last executing test programs: 22.310158156s ago: executing program 0 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth0_virt_wifi\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f00000191c0)='net/dev_mcast\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000000)=0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r4, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001800168014000180100006000700000007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 22.064621831s ago: executing program 0 (id=2236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x700, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 21.992174538s ago: executing program 0 (id=2237): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = eventfd(0x4) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) shmget(0x1, 0xffffffffff000, 0x200, &(0x7f0000ffb000/0x3000)=nil) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xa, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980fda946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) read$FUSE(r1, &(0x7f0000001600)={0x2020}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) 21.637155052s ago: executing program 0 (id=2238): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x204c3, 0x0) dup3(r1, r0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x81000) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xd, 0x5, 0xac, 0x10, 0x108c, 0x159, 0xdbd6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xff, 0xbd, 0x95}}]}}]}}, 0x0) unshare(0x24000600) fstat(r2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000002c0)={0xa, @sdr={0xe48cf396, 0x2}}) 19.979554635s ago: executing program 4 (id=2245): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) r2 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x14, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x45a5, 0x0, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r1, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x20, 0xc6, 0x96, 0x40, 0xdf6, 0x61c, 0xe4e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xa1, 0x8c}}]}}]}}, 0x0) syz_usb_ep_read(r5, 0x10, 0xc3, &(0x7f0000000540)=""/195) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x0, 0x0, 0x6, "020d9666af53"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0xac, {0xac, 0x21, "4b455c55e264a1fc483e209ed0c1da424a5dc1af40eb3d3724a4e3b4b64b9d864a1f41a44e7aedc5adafa4d791f4f0f52c60e1093348041a33d4b5f45a9181d45ea3c765ed7a41642f53f0468eb1e8f12e1c051cf5e315c33b57fb1d3dce2fa9bdd937beb492b2ab05396e304a77fd267b31ee39461de5a509ad9edaef213cf63d52f01011f0156b06ded377ce5400372f62f8a48bb6a86f0ccfb6bf4a1c018660836e60be07e60ec683"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x20, 0xf, 0x6c, "e0020aa9d4218fd72e0cb2192edafe81a2fc5b1c38c34d45501c516921e1ee2eb8f658f80f5bf4b3784fb7fec27e274657a31f78555c82bf7bf43bcc89cc68314c33b11aff4254108b47092350516632b55fad5ae22531e61505c2d2ac342b50102de990dd8b8005f7e0929d"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)}], 0x1, &(0x7f0000000340)}, 0x4000) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x10b800, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) 18.424538821s ago: executing program 0 (id=2253): ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000240)={0x3, 0x0, [{0xd, 0x6, 0x210001, 0x8, 0x8d6}, {0xa, 0x2, 0x80, 0xc5, 0x3f6}, {0x2, 0x1, 0x9, 0xc, 0x7fff}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xd0, 0x31, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc1}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x474}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xd0}}, 0x166b1ab5eb710134) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c0002"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r6], 0x77) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030009060000000000ffffffffffffffff03"], 0x30}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602ffbff0050000100053582c137153e370248018088a81700894f", 0x33fe0}], 0x1}, 0x0) 18.12229027s ago: executing program 0 (id=2256): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48001059, r2, 0x0) (async, rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) (rerun: 64) r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async, rerun: 32) syz_fuse_handle_req(r3, &(0x7f0000002180), 0x2000, &(0x7f00000003c0)={&(0x7f0000004200)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000000000000000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) syz_fuse_handle_req(r3, &(0x7f0000006340)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f061823030d9b29f00", 0x2000, &(0x7f0000006280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0x40806685, &(0x7f0000000040)) (async) syz_usb_connect(0x3, 0x65, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x5f, 0xf, 0x5d, 0x20, 0x3980, 0x3, 0x5c4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x8, 0xd, 0x0, 0x7, [{{0x9, 0x4, 0x2, 0xa, 0x4, 0x65, 0xde, 0xac, 0x7, [], [{{0x9, 0x5, 0xf, 0x8, 0x200, 0x75, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xa042}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x1, 0x2, 0x69}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x9, 0xfe, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0xf0ec}]}}, {{0x9, 0x5, 0x7, 0x3, 0x8, 0x2, 0x9b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x9}, @generic={0x8, 0x16, "7f72f0c13325"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x0, 0x6, 0x8, 0xf7, 0x5}, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="050f300002ff100389d3ba3c383451658ab1ed6ffeb34fc48ab458e57cae53b0bff7cb2646952372ed203a915003100b"], 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x404}}, {0xa, &(0x7f0000000240)=@string={0xa, 