:20620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10300kB pagetables:3616kB sec_pagetables:0kB all_unreclaimable? no [ 257.750220][ T7460] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 257.797921][ T7460] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.801023][ T8] usb 4-1: USB disconnect, device number 22 [ 257.841424][ T7460] lowmem_reserve[]: 0 2561 2562 0 0 [ 257.853258][ T7460] Node 0 DMA32 free:1563564kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:37072kB inactive_anon:0kB active_file:9132kB inactive_file:151624kB unevictable:1536kB writepending:612kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:3548kB local_pcp:1720kB free_cma:0kB [ 257.916042][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.944710][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.978383][ T7460] lowmem_reserve[]: 0 0 1 0 0 [ 257.992271][ T8] hid-steam 0003:28DE:1142.0030: Steam wireless receiver disconnected [ 258.020834][ T7460] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 258.052345][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.077528][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.125775][ T7460] lowmem_reserve[]: 0 0 0 0 0 [ 258.153145][ T7460] Node 1 Normal free:3945512kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:0kB free_cma:0kB [ 258.182218][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.197382][ T7460] lowmem_reserve[]: 0 0 0 0 0 [ 258.216389][ T7460] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.274155][ T7460] Node 0 DMA32: 1*4kB (U) 2*8kB (UM) 1*16kB (E) 38*32kB (U) 54*64kB (UM) 36*128kB (UME) 134*256kB (UME) 59*512kB (UM) 16*1024kB (UE) 1*2048kB (E) 359*4096kB (UM) = 1562724kB [ 258.301733][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 258.326824][ T7460] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 258.353140][ T7460] Node 1 Normal: 1*4kB (U) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 0*64kB 0*128kB 4*256kB (UM) 4*512kB (UM) 4*1024kB (U) 3*2048kB (U) 960*4096kB (M) = 3945564kB [ 258.416879][ T7460] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.455389][ T7460] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.469580][ T7460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.486174][ T7460] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.505978][ T7460] 44699 total pagecache pages [ 258.512875][ T7460] 0 pages in swap cache [ 258.525374][ T7460] Free swap = 124984kB [ 258.529602][ T7460] Total swap = 124996kB [ 258.536919][ T7460] 2097051 pages RAM [ 258.573103][ T7460] 0 pages HighMem/MovableOnly [ 258.579119][ T7460] 402772 pages reserved [ 258.589559][ T7460] 0 pages cma reserved [ 258.702429][ T8] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 258.820512][ T5292] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 258.890321][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 258.902218][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 258.925751][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.940513][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.009318][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.025054][ T5292] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 259.027464][ T8] usb 1-1: config 0 descriptor?? [ 259.047948][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.050394][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 259.058253][ T5290] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.073678][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 259.088471][ T5292] usb 2-1: Product: syz [ 259.096035][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 259.106017][ T5292] usb 2-1: Manufacturer: syz [ 259.111227][ T5292] usb 2-1: SerialNumber: syz [ 259.121513][ T5292] usb 2-1: config 0 descriptor?? [ 259.292375][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.323269][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.370486][ T5290] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 259.390161][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.431352][ T5290] usb 5-1: config 0 descriptor?? [ 259.540578][ T7482] rose0: tun_chr_ioctl cmd 1074025677 [ 259.560546][ T7482] rose0: linktype set to 825 [ 259.744816][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 259.760735][ T5292] usb 1-1: USB disconnect, device number 24 [ 259.879593][ T5290] hid-steam 0003:28DE:1142.0032: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 259.980194][ T5290] hid-steam 0003:28DE:1142.0032: Steam wireless receiver connected [ 259.997658][ T5290] hid-steam 0003:28DE:1142.0033: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 260.050236][ T5243] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.244972][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 260.244993][ T29] audit: type=1326 audit(1723111808.403:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.295248][ T5243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.315055][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 260.337454][ T5243] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 260.359946][ T29] audit: type=1326 audit(1723111808.403:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.382135][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.395218][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 260.429474][ T5243] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 260.439875][ T29] audit: type=1326 audit(1723111808.403:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.467112][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.477040][ T5243] usb 3-1: Product: syz [ 260.484712][ T5243] usb 3-1: Manufacturer: syz [ 260.489444][ T5243] usb 3-1: SerialNumber: syz [ 260.494690][ T29] audit: type=1326 audit(1723111808.403:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.516868][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.538618][ T29] audit: type=1326 audit(1723111808.403:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.569924][ T5243] usb 3-1: config 0 descriptor?? [ 260.577778][ T5243] usb 3-1: ucan: probing device on interface #0 [ 260.588329][ T7487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.598525][ T5243] usb 3-1: ucan: invalid endpoint configuration [ 260.599120][ T29] audit: type=1326 audit(1723111808.403:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.613910][ T5243] usb 3-1: ucan: probe failed; try to update the device firmware [ 260.663027][ T29] audit: type=1326 audit(1723111808.403:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.703960][ T29] audit: type=1326 audit(1723111808.413:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.727637][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 260.736913][ T5304] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 260.736964][ T29] audit: type=1326 audit(1723111808.413:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.771122][ T29] audit: type=1326 audit(1723111808.413:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 260.868586][ T5290] usb 3-1: USB disconnect, device number 15 [ 260.934946][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.949535][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.967085][ T5304] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 260.978658][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.018353][ T5304] usb 1-1: config 0 descriptor?? [ 261.160190][ T5292] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 261.464393][ T2639] usb 2-1: USB disconnect, device number 25 [ 261.473787][ T5304] hid-steam 0003:28DE:1142.0034: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 261.571034][ T5304] hid-steam 0003:28DE:1142.0034: Steam wireless receiver connected [ 261.792212][ T5304] hid-steam 0003:28DE:1142.0035: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 262.141685][ T7526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.252038][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 262.275880][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 262.607440][ T7539] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.365'. [ 262.619820][ T7540] fuse: Bad value for 'fd' [ 262.637531][ T7539] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.365'. [ 262.680548][ T5304] usb 1-1: reset high-speed USB device number 25 using dummy_hcd [ 262.822045][ T5291] usb 5-1: USB disconnect, device number 20 [ 262.853429][ T5291] hid-steam 0003:28DE:1142.0032: Steam wireless receiver disconnected [ 263.365693][ T7549] fuse: Bad value for 'fd' [ 263.702432][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 263.984734][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 264.050357][ T5243] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.269754][ T5243] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 264.309804][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.326445][ T5243] usb 3-1: Product: syz [ 264.341834][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.342534][ T5293] usb 1-1: USB disconnect, device number 25 [ 264.358740][ T5243] usb 3-1: Manufacturer: syz [ 264.366880][ T5243] usb 3-1: SerialNumber: syz [ 264.401016][ T5243] usb 3-1: config 0 descriptor?? [ 264.409361][ T5293] hid-steam 0003:28DE:1142.0034: Steam wireless receiver disconnected [ 264.691775][ T2639] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 264.903877][ T2639] usb 4-1: Using ep0 maxpacket: 16 [ 264.917815][ T2639] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.980273][ T2639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.998869][ T2639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.032872][ T2639] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.043122][ T2639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.058928][ T2639] usb 4-1: Product: syz [ 265.067345][ T2639] usb 4-1: Manufacturer: syz [ 265.076392][ T2639] usb 4-1: SerialNumber: syz [ 265.093759][ T2639] usb 4-1: config 0 descriptor?? [ 265.192575][ T5243] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 265.240884][ T5291] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 265.354143][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.409776][ T5243] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 265.423958][ T5243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.433482][ T7569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.435429][ T5243] usb 5-1: Product: syz [ 265.446191][ T5291] usb 2-1: Using ep0 maxpacket: 8 [ 265.448345][ T5243] usb 5-1: Manufacturer: syz [ 265.466921][ T5243] usb 5-1: SerialNumber: syz [ 265.476389][ T5291] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 265.477475][ T5243] usb 5-1: config 0 descriptor?? [ 265.491433][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.503786][ T5291] usb 2-1: Product: syz [ 265.512592][ T5291] usb 2-1: Manufacturer: syz [ 265.519830][ T5291] usb 2-1: SerialNumber: syz [ 265.537905][ T5291] usb 2-1: config 0 descriptor?? [ 265.774459][ T5291] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 265.811475][ T5243] mos7840 5-1:0.0: required endpoints missing [ 266.105023][ T5293] usb 5-1: USB disconnect, device number 21 [ 266.228338][ T5291] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 266.270222][ T5291] usb 2-1: USB disconnect, device number 26 [ 266.320397][ T5295] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 266.490436][ T5295] usb 1-1: device descriptor read/64, error -71 [ 266.755827][ T5292] usb 3-1: USB disconnect, device number 16 [ 266.778058][ T5295] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 266.962919][ T5295] usb 1-1: device descriptor read/64, error -71 [ 267.115498][ T5295] usb usb1-port1: attempt power cycle [ 267.230216][ T5243] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 267.339092][ T7592] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 267.402412][ T5292] usb 4-1: USB disconnect, device number 23 [ 267.422785][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.449882][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.481893][ T5243] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 267.505600][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.523659][ T5243] usb 5-1: config 0 descriptor?? [ 267.540642][ T5295] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 267.591397][ T5295] usb 1-1: device descriptor read/8, error -71 [ 267.680525][ T5293] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 267.871647][ T5295] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 267.884068][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.907113][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.910969][ T5295] usb 1-1: device descriptor read/8, error -71 [ 267.946062][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.966578][ T5293] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 267.980785][ T5243] hid-steam 0003:28DE:1142.0036: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 267.997473][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.003131][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.022752][ T5293] usb 3-1: config 0 descriptor?? [ 268.046626][ T5295] usb usb1-port1: unable to enumerate USB device [ 268.085594][ T5243] hid-steam 0003:28DE:1142.0036: Steam wireless receiver connected [ 268.112981][ T5243] hid-steam 0003:28DE:1142.0037: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 268.208573][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.242556][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 268.242583][ T29] audit: type=1326 audit(1723111816.403:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.289455][ T29] audit: type=1326 audit(1723111816.433:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.314194][ T29] audit: type=1326 audit(1723111816.433:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.340679][ T29] audit: type=1326 audit(1723111816.433:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.363517][ T29] audit: type=1326 audit(1723111816.433:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.407488][ T29] audit: type=1326 audit(1723111816.433:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.440261][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.459679][ T29] audit: type=1326 audit(1723111816.433:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.487547][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.504499][ T5293] hid-steam 0003:28DE:1142.0038: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 268.538558][ T29] audit: type=1326 audit(1723111816.433:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.588900][ T29] audit: type=1326 audit(1723111816.433:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.614350][ T5293] hid-steam 0003:28DE:1142.0038: Steam wireless receiver connected [ 268.658297][ T29] audit: type=1326 audit(1723111816.433:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.4.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ff69779f9 code=0x7ffc0000 [ 268.658519][ T5293] hid-steam 0003:28DE:1142.0039: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 268.713557][ T64] bridge_slave_1: left allmulticast mode [ 268.725797][ T64] bridge_slave_1: left promiscuous mode [ 268.736500][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.796905][ T64] bridge_slave_0: left allmulticast mode [ 268.826556][ T64] bridge_slave_0: left promiscuous mode [ 268.855576][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.949859][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.956583][ T5249] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 268.976762][ T5249] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 268.985184][ T5249] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 268.994270][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.027643][ T7609] ======================================================= [ 269.027643][ T7609] WARNING: The mand mount option has been deprecated and [ 269.027643][ T7609] and is ignored by this kernel. Remove the mand [ 269.027643][ T7609] option from the mount to silence this warning. [ 269.027643][ T7609] ======================================================= [ 269.082423][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.094111][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.214251][ T7614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.283411][ T8] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 269.313561][ T7616] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:0 [ 269.711524][ T5375] usb 3-1: reset high-speed USB device number 17 using dummy_hcd [ 270.036091][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.064336][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.107943][ T64] bond0 (unregistering): Released all slaves [ 270.323198][ T6089] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 270.586532][ T6089] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 270.616194][ T6089] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.642176][ T6089] usb 4-1: Product: syz [ 270.703988][ T6089] usb 4-1: Manufacturer: syz [ 270.794292][ T6089] usb 4-1: SerialNumber: syz [ 270.851904][ T6089] usb 4-1: config 0 descriptor?? [ 271.044733][ T64] hsr_slave_0: left promiscuous mode [ 271.119378][ T64] hsr_slave_1: left promiscuous mode [ 271.160234][ T8] usb 5-1: device descriptor read/64, error -71 [ 271.170482][ T54] Bluetooth: hci0: command tx timeout [ 271.301674][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.345706][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.400828][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.443125][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.480553][ T8] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 271.518499][ T8] usb 5-1: device reset changed ep0 maxpacket size! [ 271.545709][ T5288] usb 5-1: USB disconnect, device number 22 [ 271.580432][ T5288] hid-steam 0003:28DE:1142.0036: Steam wireless receiver disconnected [ 271.602782][ T64] veth1_macvtap: left promiscuous mode [ 271.636682][ T64] veth0_macvtap: left promiscuous mode [ 271.655700][ T64] veth1_vlan: left promiscuous mode [ 271.674701][ T64] veth0_vlan: left promiscuous mode [ 271.730285][ T5243] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 271.790384][ T5288] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 271.934817][ T5243] usb 1-1: Using ep0 maxpacket: 8 [ 271.971140][ T5243] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.998626][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.011287][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 