last executing test programs: 21.09514426s ago: executing program 3 (id=173): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x80111500, 0x0) 20.062014486s ago: executing program 3 (id=177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = inotify_init1(0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000440), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000cc631f0f08cb76dd1b27515024ede3ce3eb3f95732a5db9b67542f02e42434d4ef42a9b27483c1780b1ff3777ccf618600958ca5d8fd478f9eb32ed2445e2f007537463ea5a7475ca8b15f667f5d8786e4e833f60684abdef4140cbc1690d96f1a07a2d9b44f3b4b582e1ffe31e585e2283db8fbef2cf77af2a5de68d0f02b102cd4e84dc59886084cbe60dbf51763c5f07d522a9a3b227bfd8d45d3df9609c346f09f4cb7ab4eff918833311656b4621055f688b7", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000f7"], 0x0}, 0x0) 14.821816045s ago: executing program 3 (id=187): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000001580)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 13.21525539s ago: executing program 3 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x84, 0x80, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000010000000000000007000000100000000000000001000000c10000008116e9da902265d85139fd69eff3d1d5cdd06ec3ed2fa6ff7c8112f25ac346834609b6e941de1ad3e87ddc1ed8af2ccbc381d68126b5b3401aa3f1e543fd66ef39b7f8d940573fa912060038be40493899a291a69b84c5"], 0x20}, 0xc0010) 12.927852414s ago: executing program 3 (id=195): write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/326], 0x147) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x1, 0xd000, 0x1000, &(0x7f000086d000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000700), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000000)={0xb, @sdr}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_CPUID(r10, 0x4008ae8a, &(0x7f0000000300)=ANY=[]) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) 12.163992368s ago: executing program 3 (id=198): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = inotify_init1(0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{}, "4355d6a7b33748f9", "7e71f289f9defc56f3ddee32b0931efb621f3c1a1d7806a7b4dec1e1d1ca357c", "9a9f4427", "6bd7a11112ef29ca"}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binder(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x150007a2) socket$inet6(0xa, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r6, &(0x7f0000000440), 0x0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000cc631f0f08cb76dd1b27515024ede3ce3eb3f95732a5db9b67542f02e42434d4ef42a9b27483c1780b1ff3777ccf618600958ca5d8fd478f9eb32ed2445e2f007537463ea5a7475ca8b15f667f5d8786e4e833f60684abdef4140cbc1690d96f1a07a2d9b44f3b4b582e1ffe31e585e2283db8fbef2cf77af2a5de68d0f02b102cd4e84dc59886084cbe60dbf51763c5f07d522a9a3b227bfd8d45d3df9609c346f09f4cb7ab4eff918833311656b4621055f688b7", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000f7"], 0x0}, 0x0) 9.451993206s ago: executing program 4 (id=206): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = io_uring_setup(0x19ad, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905840d"], 0x0) 6.925017675s ago: executing program 1 (id=213): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000780)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000033c0)={0x0, 0xa00000, 0x1000}, 0x20) write$smackfs_load(r0, &(0x7f00000007c0)={'%', 0x20, 'C/\'$\'*+', 0x20, 'rwx'}, 0xe) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x73, "e55b703bdbe16fcbc24e273163d982d68f5f2c2c27dab25a0b24a55c6101e49788c8231152c0835e0468fd2cb7c4e7cfcd0a5c75cc337d3168fdb19ddbc68c847559862004b7b16bba118e34722c6b069e1862e2cc72188c587089b3d0fbfb93bbfa65b2e6fd73b53fa6ee30f79b0acc8edafa"}, &(0x7f0000000080)=0x7b) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e20, @empty}}, [0x7, 0x4, 0x42d, 0x3, 0x6, 0x101, 0x8, 0x3, 0x7fff, 0x7, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x100, 0x80]}, 0x0) 6.74791426s ago: executing program 1 (id=214): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xff7f, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x5, 0x2f, 0x1f}, {0x6, 0x0, 0x2b, 0x6}]}) 6.531385603s ago: executing program 1 (id=216): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000440)='encrypted\x00', 0x0, &(0x7f0000000300)="3963f8b3cdf250ff7f768dec28829b223024fa538ab40a493823", 0x1a, 0xfffffffffffffffc) r4 = socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x54) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32, @ANYBLOB="7e4ec61e071000a82657372000b2"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000000008001e00010000009c1937e4846b738738bd22ab52c7bb47a23a59cb91012320a47a00f0cc3f592f0503921871024a69ab145b23ec89077541b4860463e084e75a9e9aee0007000000000000004605367ced785489f52ae60eaeaa969e4a7c5b29e79a"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32, @ANYBLOB="92"], 0x20}}, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) 6.363232008s ago: executing program 4 (id=217): r0 = syz_io_uring_setup(0x1376, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x4}, &(0x7f00000037c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r0, 0x1, 0x3600, 0x0, 0x0, 0x1000000) 6.144509768s ago: executing program 0 (id=218): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000be0c00000055a12a0009000a000699e3ffffff14000500fe8081780c000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01050034277ce06bbaea8017cb39b62ee5a7cef4090000001fb791643a5e83d42365e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3f39cf02c8bd056d2ddf467037c2c5fb6927f1677cd8b239d3a78091c217a6d1f3adca5bbc244562e07aeaaac31b2d33ae37eb1fef76000000000000", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1, 0x0, 0x81}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 5.412012994s ago: executing program 4 (id=220): dup(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x0, 0xa0, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x20000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 5.254011099s ago: executing program 1 (id=221): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=',1', 0x2}], 0x1}, 0x8940) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) r2 = getpid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00000029c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x8098f908, 0x2, "60055808889f90ac060000050000009ab67e1db9c9a431078d40f722e600", 0x0, 0x0, 0x2}) r3 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000100)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="04c903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30eebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063f7967b79bef1c6d0cc16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41000000000000000000000000a190f837c05de9db5f1149d7a51cbef9fac7585bce830105be31ab", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x12f}, {&(0x7f00000002c0)="ffbbcf2710c4381a15", 0x9}], 0x3) 4.868709802s ago: executing program 0 (id=222): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x10010, 0xffffffffffffffff, 0xa5e99000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) clock_getres(0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) unshare(0x22020400) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000140)=0xfffffffffffffffe, 0xb, 0x3) 4.740013657s ago: executing program 4 (id=223): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x21}, 0x8044) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000400000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x20000000}, 0xc) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000500)) lchown(&(0x7f0000000340)='./file0\x00', r7, 0xffffffffffffffff) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYBLOB="08001f0004"], 0x44}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x20}}, 0x4000) 3.817454091s ago: executing program 0 (id=224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000380)="ba4200ec3e0f01cb260fc7b00a000f221166b8ff67ab990f23d80f21f86635400000800f23f82b920a000f01df0fe3611366b90f09000066b80000000066ba000000000f30baf80c66b8704e008266efbafc0c66ed", 0x55}], 0x1, 0x9, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)={0x4, &(0x7f00000002c0), 0x5, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) preadv(r4, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0), 0xffffffffffffff57, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x7, 0x20}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={r6, 0xfffffff7}, &(0x7f0000000240)=0x8) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = accept4$alg(r0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r8, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000001000), &(0x7f0000000f40)=0x44) accept(r7, &(0x7f0000000440)=@l2tp={0x2, 0x0, @remote}, 0x0) 3.408046675s ago: executing program 0 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 3.364490309s ago: executing program 0 (id=226): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000080)=[{r3}, {r3, 0x8080}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = io_uring_setup(0x19ad, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905840d"], 0x0) 2.21011761s ago: executing program 1 (id=227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c040, 0x0) socket$kcm(0x2, 0x0, 0x106) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r2, 0x804c4700, 0x20000000) r3 = dup(r1) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x800) write$P9_RGETLOCK(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="2a00000037000001fdffffffffffffff000000000000", @ANYRES32, @ANYBLOB="0c082f0100762f7e756c6c623000c4f7285739b3430bc76aedb17fcb41f0801c5013094caab4d6ba8016d7e4302f884d8016424ca1c0102e57009ccff5ac81aa09f6dce5078bfdbcf0e65043707178f276162175a897525023191c6a6445180d43af978ac35ee18f9b1755d56066deafe512fe0000000000001bca9d9984508829d8eb346c0a5018c3724d490cb1cb7b9e801e83aa50fc18b8052c73f74df8ab3ad4c1be0379ab9501cfdbac813ab54e0d87e5f5e07a2b7c23368ba76ce0ab8c48d55b000afebc77d23d221c00052df4d3c6910b288913bea638d449"], 0x2a) socket(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000150f7640f00a057a0000010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00001100000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100), &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 2.208780544s ago: executing program 2 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r2, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r3}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_BROADCAST={0xa, 0x2, @random="d421da6c2fe4"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4a000}, 0x0) 1.205803708s ago: executing program 2 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000800)=0x8000000) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)=0xf4240) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0xffffffffffffffff) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 943.960401ms ago: executing program 2 (id=230): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000f45400000002"], 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000028500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000001c0)="8be95def05a5899626ca071f40696676", 0x20) 814.249318ms ago: executing program 2 (id=231): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000be0c00000055a12a0009000a000699e3ffffff14000500fe8081780c000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01050034277ce06bbaea8017cb39b62ee5a7cef4090000001fb791643a5e83d42365e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3f39cf02c8bd056d2ddf467037c2c5fb6927f1677cd8b239d3a78091c217a6d1f3adca5bbc244562e07aeaaac31b2d33ae37eb1fef76000000000000", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x7, 0x2, 0x1, 0x0, 0x81}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 765.543051ms ago: executing program 4 (id=232): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper}, @hyper, 0x0, 0x0, 0x3, 0x0, 0x4000}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000001380)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@hyper}) fanotify_init(0x200, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getpid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130303030302c757365725f69643da4e2b7fca3f42f61169609b405a281697fcb5fad5f78a5811c0957957577b51d1fe640315f850e209de54d6912abbb0122dbedf8adf5c7e863d19a71fd08f86adba470c9e52cfca8051141c358e3ef6d122ff5eec33601bd0878ecb85449204431bc4526caeeb20ffeaeae01e400c9e73cb711d1ae7cad362ee4", @ANYRESDEC=0x0, @ANYBLOB=',grou']) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r6, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="0c00bd0300004100000000787e2eabeb8f06a0faa88f587201d100"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000d9010000"]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 317.767427ms ago: executing program 1 (id=233): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_usb_connect$cdc_ncm(0x0, 0x7f, &(0x7f0000000a00)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0xe, 0xa0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "f5999388ae"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0xe6dd, 0x5, 0xff7f, 0x7}, {0x6, 0x24, 0x1a, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0xa, 0x8, 0x2, 0x29}, @obex={0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x8, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x182e61db210711b5, 0x2, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xff, 0x10, 0x5}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x299, 0x1, 0x0, 0x11, 0x20, 0xe}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x426}}, {0x2, &(0x7f0000000b00)=@string={0x2}}, {0xb8, &(0x7f0000000c40)=@string={0xb8, 0x3, "73076e5a15011537bbb63539b2201d1dfb95b6cf23ff9d97df278e28fe73b44373c3fc30523eb0c6044e30bd89619196983dc4568070f14c01d5a0bf09f32e36013578e612e9dc2044d2a25dd9cd49d42092b960a52c18a15d3eba838e63559b6d4f0efdd630a0e363bebea4404989f8fbc20e908d09970ef9f3c89fac80f389cd0ef2d6f5d38f8590c2786712a19b160ba9be2ce42d2318b9c6de29e52c5e9c8ed697f321b62c7738e655d86eb18df16acd6b58e875"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x429}}, {0x0, 0x0}, {0x2, &(0x7f0000000e40)=@string={0x2}}]}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x81, 0x2002) preadv(r5, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) fcntl$setstatus(r3, 0x407, 0x4000) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000002040)=ANY=[]) 277.28365ms ago: executing program 0 (id=234): syz_io_uring_setup(0x1376, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x4}, &(0x7f00000037c0)=0x0, &(0x7f0000000080)=0x0) sched_setscheduler(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xc14e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300)="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", 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000010000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400126ac4c593"], 0x34}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x60, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xce8d}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2284}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) 257.681561ms ago: executing program 4 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0x1e, &(0x7f0000000500), 0xc) r2 = io_uring_setup(0x22bd, &(0x7f0000000000)={0x0, 0x5586, 0x0, 0x2, 0x105}) syz_io_uring_setup(0x3771, &(0x7f00000001c0)={0x0, 0xcefd, 0x40, 0x1, 0x1ef, 0x0, r2}, &(0x7f0000000080), &(0x7f00000003c0)) 255.267854ms ago: executing program 2 (id=236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x8dff, 0x0) 0s ago: executing program 2 (id=237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031000e0ff030002004788aa96a13bb1000000", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000f3373526a01e35"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_test={0xf, 0x0, 0x0, 0xa, [0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xabca, 0x9]}}) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @remote, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f11b8c", 0x14, 0x6, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) preadv(r10, &(0x7f0000000000), 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x3, 0x2, 0x0, 0x8}, {0x1, 0x1, 0x6, 0x2}, {0x5, 0x2f, 0x1f}, {0x4, 0x0, 0x3, 0x3}, {0x6, 0x0, 0x2b, 0x6}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 73.500457][ T5207] cgroup: Unknown subsys name 'net' [ 73.732482][ T5207] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.432985][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.986127][ T5220] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.001878][ T5220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.012130][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.030796][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.050751][ T5226] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.065257][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.083712][ T5226] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.091117][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.093628][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.124450][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.131987][ T5226] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.146267][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.155221][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.163223][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.165014][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.172580][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.177390][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.184575][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.192600][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.200439][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.205639][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.215357][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.227422][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.231772][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.236478][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.256579][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.264710][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.272522][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.280376][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.289504][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.821799][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 78.998163][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 79.021455][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 79.091819][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 79.118573][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.125916][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.133545][ T5221] bridge_slave_0: entered allmulticast mode [ 79.140902][ T5221] bridge_slave_0: entered promiscuous mode [ 79.157090][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.164314][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.171467][ T5221] bridge_slave_1: entered allmulticast mode [ 79.179018][ T5221] bridge_slave_1: entered promiscuous mode [ 79.273209][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 79.351847][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.366075][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.390818][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.398252][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.405760][ T5222] bridge_slave_0: entered allmulticast mode [ 79.412801][ T5222] bridge_slave_0: entered promiscuous mode [ 79.477525][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.485200][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.492567][ T5222] bridge_slave_1: entered allmulticast mode [ 79.500062][ T5222] bridge_slave_1: entered promiscuous mode [ 79.537264][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.544468][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.551658][ T5223] bridge_slave_0: entered allmulticast mode [ 79.559553][ T5223] bridge_slave_0: entered promiscuous mode [ 79.570633][ T5221] team0: Port device team_slave_0 added [ 79.607624][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.615049][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.622445][ T5223] bridge_slave_1: entered allmulticast mode [ 79.631552][ T5223] bridge_slave_1: entered promiscuous mode [ 79.641655][ T5221] team0: Port device team_slave_1 added [ 79.661686][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.669121][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.676441][ T5217] bridge_slave_0: entered allmulticast mode [ 79.684196][ T5217] bridge_slave_0: entered promiscuous mode [ 79.692030][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.700448][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.707686][ T5217] bridge_slave_1: entered allmulticast mode [ 79.715344][ T5217] bridge_slave_1: entered promiscuous mode [ 79.782974][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.800689][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.838253][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.848659][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.856038][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.882294][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.937668][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.947728][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.956107][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.982428][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.003581][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.026486][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.034070][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.041287][ T5224] bridge_slave_0: entered allmulticast mode [ 80.048736][ T5224] bridge_slave_0: entered promiscuous mode [ 80.056878][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.064213][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.071374][ T5224] bridge_slave_1: entered allmulticast mode [ 80.079112][ T5224] bridge_slave_1: entered promiscuous mode [ 80.117596][ T5223] team0: Port device team_slave_0 added [ 80.126360][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.151092][ T5222] team0: Port device team_slave_0 added [ 80.184769][ T5223] team0: Port device team_slave_1 added [ 80.193349][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.218610][ T5217] team0: Port device team_slave_0 added [ 80.226930][ T5222] team0: Port device team_slave_1 added [ 80.236425][ T5217] team0: Port device team_slave_1 added [ 80.243963][ T5228] Bluetooth: hci0: command tx timeout [ 80.271731][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.330720][ T5234] Bluetooth: hci3: command tx timeout [ 80.331471][ T55] Bluetooth: hci2: command tx timeout [ 80.336820][ T5230] Bluetooth: hci1: command tx timeout [ 80.342395][ T5228] Bluetooth: hci4: command tx timeout [ 80.406872][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.414012][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.440490][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.458780][ T5221] hsr_slave_0: entered promiscuous mode [ 80.465649][ T5221] hsr_slave_1: entered promiscuous mode [ 80.473505][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.480483][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.506753][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.523942][ T5224] team0: Port device team_slave_0 added [ 80.530644][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.538009][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.563998][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.576260][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.583395][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.609621][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.628502][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.635585][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.661605][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.674412][ T5224] team0: Port device team_slave_1 added [ 80.681034][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.688383][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.714989][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.864690][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.871698][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.898716][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.983589][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.990569][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.016986][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.032467][ T5217] hsr_slave_0: entered promiscuous mode [ 81.039073][ T5217] hsr_slave_1: entered promiscuous mode [ 81.052048][ T5217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.060283][ T5217] Cannot create hsr debugfs directory [ 81.082864][ T5222] hsr_slave_0: entered promiscuous mode [ 81.089892][ T5222] hsr_slave_1: entered promiscuous mode [ 81.096989][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.104657][ T5222] Cannot create hsr debugfs directory [ 81.141343][ T5223] hsr_slave_0: entered promiscuous mode [ 81.147869][ T5223] hsr_slave_1: entered promiscuous mode [ 81.155775][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.163478][ T5223] Cannot create hsr debugfs directory [ 81.270204][ T5224] hsr_slave_0: entered promiscuous mode [ 81.276770][ T5224] hsr_slave_1: entered promiscuous mode [ 81.282952][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.291213][ T5224] Cannot create hsr debugfs directory [ 81.582796][ T5221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.596997][ T5221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.640241][ T5221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.684115][ T5221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.782543][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.792564][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.807135][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.832300][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.922533][ T5222] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.940737][ T5222] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.971098][ T5222] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.001097][ T5222] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.025868][ T5217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.041646][ T5217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.109511][ T5217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.155754][ T5217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.265707][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.310492][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.324071][ T5228] Bluetooth: hci0: command tx timeout [ 82.354042][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.369646][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.403279][ T5228] Bluetooth: hci4: command tx timeout [ 82.408739][ T5228] Bluetooth: hci2: command tx timeout [ 82.414531][ T55] Bluetooth: hci3: command tx timeout [ 82.414701][ T5234] Bluetooth: hci1: command tx timeout [ 82.438113][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.610525][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.645309][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.698697][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.706106][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.741522][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.748676][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.802089][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.828258][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.872704][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.885999][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.893202][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.911479][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.952756][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.959942][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.007137][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.014335][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.031187][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.038345][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.075480][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.088896][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.096070][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.167851][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.189822][ T5222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.250651][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.257905][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.319920][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.354994][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.362174][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.397354][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.404534][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.615079][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.746324][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.869654][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.001180][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.067783][ T5223] veth0_vlan: entered promiscuous mode [ 84.120927][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.160497][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.205827][ T5223] veth1_vlan: entered promiscuous mode [ 84.321364][ T5221] veth0_vlan: entered promiscuous mode [ 84.380055][ T5217] veth0_vlan: entered promiscuous mode [ 84.401176][ T5221] veth1_vlan: entered promiscuous mode [ 84.407004][ T5234] Bluetooth: hci0: command tx timeout [ 84.411938][ T5224] veth0_vlan: entered promiscuous mode [ 84.432269][ T5222] veth0_vlan: entered promiscuous mode [ 84.450388][ T5224] veth1_vlan: entered promiscuous mode [ 84.468371][ T5217] veth1_vlan: entered promiscuous mode [ 84.484555][ T5234] Bluetooth: hci2: command tx timeout [ 84.484607][ T55] Bluetooth: hci1: command tx timeout [ 84.489966][ T5230] Bluetooth: hci4: command tx timeout [ 84.495623][ T5228] Bluetooth: hci3: command tx timeout [ 84.510435][ T5223] veth0_macvtap: entered promiscuous mode [ 84.532244][ T5223] veth1_macvtap: entered promiscuous mode [ 84.554481][ T5222] veth1_vlan: entered promiscuous mode [ 84.622290][ T5221] veth0_macvtap: entered promiscuous mode [ 84.634954][ T5221] veth1_macvtap: entered promiscuous mode [ 84.646475][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.667360][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.706347][ T5217] veth0_macvtap: entered promiscuous mode [ 84.728772][ T5224] veth0_macvtap: entered promiscuous mode [ 84.740192][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.749608][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759078][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.768910][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.804099][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.814946][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.827077][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.842723][ T5224] veth1_macvtap: entered promiscuous mode [ 84.850960][ T5217] veth1_macvtap: entered promiscuous mode [ 84.919143][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.930844][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.941448][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.953165][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.966632][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.980989][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.991953][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.004151][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.026181][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.039366][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.050040][ T5217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.060886][ T5217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.072658][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.089997][ T5217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.101922][ T5217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.111013][ T5217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119818][ T5217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.136877][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.145752][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155162][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164381][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.194639][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.206861][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.217255][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.229602][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.240976][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.251920][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.265569][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.278472][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.291274][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.301413][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.311912][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.322152][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.334677][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.346549][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.355987][ T5222] veth0_macvtap: entered promiscuous mode [ 85.378403][ T5222] veth1_macvtap: entered promiscuous mode [ 85.416736][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.434818][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.449215][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.459397][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.468738][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.477816][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512344][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.529807][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.540254][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.550947][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.560822][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.572008][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.582008][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.592543][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.606358][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.638745][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.654872][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.666295][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.677594][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.689591][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.700077][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.709964][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.721306][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.732875][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.788708][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.802737][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.819573][ T5222] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.835170][ T5222] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844172][ T5222] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852897][ T5222] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.894810][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.905322][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.970574][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.985918][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.065417][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.078088][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.199412][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.210499][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.343833][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.344428][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.351676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.402527][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.449174][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.481143][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.489081][ T5228] Bluetooth: hci0: command tx timeout [ 86.566850][ T5228] Bluetooth: hci3: command tx timeout [ 86.572019][ T5311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.572855][ T5228] Bluetooth: hci1: command tx timeout [ 86.603594][ T55] Bluetooth: hci4: command tx timeout [ 86.609063][ T55] Bluetooth: hci2: command tx timeout [ 86.618181][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.626165][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.094014][ T5303] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.134465][ T5317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.163600][ T5303] usb 3-1: Using ep0 maxpacket: 32 [ 88.187598][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.203651][ T5303] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.223141][ T5303] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 88.232328][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.266460][ T5303] usb 3-1: config 0 descriptor?? [ 88.324044][ T5275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 88.379621][ T5332] FAULT_INJECTION: forcing a failure. [ 88.379621][ T5332] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.397727][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.1.7 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 88.408211][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.418312][ T5332] Call Trace: [ 88.421624][ T5332] [ 88.424586][ T5332] dump_stack_lvl+0x241/0x360 [ 88.429317][ T5332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.434553][ T5332] ? __pfx__printk+0x10/0x10 [ 88.439192][ T5332] ? __pfx_lock_release+0x10/0x10 [ 88.444272][ T5332] should_fail_ex+0x3b0/0x4e0 [ 88.448994][ T5332] _copy_from_user+0x2f/0xe0 [ 88.453633][ T5332] copy_msghdr_from_user+0xae/0x680 [ 88.458887][ T5332] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 88.464777][ T5332] __sys_sendmsg+0x23d/0x3a0 [ 88.469423][ T5332] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.474583][ T5332] ? vfs_write+0x7c4/0xc90 [ 88.479084][ T5332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.485460][ T5332] ? do_syscall_64+0x100/0x230 [ 88.490264][ T5332] ? do_syscall_64+0xb6/0x230 [ 88.495009][ T5332] do_syscall_64+0xf3/0x230 [ 88.499559][ T5332] ? clear_bhb_loop+0x35/0x90 [ 88.504371][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.510312][ T5332] RIP: 0033:0x7f6da3979e79 [ 88.514777][ T5332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.534421][ T5332] RSP: 002b:00007f6da33ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.542889][ T5332] RAX: ffffffffffffffda RBX: 00007f6da3b15f80 RCX: 00007f6da3979e79 [ 88.550901][ T5332] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 88.559050][ T5332] RBP: 00007f6da33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 88.567068][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.575076][ T5332] R13: 0000000000000000 R14: 00007f6da3b15f80 R15: 00007ffc00795cb8 [ 88.583105][ T5332] [ 88.712027][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 88.726430][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 88.736843][ T5275] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 88.764201][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.783276][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.826497][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 88.862587][ T5303] hid-u2fzero 0003:10C4:8ACF.0001: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 88.875209][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 88.875268][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.877574][ T5275] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 88.911873][ T5303] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero LED initialised [ 88.960890][ T5303] hid-u2fzero 0003:10C4:8ACF.0001: U2F Zero RNG initialised [ 88.986837][ T5275] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.033558][ T5275] usb 5-1: Manufacturer: syz [ 89.063676][ T5344] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 89.239076][ T5275] usb 5-1: config 0 descriptor?? [ 89.270538][ T5317] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 90.060947][ T5275] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 90.068311][ T5275] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 90.077608][ T5275] usbhid 5-1:0.0: can't add hid device: -22 [ 90.092616][ T5275] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 90.106526][ T5275] usb 5-1: USB disconnect, device number 2 [ 91.475817][ T5272] usb 3-1: USB disconnect, device number 2 [ 91.833173][ T5305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.228643][ T5305] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.642511][ T59] cfg80211: failed to load regulatory.db [ 93.015019][ T5305] usb 2-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 93.037221][ T5305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.051471][ T5305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 193, changing to 11 [ 93.085053][ T5305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42931, setting to 1024 [ 93.117469][ T5305] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.128187][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.141113][ T5305] usb 2-1: Product: syz [ 93.164110][ T5369] futex_wake_op: syz.2.16 tries to shift op by -1; fix this program [ 93.173449][ T5305] usb 2-1: Manufacturer: syz [ 93.203121][ T5370] capability: warning: `syz.0.17' uses 32-bit capabilities (legacy support in use) [ 94.108684][ T5357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.259789][ T5305] cdc_wdm 2-1:1.0: skipping garbage [ 94.274070][ T5305] cdc_wdm 2-1:1.0: skipping garbage [ 94.286497][ T5305] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 94.302678][ T5305] cdc_wdm 2-1:1.0: Unknown control protocol [ 94.327014][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 94.502418][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.509218][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.515769][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.522596][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.529588][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.536240][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.542536][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.549160][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.555460][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.558781][ T5385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.562094][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.562327][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.583395][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.589610][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.595670][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.602357][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.608536][ C1] hrtimer: interrupt took 46244346 ns [ 94.613970][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.620589][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.626901][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.633538][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.637545][ T5381] kvm: emulating exchange as write [ 94.639861][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 94.651511][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 94.660723][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.683470][ T5385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.719568][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 94.734170][ T5305] usb 2-1: USB disconnect, device number 2 [ 94.823222][ T25] usb 3-1: device descriptor read/64, error -71 [ 95.819297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.828815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.916779][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.036353][ T5397] FAULT_INJECTION: forcing a failure. [ 96.036353][ T5397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.067172][ T5397] CPU: 0 UID: 0 PID: 5397 Comm: syz.1.22 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 96.077749][ T5397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 96.087853][ T5397] Call Trace: [ 96.091164][ T5397] [ 96.094127][ T5397] dump_stack_lvl+0x241/0x360 [ 96.098852][ T5397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.104093][ T5397] ? __pfx__printk+0x10/0x10 [ 96.108739][ T5397] ? __pfx_lock_release+0x10/0x10 [ 96.113829][ T5397] should_fail_ex+0x3b0/0x4e0 [ 96.118612][ T5397] _copy_from_iter+0x1f6/0x1960 [ 96.123508][ T5397] ? __virt_addr_valid+0x183/0x530 [ 96.128661][ T5397] ? __pfx_lock_release+0x10/0x10 [ 96.133743][ T5397] ? __alloc_skb+0x28f/0x440 [ 96.138381][ T5397] ? __pfx__copy_from_iter+0x10/0x10 [ 96.143717][ T5397] ? __virt_addr_valid+0x183/0x530 [ 96.148862][ T5397] ? __virt_addr_valid+0x183/0x530 [ 96.154008][ T5397] ? __virt_addr_valid+0x45f/0x530 [ 96.159159][ T5397] ? __check_object_size+0x49c/0x900 [ 96.164517][ T5397] netlink_sendmsg+0x73d/0xcb0 [ 96.169332][ T5397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.174746][ T5397] ? __import_iovec+0x536/0x820 [ 96.179650][ T5397] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 96.184988][ T5397] ? security_socket_sendmsg+0x87/0xb0 [ 96.190755][ T5397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.196079][ T5397] __sock_sendmsg+0x221/0x270 [ 96.200813][ T5397] ____sys_sendmsg+0x525/0x7d0 [ 96.205726][ T5397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.211080][ T5397] __sys_sendmsg+0x2b0/0x3a0 [ 96.215730][ T5397] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.220887][ T5397] ? vfs_write+0x7c4/0xc90 [ 96.225399][ T5397] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.231777][ T5397] ? do_syscall_64+0x100/0x230 [ 96.236588][ T5397] ? do_syscall_64+0xb6/0x230 [ 96.241304][ T5397] do_syscall_64+0xf3/0x230 [ 96.245847][ T5397] ? clear_bhb_loop+0x35/0x90 [ 96.250613][ T5397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.256543][ T5397] RIP: 0033:0x7f6da3979e79 [ 96.260989][ T5397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.278817][ T5407] FAULT_INJECTION: forcing a failure. [ 96.278817][ T5407] name failslab, interval 1, probability 0, space 0, times 1 [ 96.280602][ T5397] RSP: 002b:00007f6da33ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.301634][ T5397] RAX: ffffffffffffffda RBX: 00007f6da3b15f80 RCX: 00007f6da3979e79 [ 96.309622][ T5397] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 96.317614][ T5397] RBP: 00007f6da33ff090 R08: 0000000000000000 R09: 0000000000000000 [ 96.325799][ T5397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.333804][ T5397] R13: 0000000000000000 R14: 00007f6da3b15f80 R15: 00007ffc00795cb8 [ 96.341824][ T5397] [ 96.344860][ T5407] CPU: 1 UID: 0 PID: 5407 Comm: syz.0.24 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 96.355488][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 96.365572][ T5407] Call Trace: [ 96.368863][ T5407] [ 96.371825][ T5407] dump_stack_lvl+0x241/0x360 [ 96.376633][ T5407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.381838][ T5407] ? __pfx__printk+0x10/0x10 [ 96.386536][ T5407] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 96.392532][ T5407] ? __pfx___might_resched+0x10/0x10 [ 96.397835][ T5407] should_fail_ex+0x3b0/0x4e0 [ 96.402641][ T5407] should_failslab+0xac/0x100 [ 96.407330][ T5407] ? __alloc_skb+0x1c3/0x440 [ 96.411982][ T5407] kmem_cache_alloc_node_noprof+0x71/0x320 [ 96.417822][ T5407] __alloc_skb+0x1c3/0x440 [ 96.422260][ T5407] ? __pfx___alloc_skb+0x10/0x10 [ 96.427215][ T5407] ? netlink_autobind+0xd6/0x2f0 [ 96.432180][ T5407] ? netlink_autobind+0x2b0/0x2f0 [ 96.437234][ T5407] netlink_sendmsg+0x638/0xcb0 [ 96.442040][ T5407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.447353][ T5407] ? __import_iovec+0x536/0x820 [ 96.452234][ T5407] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 96.457538][ T5407] ? security_socket_sendmsg+0x87/0xb0 [ 96.463024][ T5407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.468339][ T5407] __sock_sendmsg+0x221/0x270 [ 96.473096][ T5407] ____sys_sendmsg+0x525/0x7d0 [ 96.477895][ T5407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.483300][ T5407] __sys_sendmsg+0x2b0/0x3a0 [ 96.487916][ T5407] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.493050][ T5407] ? vfs_write+0x7c4/0xc90 [ 96.497614][ T5407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.503963][ T5407] ? do_syscall_64+0x100/0x230 [ 96.508746][ T5407] ? do_syscall_64+0xb6/0x230 [ 96.513435][ T5407] do_syscall_64+0xf3/0x230 [ 96.517948][ T5407] ? clear_bhb_loop+0x35/0x90 [ 96.522642][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.528587][ T5407] RIP: 0033:0x7ff3b1b79e79 [ 96.533017][ T5407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.552682][ T5407] RSP: 002b:00007ff3b2a30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.561209][ T5407] RAX: ffffffffffffffda RBX: 00007ff3b1d15f80 RCX: 00007ff3b1b79e79 [ 96.569201][ T5407] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 