0x3, "3bf4c65fd48ab382"}}, {0x30, &(0x7f0000000280)=@string={0x30, 0x3, "d591073090d91db872bda853849e49052e5b7247f0a43cd3d475524e135ea27eeb15d40393a2ab647e85af6f40d0"}}]}) (async) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r5, &(0x7f0000001840)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 17.287014933s ago: executing program 4 (id=2261): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x2, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000002640)=""/102387, 0x18ff3}], 0x1, 0x7b, 0x300}}], 0x48}, 0x0) 17.161524702s ago: executing program 4 (id=2263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000601000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a3000000000380003803400008008000340"], 0xf8}}, 0x0) 17.015767811s ago: executing program 4 (id=2264): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f00000016c0)=""/196, 0xc4}, {&(0x7f0000000600)=""/4108, 0x100c}], 0x3, 0x0, 0x0, 0xffffffc3}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0xc23, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', r5, &(0x7f0000000180)='./file0\x00', 0x141) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', r5, &(0x7f0000000180)='./file0\x00', 0x200) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xffffffffffffffff, 0x309}) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000017c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f00000018c0)=""/85, 0x55}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f0000001b80)=""/162, 0xa2}, {&(0x7f0000001c40)=""/219, 0xdb}], 0xa}, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) 16.098644913s ago: executing program 4 (id=2266): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r3, r4, 0x0, 0x4, &(0x7f00000001c0)='-*@\x00'}, 0x30) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000000000208d04958500000000000109022400010000000009040000050300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 15.806041846s ago: executing program 4 (id=2270): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 64) r3 = semget$private(0x0, 0x5, 0x0) (rerun: 64) semop(r3, &(0x7f0000000000)=[{0x3, 0x8a, 0x800}], 0x1) (async) semop(r3, &(0x7f0000000b00)=[{0x3, 0x0, 0x800}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="a8af93bdce17e958bfc8e00100000000000000003def2c2b1a000039a199929c000040000016cee4cceee12d98ce3a44e636398164455f1160ad008500", @ANYRES16=r1, @ANYBLOB="cdb1a9e186dceee368c57d3046e05e7b86a77c85ec2db67c5c1382e2976dacff1ed592508ada30ea3c23e99d2ab5c96a0f6889323a87273f784e22c03133fa80e35efde84411ad8e121f4dfe1cd342b13ba72222043152c7a65476af2f085ba9b6480ca65117135de0ca995e3952dd4b89a205911476b5a2f87adbc00d7ece921e", @ANYRES64=r2], &(0x7f0000000140)='syzkaller\x00', 0xffffff89, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x711d, @void, @value}, 0x94) 6.876514075s ago: executing program 2 (id=2289): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380100001800130700000000000000007f000001000000000000000000000000ff01000000000000000000000000000100000000000040000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000043200000000000000000000000000ffffac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000a000200000000000000000048000200656362286369706865725f6e756c6c2900"/200], 0x138}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x20, 0x380, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}}, 0x40000) 6.851606258s ago: executing program 2 (id=2290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086"], 0x1d8}}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100008000090400001207010300090501020000000000090582"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904000002bb510e000905f6"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 5.937674497s ago: executing program 3 (id=2293): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f00000000c0), 0x2, 0x525440) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @raw_data="acce7120b2eef35e94b9b68ffacd5f597a35e63354059b94ae170941858f15189d0e8341d2951187ae2917d36f1cfcd4000223c1da913077a19ee6d2f8126fd19fcd6c5c7697d5a2e7f056c538964926c372a3644b368b4a076fc1febcf32d7058acf50b1caea1517fb9b62aba4da72e0363a7c3b51b8ea59d8e984767db99ebba78d99ced2289a7a50fd74b6372dd5749ed6657946fc65d2a0224834e7a298c9eb9e624fab886fc8d4053d6930ed396966bd01d6e3655d526c76b3ef800"}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4010) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) madvise(&(0x7f000036f000/0x3000)=nil, 0x3000, 0xf) mremap(&(0x7f0000199000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000037f000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003c7000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f000078e000/0x4000)=nil) mprotect(&(0x7f000060d000/0x3000)=nil, 0x3000, 0x800006) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000074b656c0472a000000000000109f824000100fd0000090400000103000000092100000001220700090581030000020000"], 0x0) unshare(0x20040600) mknod(&(0x7f0000000000)='./file0\x00', 0x20, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102364, 0x18fe5}], 0x0, 0x81, 0xfffffffc) r2 = creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39ddd8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x1, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x2}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_elf32(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) clock_gettime(0x0, 0x0) futimesat(r2, &(0x7f0000000340)='./bus\x00', &(0x7f0000000500)={{0x77359400}}) close(r2) 4.785903942s ago: executing program 2 (id=2294): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x14000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001e40)={&(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44008}, 0x4000000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r3) r4 = syz_clone(0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f00000000c0)={0x3}, 0x0) r7 = io_uring_setup(0x3641, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x1}) r8 = fanotify_init(0x200, 0x0) r9 = dup(r7) fanotify_mark(r8, 0x1, 0x4800107b, r9, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000100)={r10, 0x5}, &(0x7f0000000140)=0x8) landlock_restrict_self(r6, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x2, 0x0, @dev}, 0x1c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0x22) close_range(r0, r5, 0x0) 4.782952596s ago: executing program 1 (id=2302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086"], 0x1d8}}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100008000090400001207010300090501020000000000090582"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904000002bb510e000905f6"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 4.56830797s ago: executing program 2 (id=2295): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, 0x0) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETOWNER(r6, 0x400454cc, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r8 = syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x1, 0x2000, @fd_index=0x6, 0x0, 0x0}) io_uring_enter(r8, 0x54, 0x0, 0xf, 0x0, 0x0) sendmsg$nl_netfilter(r7, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000024c0)={0x14, 0x69, 0x0, 0x401}, 0x14}}, 0x0) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.285668968s ago: executing program 1 (id=2296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x80000006, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r5, 0x0, &(0x7f0000000640)={[], 0xe0ffffff7f0000}, 0x0) execveat$binfmt(r3, r5, &(0x7f0000000400)={[&(0x7f00000001c0)='rootmode', &(0x7f0000000200)='*[\\*\x00', &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', &(0x7f0000000380)='#! ', &(0x7f00000003c0)='/dev/hwrng\x00']}, &(0x7f0000000500)={[&(0x7f0000000440)='taprio\x00', &(0x7f0000000480)='\x00']}, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) 3.285523111s ago: executing program 2 (id=2297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="0800010c579fa2e5f0aca155d3164555b8c08654e7fb90f917b39022ad85fe8e78cab8f605269522563f767f811f4788e64438eefe0bed1f0182049ed722097ada6c028362155cad10d168818dc4506277f2f6328e6b95ec72691a972c45c1c32f08a5d2e2cc829381f0b0baa078", @ANYRES32, @ANYBLOB="06002400600600000a000100aaaaaaaaaa30"], 0x8c}}, 0x0) 2.852628135s ago: executing program 3 (id=2298): syz_usb_connect(0x2, 0x252, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0xb1, 0x76, 0x47, 0x8, 0x5ab, 0x2, 0x6d66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x240, 0x2, 0x4, 0x10, 0x20, 0x5, [{{0x9, 0x4, 0x2, 0x8, 0x8, 0x95, 0xf0, 0xf8, 0x3, [], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x6, 0x0, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x4, 0x0, 0x9, [@generic={0xaf, 0x24, "fa8838b14a9aba570e1a58957fe5ede4692c368a9d266294a1c7b3546cb27b69a3660ac46ceb3e57a2d580739df9eb4dc4a63b946c6d0b17dd762707acaeb91ae4373263da5250804a60dcf8caed4016790ced75daaa8058fb49b74a66ff9c2cdd2ad8c7764591147a1838e05cde16c5bb38bf7b14b48395c95922125fc35ef71906b634e4e84a00fb73928a0e9bb8328664d03e12c7af706ce142e13445387e3f17e5b741eede14595977b20a"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x9, 0xc, 0xdf, [@generic={0xa7, 0x31, "965eab857e5a92e131894e14e7ea58aaed091fd7dffb618e03be651ff6a5c3dc106f06b3c1a718bf315dccb92a3d2685a237b93889da8d11be0f381240210970cfbe7c179cc9ae9a25591f3185564dd0efe0f17e97f10c001502e1cf603c63a2df3f79812ab370f456811543e682a90d9da476f59a75aa4955faa9b7ddb791390c740940831d60a6f53a1f163241b236806d703d74a78f8c07103efb6ed2f869d2cc3c4ae8"}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x8, 0x8, 0x5, [@generic={0x49, 0x1, "8a5ada9f91e590062763355749e649a3949529d3e768deabbe5840fd41d61a0456b1305c13758842edf41847f287ad3e98adf60c6f80119070dca06587e38574241bc7e113df95"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x200, 0xd, 0xe, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}]}}, {{0x9, 0x5, 0xc, 0x3, 0x20, 0x5, 0xf7, 0xa6}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x81, 0x9a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x4}]}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0xf, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x7, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}]}}]}}, {{0x9, 0x4, 0xb, 0xc, 0x2, 0xac, 0xc, 0x71, 0x9, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x3, 0xff, 0xc0}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7f, 0x2e, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x24, 0x7}]}}]}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x6, 0x7a, 0x89, 0x10, 0x2}, 0x34, &(0x7f00000002c0)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "bda0cd149de16f0dd77ad885237d9d76"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x8, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7326dc688eac3ced578b371556ae22b4"}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x459}}, {0x11, &(0x7f0000000340)=@string={0x11, 0x3, "0ef1f4a628bbf2e5eed4e6f425f8d8"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42a}}]}) 1.963786431s ago: executing program 1 (id=2299): connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x27f3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e1f, @private}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="24000000000000000100000007"], 0x28}, 0x0) 1.339797909s