272.030391][ T5243] usb 1-1: Product: syz [ 272.038050][ T5288] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 272.052005][ T5243] usb 1-1: Manufacturer: syz [ 272.056641][ T5243] usb 1-1: SerialNumber: syz [ 272.068566][ T5288] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.114290][ T5243] usb 1-1: config 0 descriptor?? [ 272.119512][ T5288] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.162029][ T5288] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.205731][ T5288] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.275549][ T5288] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.322684][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.347604][ T5243] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 272.368257][ T5304] usb 3-1: USB disconnect, device number 17 [ 272.436022][ T5304] hid-steam 0003:28DE:1142.0038: Steam wireless receiver disconnected [ 272.498122][ T5243] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 272.543436][ T5243] usb 1-1: USB disconnect, device number 30 [ 272.589385][ T5237] udevd[5237]: setting mode of /dev/bus/usb/001/030 to 020664 failed: No such file or directory [ 272.623239][ T5288] usb 5-1: usb_control_msg returned -32 [ 272.648330][ T5237] udevd[5237]: setting owner of /dev/bus/usb/001/030 to uid=0, gid=0 failed: No such file or directory [ 272.669881][ T5288] usbtmc 5-1:16.0: can't read capabilities [ 272.985827][ T5304] usb 4-1: USB disconnect, device number 24 [ 273.041200][ T5243] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 273.049270][ T7631] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 273.260822][ T54] Bluetooth: hci0: command tx timeout [ 273.294986][ T5243] usb 1-1: Using ep0 maxpacket: 8 [ 273.386862][ T5243] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.427772][ T5243] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 273.441882][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 273.458793][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 273.470746][ T5243] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 273.556896][ T64] team0 (unregistering): Port device team_slave_1 removed [ 273.574469][ T5243] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 273.659810][ T5243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 273.676475][ T5243] usb 1-1: Product: syz [ 273.681501][ T5243] usb 1-1: Manufacturer: syz [ 273.686187][ T5243] usb 1-1: SerialNumber: syz [ 273.720559][ T5243] usb 1-1: config 0 descriptor?? [ 273.789924][ T64] team0 (unregistering): Port device team_slave_0 removed [ 273.992079][ T5243] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 274.000312][ T5243] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 274.192303][ T7664] fuse: Bad value for 'fd' [ 274.226782][ T5288] usb 5-1: USB disconnect, device number 23 [ 274.250215][ T5243] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 274.257846][ T5243] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 274.300398][ T5243] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 274.765725][ T5243] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 274.790632][ T5243] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 274.803109][ T5243] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 274.836149][ T5243] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 274.879826][ T5243] usb 1-1: USB disconnect, device number 31 [ 275.238350][ T7680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.405'. [ 275.330571][ T54] Bluetooth: hci0: command tx timeout [ 275.446715][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 275.540323][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 275.660790][ T7702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.780259][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 275.797948][ T8] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 275.836349][ T8] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 275.847922][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.868562][ T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.880883][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.888913][ T8] usb 3-1: Product: syz [ 275.893936][ T8] usb 3-1: Manufacturer: syz [ 275.899438][ T8] usb 3-1: SerialNumber: syz [ 275.964350][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.980438][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.988132][ T7612] bridge_slave_0: entered allmulticast mode [ 275.995768][ T7612] bridge_slave_0: entered promiscuous mode [ 276.030327][ T5288] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 276.097480][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.110312][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.119096][ T7612] bridge_slave_1: entered allmulticast mode [ 276.150975][ T7612] bridge_slave_1: entered promiscuous mode [ 276.182378][ T5291] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 276.251056][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 276.275417][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.287734][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.323440][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 276.352099][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.365038][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 276.399302][ T5291] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 276.420614][ T5288] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 276.435787][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.442897][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.473407][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.494050][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.496720][ T5288] usb 1-1: Product: syz [ 276.503536][ T5291] usb 4-1: Product: syz [ 276.530957][ T5291] usb 4-1: Manufacturer: syz [ 276.543256][ T5288] usb 1-1: Manufacturer: syz [ 276.547941][ T5288] usb 1-1: SerialNumber: syz [ 276.549433][ T5291] usb 4-1: SerialNumber: syz [ 276.555939][ T7612] team0: Port device team_slave_0 added [ 276.582005][ T5291] usb 4-1: config 0 descriptor?? [ 276.602187][ T5288] usb 1-1: config 0 descriptor?? [ 