96.577188][ T5407] RBP: 00007ff3b2a30090 R08: 0000000000000000 R09: 0000000000000000 [ 96.585184][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.593180][ T5407] R13: 0000000000000000 R14: 00007ff3b1d15f80 R15: 00007ffe72f70778 [ 96.601311][ T5407] [ 96.604522][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.627850][ T5228] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 96.642105][ T5228] Bluetooth: hci2: Injecting HCI hardware error event [ 96.650875][ T5228] Bluetooth: hci2: hardware error 0x00 [ 98.723260][ T5228] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 98.732377][ T5422] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.847297][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.858892][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.871109][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.887258][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.902644][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.914359][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.023932][ T5426] netlink: 372 bytes leftover after parsing attributes in process `syz.2.29'. [ 100.963856][ T5228] Bluetooth: hci5: command tx timeout [ 101.442423][ T29] audit: type=1326 audit(1724803456.493:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5439 comm="syz.2.33" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1907f79e79 code=0x0 [ 101.484442][ T5449] FAULT_INJECTION: forcing a failure. [ 101.484442][ T5449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.553598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 101.564954][ T5449] CPU: 0 UID: 0 PID: 5449 Comm: syz.0.35 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 101.575512][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 101.585687][ T5449] Call Trace: [ 101.588996][ T5449] [ 101.591959][ T5449] dump_stack_lvl+0x241/0x360 [ 101.596683][ T5449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.597956][ T5455] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 101.601899][ T5449] ? __pfx__printk+0x10/0x10 [ 101.621893][ T5449] ? snprintf+0xda/0x120 [ 101.626184][ T5449] should_fail_ex+0x3b0/0x4e0 [ 101.630908][ T5449] _copy_to_user+0x2f/0xb0 [ 101.635377][ T5449] simple_read_from_buffer+0xca/0x150 [ 101.640796][ T5449] proc_fail_nth_read+0x1ec/0x260 [ 101.645843][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.651432][ T5449] ? rw_verify_area+0x520/0x6b0 [ 101.656325][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.661903][ T5449] vfs_read+0x204/0xbc0 [ 101.666092][ T5449] ? __pfx_lock_release+0x10/0x10 [ 101.671171][ T5449] ? __pfx_vfs_read+0x10/0x10 [ 101.675899][ T5449] ? __fget_files+0x29/0x470 [ 101.680567][ T5449] ? __fget_files+0x3f6/0x470 [ 101.685305][ T5449] ksys_read+0x1a0/0x2c0 [ 101.689599][ T5449] ? __pfx_ksys_read+0x10/0x10 [ 101.694399][ T5449] ? do_syscall_64+0x100/0x230 [ 101.699207][ T5449] ? do_syscall_64+0xb6/0x230 [ 101.703940][ T5449] do_syscall_64+0xf3/0x230 [ 101.708481][ T5449] ? clear_bhb_loop+0x35/0x90 [ 101.713203][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.719142][ T5449] RIP: 0033:0x7ff3b1b788bc [ 101.723587][ T5449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 101.743313][ T5449] RSP: 002b:00007ff3b2a30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.751770][ T5449] RAX: ffffffffffffffda RBX: 00007ff3b1d15f80 RCX: 00007ff3b1b788bc [ 101.759780][ T5449] RDX: 000000000000000f RSI: 00007ff3b2a300a0 RDI: 0000000000000004 [ 101.767787][ T5449] RBP: 00007ff3b2a30090 R08: 0000000000000000 R09: 0000000001000000 [ 101.775886][ T5449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.783885][ T5449] R13: 0000000000000000 R14: 00007ff3b1d15f80 R15: 00007ffe72f70778 [ 101.791911][ T5449] [ 101.795061][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.823420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.680348][ T3040] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.060544][ T5228] Bluetooth: hci5: command tx timeout [ 103.103547][ T3040] usb 1-1: Using ep0 maxpacket: 32 [ 103.168057][ T3040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.187207][ T5424] chnl_net:caif_netlink_parms(): no params data found [ 103.201069][ T3040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.249952][ T3040] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 103.303147][ T3040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.365397][ T3040] usb 1-1: config 0 descriptor?? [ 103.541620][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.660804][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.671974][ T5275] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.616449][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 104.680501][ T5275] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 104.703670][ T5275] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 104.719181][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.726824][ T5275] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 104.757442][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.765843][ T5275] usb 3-1: config 1 has no interface number 0 [ 104.782461][ T5424] bridge_slave_0: entered allmulticast mode [ 104.788578][ T5275] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.814998][ T5424] bridge_slave_0: entered promiscuous mode [ 104.821979][ T5275] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 104.870647][ T5490] FAULT_INJECTION: forcing a failure. [ 104.870647][ T5490] name failslab, interval 1, probability 0, space 0, times 0 [ 104.884727][ T5275] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 104.904581][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.912746][ T5490] CPU: 0 UID: 0 PID: 5490 Comm: syz.3.45 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 104.923283][ T5490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 104.933364][ T5490] Call Trace: [ 104.936657][ T5490] [ 104.939597][ T5490] dump_stack_lvl+0x241/0x360 [ 104.944382][ T5490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.949592][ T5490] ? __pfx__printk+0x10/0x10 [ 104.954210][ T5490] ? ref_tracker_alloc+0x332/0x490 [ 104.959346][ T5490] should_fail_ex+0x3b0/0x4e0 [ 104.964033][ T5490] ? skb_clone+0x20c/0x390 [ 104.968470][ T5490] should_failslab+0xac/0x100 [ 104.973156][ T5490] ? skb_clone+0x20c/0x390 [ 104.977581][ T5490] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 104.982981][ T5490] skb_clone+0x20c/0x390 [ 104.987266][ T5490] __netlink_deliver_tap+0x3cc/0x7c0 [ 104.992573][ T5490] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.997786][ T5490] netlink_deliver_tap+0x19d/0x1b0 [ 105.002915][ T5490] netlink_unicast+0x7c4/0x990 [ 105.007709][ T5490] ? __pfx_netlink_unicast+0x10/0x10 [ 105.013012][ T5490] ? __virt_addr_valid+0x183/0x530 [ 105.018144][ T5490] ? __check_object_size+0x49c/0x900 [ 105.023442][ T5490] ? bpf_lsm_netlink_send+0x9/0x10 [ 105.028569][ T5490] netlink_sendmsg+0x8e4/0xcb0 [ 105.033361][ T5490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.038664][ T5490] ? __import_iovec+0x536/0x820 [ 105.043544][ T5490] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.048847][ T5490] ? security_socket_sendmsg+0x87/0xb0 [ 105.054328][ T5490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.059627][ T5490] __sock_sendmsg+0x221/0x270 [ 105.064346][ T5490] ____sys_sendmsg+0x525/0x7d0 [ 105.069130][ T5490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.074464][ T5490] __sys_sendmsg+0x2b0/0x3a0 [ 105.079070][ T5490] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.084203][ T5490] ? vfs_write+0x7c4/0xc90 [ 105.088665][ T5490] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.095015][ T5490] ? do_syscall_64+0x100/0x230 [ 105.099791][ T5490] ? do_syscall_64+0xb6/0x230 [ 105.104482][ T5490] do_syscall_64+0xf3/0x230 [ 105.108992][ T5490] ? clear_bhb_loop+0x35/0x90 [ 105.113686][ T5490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.119599][ T5490] RIP: 0033:0x7f3f0bf79e79 [ 105.124037][ T5490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.143654][ T5490] RSP: 002b:00007f3f0cdec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.152076][ T5490] RAX: ffffffffffffffda RBX: 00007f3f0c115f80 RCX: 00007f3f0bf79e79 [ 105.160065][ T5490] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 105.168045][ T5490] RBP: 00007f3f0cdec090 R08: 0000000000000000 R09: 0000000000000000 [ 105.176029][ T5490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.184008][ T5490] R13: 0000000000000000 R14: 00007f3f0c115f80 R15: 00007ffed301d9f8 [ 105.192003][ T5490] [ 105.219495][ T5275] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 105.227054][ T5228] Bluetooth: hci5: command tx timeout [ 105.264122][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.316073][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.325499][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.332847][ T5424] bridge_slave_1: entered allmulticast mode [ 105.366500][ T3040] usbhid 1-1:0.0: can't add hid device: -71 [ 105.386217][ T5424] bridge_slave_1: entered promiscuous mode [ 105.397593][ T3040] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 105.437512][ T3040] usb 1-1: USB disconnect, device number 2 [ 105.470637][ T5490] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 105.556718][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.752277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.906656][ T5275] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 105.950842][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.182459][ T3040] usb 3-1: USB disconnect, device number 5 [ 106.245195][ T3040] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 106.811417][ T5499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.956789][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.064803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.090505][ T5424] team0: Port device team_slave_0 added [ 107.103966][ T5424] team0: Port device team_slave_1 added [ 107.349157][ T5228] Bluetooth: hci5: command tx timeout [ 107.984336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.995392][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.033074][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.062372][ T5424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.101384][ T29] audit: type=1326 audit(1724803463.133:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5504 comm="syz.0.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b1b79e79 code=0x0 [ 108.102578][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.182124][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.218001][ T5424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.305759][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 110.155206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.165647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 110.203449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.513615][ T64] bridge_slave_1: left allmulticast mode [ 110.519527][ T64] bridge_slave_1: left promiscuous mode [ 110.546853][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.650318][ T64] bridge_slave_0: left allmulticast mode [ 110.689789][ T64] bridge_slave_0: left promiscuous mode [ 110.717105][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.750858][ T5545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.790651][ T5545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.841405][ T5543] sctp: [Deprecated]: syz.0.55 (pid 5543) Use of int in max_burst socket option deprecated. [ 110.841405][ T5543] Use struct sctp_assoc_value instead [ 110.903124][ T59] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.003330][ T25] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 111.135383][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.169666][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.196074][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 111.217059][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.227915][ T59] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 111.250336][ T25] usb 2-1: config 0 descriptor?? [ 111.263789][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.309605][ T59] usb 3-1: config 0 descriptor?? [ 111.312585][ T25] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 111.483824][ T25] gspca_sn9c20x: Write register 1000 failed -71 [ 111.507743][ T25] gspca_sn9c20x: Device initialization failed [ 111.537016][ T25] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 111.581631][ T25] usb 2-1: USB disconnect, device number 3 [ 111.835992][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.860175][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.879935][ T64] bond0 (unregistering): Released all slaves [ 112.113583][ T5424] hsr_slave_0: entered promiscuous mode [ 112.319523][ T5424] hsr_slave_1: entered promiscuous mode [ 112.413401][ T29] audit: type=1326 audit(1724803467.443:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5535 comm="syz.2.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1907f79e79 code=0x0 [ 112.556721][ T59] hid (null): unknown global tag 0x40 [ 112.763526][ T5424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.842965][ T5424] Cannot create hsr debugfs directory [ 112.875744][ T59] itetech 0003:258A:6A88.0002: unexpected long global item [ 112.903659][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.012154][ T59] itetech 0003:258A:6A88.0002: probe with driver itetech failed with error -22 [ 113.103176][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 113.305188][ T25] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 113.385055][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.518909][ T25] usb 1-1: Product: syz [ 113.535940][ T25] usb 1-1: Manufacturer: syz [ 113.547180][ T25] usb 1-1: SerialNumber: syz [ 113.571775][ T25] usb 1-1: config 0 descriptor?? [ 114.417584][ T47] usb 3-1: USB disconnect, device number 6 [ 114.534448][ T5576] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 114.597248][ T5306] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.783766][ T5306] usb 2-1: Using ep0 maxpacket: 16 [ 114.805937][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 114.831025][ T5306] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.875371][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.910331][ T5306] usb 2-1: Product: syz [ 114.914790][ T5306] usb 2-1: Manufacturer: syz [ 114.919579][ T5306] usb 2-1: SerialNumber: syz [ 114.972745][ T5306] usb 2-1: config 0 descriptor?? [ 115.473505][ T5274] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.249054][ T5275] usb 2-1: USB disconnect, device number 4 [ 116.257206][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.291287][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.308435][ T5274] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 116.321209][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.370158][ T5274] usb 4-1: config 0 descriptor?? [ 116.375293][ T5272] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 116.405060][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.428711][ T25] usb 1-1: MIDIStreaming interface descriptor not found [ 116.593668][ T5272] usb 3-1: Using ep0 maxpacket: 16 [ 116.644373][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 116.666997][ T25] usb 1-1: USB disconnect, device number 3 [ 116.719591][ T5272] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.753073][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.779578][ T5272] usb 3-1: Product: syz [ 116.789732][ T64] hsr_slave_0: left promiscuous mode [ 116.814945][ T5272] usb 3-1: Manufacturer: syz [ 116.820433][ T5272] usb 3-1: SerialNumber: syz [ 116.847552][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.062501][ T64] hsr_slave_1: left promiscuous mode [ 117.088000][ T5272] usb 3-1: config 0 descriptor?? [ 117.389010][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.448960][ T29] audit: type=1326 audit(1724803472.493:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5587 comm="syz.0.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3b1b79e79 code=0x0 [ 117.477643][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.557091][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.584561][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.728500][ T29] audit: type=1326 audit(1724803472.