last executing test programs: 12.963468212s ago: executing program 0 (id=9020): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000004c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 11.920210146s ago: executing program 0 (id=9022): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="84dc9be0172971aa8f9cfacb75a7d1a1431647395e88f819f2dd9b94c9c259c1e6670e588b42f9f1c9acd254f67ecbd20313"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0xa00c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, 0x0) 11.29138969s ago: executing program 0 (id=9023): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r9], 0x44}}, 0x0) io_uring_enter(r6, 0x50, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@rc, 0x80) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r10) ioctl$EVIOCGMASK(r11, 0x541b, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000080)=0x8001) 8.102704391s ago: executing program 0 (id=9037): r0 = socket$inet_udp(0x2, 0x2, 0x0) fdatasync(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) r6 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x6}, 0x1c) listen(r6, 0x3) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x788, 0x5f8, 0x0, 0x1d0, 0x1d0, 0x3e8, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6e0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x218, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xea}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r8) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x0) 6.822728814s ago: executing program 2 (id=9041): futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000), 0x30004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000002c0)=0x5, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffc, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x90, 0x33}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb4}}, 0x0) 6.650950804s ago: executing program 4 (id=9043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x2000) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140f, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x200c4804}, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=@deltfilter={0x28c4, 0x2d, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffff}, {0x5, 0x4}, {0xffff, 0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x38, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x80, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xf7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1140, 0x2, [@TCA_CGROUP_POLICE={0x24, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9cec}]}, @TCA_CGROUP_POLICE={0x834, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x9, 0x2, 0x3, 0x7fffffff, 0x84, 0xffffff7f, 0x80000000, 0x7fff, 0x4, 0x80, 0x9, 0x3, 0x3, 0x4, 0x8001, 0x4, 0x6, 0x9, 0x4, 0x3ff, 0x7, 0x18000000, 0x9, 0x0, 0x4, 0xe2, 0x1, 0xfffffffc, 0x1, 0x883, 0x5, 0x4, 0xa, 0xfffffffe, 0x60, 0x4, 0x10000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0x401, 0x5, 0x0, 0x5, 0x81, 0x6b, 0x9, 0x626a29e7, 0x8, 0x6, 0x9, 0x0, 0x5, 0x9, 0x1, 0x6, 0x0, 0x2, 0x19, 0x140, 0x4000000, 0x5, 0xa6e, 0x100, 0x5, 0x10, 0x1ff, 0x5, 0xffffffff, 0xfffffffd, 0x3, 0xf2a, 0xfffffff8, 0x4, 0x31, 0x7ff, 0xe49c, 0xa74, 0x3, 0x5, 0x401, 0x47, 0x3, 0xc, 0x48, 0x20004, 0x2, 0x193, 0xf, 0x5, 0x9f, 0x8001, 0x1a0c, 0x8, 0x3, 0xe7b, 0x7, 0x71d8, 0xde, 0x7, 0x7, 0x8, 0x3, 0x88, 0xf2, 0x800, 0x40, 0xd56, 0x0, 0x4, 0x5, 0x7fffffff, 0x5, 0x8, 0x3, 0x3, 0x20000, 0x6, 0x2dfe, 0x2, 0x7, 0x5, 0x6, 0xfffffffe, 0xc, 0x10001, 0x80000000, 0x0, 0x74, 0xd51, 0x89, 0x0, 0x10, 0x200, 0x7e, 0xe, 0x4, 0x3, 0x7083, 0x9, 0x3, 0x6, 0x5, 0x6, 0x1000, 0x8, 0x7ff, 0x1175, 0x6, 0xa, 0x1, 0xc, 0x4, 0xfffffff9, 0xffff, 0x1000, 0xffffffff, 0x5, 0xfffffff7, 0x1, 0x3, 0x3, 0x28, 0x0, 0x200, 0x57c7, 0x8, 0x10000000, 0x6, 0x9, 0x8, 0x1, 0x9, 0xfff, 0x3, 0x8001, 0x0, 0x7, 0xa5, 0x3, 0x4, 0x22, 0x800, 0x6, 0xfff, 0xfffffff8, 0x9, 0x3, 0x7, 0x3, 0x0, 0xa, 0xfffffffe, 0x7, 0x7, 0x9, 0x7f, 0x539, 0x10001, 0x8, 0x10e1, 0x8, 0x3, 0x0, 0x200, 0x0, 0x6, 0x4, 0x6, 0x6, 0x25, 0x1, 0x5, 0x10000, 0x7f, 0xfffffffc, 0xfffffffd, 0x400, 0x3ff, 0x0, 0x80000000, 0xffff, 0x66e, 0x2, 0x8f, 0x6, 0xfffeffff, 0x9, 0x6, 0x8, 0x6, 0x9, 0x2, 0x4, 0x73, 0x45, 0x7, 0x6, 0x200, 0x6, 0x0, 0x7ff, 0x40, 0x3, 0x5, 0x1, 0x7, 0x7, 0x0, 0x8, 0x6, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc5}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x0, 0x7f, 0x2, 0x8, 0x6, 0x3, 0x80, 0x9, 0x1000, 0x8, 0x401, 0x1, 0x2, 0x2, 0x1, 0x3, 0x6, 0x2, 0x6, 0x3, 0x2, 0x9, 0x9, 0x2991, 0x0, 0xd2, 0x0, 0x7, 0x5, 0xffff8001, 0x4, 0x9, 0x8, 0x4000000, 0x4, 0x9, 0x7, 0x3, 0x5, 0x9, 0xac, 0x0, 0x8, 0x7646, 0x40, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x7, 0x7, 0x40, 0xb0, 0x7f, 0xae7, 0x1, 0x9, 0x5, 0x3, 0xe, 0xffff, 0x3, 0x2, 0x9, 0x6bdfbae7, 0x7, 0x1, 0x2, 0x9, 0x8, 0x1, 0x6bd1, 0x100, 0x7, 0x80000001, 0x800, 0x9, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x9, 0x9, 0x6698211, 0xfffffffa, 0x0, 0x5, 0x2, 0x8, 0x3, 0x81, 0x1, 0x9, 0x1000, 0x8, 0x6c, 0x9, 0xe, 0x2, 0x80000000, 0x2, 0xffffffff, 0xfffffffc, 0x4, 0x4, 0x4b, 0x9, 0x3ff, 0x4, 0x100, 0x2, 0xd0be, 0x5, 0x36508, 0xffffff1d, 0xfffffff9, 0x400, 0xfffffffe, 0x9, 0x2, 0x6, 0x401, 0x80, 0x1, 0x2, 0x7, 0x1e, 0xf, 0x8, 0xfff, 0x1, 0x8, 0x6, 0x18, 0x8001, 0x3, 0x9, 0x1ff, 0x77, 0x100, 0xfffffffe, 0xc, 0x10000, 0x35, 0x3, 0x8, 0x80000001, 0xffff8000, 0x7, 0x568, 0x5b2c958b, 0x1, 0x1, 0x7, 0x3, 0x80000001, 0x9, 0x2, 0x1, 0xff, 0x4, 0x4, 0x7d2e, 0x8000, 0xb086, 0xa1d, 0x8000, 0xffffff20, 0x8, 0x2f, 0x622f, 0x4, 0x2, 0xff, 0x1, 0xda61, 0x6, 0x5, 0x10, 0x7, 0x27, 0x6, 0x1, 0x1, 0x10a, 0xfffeffff, 0xd, 0x0, 0x0, 0x80000000, 0x461, 0x80000001, 0x7, 0x0, 0x3, 0x0, 0x7fffffff, 0xb, 0x0, 0x4, 0x4, 0x8, 0x3, 0xff, 0x7, 0xffff, 0x4, 0x4, 0x8000, 0x8, 0xb2, 0x8000, 0x8, 0x4, 0x3ff, 0x53079775, 0x1, 0x8, 0x6, 0x7000, 0x3ff, 0x2, 0x7, 0x4, 0x4, 0xe74, 0x9, 0x8, 0x4, 0x4, 0x10, 0x2, 0x1, 0x101, 0x6, 0x6, 0x7, 0x0, 0x0, 0x4, 0x3, 0x8, 0x1, 0x8, 0x6, 0x6, 0x200, 0x24000, 0x10000, 0xa7, 0x8, 0x54, 0x3]}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0xb8, 0x1, [@m_simple={0xb4, 0x10, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'hash\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x4b63, 0x1, 0xb6, 0x4}}, @TCA_DEF_DATA={0x6, 0x3, '}\x00'}]}, {0x59, 0x6, "a9fc3fa90036b16e4a907319c30d8cff1a521f6bc35f0d507aa5cf2dfeb3331f3a35c806dca89bd680f50df93ad9c854beabc6da547c0f88bb8e78b471c1c7fdb6931c1650a01a6eeaf09025ce6901342918bc4e47"}, {0xc}, {0xc}}}]}, @TCA_CGROUP_POLICE={0x828, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xfffffffb, 0xfffffff7, 0x9, 0x7f, 0x7, 0x9, 0x6, 0x4f4d72b1, 0xa, 0xfa, 0x4, 0x7, 0x1ff, 0x8788, 0x6, 0x0, 0xa, 0x9, 0xfffffc00, 0x9, 0x7, 0x2, 0x7, 0x1, 0x5, 0x80000004, 0x7ff, 0x8, 0x200, 0x7, 0x2, 0x6, 0xbe4b, 0x0, 0x30f, 0x1c5, 0xaf, 0x2, 0xbd, 0xd, 0x2, 0x0, 0x0, 0x3, 0x2, 0x8, 0x4bb4, 0x0, 0xd401, 0x0, 0x8, 0x3, 0x1, 0xfffffffa, 0x7, 0x7, 0x2e, 0xc, 0x7fffffff, 0x10001, 0x24, 0x3, 0x5, 0x10, 0x2a53, 0x0, 0x2, 0x3, 0xb0000000, 0x9, 0xec8a, 0x4, 0x3, 0x4f0, 0x3, 0x5, 0x40, 0xf, 0x3, 0x7, 0x1000, 0x5af, 0xb02, 0x1, 0xfffffffc, 0x8001, 0x38, 0x9, 0x7, 0xa, 0xff, 0x6, 0x7, 0xfffffff0, 0x80, 0xa55, 0x7, 0xfffffff5, 0x6, 0x3b91, 0x4, 0x8, 0x4, 0x5d46, 0x9, 0xbec4, 0x1, 0x9, 0x509, 0x4, 0x4, 0xfff, 0x4, 0x7fff, 0x6, 0x6, 0x6, 0x4, 0x0, 0x2, 0x7, 0x3, 0x4, 0x6, 0x8, 0xe100, 0x5, 0x0, 0x4, 0x2, 0x7, 0x1f9fbab0, 0x3ff, 0xb8, 0xfffffffd, 0x7, 0x62, 0x4, 0x0, 0x1000, 0x9, 0x2, 0x4d32, 0x4, 0x6, 0x9, 0x63a9, 0x5, 0x4, 0x10, 0x6, 0x4, 0x1, 0xda9, 0xef, 0x1, 0xd, 0x6, 0xff, 0x4, 0xbd, 0x4, 0x80, 0x1, 0x98, 0x9, 0x287e, 0x5, 0x9, 0x6, 0x8, 0xffffffff, 0xa, 0x0, 0x80000001, 0x5, 0x0, 0x0, 0xa000000, 0x10001, 0x9, 0x4, 0x5, 0x4, 0x5e86, 0xfff, 0x2, 0x30000, 0x3, 0x3ff, 0xc71b, 0x1, 0x7, 0x64, 0x100, 0xffff, 0x800, 0x6b42, 0x6, 0x51f2a011, 0x3, 0x9, 0x3, 0x6, 0x70000000, 0x6, 0x6, 0x3, 0x2, 0x81, 0x4, 0x4, 0x7fff, 0x8, 0xffffffff, 0xfffffffc, 0x1e2bc0fc, 0x2, 0x4, 0x600, 0x2, 0x9, 0x3, 0x80, 0x1, 0xb8, 0x9, 0x6, 0x5, 0x5, 0xffffffff, 0x0, 0xc96, 0x6, 0x6, 0x101, 0x1, 0xfff, 0xbe, 0x101, 0x10, 0x1, 0xe, 0xe1e3, 0x2, 0xfffffffd, 0x770ff37e, 0x80000001, 0x1, 0x10000, 0x8, 0x3, 0x0, 0x9, 0x3]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5d}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xa, 0x80, 0x7, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x7, 0x101, 0x1, 0x4, 0x75, 0x8000, 0x7, 0xffffffff, 0x7, 0x37, 0x2, 0x81, 0x9, 0x3, 0x343, 0xc, 0x53de, 0x2, 0xfbaa, 0x2, 0x0, 0x8001, 0x1, 0x1, 0x6, 0x101, 0xdf7c, 0x2, 0x0, 0x8000, 0x9, 0x9, 0x2, 0x8, 0x0, 0x1, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1ff, 0x9, 0x7, 0x4f, 0x5, 0x1cd, 0x1, 0x6, 0x168, 0x12d, 0xdd, 0xffffffff, 0x3, 0xffffd51f, 0x10001, 0x1, 0xbbb, 0x7, 0x7, 0x401, 0x6, 0x7, 0x0, 0xba1, 0x0, 0x7, 0x8, 0xfffff7e4, 0x6, 0x9, 0x1, 0x5da, 0x200, 0x5, 0xb137, 0x7, 0x2, 0x9, 0x0, 0x4, 0x4d, 0x7aa, 0x3, 0x401, 0x6, 0x2, 0x8, 0x4, 0x4, 0x866, 0x8, 0x7fffffff, 0x8000f, 0x7, 0xfffffffe, 0x1595a8c9, 0xd25, 0xd8, 0x3, 0xfffff7b1, 0x9, 0x7ff, 0x1ff, 0xbda, 0x66, 0xa2, 0x3, 0x401, 0x0, 0xfffffff8, 0xffff, 0x6, 0x401, 0xd, 0x2, 0x80, 0x2, 0x3, 0x60000, 0x7, 0x0, 0x8, 0xfffffff6, 0x6b6, 0x5, 0x4, 0x3, 0xc, 0x78, 0x1, 0xaa2, 0x1a5c, 0xe5, 0x3, 0x6, 0x6, 0xd, 0xc, 0x7fff, 0xc, 0xfffffa4f, 0x800, 0x6, 0x1, 0x800, 0x8001, 0x3, 0x0, 0x9, 0xc, 0x0, 0x401b, 0x6, 0x1, 0x6, 0x4, 0x7f, 0xffffffff, 0x2, 0x2, 0xaaa8, 0x4, 0x1ff, 0x6, 0x3, 0x7, 0x400, 0x0, 0x0, 0x9, 0x7, 0x80000001, 0x9, 0x5b8c, 0x1, 0x101, 0xfff, 0x40, 0x8, 0x18b8bb39, 0x8, 0x91, 0x5be, 0x10, 0xfffffffe, 0x5, 0x4, 0xffff0000, 0x81, 0x7, 0x7, 0x9, 0x1f35, 0x8, 0x5, 0x6, 0x3, 0xffffffff, 0x2, 0x5, 0x4, 0x10, 0x10001, 0xf7f, 0x4, 0x7fff, 0x5, 0x3f, 0x40, 0x4, 0x1, 0x6, 0xb76, 0x6, 0x6, 0x8001, 0x100, 0x1, 0x2000, 0x0, 0xfff, 0x9, 0x800006d, 0x6, 0x7, 0x0, 0x4, 0x7ff, 0x6, 0x8000, 0x4, 0x6, 0xfffffff5, 0xf615, 0x8d, 0x7fffffff, 0x8, 0x4, 0x7, 0x0, 0x716c80, 0x7, 0x10]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x16ec, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x0, 0xce, 0x2c, 0x3}, {0x11, 0xde, 0x7, 0x3}, {0x3, 0x2, 0x10, 0x82fc}, {0x401, 0x8, 0x1, 0xbf}, {0x9d, 0x0, 0x6, 0xffff0000}]}}, @TCA_BPF_ACT={0x16b4, 0x1, [@m_xt={0x127c, 0x4, 0x0, 0x0, {{0x7}, {0x119c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x1029, 0x6, {0x6, 'raw\x00', 0x7, 0x80, "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"}}, @TCA_IPT_TARG={0x49, 0x6, {0x3ff, 'nat\x00', 0x9, 0x0, "714ad321ab6329df259f5066bd99bf354a459623061c2abf12550ae01d01b2"}}, @TCA_IPT_TARG={0x11e, 0x6, {0x5, 'security\x00', 0x2, 0x3, "08ba19f5676f2161a14b1105730ba92e05ec353e4d1f7917e3a3b6927eb1cc01dd51b74a14b059f695106ef5e660236f3307f8e19b6e03451e98c0618511bd4c149f3b57aec57bf74f2c12da0bc8ba511ac819c19eb71743a5dec7dc77a602ea6dcbf12b77bf3054e1d5ebd8eeafe853586e3e51023a27da14bac1f8727ef8e34ee60cc6b7fb3187e23b0c38434db9068bec246ffbabcf38324a5395f171efd5f71999ec2948b416a76dee6c15ee2425ccd372c30b078ea944a19ecba53178f3a95e2d5a86b30bc8c4745df1630dbea5bcb80336a3720a2567afed5f9a8579124962c95d1b8bc8014073bb98c23dc0c9c8618983"}}]}, {0xb9, 0x6, "0889ee8b6688ce0a9efb7df91d5a65aad38271c7d210b55922f4b1ce6e57e9efe7fee5051be938072f9338afa171d8bf28f87f68579e2631772bac6632c8370ae9cef01cecb93c39dbf1f23961b8faa22d509f7261f6a6aeeb2fdba90bf853dcc0affac1d7f1b25981b91027d1addee86ffca01816acf1b9908fe7cf2ca44463ae3c8fd123d079b25980702beb42be4ef4383892a0ce8e2bbb3519eec66a32efa1ca5041ce02d90a4e0ed587d642f11d99381140df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_police={0x434, 0x5, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xf43, 0xed, 0x8, 0x1, 0xa15, 0x5, 0x5, 0x7, 0xffffb2bc, 0x364, 0x2, 0x7f, 0x6, 0x7, 0x3, 0x3, 0x2, 0xe, 0xfffffffe, 0x80000001, 0x13, 0xe, 0xffffff16, 0x101, 0x6735, 0x7ff, 0x1, 0xfffffffb, 0x5, 0x9, 0x0, 0xf, 0x2, 0x8, 0x3, 0xa5b, 0x8, 0x2, 0x2, 0x7, 0x0, 0xead8, 0x10000, 0x3, 0x0, 0x2, 0x5, 0x6000, 0xfff, 0xff, 0x10001, 0x1000, 0xc9, 0x1, 0x7, 0x6, 0x7, 0x1, 0x4, 0x3, 0x0, 0xc, 0x80000001, 0x3, 0x101, 0xe, 0x80000000, 0x8, 0x9, 0xffffffff, 0x1, 0xe7, 0x0, 0x7, 0xfff, 0x200, 0x0, 0x1, 0xb0, 0x8, 0x80, 0xffffffff, 0x1, 0xffff9a37, 0x4d03, 0xfff, 0x80000000, 0x7, 0x6, 0x4, 0x3, 0x6, 0x40, 0x351, 0x80000000, 0x10000, 0x4, 0x7ff, 0x1000, 0x9, 0x2, 0x9, 0x9, 0x5, 0x8000, 0x7fff, 0x9, 0x4, 0x0, 0x7ff, 0x4, 0x36b2, 0x1f7c, 0x8000, 0x9b, 0x40, 0x379, 0x9, 0xfffffff7, 0x1, 0xec, 0xb57c, 0x2, 0x0, 0xc33, 0x7, 0xfffffff3, 0x3, 0x8000, 0x1, 0x3180, 0x557, 0xffff, 0x10001, 0x9, 0x0, 0xffffff7f, 0x7, 0xd, 0x101, 0x6, 0x80000000, 0x80000001, 0xd463, 0x4, 0xf953, 0x4, 0xb8cc, 0x101, 0x3ff, 0x7, 0x9, 0x0, 0x49a, 0x81, 0x2, 0x1ff, 0x800, 0x9, 0x5, 0x6, 0x3, 0x8, 0x8, 0x8, 0x7fff, 0x8, 0xfffffffb, 0x9, 0xff, 0x7f, 0x9, 0x7fff, 0x10000, 0x2, 0x7, 0x9, 0x9, 0x4, 0x8, 0x0, 0x8001, 0x0, 0x2, 0x6, 0x3, 0x4, 0x3, 0x0, 0x0, 0x4, 0x8, 0x2, 0x2, 0x5, 0x401, 0xe, 0x80, 0x1, 0xfffff132, 0x1200000, 0x5f47, 0x100, 0x7, 0x7ff, 0xf7be, 0x4, 0x8, 0x4, 0x54c3, 0xffffffff, 0x0, 0x7, 0x2, 0x5, 0x800, 0xa, 0x4, 0x5b3ae11f, 0x56, 0xffffffff, 0x26, 0x10001, 0x39d8, 0x8, 0x6, 0x600000, 0x1, 0x4, 0x40, 0x7fffffff, 0x2, 0x5, 0x5, 0x7, 0x9, 0x2, 0x35, 0x400, 0x0, 0xa000000, 0x3, 0x8, 0xffffffff, 0xfff, 0x7, 0x1, 0xbeb, 0x401, 0x98, 0x0, 0x0, 0x80000000, 0xc09, 0x1, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x28c4}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000180)={0x0, r3}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x0, 0x800, 0x16, @mcast1, @mcast2, 0x80, 0x40, 0x1, 0x8fc}}) 6.475558766s ago: executing program 2 (id=9045): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000004c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 5.896355246s ago: executing program 0 (id=9047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4c142, 0x0) gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000440)={r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x26f}]}) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r6 = syz_io_uring_setup(0x1f87, 0x0, &(0x7f0000000100), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32=r9], 0x44}}, 0x0) io_uring_enter(r6, 0x50, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40}, 0x18) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x23, @string={0x23, 0x3, "5d95b5db2648b4c56db3094885239e187f30232fb4711d740fabfa519a43621ba8"}}, 0x0, 0x0}, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect(0xffffffffffffffff, &(0x7f0000000140)=@rc, 0x80) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r10) ioctl$EVIOCGMASK(r11, 0x541b, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000080)=0x8001) 5.025963759s ago: executing program 4 (id=9049): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaa907800000000ffff"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x2, 0x0, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) 4.512377279s ago: executing program 2 (id=9054): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000040ec13060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00228000000000000000fc"], 0x0}, 0x0) 3.908933507s ago: executing program 4 (id=9056): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000002c0)={0xa, 0x102, 0x0, {0x1, 0x0, 0xfdfd}}) 3.599383217s ago: executing program 4 (id=9059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x9, 0x8, 0x6, 0x1d, 0xe, 0x4, 0x1}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0_to_hsr\x00', &(0x7f0000000c00)=@ethtool_gstrings={0x1b, 0x6}}) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', r7) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}], {0x14}}, 0x3c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[], 0x27) 3.589812724s ago: executing program 3 (id=9060): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x80ff, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) 3.475361795s ago: executing program 1 (id=9061): r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6a1275006a31e8c34181adbc33511d9976a99bd21ac2e885ef338b9265dcd7aaf5") prlimit64(r0, 0x4, &(0x7f0000000180)={0x4, 0x9}, &(0x7f00000001c0)) ptrace$setregs(0xd, r0, 0xc8bf, &(0x7f0000000200)="b6a99ef50e8f1319ab4a5bb1e8789a66a3853f45a651b33a10568bdc8c12c022218a0212296e3e5af34847f33e191cbf0f05afc20e1395622c8f8c4c4de3b5522c0c317eeced1b6589a6c8967aa6a6d30218ee10d4f91ca075f1e12a7b41e4ee4dc6d6edd2d7cb423592cfea3a308b179eb4f31abfbccf75300cb932773b4fbe370abfd8fbaa599a96543eb5a679ef62da4f6937849cfd512e01998407ae9fea0cad0542b484e998ffe38808abbc7c5676a6cd3f9319aabe33269d1f1b348535c31d6b6837d12e084a3be36034b644cabf9a4a") wait4(r0, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000400), 0x8, &(0x7f0000000480)) r2 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r2, 0x2ed, 0x47f0) fcntl$notify(r1, 0x402, 0x20) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002540)={0x20, 0x0, r3, {0x0, 0x13}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r1, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002600)=[0x0], 0x0, 0x84, &(0x7f0000002640)=[{}], 0x8, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000002700)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r6, r1, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a00)={{r1, 0xffffffffffffffff}, &(0x7f0000002980), &(0x7f00000029c0)=r1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002a40)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r8, 0x6, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000002b00)={0x0, @can, @isdn={0x22, 0x0, 0x40, 0x2, 0x6}, @l2={0x1f, 0x7, @any, 0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002ac0)='dvmrp0\x00', 0x6868, 0x3, 0x3}) sched_setscheduler(r2, 0x1, &(0x7f0000002b80)=0x32) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000002bc0)={0x7, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x6, [{{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003000)=r7, 0x4) read$FUSE(r1, &(0x7f0000003040)={0x2020}, 0x2020) r9 = openat$null(0xffffff9c, &(0x7f00000050c0), 0x200, 0x0) move_mount(r1, &(0x7f0000005080)='./file0\x00', r9, &(0x7f0000005100)='./file0\x00', 0x6) lsm_set_self_attr(0x0, &(0x7f0000005240)={0x0, 0x7f, 0xa6, 0x86, "b7d140b39726015ecc566e06bf5b23fd288b71586461da3e1f4cb8065eb4ac8cb0768546627cfae4f8f3458fb6f5016986ce069697664aab1055a6b9d576df97caecf6cd1eb5dddd53ec904d9d2405a4b2ac6c6c1c3444a287d5dceb1545222f54f07864ef3933f1ea08b29a39169993eb4a3e9e8bc0afaccd0746a0e90f18628268a9e1fd91"}, 0xa6, 0x0) r10 = add_key$user(&(0x7f0000005300), &(0x7f0000005340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) write$P9_RWALK(r1, &(0x7f0000005400)={0x30, 0x6f, 0x2, {0x3, [{0x40, 0x4, 0x1}, {0x10, 0x4, 0x7}, {0x4, 0x2, 0x8}]}}, 0x30) keyctl$set_timeout(0xf, r10, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000005440)={0x7, 'veth0_virt_wifi\x00', {0x5}, 0x80}) mount$fuseblk(&(0x7f0000005480), &(0x7f00000054c0)='./file0\x00', &(0x7f0000005500), 0x800084, &(0x7f0000005540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0xeda7000000000000}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@dont_measure}]}}) 3.301176734s ago: executing program 3 (id=9062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty=0x2000000}}, 0x0, 0x300}, 0x90) 3.229162056s ago: executing program 1 (id=9063): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x82940) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r2}) (async) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r6, &(0x7f0000000640)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r6, &(0x7f0000000200)="3ce2de0ad56f287b9c85dd001163d87efa1d524d8d957a8de4e490e10b2009ea6c4ee904bb7db6fc03b988d4edef164bd3377aa381b5f50b7ca414010000000000008082e9bde22b2b7c1c7606d56547070000000000000012feceb3c5c3684631f1c783bd43144a643ea40bcfa2753dfb51336e2215c6b4bcbe3c4b41ded54682875a5f064c90d483ec077e23821a6d5282d9575c304a61b3be795a39ab071c3f5059e22b4382133236079a3a81a2f3ad3faf11d9fd1fb12ea3b230dd859a", 