276.609271][ T5295] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 276.631720][ T7612] team0: Port device team_slave_1 added [ 276.653153][ T7726] QAT: Device 0 not found [ 276.700187][ T5295] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 276.878298][ T7702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.929201][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.947892][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.973568][ T7702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.991438][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.029873][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.046386][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.087782][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.308505][ T7612] hsr_slave_0: entered promiscuous mode [ 277.333288][ T7612] hsr_slave_1: entered promiscuous mode [ 277.351715][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.361579][ T7731] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 277.369794][ T7612] Cannot create hsr debugfs directory [ 277.410288][ T54] Bluetooth: hci0: command tx timeout [ 278.391917][ T8] usb 3-1: 0:2 : does not exist [ 278.513026][ T8] usb 3-1: USB disconnect, device number 18 [ 278.647481][ T5375] usb 1-1: USB disconnect, device number 32 [ 278.654794][ T5288] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 278.810409][ T5304] usb 4-1: USB disconnect, device number 25 [ 278.862317][ T7346] udevd[7346]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.911150][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 278.935592][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 278.973977][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 279.014339][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.053297][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.103627][ T5288] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 279.125885][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.149606][ T5288] usb 5-1: Product: syz [ 279.162143][ T5288] usb 5-1: Manufacturer: syz [ 279.186359][ T7754] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 279.204487][ T5288] usb 5-1: SerialNumber: syz [ 279.231616][ T5288] usb 5-1: config 0 descriptor?? [ 279.239654][ T7756] netlink: 'syz.3.417': attribute type 12 has an invalid length. [ 279.269778][ T7756] netlink: 'syz.3.417': attribute type 11 has an invalid length. [ 279.310898][ T7754] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 279.337996][ T7756] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.417'. [ 279.338800][ T5288] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 279.383441][ T7612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.439639][ T35] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 279.475203][ T7612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.520852][ T7612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.538043][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.574744][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.598983][ T1070] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 279.607534][ T7612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.618267][ T7741] mmap: syz.4.414 (7741) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 279.731155][ C0] ------------[ cut here ]------------ [ 279.736956][ C0] WARNING: CPU: 0 PID: 7763 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 279.745925][ C0] Modules linked in: [ 279.749862][ C0] CPU: 0 UID: 0 PID: 7763 Comm: syz.3.420 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 279.760501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 279.770594][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 279.776425][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 f6 61 22 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 279.796048][ C0] RSP: 0018:ffffc900000067d0 EFLAGS: 00010002 [ 279.802153][ C0] RAX: 0000000080010303 RBX: ffff88807e1d8000 RCX: 0000000000000002 [ 279.810317][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605f00 [ 279.818311][ C0] RBP: 0100000000000005 R08: ffffffff9372c877 R09: 1ffffffff26e590e [ 279.826296][ C0] R10: dffffc0000000000 R11: fffffbfff26e590f R12: ffffffff8193809e [ 279.834277][ C0] R13: ffff88807c27a700 R14: 0000000000000006 R15: ffff8880b922d4c8 [ 279.842256][ C0] FS: 00007f432e9376c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 279.851191][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.857807][ C0] CR2: 00007f432e935fb8 CR3: 000000005f002000 CR4: 00000000003526f0 [ 279.865814][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.873792][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.881777][ C0] Call Trace: [ 279.885075][ C0] [ 279.887920][ C0] ? __warn+0x163/0x4e0 [ 279.892086][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 279.897216][ C0] ? report_bug+0x2b3/0x500 [ 279.901745][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 279.906882][ C0] ? handle_bug+0x3e/0x70 [ 279.911218][ C0] ? exc_invalid_op+0x1a/0x50 [ 279.915911][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 279.920945][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 279.925995][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 279.931121][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 279.935977][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 279.941710][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 279.947117][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 279.953058][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.958287][ C0] dummy_timer+0x830/0x45a0 [ 279.962817][ C0] ? __pfx_lock_release+0x10/0x10 [ 279.967881][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.974242][ C0] ? __pfx_lock_release+0x10/0x10 [ 279.979311][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 279.984279][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 279.989233][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 279.994458][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 280.000476][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 280.006246][ C0] hrtimer_interrupt+0x396/0x990 [ 