ago: executing program 2 (id=2300): socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0xa, 0x801, 0x84) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x2000000}}, 0x5c}}, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7ffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0xa00, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4825}, 0x20008080) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000980)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7fffffff, 0x4000) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.100583606s ago: executing program 3 (id=2301): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback, 0xf5}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000"], 0x18}, 0x0) 875.707245ms ago: executing program 3 (id=2303): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x200) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 773.659149ms ago: executing program 1 (id=2304): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x80000000, 0xffffffff, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, r0, 0x0, 0x7ffff000, 0x0) 632.634396ms ago: executing program 3 (id=2305): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000000, 0x20a00) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000, 0x0) pipe2$watch_queue(&(0x7f0000000180), 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x49, 0x0, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b50c091f3906586d529cbd5c6fd78a7b"}) 587.698106ms ago: executing program 1 (id=2306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7, 0x0, 0x600}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 214.413803ms ago: executing program 3 (id=2307): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086"], 0x1d8}}, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100008000090400001207010300090501020000000000090582"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000044cef0084c05c3061d9b010203010902240001000000000904000002bb510e000905f6"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r1, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000240), 0x4) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 0s ago: executing program 1 (id=2308): syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x23, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @rr={0x7, 0x13, 0xae, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x35}}, {@broadcast}, {@broadcast, 0x52ad}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}, @rr={0x7, 0xf, 0x0, [@dev, @remote, @multicast1]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) ioctl$SNDCTL_TMR_START(r2, 0x5402) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/mnt\x00') r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r4, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="340000006800e97800000000000000000a0000000000000014000600fe8000000000000000000000000000bb08000500", @ANYRES32=r7], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) kernel console output (not intermixed with test programs): nterface [ 604.089282][ T11] bond0 (unregistering): Released all slaves [ 604.114019][T14584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.123182][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.150885][T14584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.310524][T14517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 604.340541][T14584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.355211][T14584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.382578][T14584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.394000][ T11] tipc: Disabling bearer [ 604.405417][ T11] tipc: Left network mode [ 604.405518][T14517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 604.468187][T14517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 604.582228][T14517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 604.627796][T14584] hsr_slave_0: entered promiscuous mode [ 604.652697][T14584] hsr_slave_1: entered promiscuous mode [ 604.666043][T14584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.678373][T14584] Cannot create hsr debugfs directory [ 604.928843][ T8] usb 1-1: USB disconnect, device number 114 [ 604.995647][ T54] Bluetooth: hci6: command tx timeout [ 605.443999][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 605.456771][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 605.465503][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 605.496851][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 605.514377][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 605.524007][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 605.673084][ T5240] usb 4-1: USB disconnect, device number 94 [ 605.715032][ T5240] hid-steam 0003:28DE:1142.001C: Steam wireless receiver disconnected [ 606.531304][ T11] macvlan0: left promiscuous mode [ 606.578662][ T11] hsr_slave_0: left promiscuous mode [ 606.587571][ T11] hsr_slave_1: left promiscuous mode [ 606.593688][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.612157][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.621856][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.644239][ T11] hsr_slave_0: left promiscuous mode [ 606.663532][ T11] hsr_slave_1: left promiscuous mode [ 606.696126][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.717647][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.746858][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.765676][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.828709][ T11] hsr_slave_0: left promiscuous mode [ 606.846315][ T11] hsr_slave_1: left promiscuous mode [ 