0xfffffffffffffedb, 0x0, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1843008000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r8 = fanotify_init(0x200, 0x0) (async) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) (async) r9 = dup(0xffffffffffffffff) fanotify_mark(r8, 0x221, 0x4800105a, r9, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f880c73c8b73638d52cbf0ab7a0527ce4ec4dc478ac0e7bac41f7af0cb2869532c3cdac2719bbbdd6e29087058b5c52206c17b81a12b49607bbabc997c2901747c51f1a3a6a96dab2c8a4358d381c2edd5fe729d479e07d66cdda15516762c91ecb66271546edc8b5cc600a929f4800b5d92a4b2095ae95cba690279a9cadbfc466ba8bb2192a58d96d1c8ab95d8408546e025bb30e3a01ee5a2dd5510fc3c31dd41882c77ea735853f81447a48f8cbfe77cdab85b48b19059cf5691fa554f538e8e15708569d403dd61fbe5c9a2fd75725a64b0a1f244c7606be4834230c5677e4fd67ac31071ce318401cb55c1d267bb494c", 0xf3}, {&(0x7f00000002c0)="6f32dab4bd0bff379bb85fa8be98810d7d29e5ba3edaed7c67121128351d34b615cb315fcd6abe424de02ed84a5460e431ca8552f0754d9af8f03e467d9e72ddb4bc422a55f375008d3e8a356ca737d257b01ba90da91ab8a4a7b7850cee16f0675f30affad9e8bf10400c8b84c23be5ca086daa227598cb363c163af1a74cbba21d05f458aa09ca87a3f644d4289a5bc45e49e1623729356fa0ede296995f8712b2ba4637ebae09c83483adbb38070079b2c80d02f4950345e9ce6a3dd99a7303fa0df587f4742bb3030ee0d407524b6d9d3f2d8abaaa15f788e2deebc1255f03c6d406508d66f4f2481387b9fe8e4208626c9a8f551c94e4a2", 0x129}, {&(0x7f00000004c0)="60effd1f1e09455a51b807f8fa149dcd71c51fc94e79cb94ae0a1b5598f46bd6e7bf21565fb8978877f93d34804c43f1e7e4a2bb758e69000016232f58f9b31b0ffed008367f4e486fef5c36cddd7695bc96161039c809b5bf20e0d18f7377a356902a8c29a5351688dac3ac9c277ec19861797eb92b211cebde108d5e05e8140f83239f8e27e89bee06011e6279f0fc6242079811470e64b15fceed8d6571c57654e4bb40", 0xa5}, {&(0x7f00000015c0)="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", 0x1000}], 0x4) 3.055509014s ago: executing program 3 (id=9064): socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 3.017958083s ago: executing program 4 (id=9065): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001f00000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000002100010000000000000000000a00000000000000000000001400110076657468315fb8746f5f627269646765"], 0x38}}, 0x0) 3.009697454s ago: executing program 1 (id=9066): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaa907800000000ffff"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) timer_create(0x2, 0x0, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) 2.57545208s ago: executing program 0 (id=9067): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7ffc0001}]}) (async) r0 = syz_pidfd_open(0x0, 0x0) getpriority(0x2, 0x0) (async) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000004180)='/sys/block/loop0', 0x100, 0x28) (async) r2 = creat(&(0x7f0000000680)='./file0\x00', 0x0) (async) syncfs(0xffffffffffffffff) (async) getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) (async) pidfd_getfd(r2, r3, 0x0) (async) bind$inet6(r3, 0x0, 0x17) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='net/ip_vs_stats\x00') lseek(r4, 0xae7d, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020}, 0x2020) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x3) (async) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x8880) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00']) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000080105804055000000000000109022400010000000009040000010300000009210000000122f8040905d303"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_connect(0x4, 0x6f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100349f57420e8041b6616680102030109025d0901010590080904d103008ad3a70b4b045596f22efe09119bc122eefb2f22035428b2be01834ae511527f0ae09600c015b26c0425d325442fea19f1f35a1df05af9683b6a5b5425a21964ecbe4f058deb81a234672d46eef36b"], 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8b8204e6", @ANYRES32=r0], 0x0}, 0x0) (async) syz_usb_connect(0x0, 0xfffffffffffffe0a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000f94f51504919a5853aa3010203010902240001000000000904000002ff5d010009050303000000000009058a030000000000"], 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$UHID_INPUT(r7, &(0x7f00000001c0)={0x8, {"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", 0x1000}}, 0x1006) 2.453040379s ago: executing program 3 (id=9068): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1c, 0x2, 0xfffffdfd, "b43d70dde500c67f000000100000000000000000004000"}) 2.382513608s ago: executing program 2 (id=9069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.283507688s ago: executing program 4 (id=9070): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) listen(r1, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x0, 'W'}, @main=@item_012={0x2, 0x0, 0xb, "c11d"}]}}, 0x0}, 0x0) 2.212491611s ago: executing program 2 (id=9071): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000dc0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x921, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xc}}}, 0x24}}, 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=""/221, 0xdd) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000040)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000001180)=@report={0xf4, 0x20, 0x3, 0x0, 0x0, {0x0, {@in6=@mcast2, @in=@private}}, [@policy={0xa8, 0x7, {{@in=@local, @in6=@dev}}}]}, 0xf4}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x4000081}, 0x4001) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009f40522000000000009059232"], 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000180)={0xb4a, 0xf18, 0x0, 'queue1\x00', 0x2}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r11, &(0x7f0000000a00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x51, 0xc, "7cb160d704d509d5888147d048f79114cc8679126b0fd8905b9b9bb7e714328d4c18b29a1b21a6884c5e8d4476c59d7d71be151202125788fd1b831801a62e14757e1c17d81345eebe4e5bc06d"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x95ff]}}], 0xffc8) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x45e, 0x750, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0xe19}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8f, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x0, 0x3, 0x40}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x8, 0xb0, 0x9e, 0x20, 0x96}, 0x86, &(0x7f0000000300)={0x5, 0xf, 0x86, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0x80, 0xe, 0x1, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x34, 0x80, 0x5, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x1, 0x60, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x5, 0x2}, @generic={0x57, 0x10, 0x1, "ae736930010e5acc0b19bc4b031e96460bea0f0f833eed03583156e1fa15a05aeba5dd1639728fd31ac277b03a8a9c76b26c520f50d3d2d4af6aacd9f57f67eed050c183df0260708680d97d7bade1f5ec110b58"}]}, 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4427}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xd4f6}}, {0xb8, &(0x7f0000000a40)=ANY=[@ANYBLOB="b8037e522c555a9ffc916ab06a9ac396cba15d3db342559991656170d3d46dfcab603231fd0380f7c66ab599f727c7e2ed2902761b4db60bedae4aba78a5fe957dc1cd8f1fa0c86835a0afd71c68e4c5dc123e5a4ce7697eb4a2db21cf6b7491a8d63d6034ae58b0268fc6260255accd18d19ef687e09a61bc8c1e438c1bc16a90e87785ae53a63f3ecc5929e038ff81bdad20524fd527e6714860be334e8ca0515eb025c120a59432d89b208f0231e435ca3d94da2720daddf86b7ffe73022c6250d03d0f48114af268ccf47e1c23d82d9fa206f26c61e1ee209ad4"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}, {0x9b, &(0x7f0000000480)=@string={0x9b, 0x3, "f0a5e6203e4637a2f21a697ccf9cf85036911cbb648f31a232c8ee5322dfe180bee95fe520c6f38f0d5da02d2cfef57c8342e703475c9f58c3a27966f128392f66d25aeedf03af8c9b2753f248985dca903a760838f28e20afe6f659f232bcd07902c16d588a316d291571fb541cd2765e6e8f129d012cf534dac4d0bb600cc5527da7816c45bb6c4620be11bd762e02f763e925afbc6d7415"}}, {0x33, &(0x7f0000000540)=@string={0x33, 0x3, "0783e266a8c3a687e6c908ce421dc52648871c70532552b0a765ae0509649eef8101ce5a2014fb8027daa0ccf16fbf540e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2401}}, {0xd5, &(0x7f0000000840)=ANY=[@ANYBLOB="d5038aa8efc7630e30db012055566b51f5bf32dd6ff37157d39115ca2b1a8637cd9d9eec98816a8e2dbc7a629438c6134adbe71b4cfb6942a1925f6740e65d93140a74bffdc5a8929f927fe13b588423ee3b4dca031b3123e58ad61847b03db03de27fdb733de4427140b3af48567c2a9ac8038095d19e1a8d4c034e93a601986c2f9f3fa423e12e71f50e8037b8dcd1351c40ff839aebd4381262150000000000000000976d98be52f306e15d5511bd18fd2333b59851a8ec346c091cfe2a76299079a7c7f5802f4cbe892240271ddfb0e356c57756453624bb"]}, {0xb0, &(0x7f0000000700)=@string={0xb0, 0x3, "9ddd3b3ec9255879841ff04bebbd66405cd6cdec51c8f2f81d1c102b02a9cbe15346cb86ec80219dbc0865b811a70196534c17c546d8de07f972126d7b06e952ab6c94e7ff418e55f4e036201a011ed4216b76f93257d5c3257e87f93df7ad704896c6322d228ad08a3bc18b39359cca739766c2a423b366594ae6e437f0f35ec6cd6ddcaae2d314fd6e6f974d09bf0519d8492be507eed1bca6fc4d91330a253303f8d8bea41d8b6eeaa1d417d5"}}]}) syz_usb_disconnect(r9) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff0401000905"], 0x0) 2.16758444s ago: executing program 3 (id=9072): fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xa, 0x0, 0x9}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xc52}, &(0x7f0000000380)=0x18) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xeeee8000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = getpid() r4 = socket(0x840000000002, 0x3, 0xfa) r5 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000c8207f1048304a0b2f2a1000e445a194b9348d165cb1e6c085bea1373ff29d7543072d80860b77f0bde523ca9867817aac0200000000000000a5b378ef391ad122b3ddd96f3e4010da7f004b9c0637c639661d7157329a80ab0940455dc34f37a0bfd1ac263c9c10f8069e0ae58d87435b8ffcee4cfb", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8a6dff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0e2ffffb70200000800cd0018230000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x10, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000f, 0x40830, r4, 0xa9a17000) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0xc, 0x0, 0x0) syz_pidfd_open(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff"], 0x7c}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 1.975338037s ago: executing program 1 (id=9073): r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6a1275006a31e8c34181adbc33511d9976a99bd21ac2e885ef338b9265dcd7aaf5") prlimit64(r0, 0x4, &(0x7f0000000180)={0x4, 0x9}, &(0x7f00000001c0)) ptrace$setregs(0xd, r0, 0xc8bf, &(0x7f0000000200)="b6a99ef50e8f1319ab4a5bb1e8789a66a3853f45a651b33a10568bdc8c12c022218a0212296e3e5af34847f33e191cbf0f05afc20e1395622c8f8c4c4de3b5522c0c317eeced1b6589a6c8967aa6a6d30218ee10d4f91ca075f1e12a7b41e4ee4dc6d6edd2d7cb423592cfea3a308b179eb4f31abfbccf75300cb932773b4fbe370abfd8fbaa599a96543eb5a679ef62da4f6937849cfd512e01998407ae9fea0cad0542b484e998ffe38808abbc7c5676a6cd3f9319aabe33269d1f1b348535c31d6b6837d12e084a3be36034b644cabf9a4a") wait4(r0, &(0x7f0000000300), 0x8, &(0x7f0000000340)) r1 = openat$dlm_plock(0xffffff9c, &(0x7f00000003c0), 0x0, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000400), 0x8, &(0x7f0000000480)) r2 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r2, 0x2ed, 0x47f0) fcntl$notify(r1, 0x402, 0x20) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002540)={0x20, 0x0, r3, {0x0, 0x13}}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002840)={r1, 0xe0, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002600)=[0x0], 0x0, 0x84, &(0x7f0000002640)=[{}], 0x8, 0x10, &(0x7f0000002680), &(0x7f00000026c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000002700)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', r6, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r6, r1, 0x5, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a00)={{r1, 0xffffffffffffffff}, &(0x7f0000002980), &(0x7f00000029c0)=r1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002a40)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, r8, 0x6, '\x00', 0x0, r1, 0x5, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000002b00)={0x0, @can, @isdn={0x22, 0x0, 0x40, 0x2, 0x6}, @l2={0x1f, 0x7, @any, 0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002ac0)='dvmrp0\x00', 0x6868, 0x3, 0x3}) sched_setscheduler(r2, 0x1, &(0x7f0000002b80)=0x32) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000002bc0)={0x7, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x6, [{{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x38c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003000)=r7, 0x4) read$FUSE(r1, &(0x7f0000003040)={0x2020}, 0x2020) r9 = openat$null(0xffffff9c, &(0x7f00000050c0), 0x200, 0x0) move_mount(r1, &(0x7f0000005080)='./file0\x00', r9, &(0x7f0000005100)='./file0\x00', 0x6) lsm_set_self_attr(0x0, &(0x7f0000005240)={0x0, 0x7f, 0xa6, 0x86, "b7d140b39726015ecc566e06bf5b23fd288b71586461da3e1f4cb8065eb4ac8cb0768546627cfae4f8f3458fb6f5016986ce069697664aab1055a6b9d576df97caecf6cd1eb5dddd53ec904d9d2405a4b2ac6c6c1c3444a287d5dceb1545222f54f07864ef3933f1ea08b29a39169993eb4a3e9e8bc0afaccd0746a0e90f18628268a9e1fd91"}, 0xa6, 0x0) r10 = add_key$user(&(0x7f0000005300), &(0x7f0000005340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) write$P9_RWALK(r1, &(0x7f0000005400)={0x30, 0x6f, 0x2, {0x3, [{0x40, 0x4, 0x1}, {0x10, 0x4, 0x7}, {0x4, 0x2, 0x8}]}}, 0x30) keyctl$set_timeout(0xf, r10, 0xa) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000005440)={0x7, 'veth0_virt_wifi\x00', {0x5}, 0x80}) mount$fuseblk(&(0x7f0000005480), &(0x7f00000054c0)='./file0\x00', &(0x7f0000005500), 0x800084, &(0x7f0000005540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0xeda7000000000000}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@dont_measure}]}}) 1.433574677s ago: executing program 1 (id=9074): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r3 = syz_open_dev$I2C(&(0x7f0000000380), 0x0, 0x101000) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0xdab, 0x4800, 0x0, 0x0}, {0x85, 0x6e01, 0x1, &(0x7f00000006c0)="af"}], 0x2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000700)={0x39, 0xc, 0x2, 0x3, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x22}, @loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1]}, 0x68) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x4c, r8, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x9d, 0x7}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x3b0}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x0]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "cfb2"}]}, 0x4c}}, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r11, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002180)={0x24, r12, 0xa29, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) fcntl$getown(r2, 0x9) sendto$inet(r2, &(0x7f00000000c0)="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", 0x4b8, 0x300, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 554.461135ms ago: executing program 3 (id=9075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) (async) r1 = gettid() tkill(r1, 0x12) (async, rerun: 32) io_setup(0x401, &(0x7f00000001c0)=0x0) (rerun: 32) io_pgetevents(r2, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000000000000700000000400020d3dd000007000000ff0300000000000000002f38760000000000000100008000000000010000005d"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000040), 0x8) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f0000000440)="48b800200000000000000f23c00f21f83503000b000f23f8470f0946b988080000000895340000ba000000000f308f8828ef16060f01c2360fc736400f239f66450f2341c421896abc6c004d0000c74424000d000000c744240205000000c744240600000000", 0x66}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 205.084765ms ago: executing program 1 (id=9076): openat$nvram(0xffffff9c, &(0x7f0000000400), 0x8080, 0x0) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) openat$nvram(0xffffff9c, &(0x7f00000024c0), 0x480, 0x0) 0s ago: executing program 2 (id=9077): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[@ANYBLOB="84dc9be0172971aa8f9cfacb75a7d1a1431647395e88f819f2dd9b94c9c259c1e6670e588b42f9f1c9acd254f67ecbd20313"], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0xa00c}, {0xffffffffffffffff, 0x1401}, {r0, 0x225}, {0xffffffffffffffff, 0x1000}, {r0, 0x2fc}, {r1, 0x761c}, {0xffffffffffffffff, 0x1610}], 0x7, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) kernel console output (not intermixed with test programs): 019027][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2299.029676][ T3080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.038775][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2299.074654][ T3080] usb 5-1: config 0 descriptor?? [ 2299.093598][ T3080] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 2299.126609][ T29] audit: type=1326 audit(1728283063.164:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.1.8811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 2299.127836][ T7561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2299.196807][ T29] audit: type=1326 audit(1728283063.164:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.1.8811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 2299.239142][ T29] audit: type=1326 audit(1728283063.164:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.1.8811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 2299.262202][ T29] audit: type=1326 audit(1728283063.164:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.1.8811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 2299.314993][ T29] audit: type=1326 audit(1728283063.164:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.1.8811" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 2299.341289][ T7561] hsr_slave_0: entered promiscuous mode [ 2299.353024][ T7561] hsr_slave_1: entered promiscuous mode [ 2299.400163][T15119] usb 5-1: USB disconnect, device number 11 [ 2299.689728][ T7663] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.8817'. [ 2299.747777][ T7669] ÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 2300.232413][ T7690] "syz.1.8820" (7690) uses obsolete ecb(arc4) skcipher [ 2300.644919][ T5354] Bluetooth: hci2: command tx timeout [ 2300.777433][ T7561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2300.808382][ T7561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2300.885648][ T7561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2300.908602][ T7561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2301.213135][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2301.223204][ T7734] netlink: 'syz.1.8832': attribute type 10 has an invalid length. [ 2301.242794][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2301.293453][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2301.312704][ T7734] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2301.381318][ T7561] 8021q: adding VLAN 0 to HW filter on device team0 [ 2301.422302][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.429839][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2301.475148][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.482368][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2301.504983][ T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 2301.647218][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2301.675442][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 2301.730017][ T7561] veth0_vlan: entered promiscuous mode [ 2301.748507][ T7561] veth1_vlan: entered promiscuous mode [ 2301.777654][ T7561] veth0_macvtap: entered promiscuous mode [ 2301.805456][ T7561] veth1_macvtap: entered promiscuous mode [ 2301.815142][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 2301.893224][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.936115][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.974967][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.986075][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 2301.998878][ T9] usb usb2-port1: attempt power cycle [ 2302.004695][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.024612][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2302.042886][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.063504][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2302.083219][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.095246][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.106553][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.136493][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.155588][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.185197][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.202614][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2302.214227][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2302.241309][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2302.264721][ T7561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.279724][ T7561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.291224][ T7561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.301147][ T7561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.356692][ T5238] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2302.365430][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 2302.420354][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 2302.440238][T23406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.462314][T23406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.470426][ T5282] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2302.502565][T23406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.520343][T23406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.540271][ T5238] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2302.555177][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 2302.574288][ T5238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.595907][ T5238] usb 4-1: config 0 descriptor?? [ 2302.606226][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 2302.616091][ T5238] cp210x 4-1:0.0: cp210x converter detected [ 2302.625366][ T9] usb usb2-port1: unable to enumerate USB device [ 2302.642761][ T5282] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2302.664344][ T5282] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2302.676890][ T5282] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2302.691537][ T5282] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2302.714754][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2302.725077][ T5354] Bluetooth: hci2: command tx timeout [ 2302.732681][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.751909][ T5282] usb 5-1: Product: syz [ 2302.788909][ T5282] usb 5-1: Manufacturer: syz [ 2302.815397][ T5282] usb 5-1: SerialNumber: syz [ 2303.039862][ T7769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2303.055540][ T7769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2303.162265][ T5282] usb 5-1: USB disconnect, device number 12 [ 2303.200912][ T5763] udevd[5763]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 2303.436159][ T5238] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 2303.462115][ T5238] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 2303.488280][ T5238] usb 4-1: cp210x converter now attached to ttyUSB0 [ 2303.510105][ T5238] usb 4-1: USB disconnect, device number 64 [ 2303.537595][ T5238] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2303.560395][ T5238] cp210x 4-1:0.0: device disconnected [ 2304.429123][ T7838] FAULT_INJECTION: forcing a failure. [ 2304.429123][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.444477][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.3.8846 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2304.455287][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2304.465474][ T7838] Call Trace: [ 2304.468779][ T7838] [ 2304.471732][ T7838] dump_stack_lvl+0x241/0x360 [ 2304.476442][ T7838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2304.481672][ T7838] ? __pfx__printk+0x10/0x10 [ 2304.486306][ T7838] should_fail_ex+0x3b0/0x4e0 [ 2304.491021][ T7838] ? dst_alloc+0x12b/0x190 [ 2304.495484][ T7838] should_failslab+0xac/0x100 [ 2304.500192][ T7838] ? dst_alloc+0x12b/0x190 [ 2304.504626][ T7838] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2304.510009][ T7838] dst_alloc+0x12b/0x190 [ 2304.514249][ T7838] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 2304.520331][ T7838] ip_route_output_key_hash+0x193/0x2b0 [ 2304.525895][ T7838] ? ip_route_output_key_hash+0xdf/0x2b0 [ 2304.531524][ T7838] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2304.537587][ T7838] ? stack_trace_save+0x118/0x1d0 [ 2304.542632][ T7838] ? __pfx_stack_trace_save+0x10/0x10 [ 2304.548017][ T7838] tcp_v4_connect+0x6df/0x1ba0 [ 2304.552885][ T7838] ? __pfx_tcp_v4_connect+0x10/0x10 [ 2304.558085][ T7838] __inet_stream_connect+0x262/0xf30 [ 2304.563478][ T7838] ? __pfx___inet_stream_connect+0x10/0x10 [ 2304.569286][ T7838] ? __kasan_kmalloc+0x98/0xb0 [ 2304.574044][ T7838] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 2304.579411][ T7838] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 2304.585497][ T7838] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 2304.590696][ T7838] tcp_sendmsg_locked+0x4a23/0x50a0 [ 2304.595894][ T7838] ? __lock_acquire+0x1384/0x2050 [ 2304.600936][ T7838] ? mark_lock+0x9a/0x360 [ 2304.605265][ T7838] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2304.611246][ T7838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2304.617579][ T7838] ? lockdep_hardirqs_on+0x99/0x150 [ 2304.622776][ T7838] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2304.628314][ T7838] ? __local_bh_enable_ip+0x168/0x200 [ 2304.633687][ T7838] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2304.638888][ T7838] tcp_sendmsg+0x30/0x50 [ 2304.643132][ T7838] __sock_sendmsg+0x1a6/0x270 [ 2304.647902][ T7838] __sys_sendto+0x39b/0x4f0 [ 2304.652406][ T7838] ? __pfx___sys_sendto+0x10/0x10 [ 2304.657475][ T7838] ? __mutex_unlock_slowpath+0x21d/0x750 [ 2304.663121][ T7838] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2304.669636][ T7838] __ia32_sys_sendto+0xdd/0x100 [ 2304.674492][ T7838] __do_fast_syscall_32+0xb4/0x110 [ 2304.679600][ T7838] ? exc_page_fault+0x590/0x8c0 [ 2304.684462][ T7838] do_fast_syscall_32+0x34/0x80 [ 2304.689314][ T7838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2304.695649][ T7838] RIP: 0023:0xf7f44579 [ 2304.700154][ T7838] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2304.719761][ T7838] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2304.728196][ T7838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2304.736261][ T7838] RDX: 0000000000000000 RSI: 0000000020024094 RDI: 0000000020000040 [ 2304.744226][ T7838] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 2304.752194][ T7838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2304.760162][ T7838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2304.768146][ T7838] [ 2304.826594][ T7817] fuse: Bad value for 'fd' [ 2304.919709][T29164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2304.933095][T29164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2304.942552][T29164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2304.949998][ T29] audit: type=1326 audit(1728283069.464:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.0.8840" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 2304.975258][T29164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2304.983090][T29164] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2304.992082][T29164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2305.369485][ T7849] chnl_net:caif_netlink_parms(): no params data found [ 2305.509016][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 2305.525191][ T7849] bridge0: port 1(bridge_slave_0) entered disabled state [ 2305.532743][ T7849] bridge_slave_0: entered allmulticast mode [ 2305.541250][ T7849] bridge_slave_0: entered promiscuous mode [ 2305.550184][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 2305.560478][ T7849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2305.568096][ T7849] bridge_slave_1: entered allmulticast mode [ 2305.580373][ T7849] bridge_slave_1: entered promiscuous mode [ 2305.632810][ T7849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2305.658489][ T7849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2305.702852][ T7849] team0: Port device team_slave_0 added [ 2305.713763][ T7849] team0: Port device team_slave_1 added [ 2305.894532][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2305.902516][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2305.964931][ T7849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2306.007489][ T7849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2306.022003][ T7849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2306.036666][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8855'. [ 2306.069856][ T7849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2306.125021][ T5286] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 2306.182929][ T7849] hsr_slave_0: entered promiscuous mode [ 2306.198472][ T7849] hsr_slave_1: entered promiscuous mode [ 2306.225365][ T7849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2306.233658][ T7849] Cannot create hsr debugfs directory [ 2306.283605][ T5286] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 2306.301804][ T5286] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 2306.314548][ T5286] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2306.327032][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2306.340561][ T5286] usb 3-1: string descriptor 0 read error: -22 [ 2306.349343][ T5286] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 2306.358948][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.395782][ T5286] usb 3-1: config 0 descriptor?? [ 2306.407368][ T5286] hub 3-1:0.0: bad descriptor, ignoring hub [ 2306.414218][ T5286] hub 3-1:0.0: probe with driver hub failed with error -5 [ 2306.684551][ T7881] FAULT_INJECTION: forcing a failure. [ 2306.684551][ T7881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2306.703127][ T7881] CPU: 1 UID: 0 PID: 7881 Comm: syz.1.8861 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2306.713856][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2306.723937][ T7881] Call Trace: [ 2306.727247][ T7881] [ 2306.730196][ T7881] dump_stack_lvl+0x241/0x360 [ 2306.734962][ T7881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2306.740279][ T7881] ? __pfx__printk+0x10/0x10 [ 2306.744907][ T7881] ? __pfx_lock_release+0x10/0x10 [ 2306.744989][T15119] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2306.749985][ T7881] should_fail_ex+0x3b0/0x4e0 [ 2306.762577][ T7881] _copy_to_iter+0x1ed/0x1d60 [ 2306.767277][ T7881] ? __virt_addr_valid+0x183/0x530 [ 2306.772392][ T7881] ? __skb_try_recv_datagram+0x49a/0x6a0 [ 2306.778027][ T7881] ? __pfx_lock_release+0x10/0x10 [ 2306.783157][ T7881] ? __pfx__copy_to_iter+0x10/0x10 [ 2306.788266][ T7881] ? __virt_addr_valid+0x183/0x530 [ 2306.793380][ T7881] ? __virt_addr_valid+0x183/0x530 [ 2306.798485][ T7881] ? __virt_addr_valid+0x45f/0x530 [ 2306.803592][ T7881] ? __phys_addr_symbol+0x2f/0x70 [ 2306.808634][ T7881] ? __check_object_size+0x48e/0x900 [ 2306.814008][ T7881] __skb_datagram_iter+0x107/0x900 [ 2306.819206][ T7881] ? __local_bh_enable_ip+0x168/0x200 [ 2306.824585][ T7881] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 2306.830213][ T7881] ? qrtr_recvmsg+0x101/0xc90 [ 2306.834898][ T7881] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2306.840804][ T7881] skb_copy_datagram_iter+0xd1/0x250 [ 2306.846088][ T7881] qrtr_recvmsg+0x27b/0xc90 [ 2306.850594][ T7881] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 2306.855791][ T7881] ? __pfx_lock_acquire+0x10/0x10 [ 2306.860819][ T7881] ? aa_sock_msg_perm+0x91/0x160 [ 2306.865931][ T7881] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2306.871305][ T7881] ? __pfx_qrtr_recvmsg+0x10/0x10 [ 2306.876327][ T7881] sock_recvmsg+0x22f/0x280 [ 2306.880832][ T7881] sock_read_iter+0x2c4/0x3d0 [ 2306.885507][ T7881] ? __pfx_sock_read_iter+0x10/0x10 [ 2306.890709][ T7881] ? bpf_lsm_file_permission+0x9/0x10 [ 2306.896161][ T7881] ? security_file_permission+0x74/0x280 [ 2306.901797][ T7881] vfs_read+0x9bb/0xbc0 [ 2306.905953][ T7881] ? __pfx_lock_release+0x10/0x10 [ 2306.910987][ T7881] ? __pfx_vfs_read+0x10/0x10 [ 2306.915672][ T7881] ? fdget_pos+0x19a/0x320 [ 2306.920087][ T7881] ksys_read+0x183/0x2b0 [ 2306.924323][ T7881] ? __pfx_ksys_read+0x10/0x10 [ 2306.929079][ T7881] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2306.935666][ T7881] ? lockdep_hardirqs_on+0x99/0x150 [ 2306.940948][ T7881] __do_fast_syscall_32+0xb4/0x110 [ 2306.946055][ T7881] ? exc_page_fault+0x590/0x8c0 [ 2306.950933][ T7881] do_fast_syscall_32+0x34/0x80 [ 2306.955797][ T7881] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2306.962132][ T7881] RIP: 0023:0xf7f34579 [ 2306.966209][ T7881] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2306.986174][ T7881] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2306.994687][ T7881] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 2307.002652][ T7881] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 2307.010707][ T7881] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2307.018673][ T7881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2307.026641][ T7881] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2307.034621][ T7881] [ 2307.051589][ T5354] Bluetooth: hci4: command tx timeout [ 2307.075374][ T3080] usb 3-1: USB disconnect, device number 83 [ 2307.095560][ T7849] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.185256][T15119] usb 4-1: Using ep0 maxpacket: 8 [ 2307.191929][T15119] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2307.204967][T15119] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2307.224619][T15119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.459976][T15119] usb 4-1: string descriptor 0 read error: -71 [ 2307.477556][ T7849] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.485506][T15119] hub 4-1:32.0: bad descriptor, ignoring hub [ 2307.515142][T15119] hub 4-1:32.0: probe with driver hub failed with error -5 [ 2307.618336][T15119] usb 4-1: USB disconnect, device number 65 [ 2307.828174][ T7849] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.947940][ T7849] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2308.055054][ T5286] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2308.181810][ T7849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2308.213953][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 2308.222938][ T7849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2308.241732][ T5286] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2308.256945][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.273388][ T5286] usb 3-1: Product: syz [ 2308.284500][ T7849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2308.299826][ T5286] usb 3-1: Manufacturer: syz [ 2308.305369][ T5286] usb 3-1: SerialNumber: syz [ 2308.312016][ T5286] usb 3-1: config 0 descriptor?? [ 2308.348582][ T7849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2308.533942][ T5286] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2308.593193][ T7849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2308.700025][ T7849] 8021q: adding VLAN 0 to HW filter on device team0 [ 2308.742221][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2308.742289][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2308.793520][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 2308.793587][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2308.863691][ T7849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2308.894397][ T7849] veth0_vlan: entered promiscuous mode [ 2308.901409][ T7849] veth1_vlan: entered promiscuous mode [ 2308.970961][ T7849] veth0_macvtap: entered promiscuous mode [ 2308.975038][ T7849] veth1_macvtap: entered promiscuous mode [ 2309.018644][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.029347][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.041809][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.041832][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.041860][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.041881][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.041898][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.041943][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.043574][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.065525][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2309.077256][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.125768][ T5354] Bluetooth: hci4: command tx timeout [ 2309.129680][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.144745][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.155558][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.165480][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.176192][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.186145][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.196685][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.207507][ T7849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.218422][ T7849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.229565][ T7849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2309.327486][ T7849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.327526][ T7849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.327556][ T7849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.327583][ T7849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.336656][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 2309.339450][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2309.446800][ T9] usb 4-1: string descriptor 0 read error: -22 [ 2309.446893][ T9] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 2309.446920][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.453279][ T9] usb 4-1: config 0 descriptor?? [ 2309.524116][ T2534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2309.524143][ T2534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2309.570510][ T1811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2309.570537][ T1811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2310.050883][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.053956][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.205064][ T5282] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2310.368562][ T5282] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2310.368653][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.368677][ T5282] usb 5-1: Product: syz [ 2310.368695][ T5282] usb 5-1: Manufacturer: syz [ 2310.368711][ T5282] usb 5-1: SerialNumber: syz [ 2310.371093][ T5282] usb 5-1: config 0 descriptor?? [ 2310.645063][ T9] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 