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5579 comm="syz.3.62" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0bf79e79 code=0x0 [ 117.884031][ T64] veth1_macvtap: left promiscuous mode [ 117.913850][ T5274] hid (null): unknown global tag 0x40 [ 117.944478][ T64] veth0_macvtap: left promiscuous mode [ 117.945388][ T5274] itetech 0003:258A:6A88.0003: unexpected long global item [ 117.993584][ T64] veth1_vlan: left promiscuous mode [ 118.010201][ T5274] itetech 0003:258A:6A88.0003: probe with driver itetech failed with error -22 [ 118.059576][ T64] veth0_vlan: left promiscuous mode [ 118.492701][ T25] usb 3-1: USB disconnect, device number 7 [ 119.100077][ T5623] sctp: [Deprecated]: syz.0.67 (pid 5623) Use of int in max_burst socket option deprecated. [ 119.100077][ T5623] Use struct sctp_assoc_value instead [ 120.393210][ T5306] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.448922][ T64] team0 (unregistering): Port device team_slave_1 removed [ 120.573248][ T5306] usb 1-1: Using ep0 maxpacket: 32 [ 120.587515][ T5306] usb 1-1: unable to get BOS descriptor or descriptor too short [ 120.613193][ T64] team0 (unregistering): Port device team_slave_0 removed [ 120.623808][ T47] usb 4-1: USB disconnect, device number 2 [ 120.635489][ T5306] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 120.683183][ T5306] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 120.709273][ T5306] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 120.735650][ T5306] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.763213][ T5306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.784863][ T5306] usb 1-1: Manufacturer: Ц [ 120.789430][ T5306] usb 1-1: SerialNumber: ݳ婮ĕ㜕뚻㤵₲ᴝ闻쾶Ｃ鞝⟟⢎現䎴썳ー㹒우丄봰憉隑㶘囄炀䳱픁뾠㘮㔁⃜퉄嶢췙푉鈠悹ⲥꄘ㹝莺掎魕佭ﴎブ빣꒾䥀싻逎঍ທ鿈肬觳ໍ훲폵薏슐杸ꄒ᚛ꤋⲾⷤᠣ욹⧞⳥鱞횎똡眬녮쵪填痨 [ 121.061349][ T5648] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 121.304715][ T5306] cdc_ncm 1-1:1.0: bind() failure [ 121.312203][ T5275] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.337874][ T5306] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 121.351825][ T5306] cdc_ncm 1-1:1.1: bind() failure [ 121.365897][ T5272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.381977][ T5306] usb 1-1: USB disconnect, device number 4 [ 121.560967][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 121.624918][ T5272] usb 2-1: Using ep0 maxpacket: 32 [ 121.635304][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.637116][ T5272] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 121.657192][ T5275] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.696607][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.712799][ T5272] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 121.744073][ T5275] usb 4-1: config 0 descriptor?? [ 121.749176][ T5272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 121.780119][ T5272] usb 2-1: config 1 has no interface number 0 [ 121.790848][ T5275] hub 4-1:0.0: USB hub found [ 121.802703][ T5272] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.824322][ T5272] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50692, setting to 1024 [ 121.839617][ T5272] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 121.853398][ T5272] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 121.862546][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.883511][ T5648] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 121.895068][ T5272] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 121.983479][ T5275] hub 4-1:0.0: 1 port detected [ 122.107402][ T5648] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 122.146357][ T5272] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 122.390081][ T5649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.440876][ T5649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.926042][ T5275] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 123.191459][ T5306] usb 4-1: USB disconnect, device number 3 [ 123.323144][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.603937][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 123.614482][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 123.789560][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.937679][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.050238][ T5275] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 124.078654][ T25] usb 1-1: Product: syz [ 124.113605][ T25] usb 1-1: Manufacturer: syz [ 124.144858][ T25] usb 1-1: SerialNumber: syz [ 124.165194][ T3040] usb 2-1: USB disconnect, device number 5 [ 124.172683][ T25] usb 1-1: config 0 descriptor?? [ 124.195605][ T3040] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 124.267070][ T5424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.373375][ T5424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.584082][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 124.607686][ T5228] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 124.616643][ T5228] Bluetooth: hci3: Injecting HCI hardware error event [ 124.626366][ T5230] Bluetooth: hci3: hardware error 0x00 [ 125.133859][ T5305] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.403419][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 125.443542][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 125.548305][ T25] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.142994][ C0] sched: RT throttling activated [ 126.333141][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 126.406990][ T25] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 126.709890][ T47] usb 1-1: USB disconnect, device number 5 [ 126.733660][ T5305] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 126.766543][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 126.806666][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.831490][ T25] usb 3-1: config 1 has no interface number 0 [ 127.145217][ T5424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.193765][ T5305] usb 2-1: Product: syz [ 127.198047][ T5305] usb 2-1: Manufacturer: syz [ 127.204880][ T25] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.216694][ T5305] usb 2-1: SerialNumber: syz [ 127.223816][ T25] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.241300][ T25] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 127.261134][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.447348][ T5305] usb 2-1: config 0 descriptor?? [ 127.475737][ T5305] usb 2-1: can't set config #0, error -71 [ 127.496437][ T25] usb 3-1: can't set config #1, error -71 [ 127.513419][ T5305] usb 2-1: USB disconnect, device number 6 [ 127.526791][ T25] usb 3-1: USB disconnect, device number 8 [ 127.540658][ T5424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.546274][ T5696] sctp: [Deprecated]: syz.0.80 (pid 5696) Use of int in max_burst socket option deprecated. [ 127.546274][ T5696] Use struct sctp_assoc_value instead [ 128.004644][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.033291][ T5305] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.089296][ T5424] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.120833][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.128040][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.216264][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.223802][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.225157][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.252238][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.282445][ T5305] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 128.335835][ T5712] netlink: 'syz.2.85': attribute type 11 has an invalid length. [ 128.337409][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.392008][ T5305] usb 2-1: config 0 descriptor?? [ 128.404693][ T5713] netlink: 'syz.2.85': attribute type 11 has an invalid length. [ 128.449539][ T5713] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 128.583547][ T5716] FAULT_INJECTION: forcing a failure. [ 128.583547][ T5716] name failslab, interval 1, probability 0, space 0, times 0 [ 128.617961][ T5716] CPU: 0 UID: 0 PID: 5716 Comm: syz.0.86 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 128.628521][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 128.638610][ T5716] Call Trace: [ 128.641923][ T5716] [ 128.644878][ T5716] dump_stack_lvl+0x241/0x360 [ 128.649609][ T5716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.654826][ T5716] ? __pfx__printk+0x10/0x10 [ 128.659426][ T5716] ? _copy_from_iter+0x26b/0x1960 [ 128.664468][ T5716] should_fail_ex+0x3b0/0x4e0 [ 128.669165][ T5716] ? build_skb+0x52/0x2a0 [ 128.673507][ T5716] should_failslab+0xac/0x100 [ 128.678198][ T5716] ? build_skb+0x52/0x2a0 [ 128.682534][ T5716] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 128.687927][ T5716] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 128.693931][ T5716] build_skb+0x52/0x2a0 [ 128.698099][ T5716] ? __tun_build_skb+0x25/0x2f0 [ 128.702965][ T5716] __tun_build_skb+0x33/0x2f0 [ 128.707671][ T5716] tun_get_user+0x20bb/0x4720 [ 128.712365][ T5716] ? tun_get_user+0x871/0x4720 [ 128.717145][ T5716] ? __lock_acquire+0x137a/0x2040 [ 128.722190][ T5716] ? __pfx_tun_get_user+0x10/0x10 [ 128.727500][ T5716] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.733069][ T5716] ? tun_get+0x1e/0x2f0 [ 128.737237][ T5716] ? __pfx_lock_release+0x10/0x10 [ 128.742308][ T5716] ? tun_get+0x1e/0x2f0 [ 128.746472][ T5716] ? tun_get+0x27d/0x2f0 [ 128.750722][ T5716] tun_chr_write_iter+0x113/0x1f0 [ 128.755761][ T5716] vfs_write+0xa72/0xc90 [ 128.760010][ T5716] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 128.765572][ T5716] ? __pfx_vfs_write+0x10/0x10 [ 128.770372][ T5716] ksys_write+0x1a0/0x2c0 [ 128.774730][ T5716] ? __pfx_ksys_write+0x10/0x10 [ 128.779595][ T5716] ? do_syscall_64+0x100/0x230 [ 128.784364][ T5716] ? do_syscall_64+0xb6/0x230 [ 128.789051][ T5716] do_syscall_64+0xf3/0x230 [ 128.793561][ T5716] ? clear_bhb_loop+0x35/0x90 [ 128.798248][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.804151][ T5716] RIP: 0033:0x7ff3b1b7895f [ 128.808580][ T5716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 128.828287][ T5716] RSP: 002b:00007ff3b2a30000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 128.836720][ T5716] RAX: ffffffffffffffda RBX: 00007ff3b1d15f80 RCX: 00007ff3b1b7895f [ 128.844693][ T5716] RDX: 0000000000000041 RSI: 0000000020000000 RDI: 00000000000000c8 [ 128.852662][ T5716] RBP: 00007ff3b2a30090 R08: 0000000000000000 R09: 0000000000000000 [ 128.860628][ T5716] R10: 0000000000000041 R11: 0000000000000293 R12: 0000000000000001 [ 128.868594][ T5716] R13: 0000000000000001 R14: 00007ff3b1d15f80 R15: 00007ffe72f70778 [ 128.876578][ T5716] [ 129.448822][ T5729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.88'. [ 129.523345][ T5230] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 129.681756][ T29] audit: type=1326 audit(1724803484.693:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5697 comm="syz.1.81" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6da3979e79 code=0x0 [ 129.796761][ T5305] hid (null): unknown global tag 0x40 [ 129.851298][ T5424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.856653][ T5305] itetech 0003:258A:6A88.0004: unexpected long global item [ 129.924567][ T5305] itetech 0003:258A:6A88.0004: probe with driver itetech failed with error -22 [ 129.944473][ T5745] netlink: 176 bytes leftover after parsing attributes in process `syz.0.90'. [ 130.761384][ T5424] veth0_vlan: entered promiscuous mode [ 130.770240][ T29] audit: type=1326 audit(1724803485.823:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5758 comm="syz.3.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f0bf79e79 code=0x0 [ 130.832652][ T5424] veth1_vlan: entered promiscuous mode [ 131.180359][ T5774] FAULT_INJECTION: forcing a failure. [ 131.180359][ T5774] name failslab, interval 1, probability 0, space 0, times 0 [ 131.208514][ T5424] veth0_macvtap: entered promiscuous mode [ 131.235067][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: syz.2.95 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 131.245581][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 131.255634][ T5774] Call Trace: [ 131.258907][ T5774] [ 131.261829][ T5774] dump_stack_lvl+0x241/0x360 [ 131.266508][ T5774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.271704][ T5774] ? __pfx__printk+0x10/0x10 [ 131.276299][ T5774] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 131.282283][ T5774] ? __pfx___might_resched+0x10/0x10 [ 131.287576][ T5774] should_fail_ex+0x3b0/0x4e0 [ 131.292255][ T5774] should_failslab+0xac/0x100 [ 131.296925][ T5774] ? __alloc_skb+0x1c3/0x440 [ 131.301503][ T5774] kmem_cache_alloc_node_noprof+0x71/0x320 [ 131.307330][ T5774] __alloc_skb+0x1c3/0x440 [ 131.311744][ T5774] ? __pfx___alloc_skb+0x10/0x10 [ 131.316698][ T5774] ? netlink_ack_tlv_len+0x6e/0x200 [ 131.321888][ T5774] netlink_ack+0x13f/0xa30 [ 131.326293][ T5774] ? __sys_sendmsg+0x2b0/0x3a0 [ 131.331049][ T5774] ? do_syscall_64+0xf3/0x230 [ 131.335725][ T5774] netlink_rcv_skb+0x262/0x430 [ 131.340477][ T5774] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.345927][ T5774] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.351228][ T5774] ? safesetid_security_capable+0xb2/0x1d0 [ 131.357048][ T5774] ? bpf_lsm_capable+0x9/0x10 [ 131.361713][ T5774] ? security_capable+0x90/0xb0 [ 131.366574][ T5774] nfnetlink_rcv+0x297/0x2ad0 [ 131.371248][ T5774] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 131.376965][ T5774] ? __dev_queue_xmit+0x2da/0x3e90 [ 131.382091][ T5774] ? __dev_queue_xmit+0x1763/0x3e90 [ 131.387395][ T5774] ? kasan_save_track+0x51/0x80 [ 131.392247][ T5774] ? do_syscall_64+0xf3/0x230 [ 131.396918][ T5774] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.402022][ T5774] ? __dev_queue_xmit+0x2da/0x3e90 [ 131.407136][ T5774] ? __pfx___dev_queue_xmit+0x10/0x10 [ 131.412512][ T5774] ? ref_tracker_free+0x643/0x7e0 [ 131.417533][ T5774] ? __asan_memcpy+0x40/0x70 [ 131.422116][ T5774] ? __pfx_ref_tracker_free+0x10/0x10 [ 131.427498][ T5774] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.432700][ T5774] ? skb_clone+0x240/0x390 [ 131.437160][ T5774] ? __pfx_lock_release+0x10/0x10 [ 131.442180][ T5774] ? __netlink_deliver_tap+0x77e/0x7c0 [ 131.447670][ T5774] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.452877][ T5774] netlink_unicast+0x7f6/0x990 [ 131.457662][ T5774] ? __pfx_netlink_unicast+0x10/0x10 [ 131.462947][ T5774] ? __virt_addr_valid+0x183/0x530 [ 131.468069][ T5774] ? __check_object_size+0x49c/0x900 [ 131.473448][ T5774] ? bpf_lsm_netlink_send+0x9/0x10 [ 131.478584][ T5774] netlink_sendmsg+0x8e4/0xcb0 [ 131.483368][ T5774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.488648][ T5774] ? __import_iovec+0x536/0x820 [ 131.493500][ T5774] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.498792][ T5774] ? security_socket_sendmsg+0x87/0xb0 [ 131.504258][ T5774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.509542][ T5774] __sock_sendmsg+0x221/0x270 [ 131.514220][ T5774] ____sys_sendmsg+0x525/0x7d0 [ 131.518986][ T5774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.524280][ T5774] __sys_sendmsg+0x2b0/0x3a0 [ 131.528868][ T5774] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.533973][ T5774] ? vfs_write+0x7c4/0xc90 [ 131.538415][ T5774] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.544859][ T5774] ? do_syscall_64+0x100/0x230 [ 131.549643][ T5774] ? do_syscall_64+0xb6/0x230 [ 131.554322][ T5774] do_syscall_64+0xf3/0x230 [ 131.558827][ T5774] ? clear_bhb_loop+0x35/0x90 [ 131.563517][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.569453][ T5774] RIP: 0033:0x7f1907f79e79 [ 131.573874][ T5774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.593471][ T5774] RSP: 002b:00007f1908def038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.601882][ T5774] RAX: ffffffffffffffda RBX: 00007f1908115f80 RCX: 00007f1907f79e79 [ 131.609843][ T5774] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 131.617819][ T5774] RBP: 00007f1908def090 R08: 0000000000000000 R09: 0000000000000000 [ 131.625795][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.633760][ T5774] R13: 0000000000000000 R14: 00007f1908115f80 R15: 00007ffeba4acaa8 [ 131.641740][ T5774] [ 131.653936][ T5424] veth1_macvtap: entered promiscuous mode [ 