606.852303][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.870439][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.895349][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.971805][ T11] veth1_macvtap: left promiscuous mode [ 606.978078][ T11] veth0_macvtap: left promiscuous mode [ 606.983700][ T11] veth1_vlan: left promiscuous mode [ 606.990751][ T11] veth0_vlan: left promiscuous mode [ 606.997892][ T11] veth1_macvtap: left promiscuous mode [ 607.003515][ T11] veth0_macvtap: left promiscuous mode [ 607.010507][ T11] veth1_vlan: left promiscuous mode [ 607.016203][ T11] veth0_vlan: left promiscuous mode [ 607.022664][ T11] veth1_macvtap: left promiscuous mode [ 607.028811][ T11] veth0_macvtap: left promiscuous mode [ 607.034464][ T11] veth1_vlan: left promiscuous mode [ 607.040392][ T11] veth0_vlan: left promiscuous mode [ 607.566609][ T5245] Bluetooth: hci1: command tx timeout [ 607.852865][ T11] team0 (unregistering): Port device team_slave_1 removed [ 607.911678][ T11] team0 (unregistering): Port device team_slave_0 removed [ 608.901375][ T11] team0 (unregistering): Port device team_slave_1 removed [ 608.954290][ T11] team0 (unregistering): Port device team_slave_0 removed [ 609.646051][ T5245] Bluetooth: hci1: command tx timeout [ 610.047552][ T11] team0 (unregistering): Port device team_slave_1 removed [ 610.106377][ T11] team0 (unregistering): Port device team_slave_0 removed [ 610.614797][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 610.640145][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'. [ 610.749503][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.766865][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.798026][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.805138][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.813889][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.821013][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.864650][T14517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.896595][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.007884][T14517] veth0_vlan: entered promiscuous mode [ 611.066734][T14739] hub 9-0:1.0: USB hub found [ 611.071614][T14739] hub 9-0:1.0: 8 ports detected [ 611.141442][T14517] veth1_vlan: entered promiscuous mode [ 611.156005][ T8] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 611.329135][T14691] chnl_net:caif_netlink_parms(): no params data found [ 611.363458][T14740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2122'. [ 611.376530][ T8] usb 1-1: too many configurations: 121, using maximum allowed: 8 [ 611.482290][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 611.518058][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.526241][ T8] usb 1-1: Product: syz [ 611.530437][ T8] usb 1-1: Manufacturer: syz [ 611.535051][ T8] usb 1-1: SerialNumber: syz [ 611.548956][T14517] veth0_macvtap: entered promiscuous mode [ 611.561802][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 611.596426][ T5233] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 611.717664][ T5245] Bluetooth: hci1: command tx timeout [ 611.740752][T14517] veth1_macvtap: entered promiscuous mode [ 611.893526][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.924093][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.945713][T14691] bridge_slave_0: entered allmulticast mode [ 611.952882][T14691] bridge_slave_0: entered promiscuous mode [ 611.977334][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.000824][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.010776][T14691] bridge_slave_1: entered allmulticast mode [ 612.026695][T14691] bridge_slave_1: entered promiscuous mode [ 612.195975][T14584] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 612.235848][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.248403][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.283269][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.297411][ T5285] usb 1-1: USB disconnect, device number 115 [ 612.300938][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.330354][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.375570][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.385776][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.396605][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.408946][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.420820][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.431059][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.442110][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.454960][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.462844][T14584] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 612.547110][T14691] team0: Port device team_slave_0 added [ 612.835260][ T5233] usb 1-1: Service connection timeout for: 256 [ 612.841904][T14584] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 612.842895][ T5233] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 612.866150][ T5233] ath9k_htc: Failed to initialize the device [ 612.874543][ T5285] usb 1-1: ath9k_htc: USB layer deinitialized [ 612.886644][T14584] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.903931][T14691] team0: Port device team_slave_1 added [ 