280.011248][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 280.017257][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 280.022913][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.028917][ C0] RIP: 0010:unwind_next_frame+0x102d/0x2a00 [ 280.034834][ C0] Code: 84 92 01 00 00 83 fb 02 0f 85 34 02 00 00 48 89 ac 24 80 00 00 00 48 8b 04 24 48 8d 58 08 49 89 de 49 c1 ee 03 43 80 3c 2e 00 <74> 08 48 89 df e8 f9 88 b9 00 48 89 5c 24 60 48 8b 04 24 48 8b 48 [ 280.054448][ C0] RSP: 0018:ffffc90000006f68 EFLAGS: 00000246 [ 280.060524][ C0] RAX: ffffc90000007040 RBX: ffffc90000007048 RCX: 0000000000040000 [ 280.068497][ C0] RDX: 0000000000000003 RSI: ffffffff8e7a3db0 RDI: 0000000000000002 [ 280.076620][ C0] RBP: ffffffff91354c4b R08: 0000000000000005 R09: ffffffff81412746 [ 280.084599][ C0] R10: 0000000000000003 R11: ffff88807e1d8000 R12: ffffffff91354c4a [ 280.092667][ C0] R13: dffffc0000000000 R14: 1ffff92000000e09 R15: 1ffff92000000e08 [ 280.100659][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 280.105888][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 280.111125][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 280.116434][ C0] ? __kernel_text_address+0xd/0x40 [ 280.121641][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 280.126944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.133127][ C0] arch_stack_walk+0x151/0x1b0 [ 280.137934][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 280.143251][ C0] stack_trace_save+0x118/0x1d0 [ 280.148132][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 280.153525][ C0] ? mark_lock+0x9a/0x350 [ 280.157914][ C0] kasan_save_track+0x3f/0x80 [ 280.162627][ C0] ? kasan_save_track+0x3f/0x80 [ 280.167500][ C0] ? kasan_save_free_info+0x40/0x50 [ 280.172712][ C0] ? poison_slab_object+0xe0/0x150 [ 280.177849][ C0] ? __kasan_slab_free+0x37/0x60 [ 280.182813][ C0] ? kmem_cache_free+0x145/0x350 [ 280.187764][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 280.193416][ C0] ? ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 280.199943][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 280.205288][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 280.210939][ C0] kasan_save_free_info+0x40/0x50 [ 280.215991][ C0] poison_slab_object+0xe0/0x150 [ 280.220981][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 280.226730][ C0] __kasan_slab_free+0x37/0x60 [ 280.231525][ C0] kmem_cache_free+0x145/0x350 [ 280.236326][ C0] ieee80211_rx_handlers+0x3f3d/0xb830 [ 280.241844][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 280.247678][ C0] ? mark_lock+0x9a/0x350 [ 280.252040][ C0] ? __lock_acquire+0x137a/0x2040 [ 280.257113][ C0] ? ieee80211_is_our_addr+0x300/0x410 [ 280.262612][ C0] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 280.269008][ C0] ? __pfx_lock_release+0x10/0x10 [ 280.274072][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 280.280802][ C0] ? ieee80211_rx_for_interface+0x304/0x3d0 [ 280.286744][ C0] ieee80211_rx_list+0x2ce0/0x3780 [ 280.291879][ C0] ? __lock_acquire+0x137a/0x2040 [ 280.296940][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 280.302433][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 280.307480][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.313492][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.319870][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 280.324924][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 280.329903][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.336269][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 280.341757][ C0] ? skb_dequeue+0x113/0x150 [ 280.346374][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 280.352396][ C0] tasklet_action_common+0x321/0x4d0 [ 280.357716][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 280.363545][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.369897][ C0] ? workqueue_softirq_action+0xce/0x140 [ 280.375549][ C0] handle_softirqs+0x2c4/0x970 [ 280.380336][ C0] ? do_softirq+0x11b/0x1e0 [ 280.384861][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 280.390170][ C0] do_softirq+0x11b/0x1e0 [ 280.394579][ C0] [ 280.397524][ C0] [ 280.400459][ C0] ? __pfx_do_softirq+0x10/0x10 [ 280.405321][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 280.410968][ C0] ? rcu_is_watching+0x15/0xb0 [ 280.415745][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 280.420963][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 280.425834][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 280.431828][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 280.437579][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 280.443572][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 280.448889][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 280.454129][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 280.459440][ C0] ieee80211_mgmt_tx+0x1b46/0x2180 [ 280.464615][ C0] ? trace_kmalloc+0x1f/0xd0 [ 280.469234][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2180 [ 280.474553][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 280.479979][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 280.484871][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 280.490179][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 280.495523][ C0] genl_rcv_msg+0xb14/0xec0 [ 280.500051][ C0] ? mark_lock+0x9a/0x350 [ 280.504422][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.509479][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 280.514522][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 280.519907][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 280.525209][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 280.530682][ C0] ? __pfx___might_resched+0x10/0x10 [ 280.535986][ C0] netlink_rcv_skb+0x1e3/0x430 [ 280.540784][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.545821][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.551221][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 280.556705][ C0] genl_rcv+0x28/0x40 [ 280.560693][ C0] netlink_unicast+0x7f0/0x990 [ 280.565477][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 280.570778][ C0] ? __virt_addr_valid+0x183/0x530 [ 280.575908][ C0] ? __check_object_size+0x49c/0x900 [ 280.581202][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 280.586321][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 280.591107][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.596415][ C0] ? __import_iovec+0x536/0x820 [ 280.601279][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 280.606227][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 280.611528][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 280.617006][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.622314][ C0] __sock_sendmsg+0x221/0x270 [ 280.627015][ C0] ____sys_sendmsg+0x525/0x7d0 [ 280.631801][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.637123][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 280.641730][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.646978][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.653330][ C0] ? do_syscall_64+0x100/0x230 [ 280.658143][ C0] ? do_syscall_64+0xb6/0x230 [ 280.662929][ C0] do_syscall_64+0xf3/0x230 [ 280.667449][ C0] ? clear_bhb_loop+0x35/0x90 [ 280.672144][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.678045][ C0] RIP: 0033:0x7f432db779f9 [ 280.682558][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.702179][ C0] RSP: 002b:00007f432e937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.710605][ C0] RAX: ffffffffffffffda RBX: 00007f432dd05f80 RCX: 00007f432db779f9 [ 280.718585][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 280.726561][ C0] RBP: 00007f432dbe58ee R08: 0000000000000000 R09: 0000000000000000 [ 280.734533][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.742502][ C0] R13: 0000000000000000 R14: 00007f432dd05f80 R15: 00007f432de2fa38 [ 280.750486][ C0] [ 280.753516][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 280.760792][ C0] CPU: 0 UID: 0 PID: 7763 Comm: syz.3.420 Not tainted 6.11.0-rc2-syzkaller-00027-g6a0e38264012 #0 [ 280.771395][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 280.781483][ C0] Call Trace: [ 280.784763][ C0] [ 280.787607][ C0] dump_stack_lvl+0x241/0x360 [ 280.792302][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.797521][ C0] ? __pfx__printk+0x10/0x10 [ 280.802113][ C0] ? _printk+0xd5/0x120 [ 280.806279][ C0] ? vscnprintf+0x5d/0x90 [ 280.810611][ C0] panic+0x349/0x860 [ 280.814512][ C0] ? __warn+0x172/0x4e0 [ 280.818667][ C0] ? __pfx_panic+0x10/0x10 [ 280.823088][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 280.828316][ C0] __warn+0x346/0x4e0 [ 280.832298][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 280.837418][ C0] report_bug+0x2b3/0x500 [ 280.841752][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 280.846879][ C0] handle_bug+0x3e/0x70 [ 280.851040][ C0] exc_invalid_op+0x1a/0x50 [ 280.855543][ C0] asm_exc_invalid_op+0x1a/0x20 [ 280.860393][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 280.866141][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 f6 61 22 0a 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 40 [ 280.885748][ C0] RSP: 0018:ffffc900000067d0 EFLAGS: 00010002 [ 280.891819][ C0] RAX: 0000000080010303 RBX: ffff88807e1d8000 RCX: 0000000000000002 [ 280.899791][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c605f00 [ 280.907765][ C0] RBP: 0100000000000005 R08: ffffffff9372c877 R09: 1ffffffff26e590e [ 280.915736][ C0] R10: dffffc0000000000 R11: fffffbfff26e590f R12: ffffffff8193809e [ 280.923715][ C0] R13: ffff88807c27a700 R14: 0000000000000006 R15: ffff8880b922d4c8 [ 280.931699][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 280.936756][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 280.941613][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 280.947351][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 280.952752][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 280.958667][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 280.963894][ C0] dummy_timer+0x830/0x45a0 [ 280.968414][ C0] ? __pfx_lock_release+0x10/0x10 [ 280.973467][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.979811][ C0] ? __pfx_lock_release+0x10/0x10 [ 280.984863][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 280.989831][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 280.994777][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 280.999989][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 281.005994][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 281.011728][ C0] hrtimer_interrupt+0x396/0x990 [ 281.016700][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 281.022697][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 281.028338][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 281.034347][ C0] RIP: 0010:unwind_next_frame+0x102d/0x2a00 [ 281.040263][ C0] Code: 84 92 01 00 00 83 fb 02 0f 85 34 02 00 00 48 89 ac 24 80 00 00 00 48 8b 04 24 48 8d 58 08 49 89 de 49 c1 ee 03 43 80 3c 2e 00 <74> 08 48 89 df e8 f9 88 b9 00 48 89 5c 24 60 48 8b 04 24 48 8b 48 [ 281.059883][ C0] RSP: 0018:ffffc90000006f68 EFLAGS: 00000246 [ 281.065978][ C0] RAX: ffffc90000007040 RBX: ffffc90000007048 RCX: 0000000000040000 [ 281.073955][ C0] RDX: 0000000000000003 RSI: ffffffff8e7a3db0 RDI: 0000000000000002 [ 281.081929][ C0] RBP: ffffffff91354c4b R08: 0000000000000005 R09: ffffffff81412746 [ 281.089901][ C0] R10: 0000000000000003 R11: ffff88807e1d8000 R12: ffffffff91354c4a [ 281.097874][ C0] R13: dffffc0000000000 R14: 1ffff92000000e09 R15: 1ffff92000000e08 [ 281.105852][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 281.111069][ C0] ? unwind_next_frame+0xff6/0x2a00 [ 281.116283][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 281.121576][ C0] ? __kernel_text_address+0xd/0x40 [ 281.126770][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 281.132059][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 281.138229][ C0] arch_stack_walk+0x151/0x1b0 [ 281.143032][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 281.148378][ C0] stack_trace_save+0x118/0x1d0 [ 281.153243][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 281.158648][ C0] ? mark_lock+0x9a/0x350 [ 281.163108][ C0] kasan_save_track+0x3f/0x80 [ 281.167815][ C0] ? kasan_save_track+0x3f/0x80 [ 281.172688][ C0] ? kasan_save_free_info+0x40/0x50 [ 281.177922][ C0] ? poison_slab_object+0xe0/0x150 [ 281.183059][ C0] ? __kasan_slab_free+0x37/0x60 [ 281.188018][ C0] ? kmem_cache_free+0x145/0x350 [ 281.192982][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 281.198630][ C0] ? ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 281.205147][ C0] ? ieee80211_rx_list+0x2ce0/0x3780 [ 281.210478][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 281.216140][ C0] kasan_save_free_info+0x40/0x50 [ 281.221190][ C0] poison_slab_object+0xe0/0x150 [ 281.226156][ C0] ? ieee80211_rx_handlers+0x3f3d/0xb830 [ 281.231807][ C0] __kasan_slab_free+0x37/0x60 [ 281.236615][ C0] kmem_cache_free+0x145/0x350 [ 281.241412][ C0] ieee80211_rx_handlers+0x3f3d/0xb830 [ 281.246915][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 281.252746][ C0] ? mark_lock+0x9a/0x350 [ 281.257094][ C0] ? __lock_acquire+0x137a/0x2040 [ 281.262156][ C0] ? ieee80211_is_our_addr+0x300/0x410 [ 281.267640][ C0] ieee80211_prepare_and_rx_handle+0x31ab/0x6360 [ 281.273997][ C0] ? __pfx_lock_release+0x10/0x10 [ 281.279038][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 281.285733][ C0] ? ieee80211_rx_for_interface+0x304/0x3d0 [ 281.291665][ C0] ieee80211_rx_list+0x2ce0/0x3780 [ 281.296800][ C0] ? __lock_acquire+0x137a/0x2040 [ 281.301852][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 281.307360][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 281.312406][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.318402][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.324751][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 281.329784][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 281.334733][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.341102][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 281.346579][ C0] ? skb_dequeue+0x113/0x150 [ 281.351213][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 281.357211][ C0] tasklet_action_common+0x321/0x4d0 [ 281.362519][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 281.368340][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.374687][ C0] ? workqueue_softirq_action+0xce/0x140 [ 281.380790][ C0] handle_softirqs+0x2c4/0x970 [ 281.385568][ C0] ? do_softirq+0x11b/0x1e0 [ 281.390100][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 281.395409][ C0] do_softirq+0x11b/0x1e0 [ 281.399746][ C0] [ 281.402680][ C0] [ 281.405613][ C0] ? __pfx_do_softirq+0x10/0x10 [ 281.410504][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 281.416156][ C0] ? rcu_is_watching+0x15/0xb0 [ 281.420945][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 281.426243][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 281.431108][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 281.437096][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 281.442829][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 281.448815][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 281.454118][ C0] ieee80211_tx_skb_tid+0x264/0x420 [ 281.459418][ C0] ? ieee80211_tx_skb_tid+0x30/0x420 [ 281.464712][ C0] ieee80211_mgmt_tx+0x1b46/0x2180 [ 281.469857][ C0] ? trace_kmalloc+0x1f/0xd0 [ 281.474460][ C0] ? ieee80211_mgmt_tx+0xa2e/0x2180 [ 281.479679][ C0] cfg80211_mlme_mgmt_tx+0x950/0x16a0 [ 281.485077][ C0] nl80211_tx_mgmt+0xb0d/0x1190 [ 281.489968][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 281.495264][ C0] ? __pfx_netdev_run_todo+0x10/0x10 [ 281.500577][ C0] genl_rcv_msg+0xb14/0xec0 [ 281.505090][ C0] ? mark_lock+0x9a/0x350 [ 281.509439][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.514487][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 281.519515][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 281.524892][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 281.530190][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 281.535662][ C0] ? __pfx___might_resched+0x10/0x10 [ 281.540969][ C0] netlink_rcv_skb+0x1e3/0x430 [ 281.545754][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.550788][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.556097][ C0] ? __netlink_deliver_tap+0x77e/0x7c0 [ 281.561577][ C0] genl_rcv+0x28/0x40 [ 281.565566][ C0] netlink_unicast+0x7f0/0x990 [ 281.570355][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 281.575688][ C0] ? __virt_addr_valid+0x183/0x530 [ 281.580816][ C0] ? __check_object_size+0x49c/0x900 [ 281.586110][ C0] ? bpf_lsm_netlink_send+0x9/0x10 [ 281.591234][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 281.596025][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.601350][ C0] ? __import_iovec+0x536/0x820 [ 281.606209][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 281.611158][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 281.616452][ C0] ? security_socket_sendmsg+0x87/0xb0 [ 281.621930][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.627230][ C0] __sock_sendmsg+0x221/0x270 [ 281.631935][ C0] ____sys_sendmsg+0x525/0x7d0 [ 281.636724][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.642031][ C0] __sys_sendmsg+0x2b0/0x3a0 [ 281.646646][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.651804][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.658156][ C0] ? do_syscall_64+0x100/0x230 [ 281.662933][ C0] ? do_syscall_64+0xb6/0x230 [ 281.667643][ C0] do_syscall_64+0xf3/0x230 [ 281.672159][ C0] ? clear_bhb_loop+0x35/0x90 [ 281.676848][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.682753][ C0] RIP: 0033:0x7f432db779f9 [ 281.687174][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.706784][ C0] RSP: 002b:00007f432e937038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.715227][ C0] RAX: ffffffffffffffda RBX: 00007f432dd05f80 RCX: 00007f432db779f9 [ 281.723205][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 281.731183][ C0] RBP: 00007f432dbe58ee R08: 0000000000000000 R09: 0000000000000000 [ 281.739158][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.747141][ C0] R13: 0000000000000000 R14: 00007f432dd05f80 R15: 00007f432de2fa38 [ 281.755176][ C0] [ 281.758510][ C0] Kernel Offset: disabled [ 281.762920][ C0] Rebooting in 86400 seconds..