131.675953][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.687225][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.697358][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.707863][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.719519][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.730388][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.741740][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.751670][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.773286][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.788917][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.832096][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.864629][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.948519][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.967822][ T5305] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.995422][ T5424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.043521][ T5424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.089511][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.148827][ T5424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.188498][ T5424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.203170][ T5305] usb 1-1: Using ep0 maxpacket: 32 [ 132.224081][ T5305] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 132.241243][ T5424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.250287][ T5305] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.275892][ T5424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.298589][ T5305] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.330647][ T5305] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.370985][ T5305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.429492][ T5305] usb 1-1: Product: syz [ 132.442539][ T5305] usb 1-1: Manufacturer: syz [ 132.506052][ T5305] usb 1-1: SerialNumber: syz [ 132.534708][ T5775] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.543524][ T5775] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.552122][ T5274] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 133.030230][ T5274] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 133.258397][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.267465][ T5771] netlink: 'syz.0.93': attribute type 4 has an invalid length. [ 133.296418][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309151][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.338193][ T5274] usb 3-1: Product: syz [ 133.342405][ T5274] usb 3-1: Manufacturer: syz [ 133.596030][ T5274] usb 3-1: SerialNumber: syz [ 133.632039][ T5274] usb 3-1: config 0 descriptor?? [ 133.639259][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.664236][ T5305] usb 1-1: USB disconnect, device number 6 [ 133.693099][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.764308][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.772344][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.999179][ T5274] hso 3-1:0.0: Can't find BULK IN endpoint [ 134.016008][ T5274] usb-storage 3-1:0.0: USB Mass Storage device detected [ 135.043574][ T9] usb 3-1: USB disconnect, device number 9 [ 135.765887][ T9] usb 2-1: USB disconnect, device number 7 [ 135.923561][ T5274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.183630][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 136.209396][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 136.258428][ T5274] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.289557][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.321532][ T5274] usb 4-1: Product: syz [ 136.339002][ T5274] usb 4-1: Manufacturer: syz [ 136.356457][ T5274] usb 4-1: SerialNumber: syz [ 136.386043][ T5274] usb 4-1: config 0 descriptor?? [ 136.548304][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.556335][ T5272] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.733425][ T29] audit: type=1326 audit(1724803491.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5839 comm="syz.1.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6da3979e79 code=0x0 [ 136.753124][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 136.763640][ T5272] usb 5-1: Using ep0 maxpacket: 32 [ 136.773144][ T5272] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 136.798715][ T9] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 136.831933][ T5272] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 136.847282][ T9] usb 3-1: config 0 has no interface number 0 [ 136.872254][ T9] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.888496][ T5272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 136.918379][ T5272] usb 5-1: config 1 has no interface number 0 [ 136.933782][ T9] usb 3-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 136.963791][ T5272] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.005207][ T9] usb 3-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 137.024000][ T5272] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.065994][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 137.097170][ T5272] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 137.127078][ T9] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 137.147390][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.173103][ T9] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.226524][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 137.284651][ T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 137.332263][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.360694][ T9] usb 3-1: Product: syz [ 137.370374][ T9] usb 3-1: Manufacturer: syz [ 137.377752][ T9] usb 3-1: SerialNumber: syz [ 137.404353][ T9] usb 3-1: config 0 descriptor?? [ 137.449733][ T5831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.472044][ T5831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.758479][ T9] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 137.778033][ T9] etas_es58x 3-1:0.219: could not retrieve the product info string [ 137.799010][ T5272] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 137.895074][ T9] usb 3-1: USB disconnect, device number 10 [ 137.956412][ T9] etas_es58x 3-1:0.219: Disconnecting syz syz [ 138.667236][ T5230] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 138.677141][ T5230] Bluetooth: hci5: Injecting HCI hardware error event [ 138.685583][ T5230] Bluetooth: hci5: hardware error 0x00 [ 138.706875][ T5305] usb 4-1: USB disconnect, device number 4 [ 138.814929][ T5274] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 138.910571][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.992517][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.030904][ T5832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.592636][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.735271][ T5832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.090362][ T5230] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 141.281353][ T5274] IPVS: starting estimator thread 0... [ 141.299523][ T5274] usb 5-1: USB disconnect, device number 3 [ 141.315045][ T5274] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 141.383487][ T5897] IPVS: using max 17 ests per chain, 40800 per kthread [ 141.693134][ T5275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.701594][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 141.764094][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.777818][ T5272] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 142.053427][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 142.122721][ T5272] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.146210][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.299523][ T5275] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 142.335035][ T5272] usb 1-1: config 0 has no interface number 0 [ 142.341222][ T5272] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 142.355600][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.602495][ T5275] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 142.623116][ T9] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 142.632289][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 142.642678][ T5272] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 142.652385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.670681][ T5275] usb 4-1: config 1 has no interface number 0 [ 143.492590][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.505489][ T5275] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.527166][ T9] usb 3-1: config 0 descriptor?? [ 143.566132][ T5272] usb 1-1: config 0 descriptor?? [ 143.576587][ T5275] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 143.628016][ T5272] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 143.651988][ T5275] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 143.694883][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.723909][ T5275] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 146.767580][ T5272] usb 1-1: USB disconnect, device number 7 [ 146.783334][ T5275] snd_usb_pod 4-1:1.1: set_interface failed [ 146.810210][ T5272] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 146.823675][ T5275] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 147.844439][ T5275] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 147.864828][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 147.870848][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.909177][ T5305] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 147.911530][ T5275] usb 4-1: USB disconnect, device number 5 [ 147.938168][ T5934] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 147.986984][ T9] usb 3-1: USB disconnect, device number 11 [ 148.173128][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 148.189171][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 148.405373][ T5305] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.446049][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.483290][ T5305] usb 2-1: Product: syz [ 148.504797][ T5305] usb 2-1: Manufacturer: syz [ 148.596119][ T5948] sctp: [Deprecated]: syz.4.126 (pid 5948) Use of int in max_burst socket option deprecated. [ 148.596119][ T5948] Use struct sctp_assoc_value instead [ 148.747136][ T5305] usb 2-1: SerialNumber: syz [ 148.758383][ T5305] usb 2-1: config 0 descriptor?? [ 149.662475][ T5958] sctp: [Deprecated]: syz.2.129 (pid 5958) Use of int in max_burst socket option. [ 149.662475][ T5958] Use struct sctp_assoc_value instead [ 150.072237][ T5271] usb 2-1: USB disconnect, device number 8 [ 151.013209][ T5275] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 151.122397][ T5271] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.204858][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 151.226342][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 151.242282][ T5275] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.265280][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.285692][ T5275] usb 3-1: Product: syz [ 151.290511][ T5275] usb 3-1: Manufacturer: syz [ 151.299494][ T5275] usb 3-1: SerialNumber: syz [ 151.311736][ T5275] usb 3-1: config 0 descriptor?? [ 151.338093][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.372210][ T5271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.392273][ T5271] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 151.413287][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.452769][ T5271] usb 4-1: config 0 descriptor?? [ 151.523356][ T5305] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.854700][ T5305] usb 1-1: Using ep0 maxpacket: 8 [ 151.958899][ T5305] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 152.292423][ T5305] usb 1-1: config 179 has no interface number 0 [ 152.303916][ T5305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 152.323727][ T5305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 152.365280][ T5305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 152.455856][ T5305] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 152.490071][ T5305] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 152.546565][ T29] audit: type=1326 audit(1724803507.603:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5978 comm="syz.3.135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0bf79e79 code=0x0 [ 152.555323][ T5305] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 152.623838][ T5271] hid (null): unknown global tag 0x40 [ 152.647945][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.662399][ T5271] itetech 0003:258A:6A88.0005: unexpected long global item [ 152.693137][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.711089][ T5271] itetech 0003:258A:6A88.0005: probe with driver itetech failed with error -22 [ 152.732346][ T5990] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 152.933208][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 152.951589][ T25] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 152.980811][ T25] usb 5-1: config 0 has no interface number 0 [ 153.022841][ T25] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 153.066194][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.093574][ T25] usb 5-1: Product: syz [ 153.149254][ T5271] usb 3-1: USB disconnect, device number 12 [ 153.167952][ T25] usb 5-1: Manufacturer: syz [ 153.187402][ T25] usb 5-1: SerialNumber: syz [ 153.207359][ T25] usb 5-1: config 0 descriptor?? [ 153.227273][ T5305] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5 [ 153.255867][ T25] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 153.313187][ T5275] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 153.786492][ T25] gspca_topro: reg_w err -110 [ 153.831547][ T5271] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 153.953160][ T25] gspca_topro: Sensor soi763a [ 153.983321][ T5275] usb 2-1: Using ep0 maxpacket: 32 [ 154.031254][ T5275] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 154.072358][ T5275] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 154.113448][ T5271] usb 3-1: Using ep0 maxpacket: 16 [ 154.130622][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 154.170183][ T5271] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 154.202903][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.216697][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.241375][ T5271] usb 3-1: Product: syz [ 154.254247][ T5271] usb 3-1: Manufacturer: syz [ 154.297537][ T5271] usb 3-1: SerialNumber: syz [ 154.304117][ T5275] usb 2-1: config 0 has no interface number 0 [ 154.310270][ T5275] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 154.333701][ T5271] usb 3-1: config 0 descriptor?? [ 154.445492][ T5275] usb 2-1: config 0 interface 219 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.517180][ T5275] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 154.603027][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.668395][ T5275] usb 2-1: Product: syz [ 154.679608][ T5275] usb 2-1: Manufacturer: syz [ 154.700782][ T5275] usb 2-1: SerialNumber: syz [ 154.751033][ T5275] usb 2-1: config 0 descriptor?? [ 154.981582][ T5275] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 155.023700][ T5275] usb 2-1: USB disconnect, device number 9 [ 155.162652][ T5271] usb 1-1: USB disconnect, device number 8 [ 155.168514][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 155.168556][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 155.217975][ T5271] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 155.238768][ T5274] usb 4-1: USB disconnect, device number 6 [ 155.470555][ T3040] usb 5-1: USB disconnect, device number 4 [ 155.853265][ T5230] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 155.862573][ T5230] Bluetooth: hci4: Injecting HCI hardware error event [ 155.872050][ T5230] Bluetooth: hci4: hardware error 0x00 [ 156.559031][ T3040] usb 3-1: USB disconnect, device number 13 [ 157.923551][ T5230] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 158.183201][ T5274] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.303154][ T3040] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.366140][ T5275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 158.390325][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.401599][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.411860][ T5274] usb 1-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 158.421100][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.423427][ T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.435897][ T5274] usb 1-1: config 0 descriptor?? [ 158.489633][ T3040] usb 3-1: Using ep0 maxpacket: 32 [ 158.512351][ T3040] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.521894][ T3040] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 158.544753][ T3040] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 158.556168][ T3040] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 