2310.665906][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 2310.673983][ T9] dib0700: firmware download failed at 7 with -22 [ 2310.702586][ T9] usb 4-1: USB disconnect, device number 66 [ 2310.775516][ T7922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.815424][ T7922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2310.858682][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.965449][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2311.076080][ T5286] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2311.092620][ T5286] usb 3-1: USB disconnect, device number 84 [ 2311.185040][ T7916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2311.205152][ T5354] Bluetooth: hci4: command tx timeout [ 2311.223449][ T7916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2311.243363][T17290] usb 5-1: USB disconnect, device number 13 [ 2311.281375][ T7919] dccp_close: ABORT with 32 bytes unread [ 2311.790243][ T7928] netlink: 'syz.2.8876': attribute type 1 has an invalid length. [ 2311.846440][ T5354] Bluetooth: hci3: unexpected cc 0x2039 length: 4 > 1 [ 2313.075673][T15119] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2313.214394][ T7949] netlink: 'syz.0.8880': attribute type 10 has an invalid length. [ 2313.285454][ T5354] Bluetooth: hci4: command tx timeout [ 2313.308366][ T7949] team0: Device ipvlan1 failed to register rx_handler [ 2313.356081][T15119] usb 2-1: Using ep0 maxpacket: 8 [ 2313.378132][T15119] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2313.391304][T15119] usb 2-1: config 0 has no interface number 0 [ 2313.399631][T15119] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2313.411428][T15119] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2313.424290][T15119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.441471][T15119] usb 2-1: config 0 descriptor?? [ 2313.466587][T15119] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2313.525394][T17290] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2313.537719][ T7954] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8887'. [ 2313.549723][ T7954] openvswitch: netlink: EtherType 0 is less than min 600 [ 2313.582689][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8887'. [ 2313.665278][ T2534] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.687943][T15119] usb 2-1: USB disconnect, device number 6 [ 2313.688004][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2313.705582][T15119] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 2313.715189][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2313.734890][T17290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2313.794857][T17290] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2313.809612][T17290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.824620][T17290] usb 3-1: config 0 descriptor?? [ 2313.914372][ T2534] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.049810][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2314.078890][ T2534] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.090293][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2314.124407][T17290] usbhid 3-1:0.0: can't add hid device: -71 [ 2314.138295][T17290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2314.174076][T17290] usb 3-1: USB disconnect, device number 85 [ 2314.216466][T29164] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2314.260347][T29164] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2314.262019][ T2534] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.291428][T29164] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2314.310159][T29164] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2314.321622][T29164] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2314.335475][T29164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2314.384940][T15119] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2314.555034][T15119] usb 4-1: Using ep0 maxpacket: 32 [ 2314.562067][T15119] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.574983][T15119] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2314.592683][ T2534] bridge_slave_1: left allmulticast mode [ 2314.594453][T15119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.604592][ T2534] bridge_slave_1: left promiscuous mode [ 2314.615107][ T2534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.622826][T15119] usb 4-1: Product: syz [ 2314.627204][T15119] usb 4-1: Manufacturer: syz [ 2314.632097][T15119] usb 4-1: SerialNumber: syz [ 2314.632508][ T2534] bridge_slave_0: left allmulticast mode [ 2314.644596][T15119] usb 4-1: config 0 descriptor?? [ 2314.662134][T15119] usb 4-1: no audio or video endpoints found [ 2314.675016][ T2534] bridge_slave_0: left promiscuous mode [ 2314.685236][ T2534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.207619][T15119] usb 4-1: USB disconnect, device number 67 [ 2315.463673][ T2534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2315.475111][ T2534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2315.488265][ T2534] bond0 (unregistering): Released all slaves [ 2315.647799][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 2315.727564][ T7983] pimreg: entered allmulticast mode [ 2315.820298][ T7983] pimreg: left allmulticast mode [ 2316.191171][ T2534] hsr_slave_0: left promiscuous mode [ 2316.197413][ T2534] hsr_slave_1: left promiscuous mode [ 2316.208385][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2316.225246][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2316.245130][ T5306] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2316.263771][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2316.294971][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2316.358504][ T2534] veth1_macvtap: left promiscuous mode [ 2316.384528][ T2534] veth0_macvtap: left promiscuous mode [ 2316.395138][ T5306] usb 2-1: Using ep0 maxpacket: 32 [ 2316.400738][ T2534] veth1_vlan: left promiscuous mode [ 2316.407020][ T5354] Bluetooth: hci4: command tx timeout [ 2316.428098][ T5306] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 2316.435530][ T2534] veth0_vlan: left promiscuous mode [ 2316.437819][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.456774][ T5306] usb 2-1: Product: syz [ 2316.460979][ T5306] usb 2-1: Manufacturer: syz [ 2316.465241][T29164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2316.465705][ T5306] usb 2-1: SerialNumber: syz [ 2316.479009][T29164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2316.489189][ T5306] usb 2-1: config 0 descriptor?? [ 2316.489355][T29164] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2316.503158][T29164] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2316.510917][T29164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2316.518458][T29164] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2317.124900][ T5286] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2317.296240][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 2317.310435][ T5286] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2317.339008][ T5286] usb 4-1: config 0 has no interface number 0 [ 2317.353753][ T5286] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2317.390769][ T5286] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2317.409161][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2317.432588][ T5286] usb 4-1: config 0 descriptor?? [ 2317.461351][ T5286] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2317.671722][ T5286] usb 4-1: USB disconnect, device number 68 [ 2317.677840][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2317.726592][ T5286] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2318.486423][ T5354] Bluetooth: hci4: command tx timeout [ 2318.565223][ T5354] Bluetooth: hci2: command tx timeout [ 2318.576194][ T2534] team0 (unregistering): Port device team_slave_1 removed [ 2318.740653][ T2534] team0 (unregistering): Port device team_slave_0 removed [ 2318.891558][ T8037] x_tables: duplicate underflow at hook 1 [ 2319.151614][T15119] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2319.358627][T15119] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2319.387829][T15119] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2319.396489][T15119] usb 4-1: can't read configurations, error -22 [ 2319.522287][ T5306] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 2319.531302][T15119] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2319.553748][ T5306] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 2319.587820][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2319.596223][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2319.603428][ T7961] bridge_slave_0: entered allmulticast mode [ 2319.611085][ T7961] bridge_slave_0: entered promiscuous mode [ 2319.621820][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 2319.629028][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 2319.636599][ T7961] bridge_slave_1: entered allmulticast mode [ 2319.655389][ T7961] bridge_slave_1: entered promiscuous mode [ 2319.725751][T15119] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2319.769783][T15119] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2319.772038][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2319.791061][T15119] usb 4-1: can't read configurations, error -22 [ 2319.804040][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2319.815828][T15119] usb usb4-port1: attempt power cycle [ 2319.828002][ T5306] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 2319.856052][ T5306] usb 2-1: USB disconnect, device number 7 [ 2319.923958][ T7961] team0: Port device team_slave_0 added [ 2319.935469][ T7961] team0: Port device team_slave_1 added [ 2320.135598][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2320.154241][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.194952][T15119] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2320.227754][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2320.252961][T15119] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2320.279587][T15119] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2320.292317][T15119] usb 4-1: can't read configurations, error -22 [ 2320.328190][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2320.344922][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2320.373542][T29164] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2320.387864][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2320.399200][T29164] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2320.413378][T29164] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2320.428061][T29164] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2320.444923][T15119] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2320.455956][T29164] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2320.468090][T29164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2320.476184][T15119] usb 4-1: too many configurations: 128, using maximum allowed: 8 [ 2320.496900][ T8008] chnl_net:caif_netlink_parms(): no params data found [ 2320.565010][T29164] Bluetooth: hci4: command tx timeout [ 2320.590921][T15119] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 2320.599864][T15119] usb 4-1: can't read configurations, error -22 [ 2320.609827][T15119] usb usb4-port1: unable to enumerate USB device [ 2320.645924][T29164] Bluetooth: hci2: command tx timeout [ 2320.686810][ T7961] hsr_slave_0: entered promiscuous mode [ 2320.693710][ T7961] hsr_slave_1: entered promiscuous mode [ 2320.703338][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2320.711024][ T7961] Cannot create hsr debugfs directory [ 2320.806905][ T8008] bridge0: port 1(bridge_slave_0) entered blocking state [ 2320.824086][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 2320.832283][ T8008] bridge_slave_0: entered allmulticast mode [ 2320.845796][ T8008] bridge_slave_0: entered promiscuous mode [ 2320.878877][ T8008] bridge0: port 2(bridge_slave_1) entered blocking state [ 2320.895109][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 2320.902556][ T8008] bridge_slave_1: entered allmulticast mode [ 2320.911570][ T8008] bridge_slave_1: entered promiscuous mode [ 2320.971217][ T2534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.060485][ T8008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2321.073488][ T8008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2321.151240][ T2534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.281977][ T2534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.312423][ T8008] team0: Port device team_slave_0 added [ 2321.323334][ T8008] team0: Port device team_slave_1 added [ 2321.419834][ T2534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2321.437405][ T8077] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.8907'. [ 2321.505683][T15119] hid-generic 0000:3000000:0000.00C4: unknown main item tag 0x4 [ 2321.521535][T15119] hid-generic 0000:3000000:0000.00C4: unknown main item tag 0x2 [ 2321.532017][T15119] hid-generic 0000:3000000:0000.00C4: unknown main item tag 0x4 [ 2321.543604][T15119] hid-generic 0000:3000000:0000.00C4: item fetching failed at offset 30/32 [ 2321.554676][T15119] hid-generic 0000:3000000:0000.00C4: probe with driver hid-generic failed with error -22 [ 2321.601225][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2321.613941][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2321.648204][ T8008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2321.670796][ T8008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2321.684455][ T8008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2321.722592][ T8008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2321.902217][ T8087] netlink: 'syz.3.8911': attribute type 29 has an invalid length. [ 2321.916183][ T8092] netlink: 'syz.3.8911': attribute type 29 has an invalid length. [ 2322.168428][ T8008] hsr_slave_0: entered promiscuous mode [ 2322.188553][ T8008] hsr_slave_1: entered promiscuous mode [ 2322.204327][ T8008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2322.218962][ T8008] Cannot create hsr debugfs directory [ 2322.234466][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 2322.565002][T29164] Bluetooth: hci1: command tx timeout [ 2322.630918][ T2534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.653007][T29164] Bluetooth: hci4: command tx timeout [ 2322.724971][T29164] Bluetooth: hci2: command tx timeout [ 2322.828412][ T2534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2322.874963][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 2322.882067][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 2322.905201][ T8056] bridge_slave_0: entered allmulticast mode [ 2322.915039][ T8056] bridge_slave_0: entered promiscuous mode [ 2322.932237][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 2322.952924][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 2322.965320][ T8056] bridge_slave_1: entered allmulticast mode [ 2322.972360][ T8056] bridge_slave_1: entered promiscuous mode [ 2323.031512][ T2534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.127815][ T2534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2323.165679][ T8102] netlink: 'syz.3.8914': attribute type 28 has an invalid length. [ 2323.201296][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2323.211953][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2323.386473][ T8056] team0: Port device team_slave_0 added [ 2323.386868][ T7961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2323.403762][ T7961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2323.424071][ T8056] team0: Port device team_slave_1 added [ 2323.475550][ T7961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2323.533491][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2323.533512][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.533537][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2323.535635][ T7961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2323.588946][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2323.588965][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2323.588987][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2323.791431][ T8056] hsr_slave_0: entered promiscuous mode [ 2323.803598][ T8056] hsr_slave_1: entered promiscuous mode [ 2323.822684][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2323.822712][ T8056] Cannot create hsr debugfs directory [ 2323.824018][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8914'. [ 2323.824050][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8914'. [ 2323.900019][ T2534] bridge_slave_1: left allmulticast mode [ 2323.900052][ T2534] bridge_slave_1: left promiscuous mode [ 2323.900223][ T2534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.902412][ T2534] bridge_slave_0: left allmulticast mode [ 2323.937458][ T2534] bridge_slave_0: left promiscuous mode [ 2323.937642][ T2534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.953108][ T2534] bridge_slave_1: left allmulticast mode [ 2323.953142][ T2534] bridge_slave_1: left promiscuous mode [ 2323.953295][ T2534] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.963380][ T2534] bridge_slave_0: left allmulticast mode [ 2323.988210][ T2534] bridge_slave_0: left promiscuous mode [ 2323.988357][ T2534] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.645205][T29164] Bluetooth: hci1: command tx timeout [ 2324.812234][T29164] Bluetooth: hci2: command tx timeout [ 2324.862058][ T2534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2324.873091][ T2534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2324.895396][ T2534] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2324.912600][ T2534] bond0 (unregistering): Released all slaves [ 2325.038246][ T8115] fuse: Bad value for 'fd' [ 2325.172282][ T2534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2325.183193][ T2534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2325.195998][ T2534] bond0 (unregistering): Released all slaves [ 2325.329830][T23601] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2325.540079][T23601] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.550535][T23601] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2325.571409][T23601] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2325.586950][T23601] usb 4-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 2325.596437][T23601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.605395][T23601] usb 4-1: Product: syz [ 2325.609676][T23601] usb 4-1: Manufacturer: syz [ 2325.614286][T23601] usb 4-1: SerialNumber: syz [ 2325.646491][T23601] usb 4-1: config 0 descriptor?? [ 2325.657805][T23601] usb 4-1: Found UVC 0.00 device syz (0086:0b5b) [ 2325.664304][T23601] usb 4-1: No valid video chain found. [ 2325.688849][ T7961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2325.952899][ T7961] 8021q: adding VLAN 0 to HW filter on device team0 [ 2325.977537][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 2325.984646][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2326.025870][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 2326.033046][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2326.060596][ T2534] hsr_slave_0: left promiscuous mode [ 2326.073449][ T2534] hsr_slave_1: left promiscuous mode [ 2326.084462][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2326.111750][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2326.143842][ T2534] hsr_slave_0: left promiscuous mode [ 2326.181138][ T2534] hsr_slave_1: left promiscuous mode [ 2326.224739][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2326.226470][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2326.233740][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.278538][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2326.289298][ T2534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2326.302686][ T2534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2326.352522][ T2534] veth1_macvtap: left promiscuous mode [ 2326.358855][ T2534] veth0_macvtap: left promiscuous mode [ 2326.375053][ T2534] veth1_vlan: left promiscuous mode [ 2326.380414][ T2534] veth0_vlan: left promiscuous mode [ 2326.419458][ T2534] veth1_macvtap: left promiscuous mode [ 2326.434878][ T2534] veth0_macvtap: left promiscuous mode [ 2326.445668][ T2534] veth1_vlan: left promiscuous mode [ 2326.451193][ T2534] veth0_vlan: left promiscuous mode [ 2326.726741][T29164] Bluetooth: hci1: command tx timeout [ 2327.749142][ T2534] team0 (unregistering): Port device team_slave_1 removed [ 2327.837473][ T2534] team0 (unregistering): Port device team_slave_0 removed [ 2328.809852][T29164] Bluetooth: hci1: command tx timeout [ 2329.130826][ T2534] team0 (unregistering): Port device team_slave_1 removed [ 2329.199971][ T2534] team0 (unregistering): Port device team_slave_0 removed [ 2330.004655][ T5300] usb 4-1: USB disconnect, device number 73 [ 2330.154489][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2330.264630][ T7961] veth0_vlan: entered promiscuous mode [ 2330.298466][ T7961] veth1_vlan: entered promiscuous mode [ 2330.418867][ T7961] veth0_macvtap: entered promiscuous mode [ 2330.483415][ T7961] veth1_macvtap: entered promiscuous mode [ 2330.562065][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.590043][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.604499][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.620102][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.634624][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2330.650995][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.684102][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2330.738419][ T8056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2330.794482][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2330.817272][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.844230][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2330.860230][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.877580][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2330.893017][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2330.933321][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2331.000599][ T8056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2331.054454][ T8056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2331.090515][ T7961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.124293][ T7961] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.139503][ T7961] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.148437][ T7961] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.174166][ T8056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2331.365295][ T5300] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2331.461946][ T8008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2331.483103][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2331.496912][ T8008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2331.507287][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2331.534153][ T8008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2331.538026][ T5300] usb 4-1: Using ep0 maxpacket: 16 [ 2331.560253][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2331.579268][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2331.589350][ T8008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2331.599015][ T5300] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2331.612282][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.619368][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2331.633398][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.640846][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2331.642316][ T5300] usb 4-1: config 0 descriptor?? [ 2331.691007][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 2331.738651][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2331.745844][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2331.781963][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2331.789172][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2331.967332][ T8056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2332.095660][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2332.101487][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2332.124422][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2332.136870][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2332.161393][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8922'. [ 2332.193611][ T8008] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.226715][ T8216] ptrace attach of "./syz-executor exec"[6693] was attempted by "./syz-executor exec"[8216] [ 2332.238872][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 2332.246033][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2332.277767][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2332.317018][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 2332.324170][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2332.339259][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2332.375026][ T5300] usbhid 4-1:0.0: can't add hid device: -71 [ 2332.381071][ T5300] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2332.430935][ T5300] usb 4-1: USB disconnect, device number 74 [ 2332.482647][ T8056] veth0_vlan: entered promiscuous mode [ 2332.521996][ T8056] veth1_vlan: entered promiscuous mode [ 2332.589970][ T8056] veth0_macvtap: entered promiscuous mode [ 2332.601257][ T8056] veth1_macvtap: entered promiscuous mode [ 2332.628706][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2332.642472][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2332.654529][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.666372][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2332.677189][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.687591][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2332.701329][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.711463][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2332.722296][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.736685][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2332.744970][T23601] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2332.761092][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2332.772934][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.783122][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2332.794638][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.804620][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2332.815562][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.825578][ T8056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2332.836798][ T8056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2332.848178][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2332.871033][ T8056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.881079][ T8056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.891169][ T8056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.900393][ T8056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.919328][T23601] usb 5-1: Using ep0 maxpacket: 8 [ 2332.932603][T23601] usb 5-1: config 0 has an invalid interface number: 48 but max is 12 [ 2332.948561][T23601] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2332.967555][T23601] usb 5-1: config 0 has no interface number 0 [ 2332.980586][ T8008] veth0_vlan: entered promiscuous mode [ 2332.992646][T23601] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 2333.004004][T23601] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 2333.019261][T23601] usb 5-1: config 0 interface 48 has no altsetting 0 [ 2333.037501][T23601] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2333.057434][T23601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.091253][T23601] usb 5-1: Product: syz [ 2333.095878][T23601] usb 5-1: Manufacturer: syz [ 2333.100590][T23601] usb 5-1: SerialNumber: syz [ 2333.109834][ T8008] veth1_vlan: entered promiscuous mode [ 2333.129180][T23601] usb 5-1: config 0 descriptor?? [ 2333.249424][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2333.276263][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2333.359016][ T8008] veth0_macvtap: entered promiscuous mode [ 2333.369904][T23601] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2333.454193][ T3046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2333.473991][ T8008] veth1_macvtap: entered promiscuous mode [ 2333.488415][ T3046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2333.601107][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2333.651639][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2333.685171][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2333.722732][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2333.751686][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2333.798961][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2333.821693][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2333.832352][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2333.859483][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2333.892457][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2333.925228][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2333.960806][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.029429][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.061386][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.080768][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.104208][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.121779][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.131975][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.149389][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.160326][ T8008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2334.178330][ T8008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2334.192230][ T8008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2334.211959][ T8277] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8930'. [ 2334.231678][ T8008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.240958][ T8008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.252099][ T8008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.261144][ T8008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2334.433568][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.453200][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.503957][ T8287] FAULT_INJECTION: forcing a failure. [ 2334.503957][ T8287] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.520092][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.535173][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.562702][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.1.8932 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2334.573442][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2334.583521][ T8287] Call Trace: [ 2334.586815][ T8287] [ 2334.589790][ T8287] dump_stack_lvl+0x241/0x360 [ 2334.594496][ T8287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2334.599698][ T8287] ? __pfx__printk+0x10/0x10 [ 2334.604319][ T8287] ? fs_reclaim_acquire+0x93/0x140 [ 2334.609632][ T8287] ? __pfx___might_resched+0x10/0x10 [ 2334.614954][ T8287] should_fail_ex+0x3b0/0x4e0 [ 2334.619664][ T8287] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 2334.625410][ T8287] should_failslab+0xac/0x100 [ 2334.630116][ T8287] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 2334.635849][ T8287] __kmalloc_noprof+0xd8/0x400 [ 2334.640712][ T8287] tomoyo_realpath_from_path+0xcf/0x5e0 [ 2334.646289][ T8287] tomoyo_path_number_perm+0x23a/0x880 [ 2334.651768][ T8287] ? tomoyo_path_number_perm+0x208/0x880 [ 2334.657520][ T8287] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2334.663534][ T8287] ? __pfx_lock_acquire+0x10/0x10 [ 2334.668580][ T8287] ? __fget_files+0x29/0x470 [ 2334.673172][ T8287] ? __fget_files+0x3f3/0x470 [ 2334.677866][ T8287] security_file_ioctl_compat+0xc6/0x2a0 [ 2334.683519][ T8287] __se_compat_sys_ioctl+0xd6/0xc90 [ 2334.688735][ T8287] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2334.694550][ T8287] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2334.700549][ T8287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2334.706907][ T8287] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2334.713527][ T8287] ? lockdep_hardirqs_on+0x99/0x150 [ 2334.718756][ T8287] __do_fast_syscall_32+0xb4/0x110 [ 2334.723866][ T8287] ? exc_page_fault+0x590/0x8c0 [ 2334.728741][ T8287] do_fast_syscall_32+0x34/0x80 [ 2334.733603][ T8287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2334.739963][ T8287] RIP: 0023:0xf7fdf579 [ 2334.744051][ T8287] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2334.763698][ T8287] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2334.772200][ T8287] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0185500 [ 2334.780190][ T8287] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 2334.788184][ T8287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2334.796190][ T8287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2334.804178][ T8287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2334.812166][ T8287] [ 2334.829087][ T8287] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2335.010864][T23601] gspca_zc3xx: reg_w_i err -71 [ 2335.312849][ T8307] random: crng reseeded on system resumption [ 2335.624867][T23601] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2335.644495][T23601] gspca_zc3xx 5-1:0.48: probe with driver gspca_zc3xx failed with error -71 [ 2335.657800][ T8288] dccp_close: ABORT with 32 bytes unread [ 2335.685649][T23601] usb 5-1: USB disconnect, device number 14 [ 2336.145613][T17290] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 2336.295015][ T3080] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2336.327700][T17290] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.338552][T17290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2336.338601][T17290] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 2336.338628][T17290] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 2336.338668][T17290] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2336.338692][T17290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.341195][ T8324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2336.343766][T17290] hub 4-1:1.0: bad descriptor, ignoring hub [ 2336.411699][T17290] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2336.419720][T17290] cdc_wdm 4-1:1.0: skipping garbage [ 2336.425010][T17290] cdc_wdm 4-1:1.0: skipping garbage [ 2336.430268][T17290] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2336.465050][T23601] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2336.497958][ T3080] usb 5-1: Using ep0 maxpacket: 8 [ 2336.507632][ T3080] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2336.516099][ T3080] usb 5-1: config 0 has no interface number 0 [ 2336.522308][ T3080] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2336.536201][ T3080] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2336.552284][ T3080] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.577024][ T3080] usb 5-1: config 0 descriptor?? [ 2336.595232][ T3080] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2336.616650][ T5306] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2336.625893][T23601] usb 2-1: no configurations [ 2336.630529][T23601] usb 2-1: can't read configurations, error -22 [ 2336.765030][T23601] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2336.789264][ T5306] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2336.794638][ T3080] usb 5-1: USB disconnect, device number 15 [ 2336.798509][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2336.798820][ T5306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.823680][ T5306] usb 3-1: Product: syz [ 2336.828215][ T5306] usb 3-1: Manufacturer: syz [ 2336.830782][ T3080] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 2336.832919][ T5306] usb 3-1: SerialNumber: syz [ 2336.854097][ T5306] usb 3-1: config 0 descriptor?? [ 2336.936409][T23601] usb 2-1: no configurations [ 2336.941294][T23601] usb 2-1: can't read configurations, error -22 [ 2336.948092][T23601] usb usb2-port1: attempt power cycle [ 2337.107370][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.116333][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.130169][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.139598][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.304938][T23601] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2337.327509][T23601] usb 2-1: no configurations [ 2337.332163][T23601] usb 2-1: can't read configurations, error -22 [ 2337.355641][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.386068][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.409399][ T3080] usb 3-1: USB disconnect, device number 86 [ 2337.455171][ T5282] usb 4-1: USB disconnect, device number 75 [ 2337.465428][T23601] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2337.496678][T23601] usb 2-1: no configurations [ 2337.501325][T23601] usb 2-1: can't read configurations, error -22 [ 2337.515038][T23601] usb usb2-port1: unable to enumerate USB device [ 2337.723046][ T8350] input: syz0 as /devices/virtual/input/input405 [ 2337.776820][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8954'. [ 2337.895042][T23601] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2338.057678][T23601] usb 5-1: Using ep0 maxpacket: 8 [ 2338.066857][T23601] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 2338.084091][T23601] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.095863][T23601] usb 5-1: config 0 has no interface number 0 [ 2338.102054][T23601] usb 5-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 2338.113345][T23601] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2338.128359][T23601] usb 5-1: config 0 interface 52 has no altsetting 0 [ 2338.137806][T23601] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 2338.147074][T23601] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 2338.155874][T23601] usb 5-1: Product: syz [ 2338.160205][T23601] usb 5-1: SerialNumber: syz [ 2338.169785][T23601] usb 5-1: config 0 descriptor?? [ 2338.294918][ T5282] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2338.475705][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 2338.488191][ T5282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2338.497875][ T5282] usb 3-1: config 108 has an invalid interface number: 200 but max is 0 [ 2338.508081][ T5282] usb 3-1: config 108 has no interface number 0 [ 2338.514429][ T5282] usb 3-1: config 108 interface 200 has no altsetting 0 [ 2338.523860][ T5282] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=b5.5e [ 2338.533214][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.541453][ T5282] usb 3-1: Product: syz [ 2338.546015][ T5282] usb 3-1: Manufacturer: syz [ 2338.550745][ T5282] usb 3-1: SerialNumber: syz [ 2338.910843][ T29] audit: type=1326 audit(1728283103.424:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8351 comm="syz.2.8955" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 2339.017183][ T8359] x_tables: duplicate underflow at hook 1 [ 2339.323104][ T5300] usb 5-1: USB disconnect, device number 16 [ 2339.742641][ T8375] FAULT_INJECTION: forcing a failure. [ 2339.742641][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.755845][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.1.8964 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2339.766551][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2339.776723][ T8375] Call Trace: [ 2339.780022][ T8375] [ 2339.782958][ T8375] dump_stack_lvl+0x241/0x360 [ 2339.787671][ T8375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2339.792884][ T8375] ? __pfx__printk+0x10/0x10 [ 2339.797516][ T8375] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 2339.803102][ T8375] ? __pfx___might_resched+0x10/0x10 [ 2339.808427][ T8375] should_fail_ex+0x3b0/0x4e0 [ 2339.813120][ T8375] ? getname_flags+0xb7/0x540 [ 2339.817810][ T8375] should_failslab+0xac/0x100 [ 2339.822935][ T8375] ? getname_flags+0xb7/0x540 [ 2339.827622][ T8375] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2339.833182][ T8375] getname_flags+0xb7/0x540 [ 2339.837744][ T8375] ? __might_fault+0xc6/0x120 [ 2339.842424][ T8375] user_path_at+0x24/0x60 [ 2339.846772][ T8375] __se_sys_mount_setattr+0x6a9/0x1c10 [ 2339.852242][ T8375] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2339.858232][ T8375] ? __pfx___se_sys_mount_setattr+0x10/0x10 [ 2339.864124][ T8375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2339.870465][ T8375] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2339.877145][ T8375] ? __ia32_sys_mount_setattr+0x20/0xc0 [ 2339.882714][ T8375] __do_fast_syscall_32+0xb4/0x110 [ 2339.887843][ T8375] ? exc_page_fault+0x590/0x8c0 [ 2339.892719][ T8375] do_fast_syscall_32+0x34/0x80 [ 2339.897610][ T8375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2339.903950][ T8375] RIP: 0023:0xf7fdf579 [ 2339.908040][ T8375] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2339.927828][ T8375] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 00000000000001ba [ 2339.936258][ T8375] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000240 [ 2339.944235][ T8375] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000020 [ 2339.952202][ T8375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2339.960169][ T8375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2339.968135][ T8375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2339.976125][ T8375] [ 2340.135094][T23601] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2340.319116][ T1811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.324879][T23601] usb 4-1: Using ep0 maxpacket: 8 [ 2340.341167][T23601] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2340.350228][T23601] usb 4-1: config 0 has no interface number 0 [ 2340.356697][T23601] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2340.368269][T23601] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2340.377795][T23601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2340.388187][T23601] usb 4-1: config 0 descriptor?? [ 2340.405892][T23601] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2340.543218][ T1811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.624051][T23601] usb 4-1: USB disconnect, device number 76 [ 2340.630181][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2340.670206][T23601] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2340.737979][ T1811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.864442][ T5354] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2340.909606][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2340.935483][ T5354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2340.992707][ T5354] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2341.016828][ T5354] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2341.042981][ T5354] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2341.094359][ T5282] etas_es58x 3-1:108.200: Starting syz syz (Serial Number syz) [ 2341.139818][ T5282] usb 3-1: USB disconnect, device number 87 [ 2341.257403][ T1811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2341.537440][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 2341.544525][ T5300] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2341.713153][ T1811] bridge_slave_1: left allmulticast mode [ 2341.717430][ T5300] usb 5-1: no configurations [ 2341.720458][ T1811] bridge_slave_1: left promiscuous mode [ 2341.723436][ T5300] usb 5-1: can't read configurations, error -22 [ 2341.761624][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 2341.803090][ T1811] bridge_slave_0: left allmulticast mode [ 2341.811387][ T1811] bridge_slave_0: left promiscuous mode [ 2341.820922][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 2341.854886][ T5300] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2342.021202][ T5300] usb 5-1: no configurations [ 2342.026107][ T5300] usb 5-1: can't read configurations, error -22 [ 2342.027044][ T5354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2342.040585][ T5300] usb usb5-port1: attempt power cycle [ 2342.061835][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2342.070746][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2342.080350][ T5354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2342.102068][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2342.111982][ T5354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2342.404998][ T5300] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2342.436565][ T5300] usb 5-1: no configurations [ 2342.441223][ T5300] usb 5-1: can't read configurations, error -22 [ 2342.501687][ T8408] random: crng reseeded on system resumption [ 2342.584925][ T5300] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2342.616115][ T5300] usb 5-1: no configurations [ 2342.620956][ T5300] usb 5-1: can't read configurations, error -22 [ 2342.635199][ T5300] usb usb5-port1: unable to enumerate USB device [ 2342.697511][ T1811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2342.710746][ T1811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2342.722109][ T1811] bond0 (unregistering): Released all slaves [ 2343.054930][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2343.075410][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 2343.082772][ T8388] bridge_slave_0: entered allmulticast mode [ 2343.089913][ T8388] bridge_slave_0: entered promiscuous mode [ 2343.104359][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2343.117310][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 2343.124578][ T8388] bridge_slave_1: entered allmulticast mode [ 2343.133444][ T5354] Bluetooth: hci1: command tx timeout [ 2343.161858][ T8388] bridge_slave_1: entered promiscuous mode [ 2343.370684][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2343.492696][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2343.532541][ T1811] hsr_slave_0: left promiscuous mode [ 2343.558744][ T1811] hsr_slave_1: left promiscuous mode [ 2343.576083][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2343.583549][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2343.605784][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2343.613247][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2343.655111][ T1811] veth1_macvtap: left promiscuous mode [ 2343.660687][ T1811] veth0_macvtap: left promiscuous mode [ 2343.674990][ T1811] veth1_vlan: left promiscuous mode [ 2343.680326][ T1811] veth0_vlan: left promiscuous mode [ 2344.123482][ T29] audit: type=1326 audit(1728283108.634:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.164490][ T29] audit: type=1326 audit(1728283108.634:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.187023][ T5354] Bluetooth: hci2: command tx timeout [ 2344.225029][ T29] audit: type=1326 audit(1728283108.664:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.337442][ T29] audit: type=1326 audit(1728283108.664:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.389910][ T29] audit: type=1326 audit(1728283108.664:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.417458][ T29] audit: type=1326 audit(1728283108.664:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.441341][ T29] audit: type=1326 audit(1728283108.684:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.474610][T23601] IPVS: starting estimator thread 0... [ 2344.495331][ T29] audit: type=1326 audit(1728283108.684:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.556794][ T29] audit: type=1326 audit(1728283108.724:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.592395][ T29] audit: type=1326 audit(1728283108.724:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8437 comm="syz.3.8981" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 2344.614992][ T8445] IPVS: using max 23 ests per chain, 55200 per kthread [ 2344.725222][ T5300] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2344.904879][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 2344.910104][T15119] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2344.964077][ T5300] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2344.972242][ T5300] usb 4-1: config 0 has no interface number 0 [ 2344.985097][ T5300] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2345.024868][ T5300] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2345.033958][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.047646][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.054084][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.086579][T15119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.098094][ T5300] usb 4-1: config 0 descriptor?? [ 2345.107694][T15119] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2345.117645][T15119] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2345.137604][ T5300] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2345.148675][T15119] usb 5-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 2345.162407][T15119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.171160][T15119] usb 5-1: Product: syz [ 2345.175698][T15119] usb 5-1: Manufacturer: syz [ 2345.180427][T15119] usb 5-1: SerialNumber: syz [ 2345.191584][T15119] usb 5-1: config 0 descriptor?? [ 2345.199966][T15119] usb 5-1: Found UVC 0.00 device syz (0086:0b5b) [ 2345.207023][ T5354] Bluetooth: hci1: command tx timeout [ 2345.229162][T15119] usb 5-1: No valid video chain found. [ 2345.299928][ T1811] team0 (unregistering): Port device team_slave_1 removed [ 2345.343666][T15119] usb 4-1: USB disconnect, device number 77 [ 2345.343727][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2345.366061][T15119] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2345.423277][ T1811] team0 (unregistering): Port device team_slave_0 removed [ 2345.775831][ T8454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2345.802334][ T8454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2346.139236][ T8456] random: crng reseeded on system resumption [ 2346.245195][ T5354] Bluetooth: hci2: command tx timeout [ 2346.465624][ T8403] chnl_net:caif_netlink_parms(): no params data found [ 2346.516519][ T8388] team0: Port device team_slave_0 added [ 2346.542774][ T8388] team0: Port device team_slave_1 added [ 2346.718666][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2346.725840][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.751986][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2346.764659][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2346.771905][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2346.798327][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2346.890207][ T8388] hsr_slave_0: entered promiscuous mode [ 2346.912301][ T8388] hsr_slave_1: entered promiscuous mode [ 2346.934063][ T8403] bridge0: port 1(bridge_slave_0) entered blocking state [ 2346.946746][ T8403] bridge0: port 1(bridge_slave_0) entered disabled state [ 2346.954505][ T8403] bridge_slave_0: entered allmulticast mode [ 2346.962463][ T8403] bridge_slave_0: entered promiscuous mode [ 2346.972720][ T8403] bridge0: port 2(bridge_slave_1) entered blocking state [ 2346.981130][ T8403] bridge0: port 2(bridge_slave_1) entered disabled state [ 2346.989004][ T8403] bridge_slave_1: entered allmulticast mode [ 2346.997471][ T8403] bridge_slave_1: entered promiscuous mode [ 2347.122517][ T8403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2347.178408][ T8403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2347.286062][ T5354] Bluetooth: hci1: command tx timeout [ 2347.323724][ T1811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.443852][ T8403] team0: Port device team_slave_0 added [ 2347.573685][ T1811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.597754][ T5300] usb 5-1: USB disconnect, device number 21 [ 2347.710476][ T8403] team0: Port device team_slave_1 added [ 2347.911690][ T1811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2347.967414][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2347.974413][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2348.026434][ T5300] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2348.034920][ T8403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2348.119057][ T1811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2348.155432][ T8403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2348.166209][ T8403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2348.186445][ T5300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2348.218893][ T5300] usb 5-1: config 0 has no interfaces? [ 2348.224543][ T8403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2348.233498][ T5300] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2348.254421][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.276959][ T5300] usb 5-1: Product: syz [ 2348.281231][ T5300] usb 5-1: Manufacturer: syz [ 2348.293622][ T5300] usb 5-1: SerialNumber: syz [ 2348.310232][ T5300] usb 5-1: config 0 descriptor?? [ 2348.325535][ T5354] Bluetooth: hci2: command tx timeout [ 2348.418567][ T8403] hsr_slave_0: entered promiscuous mode [ 2348.425636][ T8403] hsr_slave_1: entered promiscuous mode [ 2348.433668][ T8403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2348.442916][ T8403] Cannot create hsr debugfs directory [ 2349.090484][ T1811] bridge_slave_1: left allmulticast mode [ 2349.100037][ T1811] bridge_slave_1: left promiscuous mode [ 2349.111662][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 2349.130873][ T1811] bridge_slave_0: left allmulticast mode [ 2349.136718][ T1811] bridge_slave_0: left promiscuous mode [ 2349.158623][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 2349.367066][ T5354] Bluetooth: hci1: command tx timeout [ 2349.419274][ T5282] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2349.574952][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 2349.581754][ T5282] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2349.595609][ T5282] usb 4-1: config 0 has no interface number 0 [ 2349.610778][ T5282] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2349.644907][ T5282] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2349.662601][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2349.674388][ T5282] usb 4-1: config 0 descriptor?? [ 2349.703098][ T5282] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2349.813580][ T1811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2349.831960][ T8516] random: crng reseeded on system resumption [ 2349.832219][ T1811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2349.851491][ T1811] bond0 (unregistering): Released all slaves [ 2349.910159][T17290] usb 4-1: USB disconnect, device number 78 [ 2349.910228][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2349.947103][T17290] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 2350.386740][ T8388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2350.415258][ T5354] Bluetooth: hci2: command tx timeout [ 2350.430528][ T8388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2350.699756][ T8388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2350.755045][T17290] usb 5-1: USB disconnect, device number 22 [ 2350.993219][ T1811] hsr_slave_0: left promiscuous mode [ 2351.023030][ T1811] hsr_slave_1: left promiscuous mode [ 2351.046932][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2351.075084][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2351.085550][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2351.093042][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2351.184242][ T1811] veth1_macvtap: left promiscuous mode [ 2351.206296][ T1811] veth0_macvtap: left promiscuous mode [ 2351.212779][ T1811] veth1_vlan: left promiscuous mode [ 2351.227666][ T1811] veth0_vlan: left promiscuous mode [ 2351.531093][ T8550] netlink: 5312 bytes leftover after parsing attributes in process `syz.0.9001'. [ 2351.955182][ T5282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2352.105607][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 2352.135320][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2352.146396][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2352.184902][ T5282] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2352.193999][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2352.241911][ T5282] usb 5-1: config 0 descriptor?? [ 2352.708846][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2352.749412][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2352.776423][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9002'. [ 2352.811349][ T1811] team0 (unregistering): Port device team_slave_1 removed [ 2352.886844][ T8562] ptrace attach of "./syz-executor exec"[7961] was attempted by "./syz-executor exec"[8562] [ 2352.939242][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2352.967681][ T1811] team0 (unregistering): Port device team_slave_0 removed [ 2353.009033][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2354.187730][ T8388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2354.228774][ T8540] netlink: 'syz.3.8999': attribute type 4 has an invalid length. [ 2354.269046][ T8541] netlink: 'syz.3.8999': attribute type 17 has an invalid length. [ 2354.294917][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 2354.325226][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2354.365301][ T5282] usb 5-1: USB disconnect, device number 23 [ 2354.543093][ T6693] bond0: (slave syz_tun): Releasing backup interface [ 2354.874604][ T8403] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2354.940885][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2354.975982][ T8403] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2355.005908][ T8403] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2355.196679][ T1811] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.283154][ T8580] random: crng reseeded on system resumption [ 2355.411943][ T1811] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.458085][ T8403] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2355.503141][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 2355.615137][ T1811] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.693270][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 2355.700491][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2355.907785][ T1811] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2355.983078][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2355.990259][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2356.067968][T29164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2356.081571][T29164] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2356.093164][T29164] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2356.104071][T29164] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2356.112959][T29164] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2356.121616][T29164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2356.280599][ T8388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2356.328039][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2356.428152][ T1811] bridge_slave_1: left allmulticast mode [ 2356.433884][ T1811] bridge_slave_1: left promiscuous mode [ 2356.445610][ T1811] bridge0: port 2(bridge_slave_1) entered disabled state [ 2356.473716][ T1811] bridge_slave_0: left allmulticast mode [ 2356.484323][ T1811] bridge_slave_0: left promiscuous mode [ 2356.494717][ T1811] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.122189][ T1811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2357.135094][ T1811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2357.147452][ T1811] bond0 (unregistering): Released all slaves [ 2357.195900][ T8403] 8021q: adding VLAN 0 to HW filter on device team0 [ 2357.294436][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2357.324000][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 2357.331221][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2357.443806][ T3046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2357.451199][ T3046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2357.714658][ T1811] hsr_slave_0: left promiscuous mode [ 2357.724593][ T1811] hsr_slave_1: left promiscuous mode [ 2357.736691][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2357.744169][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2357.768667][ T1811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2357.781738][ T1811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2357.794950][T28897] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2357.826601][ T1811] veth1_macvtap: left promiscuous mode [ 2357.832207][ T1811] veth0_macvtap: left promiscuous mode [ 2357.842257][ T1811] veth1_vlan: left promiscuous mode [ 2357.848741][ T1811] veth0_vlan: left promiscuous mode [ 2357.955418][T28897] usb 5-1: Using ep0 maxpacket: 8 [ 2357.973267][T28897] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2357.981419][T28897] usb 5-1: config 0 has no interface number 0 [ 2357.987826][T28897] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2357.999564][T28897] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2358.008826][T28897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.030879][T28897] usb 5-1: config 0 descriptor?? [ 2358.051058][T28897] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2358.179801][T29164] Bluetooth: hci3: command tx timeout [ 2358.260607][T15119] usb 5-1: USB disconnect, device number 24 [ 2358.266646][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 2358.282662][T15119] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 2358.605677][ T1811] team0 (unregistering): Port device team_slave_1 removed [ 2359.528820][T28897] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2359.554715][ T8388] veth0_vlan: entered promiscuous mode [ 2359.612433][ T8403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2359.644956][ T8403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2359.685631][T28897] usb 5-1: Using ep0 maxpacket: 16 [ 2359.728516][T28897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2359.746649][ T8388] veth1_vlan: entered promiscuous mode [ 2359.765842][T28897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2359.769791][ T8603] chnl_net:caif_netlink_parms(): no params data found [ 2359.806808][T28897] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2359.839902][T28897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.863613][T28897] usb 5-1: config 0 descriptor?? [ 2360.052352][ T8403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2360.163033][ T8388] veth0_macvtap: entered promiscuous mode [ 2360.261195][ T8603] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.269714][T29164] Bluetooth: hci3: command tx timeout [ 2360.286886][ T8603] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.311567][ T8603] bridge_slave_0: entered allmulticast mode [ 2360.320371][ T8603] bridge_slave_0: entered promiscuous mode [ 2360.332158][ T8388] veth1_macvtap: entered promiscuous mode [ 2360.342988][ T8644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2360.355285][ T8603] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.362870][ T8603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.371909][ T8603] bridge_slave_1: entered allmulticast mode [ 2360.379851][ T8603] bridge_slave_1: entered promiscuous mode [ 2360.486173][ T8644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2360.519191][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9017'. [ 2360.552964][ T8603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2360.590552][ T8403] veth0_vlan: entered promiscuous mode [ 2360.632694][ T8603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2360.660379][ T8671] ptrace attach of "./syz-executor exec"[7961] was attempted by "./syz-executor exec"[8671] [ 2360.708975][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2360.729110][ T8403] veth1_vlan: entered promiscuous mode [ 2360.751806][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.784995][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.805522][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.825513][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.849682][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2360.870640][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2360.900548][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2360.911983][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2360.986791][T28897] usbhid 5-1:0.0: can't add hid device: -71 [ 2360.992825][T28897] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2361.035326][ T8603] team0: Port device team_slave_0 added [ 2361.037600][T28897] usb 5-1: USB disconnect, device number 25 [ 2361.062821][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2361.097261][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.117498][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2361.140203][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.160238][ T8388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2361.190215][ T8388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.216567][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2361.238953][ T8388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2361.259088][ T8388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2361.278359][ T8388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2361.294877][ T8388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2361.342267][ T8603] team0: Port device team_slave_1 added [ 2361.423113][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.433492][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2361.462978][ T8603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.508204][ T8403] veth0_macvtap: entered promiscuous mode [ 2361.531049][ T8603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.550287][ T8603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2361.577310][ T8603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.597395][ T8403] veth1_macvtap: entered promiscuous mode [ 2361.829707][ T8603] hsr_slave_0: entered promiscuous mode [ 2361.838670][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9021'. [ 2361.848417][ T8603] hsr_slave_1: entered promiscuous mode [ 2361.864391][ T8603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2361.890996][ T8603] Cannot create hsr debugfs directory [ 2361.904663][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.925776][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2361.955095][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2361.987424][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.002208][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2362.017130][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.027119][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2362.037773][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.055726][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2362.103263][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.114291][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.134846][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.134925][ T5282] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2362.165770][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.189471][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.215030][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.237481][ T8403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2362.264830][ T8403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2362.286373][ T8403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2362.322963][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 2362.336529][T29164] Bluetooth: hci3: command tx timeout [ 2362.344691][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2362.362089][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2362.375425][ T5282] usb 5-1: config 2 has an invalid interface number: 164 but max is 2 [ 2362.402153][ T5282] usb 5-1: config 2 has an invalid interface number: 3 but max is 2 [ 2362.421642][ T5282] usb 5-1: config 2 has an invalid interface number: 149 but max is 2 [ 2362.428517][ T8403] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.445550][ T5282] usb 5-1: config 2 has no interface number 0 [ 2362.451728][ T5282] usb 5-1: config 2 has no interface number 1 [ 2362.457937][ T8403] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.468952][ T5282] usb 5-1: config 2 has no interface number 2 [ 2362.475458][ T8403] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.484355][ T8403] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2362.493308][ T5282] usb 5-1: config 2 interface 164 has no altsetting 0 [ 2362.512518][ T5282] usb 5-1: config 2 interface 3 has no altsetting 0 [ 2362.521455][ T5282] usb 5-1: config 2 interface 149 has no altsetting 0 [ 2362.530365][ T5282] usb 5-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=85.89 [ 2362.549243][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.580581][ T5282] usb 5-1: Product: syz [ 2362.592888][ T5282] usb 5-1: Manufacturer: syz [ 2362.602507][ T5282] usb 5-1: SerialNumber: syz [ 2362.639545][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9023'. [ 2362.654322][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9023'. [ 2362.670834][ T8706] ipvlan4: entered allmulticast mode [ 2362.715924][ T3046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2362.746093][ T3046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2362.874063][ T5282] usb 5-1: selecting invalid altsetting 0 [ 2362.893605][ T5282] usb 5-1: Could not set interface, error -22 [ 2362.905281][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2362.920107][ T5282] usb 5-1: selecting invalid altsetting 0 [ 2362.931250][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2362.945516][ T5282] usb 5-1: Could not set interface, error -22 [ 2362.990395][ T5282] usb 5-1: USB disconnect, device number 26 [ 2363.107768][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.132947][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2363.578537][ T8603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2363.611424][ T8603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2363.637467][ T8603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2363.664079][ T8603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2363.716220][ T8708] dccp_close: ABORT with 32 bytes unread [ 2363.991019][ T8603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2364.037810][ T8603] 8021q: adding VLAN 0 to HW filter on device team0 [ 2364.095974][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.103178][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2364.139664][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.147334][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2364.389345][ T8603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2364.398905][ T8759] netlink: 'syz.2.9031': attribute type 1 has an invalid length. [ 2364.407172][T29164] Bluetooth: hci3: command tx timeout [ 2364.494983][ T8759] netlink: 71 bytes leftover after parsing attributes in process `syz.2.9031'. [ 2364.521239][ T8603] veth0_vlan: entered promiscuous mode [ 2364.531362][ T8759] openvswitch: netlink: Actions may not be safe on all matching packets [ 2364.539848][ T8603] veth1_vlan: entered promiscuous mode [ 2364.562620][ T8603] veth0_macvtap: entered promiscuous mode [ 2364.572290][ T8603] veth1_macvtap: entered promiscuous mode [ 2364.588236][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.599067][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.609160][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.620356][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.630878][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.641392][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.651471][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.662052][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.672058][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2364.682667][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.694082][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2364.706342][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2364.717528][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.728270][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2364.738805][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.748736][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2364.759499][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.769486][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2364.780018][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.790039][ T8603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2364.800611][ T8603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2364.811955][ T8603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2364.875958][ T8603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.884718][ T8603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.894874][ T8603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2364.903699][ T8603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2365.078157][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2365.115541][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.192491][ T1811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2365.226746][ T1811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.485284][ T5282] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2365.654905][ T5282] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2365.664011][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.672373][T15119] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2365.709727][ T5282] usb 2-1: config 0 descriptor?? [ 2365.847217][T15119] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2365.866926][T15119] usb 4-1: config 0 has no interfaces? [ 2365.898189][T15119] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2365.915087][T15119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.923266][T15119] usb 4-1: Product: syz [ 2365.951413][ T5282] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 2365.974916][T15119] usb 4-1: Manufacturer: syz [ 2365.979593][T15119] usb 4-1: SerialNumber: syz [ 2365.984323][ T5282] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2366.029394][T15119] usb 4-1: config 0 descriptor?? [ 2366.166471][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2366.210323][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2366.298924][ T5282] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2366.328922][ T5282] [drm] Initialized udl on minor 2 [ 2366.471978][ T5282] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2366.512419][ T8815] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 2366.538286][ T5282] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2366.585382][ T8809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9038'. [ 2366.607345][ T5306] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2366.645817][ T5282] usb 2-1: USB disconnect, device number 12 [ 2366.660951][ T5306] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2366.690600][ T5306] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2367.470096][ T8843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2367.534670][ T8843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2367.674973][ T5306] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2367.845249][ T5306] usb 2-1: Using ep0 maxpacket: 8 [ 2367.866814][ T5306] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2367.993953][ T5306] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2368.025230][ T5306] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2368.035189][ T5306] usb 2-1: Product: syz [ 2368.039398][ T5306] usb 2-1: Manufacturer: syz [ 2368.044048][ T5306] usb 2-1: SerialNumber: syz [ 2368.053916][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9047'. [ 2368.103890][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9047'. [ 2368.157677][ T8850] ipvlan5: entered allmulticast mode [ 2368.290511][ T5306] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 2368.325475][ T5306] visor 2-1:1.0: probe with driver visor failed with error -71 [ 2368.348813][ T5306] usb 2-1: USB disconnect, device number 13 [ 2368.425708][T15119] usb 4-1: USB disconnect, device number 79 [ 2368.959884][ T8872] netlink: 'syz.1.9051': attribute type 14 has an invalid length. [ 2369.694883][T15119] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2369.906736][T15119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2369.940031][T15119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2369.965749][T15119] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2369.984907][T15119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.014324][T15119] usb 3-1: config 0 descriptor?? [ 2370.132953][ T8895] loop2: detected capacity change from 0 to 53 [ 2370.370896][ T8902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9060'. [ 2370.436098][T15119] zydacron 0003:13EC:0006.00C5: unknown main item tag 0x0 [ 2370.462346][T15119] zydacron 0003:13EC:0006.00C5: unknown main item tag 0x0 [ 2370.485140][T15119] zydacron 0003:13EC:0006.00C5: unknown main item tag 0x0 [ 2370.505037][T15119] zydacron 0003:13EC:0006.00C5: unknown main item tag 0x0 [ 2370.525147][T15119] zydacron 0003:13EC:0006.00C5: item fetching failed at offset 4/5 [ 2370.533588][T15119] zydacron 0003:13EC:0006.00C5: parse failed [ 2370.564939][T15119] zydacron 0003:13EC:0006.00C5: probe with driver zydacron failed with error -22 [ 2370.640292][T17290] usb 3-1: USB disconnect, device number 88 [ 2370.897332][ T8913] FAULT_INJECTION: forcing a failure. [ 2370.897332][ T8913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2370.912175][ T8917] sit0: entered promiscuous mode [ 2370.935398][ T8913] CPU: 0 UID: 0 PID: 8913 Comm: syz.3.9064 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2370.946220][ T8913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2370.948099][ T8917] netlink: 'syz.4.9065': attribute type 1 has an invalid length. [ 2370.956276][ T8913] Call Trace: [ 2370.956292][ T8913] [ 2370.956301][ T8913] dump_stack_lvl+0x241/0x360 [ 2370.956329][ T8913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2370.956350][ T8913] ? __pfx__printk+0x10/0x10 [ 2370.956379][ T8913] ? snprintf+0xda/0x120 [ 2370.989176][ T8913] should_fail_ex+0x3b0/0x4e0 [ 2370.993984][ T8913] _copy_to_user+0x2f/0xb0 [ 2370.998439][ T8913] simple_read_from_buffer+0xca/0x150 [ 2371.003857][ T8913] proc_fail_nth_read+0x1e9/0x250 [ 2371.008921][ T8913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2371.014507][ T8913] ? rw_verify_area+0x55e/0x6f0 [ 2371.019402][ T8913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2371.024988][ T8913] vfs_read+0x201/0xbc0 [ 2371.029183][ T8913] ? __pfx_lock_release+0x10/0x10 [ 2371.034258][ T8913] ? __pfx_vfs_read+0x10/0x10 [ 2371.039083][ T8913] ? __fget_files+0x3f3/0x470 [ 2371.043798][ T8913] ? fdget_pos+0x24e/0x320 [ 2371.048249][ T8913] ksys_read+0x183/0x2b0 [ 2371.052517][ T8913] ? __pfx_ksys_read+0x10/0x10 [ 2371.057298][ T8913] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2371.063894][ T8913] ? lockdep_hardirqs_on+0x99/0x150 [ 2371.069098][ T8913] __do_fast_syscall_32+0xb4/0x110 [ 2371.074207][ T8913] ? exc_page_fault+0x590/0x8c0 [ 2371.079065][ T8913] do_fast_syscall_32+0x34/0x80 [ 2371.083917][ T8913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2371.090243][ T8913] RIP: 0023:0xf7f36579 [ 2371.094654][ T8913] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2371.114260][ T8913] RSP: 002b:00000000f56b65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2371.122675][ T8913] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f56b6620 [ 2371.130644][ T8913] RDX: 000000000000000f RSI: 00000000f73bbff4 RDI: 0000000000000000 [ 2371.138613][ T8913] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2371.146596][ T8913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2371.154589][ T8913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2371.162583][ T8913] [ 2371.204527][ T8917] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9065'. [ 2371.925357][T23601] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2371.934874][ T5286] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2372.089822][T23601] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2372.099641][T23601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.108859][T23601] usb 3-1: Product: syz [ 2372.113988][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2372.125073][T23601] usb 3-1: Manufacturer: syz [ 2372.130489][T23601] usb 3-1: SerialNumber: syz [ 2372.135486][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2372.147423][T23601] usb 3-1: config 0 descriptor?? [ 2372.173525][ T5286] usb 5-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 2372.206750][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.247197][ T5286] usb 5-1: config 0 descriptor?? [ 2372.380120][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.423499][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.444686][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.522460][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.743056][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2372.856362][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2372.931631][T17290] usb 3-1: USB disconnect, device number 89 [ 2373.023580][ T5286] wacom 0003:056A:00D1.00C6: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 2373.104510][ T5286] wacom 0003:056A:00D1.00C6: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.4-1/input0 [ 2373.213075][ T5286] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D1.00C6/input/input406 [ 2408.950994][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2408.966597][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 2460.993369][ T5286] usb 5-1: reset high-speed USB device number 27 using dummy_hcd [ 2468.556758][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 2479.154792][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2479.161876][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8793/1:b..l [ 2479.170610][ C1] rcu: (detected by 1, t=10503 jiffies, g=400733, q=1475462 ncpus=2) [ 2479.178797][ C1] task:syz.4.9036 state:R running task stack:21760 pid:8793 tgid:8793 ppid:7961 flags:0x20004002 [ 2479.192470][ C1] Call Trace: [ 2479.195796][ C1] [ 2479.198752][ C1] __schedule+0x1895/0x4b30 [ 2479.203299][ C1] ? __lock_acquire+0x1384/0x2050 [ 2479.208368][ C1] ? __pfx___schedule+0x10/0x10 [ 2479.213253][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2479.219280][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 2479.224599][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 2479.229755][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2479.236028][ C1] ? __pfx_memcg1_uncharge_batch+0x10/0x10 [ 2479.241925][ C1] irqentry_exit+0x5e/0x90 [ 2479.246375][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2479.252390][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xf/0x40 [ 2479.258581][ C1] Code: 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d cf 6f 57 04 00 74 1e <83> 3d 26 a1 57 04 00 74 15 65 48 8b 0c 25 c0 d7 03 00 31 c0 83 b9 [ 2479.278215][ C1] RSP: 0018:ffffc90003156fe0 EFLAGS: 00000202 [ 2479.284316][ C1] RAX: 0000000000000000 RBX: ffffea0000da4e80 RCX: 0f5923a7642af000 [ 2479.292312][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fba0 [ 2479.300314][ C1] RBP: 0000000000000000 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 2479.308319][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 0000000000000000 [ 2479.316319][ C1] R13: 0000000000000000 R14: ffffffff820b6580 R15: ffffea0000da4e80 [ 2479.324422][ C1] ? page_ext_get+0x20/0x2a0 [ 2479.329057][ C1] page_ext_get+0x46/0x2a0 [ 2479.333508][ C1] __reset_page_owner+0x30/0x430 [ 2479.338473][ C1] ? __mem_cgroup_uncharge_folios+0x14a/0x1c0 [ 2479.344577][ C1] free_unref_folios+0xf12/0x18d0 [ 2479.349641][ C1] folios_put_refs+0x76c/0x860 [ 2479.354448][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 2479.359773][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2479.365018][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 2479.371392][ C1] shmem_undo_range+0x64c/0x1cf0 [ 2479.376371][ C1] ? validate_chain+0x11e/0x5920 [ 2479.381338][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 2479.386763][ C1] ? __pfx_validate_chain+0x10/0x10 [ 2479.392035][ C1] shmem_evict_inode+0x29b/0xa80 [ 2479.397020][ C1] ? inode_wait_for_writeback+0x111/0x2a0 [ 2479.402764][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2479.408280][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2479.413506][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 2479.418998][ C1] evict+0x4e8/0x9b0 [ 2479.422929][ C1] ? __pfx_evict+0x10/0x10 [ 2479.427375][ C1] ? iput+0x713/0xa50 [ 2479.431391][ C1] __dentry_kill+0x20d/0x630 [ 2479.436010][ C1] ? dput+0x37/0x2b0 [ 2479.439927][ C1] dput+0x19f/0x2b0 [ 2479.443763][ C1] __fput+0x5d2/0x880 [ 2479.447784][ C1] task_work_run+0x24f/0x310 [ 2479.452405][ C1] ? __pfx_task_work_run+0x10/0x10 [ 2479.457543][ C1] ? switch_task_namespaces+0xe4/0x110 [ 2479.463038][ C1] do_exit+0xa2f/0x28e0 [ 2479.467228][ C1] ? __pfx_do_exit+0x10/0x10 [ 2479.471849][ C1] ? proc_coredump_connector+0x1e8/0x750 [ 2479.477516][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2479.483547][ C1] do_group_exit+0x207/0x2c0 [ 2479.488172][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2479.493409][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2479.498647][ C1] get_signal+0x16a3/0x1740 [ 2479.503199][ C1] ? __pfx_get_signal+0x10/0x10 [ 2479.508084][ C1] ? __pfx_force_sig_fault+0x10/0x10 [ 2479.513407][ C1] arch_do_signal_or_restart+0x96/0x860 [ 2479.519073][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2479.525269][ C1] ? irqentry_exit_to_user_mode+0x53/0x280 [ 2479.531110][ C1] irqentry_exit_to_user_mode+0x79/0x280 [ 2479.536786][ C1] exc_page_fault+0x590/0x8c0 [ 2479.541499][ C1] asm_exc_page_fault+0x26/0x30 [ 2479.546378][ C1] RIP: 0023:0x0 [ 2479.549858][ C1] RSP: 002b:0000000020000010 EFLAGS: 00010206 [ 2479.555947][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2479.563940][ C1] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000020000140 [ 2479.571938][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2479.579934][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2479.587933][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2479.595998][ C1] [ 2479.599044][ C1] rcu: rcu_preempt kthread starved for 1110 jiffies! g400733 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2479.610260][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2479.620255][ C1] rcu: RCU grace-period kthread stack dump: [ 2479.626166][ C1] task:rcu_preempt state:R running task stack:25712 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2479.637982][ C1] Call Trace: [ 2479.641279][ C1] [ 2479.644239][ C1] __schedule+0x1895/0x4b30 [ 2479.649051][ C1] ? __pfx___schedule+0x10/0x10 [ 2479.653970][ C1] ? __pfx_lock_release+0x10/0x10 [ 2479.659021][ C1] ? __asan_memset+0x23/0x50 [ 2479.663644][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2479.669480][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2479.676014][ C1] ? schedule+0x90/0x320 [ 2479.680287][ C1] schedule+0x14b/0x320 [ 2479.684471][ C1] schedule_timeout+0x1be/0x310 [ 2479.689347][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2479.694745][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2479.700059][ C1] ? prepare_to_swait_event+0x330/0x350 [ 2479.705640][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 2479.710523][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 2479.715751][ C1] ? rcu_gp_init+0x1256/0x1630 [ 2479.720541][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2479.725585][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2479.731764][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2479.737250][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2479.743177][ C1] ? finish_swait+0xd4/0x1e0 [ 2479.747802][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 2479.752419][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2479.757639][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2479.763564][ C1] ? __kthread_parkme+0x169/0x1d0 [ 2479.768709][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2479.773932][ C1] kthread+0x2f0/0x390 [ 2479.778020][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2479.783239][ C1] ? __pfx_kthread+0x10/0x10 [ 2479.787850][ C1] ret_from_fork+0x4b/0x80 [ 2479.792291][ C1] ? __pfx_kthread+0x10/0x10 [ 2479.796938][ C1] ret_from_fork_asm+0x1a/0x30 [ 2479.801743][ C1] [ 2479.804776][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2479.811105][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2479.816437][ C0] NMI backtrace for cpu 0 [ 2479.816452][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 2479.816472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2479.816483][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x25a/0x780 [ 2479.816510][ C0] Code: 8b 44 24 10 48 8d 98 e0 0a 00 00 4c 8d a0 00 0b 00 00 45 31 ed 49 83 fd 31 0f 83 a5 00 00 00 4c 89 e0 48 c1 e8 03 0f b6 04 10 <84> c0 75 54 8b 43 20 a9 00 00 04 00 74 2c 31 d2 a9 00 00 03 00 0f [ 2479.816524][ C0] RSP: 0018:ffffc90000156680 EFLAGS: 00000806 [ 2479.816540][ C0] RAX: 0000000000000000 RBX: ffff88801ce8e508 RCX: ffffffff9a3cc903 [ 2479.816554][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ad7a0 RDI: ffffffff8c60fba0 [ 2479.816566][ C0] RBP: ffffc90000156728 R08: ffffffff901ced2f R09: 1ffffffff2039da5 [ 2479.816579][ C0] R10: dffffc0000000000 R11: fffffbfff2039da6 R12: ffff88801ce8e528 [ 2479.816592][ C0] R13: 0000000000000001 R14: ffff88801ce8e4d8 R15: 1ffff110039d1c9b [ 2479.816605][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2479.816619][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2479.816632][ C0] CR2: 000000005825b4c0 CR3: 00000000316f0000 CR4: 00000000003526f0 [ 2479.816646][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2479.816657][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2479.816668][ C0] Call Trace: [ 2479.816675][ C0] [ 2479.816682][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2479.816702][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2479.816723][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2479.816746][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2479.816766][ C0] ? nmi_handle+0x14f/0x5a0 [ 2479.816783][ C0] ? nmi_handle+0x2a/0x5a0 [ 2479.816799][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 2479.816820][ C0] ? default_do_nmi+0x63/0x160 [ 2479.816839][ C0] ? exc_nmi+0x123/0x1f0 [ 2479.816856][ C0] ? end_repeat_nmi+0xf/0x53 [ 2479.816881][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 2479.816903][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 2479.816925][ C0] ? lockdep_hardirqs_on_prepare+0x25a/0x780 [ 2479.816946][ C0] [ 2479.816952][ C0] [ 2479.816959][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2479.816982][ C0] ? rcu_is_watching+0x15/0xb0 [ 2479.817000][ C0] trace_hardirqs_on+0x28/0x40 [ 2479.817019][ C0] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 2479.817041][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2479.817061][ C0] ? stack_depot_save_flags+0x29/0x830 [ 2479.817085][ C0] ref_tracker_alloc+0x2c4/0x490 [ 2479.817101][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2479.817116][ C0] ? dst_init+0xee/0x490 [ 2479.817131][ C0] ? dst_alloc+0x14f/0x190 [ 2479.817145][ C0] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 2479.817166][ C0] ? ip_route_output_key_hash+0x193/0x2b0 [ 2479.817186][ C0] ? ip_route_output_flow+0x29/0x140 [ 2479.817204][ C0] ? ip_route_me_harder+0x80d/0x1300 [ 2479.817222][ C0] ? synproxy_send_tcp+0x356/0x6c0 [ 2479.817246][ C0] ? synproxy_send_client_synack+0x8b8/0xf30 [ 2479.817266][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 2479.817287][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 2479.817306][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 2479.817325][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 2479.817345][ C0] ? nf_hook_slow+0xc3/0x220 [ 2479.817363][ C0] ? NF_HOOK+0x29e/0x450 [ 2479.817379][ C0] ? NF_HOOK+0x3a4/0x450 [ 2479.817394][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 2479.817416][ C0] dst_init+0xee/0x490 [ 2479.817429][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 2479.817451][ C0] dst_alloc+0x14f/0x190 [ 2479.817467][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 2479.817492][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 2479.817513][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 2479.817533][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2479.817554][ C0] ? __pfx_lock_release+0x10/0x10 [ 2479.817579][ C0] ip_route_output_flow+0x29/0x140 [ 2479.817599][ C0] ip_route_me_harder+0x80d/0x1300 [ 2479.817621][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 2479.817640][ C0] ? trace_kmalloc+0x1f/0xd0 [ 2479.817659][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 2479.817686][ C0] synproxy_send_tcp+0x356/0x6c0 [ 2479.817707][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 2479.817731][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2479.817752][ C0] ? synproxy_pernet+0x45/0x270 [ 2479.817773][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 2479.817796][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2479.817817][ C0] ? nf_ip_checksum+0x13a/0x500 [ 2479.817839][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 2479.817861][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2479.817887][ C0] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 2479.817910][ C0] ? ip_vs_conn_out_get+0xba6/0xc00 [ 2479.817933][ C0] nft_do_chain+0x4ad/0x1da0 [ 2479.817955][ C0] ? tcp_conn_schedule+0x45e/0x880 [ 2479.817977][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 2479.818006][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 2479.818022][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 2479.818039][ C0] nft_do_chain_inet+0x418/0x6b0 [ 2479.818060][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2479.818086][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2479.818106][ C0] nf_hook_slow+0xc3/0x220 [ 2479.818124][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2479.818142][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2479.818159][ C0] NF_HOOK+0x29e/0x450 [ 2479.818176][ C0] ? NF_HOOK+0x9a/0x450 [ 2479.818192][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2479.818209][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2479.818229][ C0] ? ip_rcv_finish+0x406/0x560 [ 2479.818246][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2479.818263][ C0] NF_HOOK+0x3a4/0x450 [ 2479.818278][ C0] ? __lock_acquire+0x1384/0x2050 [ 2479.818300][ C0] ? NF_HOOK+0x9a/0x450 [ 2479.818316][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2479.818331][ C0] ? ip_rcv_core+0x801/0xd10 [ 2479.818348][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2479.818368][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2479.818385][ C0] __netif_receive_skb+0x2bf/0x650 [ 2479.818404][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2479.818424][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 2479.818442][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2479.818463][ C0] ? __pfx_lock_release+0x10/0x10 [ 2479.818483][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 2479.818507][ C0] process_backlog+0x662/0x15b0 [ 2479.818527][ C0] ? process_backlog+0x33b/0x15b0 [ 2479.818549][ C0] ? __pfx_process_backlog+0x10/0x10 [ 2479.818567][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2479.818589][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2479.818611][ C0] __napi_poll+0xcb/0x490 [ 2479.818630][ C0] net_rx_action+0x89b/0x1240 [ 2479.818655][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2479.818675][ C0] ? sched_clock+0x4a/0x70 [ 2479.818698][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2479.818723][ C0] handle_softirqs+0x2c5/0x980 [ 2479.818744][ C0] ? run_ksoftirqd+0xca/0x130 [ 2479.818765][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2479.818783][ C0] ? preempt_schedule+0xe1/0xf0 [ 2479.818806][ C0] run_ksoftirqd+0xca/0x130 [ 2479.818826][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 2479.818847][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 2479.818927][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 2479.818947][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 2479.818966][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 2479.818985][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 2479.819005][ C0] smpboot_thread_fn+0x544/0xa30 [ 2479.819024][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 2479.819046][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2479.819065][ C0] kthread+0x2f0/0x390 [ 2479.819081][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2479.819100][ C0] ? __pfx_kthread+0x10/0x10 [ 2479.819116][ C0] ret_from_fork+0x4b/0x80 [ 2479.819136][ C0] ? __pfx_kthread+0x10/0x10 [ 2479.819151][ C0] ret_from_fork_asm+0x1a/0x30 [ 2479.819176][ C0]