158.573245][ T5275] usb 5-1: Using ep0 maxpacket: 32 [ 158.576235][ T3040] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.585305][ T5275] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 158.593460][ T3040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.614785][ T5275] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 158.616552][ T3040] usb 3-1: Manufacturer: Ц [ 158.633230][ T3040] usb 3-1: SerialNumber: ݳ婮ĕ㜕뚻㤵₲ᴝ闻쾶Ｃ鞝⟟⢎現䎴썳ー㹒우丄봰憉隑㶘囄炀䳱픁뾠㘮㔁⃜퉄嶢췙푉鈠悹ⲥꄘ㹝莺掎魕佭ﴎブ빣꒾䥀싻逎঍ທ鿈肬觳ໍ훲폵薏슐杸ꄒ᚛ꤋⲾⷤᠣ욹⧞⳥鱞횎똡眬녮쵪填痨 [ 158.637708][ T5275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 158.660881][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.675111][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.693121][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.723039][ T5275] usb 5-1: config 1 has no interface number 0 [ 158.729635][ T5275] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 158.739910][ T47] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 158.750900][ T5275] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 158.764251][ T5275] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 158.765974][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.783084][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.793532][ T47] usb 2-1: config 0 descriptor?? [ 158.820746][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 159.096035][ T6054] Zero length message leads to an empty skb [ 159.157407][ T3040] cdc_ncm 3-1:1.0: bind() failure [ 159.300505][ T3040] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 159.311881][ T5274] wacom 0003:056A:00FA.0006: hidraw0: USB HID v0.00 Device [HID 056a:00fa] on usb-dummy_hcd.0-1/input0 [ 159.342442][ T3040] cdc_ncm 3-1:1.1: bind() failure [ 159.648971][ T3040] usb 3-1: USB disconnect, device number 14 [ 159.791374][ T5274] usb 1-1: USB disconnect, device number 9 [ 160.033915][ T29] audit: type=1326 audit(1724803515.083:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6055 comm="syz.1.156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6da3979e79 code=0x0 [ 160.108646][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 160.116149][ T47] hid (null): unknown global tag 0x40 [ 160.154067][ T47] itetech 0003:258A:6A88.0007: unexpected long global item [ 160.162117][ T47] itetech 0003:258A:6A88.0007: probe with driver itetech failed with error -22 [ 160.419285][ T47] usb 5-1: USB disconnect, device number 5 [ 160.435285][ T47] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 161.167622][ T6088] netlink: 240 bytes leftover after parsing attributes in process `syz.4.160'. [ 162.088571][ T6059] syz.3.157 (6059) used greatest stack depth: 18704 bytes left [ 162.285895][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.523175][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 162.535058][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 162.579106][ T5275] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 162.623097][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.637543][ T5275] usb 1-1: Product: syz [ 162.641791][ T5275] usb 1-1: Manufacturer: syz [ 162.663072][ T5275] usb 1-1: SerialNumber: syz [ 162.674145][ T5275] usb 1-1: config 0 descriptor?? [ 162.772339][ T3040] usb 2-1: USB disconnect, device number 10 [ 163.020311][ T6104] mmap: syz.4.166 (6104): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 163.694027][ T6119] sctp: [Deprecated]: syz.2.171 (pid 6119) Use of int in max_burst socket option deprecated. [ 163.694027][ T6119] Use struct sctp_assoc_value instead [ 164.698853][ T5272] usb 1-1: USB disconnect, device number 10 [ 164.917673][ T6139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 165.174072][ T5275] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.214740][ T5274] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 165.475790][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.497759][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.507728][ T5275] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 165.517061][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.530108][ T5275] usb 4-1: config 0 descriptor?? [ 165.593762][ T5274] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 165.603691][ T5274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.611762][ T5274] usb 2-1: Product: syz [ 165.624638][ T5274] usb 2-1: Manufacturer: syz [ 165.629280][ T5274] usb 2-1: SerialNumber: syz [ 165.639990][ T5274] usb 2-1: config 0 descriptor?? [ 165.689085][ T5274] usb 2-1: selecting invalid altsetting 3 [ 165.703014][ T5274] comedi comedi0: could not set alternate setting 3 in high speed [ 165.711035][ T5274] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 165.772032][ T5274] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 165.822438][ T6143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 165.894067][ T9] usb 2-1: USB disconnect, device number 11 [ 166.448019][ T29] audit: type=1326 audit(1724803521.503:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6137 comm="syz.3.177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f0bf79e79 code=0x0 [ 166.545904][ T5275] hid (null): unknown global tag 0x40 [ 166.562066][ T5275] itetech 0003:258A:6A88.0008: unexpected long global item [ 166.594189][ T5275] itetech 0003:258A:6A88.0008: probe with driver itetech failed with error -22 [ 167.149269][ T9] IPVS: starting estimator thread 0... [ 167.433287][ T6165] IPVS: using max 19 ests per chain, 45600 per kthread [ 167.603458][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.063220][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 168.084765][ T25] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 168.108830][ T25] usb 1-1: config 0 has no interface number 0 [ 168.123179][ T5274] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 168.130188][ T25] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 168.158893][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.167232][ T25] usb 1-1: Product: syz [ 168.171416][ T25] usb 1-1: Manufacturer: syz [ 168.188907][ T25] usb 1-1: SerialNumber: syz [ 168.197254][ T25] usb 1-1: config 0 descriptor?? [ 168.319275][ T5274] usb 2-1: Using ep0 maxpacket: 32 [ 168.335169][ T5274] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 168.359130][ T5274] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 168.378346][ T5274] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 168.403501][ T5274] usb 2-1: config 1 has no interface number 0 [ 168.433589][ T5274] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.456412][ T5274] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 168.475001][ T5274] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 168.487653][ T5274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.511269][ T5274] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 169.193377][ T3040] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 169.565950][ T5274] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 169.595973][ T5271] usb 4-1: USB disconnect, device number 7 [ 169.733649][ T3040] usb 5-1: Using ep0 maxpacket: 16 [ 169.758954][ T3040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 169.796588][ T3040] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 169.816507][ T3040] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.832768][ T3040] usb 5-1: Product: syz [ 169.862556][ T3040] usb 5-1: Manufacturer: syz [ 169.875027][ T25] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 169.897948][ T3040] usb 5-1: SerialNumber: syz [ 169.907330][ T5271] usb 2-1: USB disconnect, device number 12 [ 169.934450][ T3040] usb 5-1: config 0 descriptor?? [ 169.942666][ T5271] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 169.962949][ T25] usb 1-1: USB disconnect, device number 11 [ 170.254377][ T3040] IPVS: starting estimator thread 0... [ 170.353539][ T6193] IPVS: using max 16 ests per chain, 38400 per kthread [ 171.363203][ T3040] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.723605][ T3040] usb 3-1: Using ep0 maxpacket: 32 [ 171.736743][ T3040] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 171.766440][ T3040] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 171.773736][ T9] usb 5-1: USB disconnect, device number 6 [ 171.785394][ T3040] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 171.802925][ T3040] usb 3-1: config 1 has no interface number 0 [ 171.812736][ T3040] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.836734][ T3040] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 171.865165][ T3040] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.885391][ T3040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.919336][ T3040] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 172.511118][ T3040] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 172.652046][ T1114] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.042377][ T9] usb 3-1: USB disconnect, device number 15 [ 173.632812][ T3040] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 173.724974][ T1114] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.805157][ T9] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 173.831996][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.993589][ T1114] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.162584][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 174.202428][ T25] hid-generic 0000:0000:0000.0009: unknown main item tag 0xd [ 174.300707][ T25] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 174.394426][ T3040] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.013389][ T1114] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.306367][ T6248] netlink: 144 bytes leftover after parsing attributes in process `syz.2.207'. [ 175.683710][ T5274] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 175.843643][ T5230] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 175.852545][ T5230] Bluetooth: hci0: Injecting HCI hardware error event [ 175.865926][ T5230] Bluetooth: hci0: hardware error 0x00 [ 176.079901][ T3040] usb 1-1: Using ep0 maxpacket: 32 [ 176.120457][ T1114] bridge_slave_1: left allmulticast mode [ 176.123639][ T3040] usb 1-1: unable to get BOS descriptor or descriptor too short [ 176.133767][ T1114] bridge_slave_1: left promiscuous mode [ 176.134722][ T1114] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.148400][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 176.175723][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 176.184714][ T3040] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 176.198734][ T6252] netlink: 248 bytes leftover after parsing attributes in process `syz.2.207'. [ 176.219750][ T3040] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 176.226712][ T5274] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 176.240011][ T1114] bridge_slave_0: left allmulticast mode [ 176.263075][ T1114] bridge_slave_0: left promiscuous mode [ 176.274963][ T3040] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 176.283054][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.294795][ T1114] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.296289][ T3040] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.321907][ T5274] usb 5-1: Product: syz [ 176.348293][ T3040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.348992][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.363031][ T3040] usb 1-1: Manufacturer: Ц [ 176.368308][ T5274] usb 5-1: Manufacturer: syz [ 176.373121][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.380666][ T3040] usb 1-1: SerialNumber: ݳ婮ĕ㜕뚻㤵₲ᴝ闻쾶Ｃ鞝⟟⢎現䎴썳ー㹒우丄봰憉隑㶘囄炀䳱픁뾠㘮㔁⃜퉄嶢췙푉鈠悹ⲥꄘ㹝莺掎魕佭ﴎブ빣꒾䥀싻逎঍ທ鿈肬觳ໍ훲폵薏슐杸ꄒ᚛ꤋⲾⷤᠣ욹⧞⳥鱞횎똡眬녮쵪填痨 [ 176.390828][ T5274] usb 5-1: SerialNumber: syz [ 176.421834][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.433272][ T5274] usb 5-1: config 0 descriptor?? [ 176.453539][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.464586][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.477758][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.932781][ T3040] cdc_ncm 1-1:1.0: bind() failure [ 177.029085][ T3040] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 177.132606][ T3040] cdc_ncm 1-1:1.1: bind() failure [ 177.334280][ T3040] usb 1-1: USB disconnect, device number 12 [ 177.705046][ T1114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.722617][ T1114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.742534][ T1114] bond0 (unregistering): Released all slaves [ 178.003249][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 178.196398][ T6283] ======================================================= [ 178.196398][ T6283] WARNING: The mand mount option has been deprecated and [ 178.196398][ T6283] and is ignored by this kernel. Remove the mand [ 178.196398][ T6283] option from the mount to silence this warning. [ 178.196398][ T6283] ======================================================= [ 178.231323][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.303317][ T5272] usb 5-1: USB disconnect, device number 7 [ 178.564008][ T5230] Bluetooth: hci1: command tx timeout [ 179.384340][ T6298] netlink: 144 bytes leftover after parsing attributes in process `syz.0.218'. [ 179.405747][ T6302] syz.2.219[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.405914][ T6302] syz.2.219[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.578695][ T1114] hsr_slave_0: left promiscuous mode [ 179.626491][ T1114] hsr_slave_1: left promiscuous mode [ 179.632867][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.649307][ T1114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.669274][ T1114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.679959][ T29] audit: type=1326 audit(1724803534.723:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.2.219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1907f79e79 code=0x0 [ 179.767293][ T1114] veth1_macvtap: left promiscuous mode [ 179.780931][ T1114] veth0_macvtap: left promiscuous mode [ 179.805912][ T1114] veth1_vlan: left promiscuous mode [ 179.822681][ T1114] veth0_vlan: left promiscuous mode [ 180.703261][ T5230] Bluetooth: hci1: command tx timeout [ 181.224196][ T1114] team0 (unregistering): Port device team_slave_1 removed [ 181.305258][ T1114] team0 (unregistering): Port device team_slave_0 removed [ 181.863550][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 182.113288][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 182.148400][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 182.162404][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.177550][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.187544][ T9] usb 1-1: Product: syz [ 182.191839][ T9] usb 1-1: Manufacturer: syz [ 182.197198][ T9] usb 1-1: SerialNumber: syz [ 182.207447][ T9] usb 1-1: config 0 descriptor?? [ 182.474622][ T6322] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 182.532434][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.543468][ T6323] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 182.579191][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 182.726305][ T5230] Bluetooth: hci1: command tx timeout [ 182.809003][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.816750][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.827294][ T6253] bridge_slave_0: entered allmulticast mode [ 182.835110][ T6253] bridge_slave_0: entered promiscuous mode [ 182.845641][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.853201][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.861557][ T6253] bridge_slave_1: entered allmulticast mode [ 182.869063][ T6253] bridge_slave_1: entered promiscuous mode [ 182.909866][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.926866][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.974448][ T6253] team0: Port device team_slave_0 added [ 182.983428][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.985958][ T6253] team0: Port device team_slave_1 added [ 183.008565][ T1114] IPVS: stop unused estimator thread 0... [ 183.045829][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.052941][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.080940][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.097870][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.105997][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.135709][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.200896][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 183.219217][ T6253] hsr_slave_0: entered promiscuous mode [ 183.222049][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.236550][ T6253] hsr_slave_1: entered promiscuous mode [ 183.246625][ T9] usb 2-1: Product: syz [ 183.256593][ T9] usb 2-1: Manufacturer: syz [ 183.266881][ T9] usb 2-1: SerialNumber: syz [ 183.284800][ T9] usb 2-1: config 0 descriptor?? [ 183.512887][ T9] hso 2-1:0.0: Can't find BULK IN endpoint [ 183.540125][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 183.776428][ T9] usb 2-1: USB disconnect, device number 13 [ 183.997481][ T6371] netlink: 144 bytes leftover after parsing attributes in process `syz.2.231'. [ 184.340269][ T6253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.389491][ T5274] usb 1-1: USB disconnect, device number 13 [ 184.427137][ T6253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.501886][ T6253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.561495][ T6253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.803374][ T5230] Bluetooth: hci1: command tx timeout [ 188.213073][ T5305] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 194.648888][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 293.552961][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 293.559937][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5684/1:b..l [ 293.568225][ C0] rcu: (detected by 0, t=10502 jiffies, g=18085, q=312 ncpus=2) [ 293.575955][ C0] task:udevd state:R running task stack:24256 pid:5684 tgid:5684 ppid:4671 flags:0x00000002 [ 293.588722][ C0] Call Trace: [ 293.592000][ C0] [ 293.595016][ C0] __schedule+0x17ae/0x4a10 [ 293.599548][ C0] ? __pfx___schedule+0x10/0x10 [ 293.604401][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.610394][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 293.615688][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 293.620804][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 293.626549][ C0] irqentry_exit+0x5e/0x90 [ 293.630967][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 293.637044][ C0] RIP: 0010:get_stack_info+0x32/0x180 [ 293.642435][ C0] Code: 56 41 55 41 54 53 49 89 ce 49 89 d7 49 89 f5 48 89 fb e8 71 1c 60 00 4d 85 ed 74 7d e8 67 1c 60 00 48 85 db 0f 84 86 00 00 00 <48> 89 df 4c 89 ee 4c 89 fa e8 c0 b0 7a 0a 84 c0 74 7b 4d 85 f6 0f [ 293.662125][ C0] RSP: 0018:ffffc90003adf180 EFLAGS: 00000286 [ 293.668193][ C0] RAX: ffffffff81336f39 RBX: ffffc90003adf1b8 RCX: ffff888029fd8000 [ 293.676169][ C0] RDX: 0000000000000000 RSI: ffff888029fd8000 RDI: ffffc90003adf1b8 [ 293.684142][ C0] RBP: dffffc0000000000 R08: ffffc90003adf27f R09: 0000000000000000 [ 293.692111][ C0] R10: ffffc90003adf220 R11: fffff5200075be50 R12: ffffc90003adf240 [ 293.700089][ C0] R13: ffff888029fd8000 R14: ffffc90003adf240 R15: ffffc90003adf220 [ 293.708070][ C0] ? get_stack_info+0x29/0x180 [ 293.712864][ C0] __unwind_start+0x481/0x7c0 [ 293.717574][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.723733][ C0] arch_stack_walk+0x103/0x1b0 [ 293.728506][ C0] ? __unwind_start+0x2bc/0x7c0 [ 293.733391][ C0] stack_trace_save+0x118/0x1d0 [ 293.738249][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 293.743645][ C0] save_stack+0xfb/0x1f0 [ 293.747895][ C0] ? __pfx_save_stack+0x10/0x10 [ 293.752766][ C0] ? page_ext_get+0x20/0x2a0 [ 293.757376][ C0] __reset_page_owner+0x76/0x430 [ 293.762321][ C0] ? page_ext_get+0x1d6/0x2a0 [ 293.767113][ C0] free_unref_folios+0x100f/0x1ac0 [ 293.772243][ C0] folios_put_refs+0x76e/0x860 [ 293.777031][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 293.782331][ C0] ? rcu_is_watching+0x15/0xb0 [ 293.787107][ C0] ? free_swap_cache+0xb3/0x880 [ 293.791959][ C0] free_pages_and_swap_cache+0x5c8/0x690 [ 293.797604][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 293.803786][ C0] ? flush_tlb_mm_range+0x3df/0x5c0 [ 293.808983][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 293.814197][ C0] ? tlb_table_flush+0x143/0x410 [ 293.819146][ C0] tlb_flush_mmu+0x3a3/0x680 [ 293.823768][ C0] ? __pfx_down_write+0x10/0x10 [ 293.828631][ C0] tlb_finish_mmu+0xd4/0x200 [ 293.833269][ C0] exit_mmap+0x44f/0xc80 [ 293.837529][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 293.842300][ C0] ? __asan_memset+0x23/0x50 [ 293.846909][ C0] ? uprobe_clear_state+0x277/0x290 [ 293.852103][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 293.857408][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 293.862630][ C0] __mmput+0x115/0x380 [ 293.866700][ C0] exit_mm+0x220/0x310 [ 293.870762][ C0] ? __pfx_exit_mm+0x10/0x10 [ 293.875349][ C0] ? taskstats_exit+0x326/0xa60 [ 293.880206][ C0] do_exit+0x9b2/0x27f0 [ 293.884375][ C0] ? __pfx_do_exit+0x10/0x10 [ 293.888956][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.894942][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.901277][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.906474][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 293.911687][ C0] do_group_exit+0x207/0x2c0 [ 293.916294][ C0] __x64_sys_exit_group+0x3f/0x40 [ 293.921321][ C0] x64_sys_call+0x2634/0x2640 [ 293.926034][ C0] do_syscall_64+0xf3/0x230 [ 293.930538][ C0] ? clear_bhb_loop+0x35/0x90 [ 293.935229][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.941118][ C0] RIP: 0033:0x7fcc6c8fca90 [ 293.945552][ C0] RSP: 002b:00007ffe22358278 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 293.953982][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc6c8fca90 [ 293.961950][ C0] RDX: 00000000000000e7 RSI: 000000000000003c RDI: 0000000000000000 [ 293.969915][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: e531ce4186cee909 [ 293.977888][ C0] R10: 00000000ffffffff R11: 0000000000000206 R12: 000056304bae67d0 [ 293.985865][ C0] R13: 00007ffe223582b8 R14: 0000000000000001 R15: 000056304ba9c910 [ 293.993851][ C0] [ 293.996873][ C0] rcu: rcu_preempt kthread starved for 10309 jiffies! g18085 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 294.008065][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 294.018036][ C0] rcu: RCU grace-period kthread stack dump: [ 294.023945][ C0] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 294.035708][ C0] Call Trace: [ 294.038983][ C0] [ 294.041913][ C0] __schedule+0x17ae/0x4a10 [ 294.046449][ C0] ? __pfx___schedule+0x10/0x10 [ 294.051304][ C0] ? __pfx_lock_release+0x10/0x10 [ 294.056334][ C0] ? __asan_memset+0x23/0x50 [ 294.060939][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 294.066758][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.073101][ C0] ? schedule+0x90/0x320 [ 294.077385][ C0] schedule+0x14b/0x320 [ 294.081571][ C0] schedule_timeout+0x1be/0x310 [ 294.086424][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 294.091814][ C0] ? __pfx_process_timeout+0x10/0x10 [ 294.097108][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 294.102671][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 294.107528][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 294.112740][ C0] ? rcu_gp_init+0x1256/0x1630 [ 294.117517][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 294.122460][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 294.128534][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 294.133851][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.139752][ C0] ? finish_swait+0xd4/0x1e0 [ 294.144346][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 294.148943][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 294.154146][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.160048][ C0] ? __kthread_parkme+0x169/0x1d0 [ 294.165085][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 294.170286][ C0] kthread+0x2f0/0x390 [ 294.174364][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 294.179579][ C0] ? __pfx_kthread+0x10/0x10 [ 294.184182][ C0] ret_from_fork+0x4b/0x80 [ 294.188614][ C0] ? __pfx_kthread+0x10/0x10 [ 294.193210][ C0] ret_from_fork_asm+0x1a/0x30 [ 294.197990][ C0] [ 294.201006][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 294.207331][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc5-syzkaller-00050-g3ec3f5fc4a91 #0 [ 294.217680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.227738][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x6f/0x120 [ 294.234340][ C0] Code: 48 83 f8 07 0f 85 ba 00 00 00 41 b8 07 00 00 00 4d 85 d2 75 24 e9 aa 00 00 00 41 b8 01 00 00 00 4d 85 d2 75 14 e9 9a 00 00 00 <41> b8 05 00 00 00 4d 85 d2 0f 84 8b 00 00 00 4c 8b 4c 24 20 65 4c [ 294.253949][ C0] RSP: 0018:ffffc90000007280 EFLAGS: 00000246 [ 294.260022][ C0] RAX: 0000000000000003 RBX: 0000000000000000 RCX: ffffffff8e494680 [ 294.267996][ C0] RDX: ffffc900000073b5 RSI: ffffffff8e5a3da0 RDI: 0000000000000005 [ 294.275970][ C0] RBP: 0000000000000005 R08: 0000000000000003 R09: ffffffff81412e12 [ 294.283939][ C0] R10: 0000000000000008 R11: ffffffff8e494680 R12: ffffffff907485b8 [ 294.291905][ C0] R13: dffffc0000000000 R14: ffffc900000073d0 R15: 1ffff92000000e70 [ 294.299876][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 294.308802][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.315389][ C0] CR2: 00007fcc6cccf5b0 CR3: 000000007ebae000 CR4: 00000000003506f0 [ 294.323358][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 294.331323][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 294.339306][ C0] Call Trace: [ 294.342613][ C0] [ 294.345463][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 294.351813][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 294.357488][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 294.363304][ C0] ? __pfx_lock_release+0x10/0x10 [ 294.368343][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 294.374596][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 294.379980][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 294.385636][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 294.390853][ C0] ? update_process_times+0x1ce/0x230 [ 294.396237][ C0] ? tick_nohz_handler+0x37c/0x500 [ 294.401351][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 294.406856][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 294.412232][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 294.418240][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 294.423977][ C0] ? hrtimer_interrupt+0x396/0x990 [ 294.429108][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 294.435278][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 294.441105][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.447284][ C0] ? unwind_next_frame+0x6c2/0x2a00 [ 294.452498][ C0] ? __sanitizer_cov_trace_switch+0x6f/0x120 [ 294.458491][ C0] unwind_next_frame+0x7be/0x2a00 [ 294.463536][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 294.469180][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 294.474829][ C0] ? __kernel_text_address+0xd/0x40 [ 294.480034][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 294.485681][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.491847][ C0] arch_stack_walk+0x151/0x1b0 [ 294.496628][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 294.502288][ C0] stack_trace_save+0x118/0x1d0 [ 294.507151][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 294.512536][ C0] ? stack_trace_save+0x118/0x1d0 [ 294.517570][ C0] ? validate_chain+0x11e/0x5900 [ 294.522512][ C0] ? __pfx_validate_chain+0x10/0x10 [ 294.527734][ C0] kasan_save_track+0x3f/0x80 [ 294.532424][ C0] ? kasan_save_track+0x3f/0x80 [ 294.537302][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 294.542336][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 294.548420][ C0] ? __alloc_skb+0x1c3/0x440 [ 294.553022][ C0] ? skb_copy+0x12b/0x820 [ 294.557380][ C0] ? mac80211_hwsim_tx_frame_no_nl+0x106b/0x18d0 [ 294.563719][ C0] ? mac80211_hwsim_tx_frame+0x1cc/0x220 [ 294.569358][ C0] ? mac80211_hwsim_beacon_tx+0x3bf/0x850 [ 294.575082][ C0] ? __iterate_interfaces+0x222/0x510 [ 294.580464][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 294.587664][ C0] ? mac80211_hwsim_beacon+0xd4/0x1f0 [ 294.593039][ C0] ? __hrtimer_run_queues+0x59b/0xd50 [ 294.598421][ C0] ? hrtimer_run_softirq+0x19a/0x2c0 [ 294.603718][ C0] ? handle_softirqs+0x2c4/0x970 [ 294.608665][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 294.613441][ C0] ? irq_exit_rcu+0x9/0x30 [ 294.617871][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 294.623690][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.629844][ C0] ? acpi_safe_halt+0x21/0x30 [ 294.634525][ C0] ? acpi_idle_enter+0xe4/0x140 [ 294.639381][ C0] ? cpuidle_enter_state+0x112/0x480 [ 294.644677][ C0] ? cpuidle_enter+0x5d/0xa0 [ 294.649269][ C0] ? do_idle+0x375/0x5d0 [ 294.653530][ C0] ? cpu_startup_entry+0x42/0x60 [ 294.658472][ C0] ? rest_init+0x2dc/0x300 [ 294.662895][ C0] ? start_kernel+0x47a/0x500 [ 294.667590][ C0] ? x86_64_start_reservations+0x2a/0x30 [ 294.673253][ C0] __kasan_slab_alloc+0x66/0x80 [ 294.678116][ C0] ? __alloc_skb+0x1c3/0x440 [ 294.682712][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 294.688627][ C0] __alloc_skb+0x1c3/0x440 [ 294.693047][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 294.699285][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 294.704227][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 294.709251][ C0] skb_copy+0x12b/0x820 [ 294.713413][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.718795][ C0] mac80211_hwsim_tx_frame_no_nl+0x106b/0x18d0 [ 294.724979][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 294.731495][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 294.737754][ C0] ? mac80211_hwsim_monitor_rx+0x1bc/0x810 [ 294.743578][ C0] mac80211_hwsim_tx_frame+0x1cc/0x220 [ 294.749050][ C0] mac80211_hwsim_beacon_tx+0x3bf/0x850 [ 294.754631][ C0] __iterate_interfaces+0x222/0x510 [ 294.759848][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 294.765932][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 294.772442][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 294.779648][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 294.786683][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 294.791886][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 294.797711][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 294.802923][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 294.808926][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 294.814667][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 294.820770][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 294.825900][ C0] handle_softirqs+0x2c4/0x970 [ 294.830684][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 294.835462][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 294.840760][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 294.845972][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 294.850574][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 294.855788][ C0] irq_exit_rcu+0x9/0x30 [ 294.860041][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 294.865696][ C0] [ 294.868648][ C0] [ 294.871611][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.877620][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 294.882925][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 bf 9a 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 294.902573][ C0] RSP: 0018:ffffffff8e407ca8 EFLAGS: 00000246 [ 294.909083][ C0] RAX: ffffffff8e494680 RBX: ffff88801b2ee064 RCX: 000000000016a3e1 [ 294.917055][ C0] RDX: 0000000000000001 RSI: ffff88801b2ee000 RDI: ffff88801b2ee064 [ 294.925026][ C0] RBP: 000000000003a638 R08: ffff8880b9237c7b R09: 1ffff11017246f8f [ 294.932999][ C0] R10: dffffc0000000000 R11: ffffffff8bae8cf0 R12: ffff88801b73a000 [ 294.940976][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eeccbe0 [ 294.948953][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 294.954256][ C0] acpi_idle_enter+0xe4/0x140 [ 294.958940][ C0] cpuidle_enter_state+0x112/0x480 [ 294.964058][ C0] ? __pfx_menu_select+0x10/0x10 [ 294.969008][ C0] cpuidle_enter+0x5d/0xa0 [ 294.973432][ C0] do_idle+0x375/0x5d0 [ 294.977518][ C0] ? __pfx_do_idle+0x10/0x10 [ 294.982114][ C0] ? rest_init+0x31/0x300 [ 294.986458][ C0] ? do_idle+0x5/0x5d0 [ 294.990526][ C0] ? rest_init+0x31/0x300 [ 294.994878][ C0] cpu_startup_entry+0x42/0x60 [ 294.999651][ C0] rest_init+0x2dc/0x300 [ 295.003898][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 295.009795][ C0] start_kernel+0x47a/0x500 [ 295.014312][ C0] x86_64_start_reservations+0x2a/0x30 [ 295.019785][ C0] x86_64_start_kernel+0x9f/0xa0 [ 295.024760][ C0] common_startup_64+0x13e/0x147 [ 295.029735][ C0] [ 299.129739][ T5230] Bluetooth: hci1: command 0x0406 tx timeout