612.991381][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.004442][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.016030][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.028081][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.038929][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.055372][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.065743][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.098328][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.120990][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.136362][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.147461][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.159859][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.173869][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.184674][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.197469][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.220648][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.231032][T14517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.243826][T14517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.255870][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.308144][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.325605][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.359356][ T25] hid (null): unknown global tag 0xd [ 613.373313][ T25] hid (null): global environment stack underflow [ 613.375772][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.383039][ T25] hid (null): unknown global tag 0xe [ 613.396999][ T25] hid (null): invalid report_size 1775573305 [ 613.404109][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.406047][ T25] hid (null): unknown global tag 0xd [ 613.418219][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.418249][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.468443][ T25] hid (null): global environment stack underflow [ 613.490403][ T25] hid-generic 07FF:0008:0005.001E: unknown global tag 0xd [ 613.498047][ T25] hid-generic 07FF:0008:0005.001E: item 0 0 1 13 parsing failed [ 613.507591][ T25] hid-generic 07FF:0008:0005.001E: probe with driver hid-generic failed with error -22 [ 613.564192][T14517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.595225][T14517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.603965][T14517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.630686][T14517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.759308][T14691] hsr_slave_0: entered promiscuous mode [ 613.773427][T14691] hsr_slave_1: entered promiscuous mode [ 613.795362][ T5245] Bluetooth: hci1: command tx timeout [ 613.939782][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.956984][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.183009][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.231564][T14779] netlink: 'syz.3.2131': attribute type 10 has an invalid length. [ 614.252364][T14779] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 614.365629][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.396487][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.419408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.544731][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.575499][T14584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.628697][T14584] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.687729][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.724819][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.732013][ T7348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.762533][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.769708][ T7348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.835391][ T25] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 614.876661][T14584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.985309][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 614.995794][T14584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.010297][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 615.026055][ T11] bridge_slave_1: left allmulticast mode [ 615.031754][ T11] bridge_slave_1: left promiscuous mode [ 615.045651][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.049356][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 615.064142][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 615.079180][ T11] bridge_slave_0: left allmulticast mode [ 615.091061][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 615.096351][ T11] bridge_slave_0: left promiscuous mode [ 615.110943][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 615.115418][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.135696][ T25] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 615.145061][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.158417][ T11] bridge_slave_1: left allmulticast mode [ 615.165988][ T25] usb 5-1: Product: syz [ 615.174440][ T11] bridge_slave_1: left promiscuous mode [ 615.174765][ T25] usb 5-1: Manufacturer: syz [ 615.192776][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.200321][ T25] usb 5-1: SerialNumber: syz [ 615.211450][ T11] bridge_slave_0: left allmulticast mode [ 615.214817][ T25] usb 5-1: config 0 descriptor?? [ 615.221010][ T11] bridge_slave_0: left promiscuous mode [ 615.232169][ T25] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 615.255607][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.070521][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.083080][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.095990][ T11] bond0 (unregistering): Released all slaves [ 616.271791][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.286019][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.298547][ T11] bond0 (unregistering): Released all slaves [ 616.435089][ T8] usb 5-1: USB disconnect, device number 71 [ 616.600720][T14584] veth0_vlan: entered promiscuous mode [ 616.640047][T14584] veth1_vlan: entered promiscuous mode [ 616.804433][T14584] veth0_macvtap: entered promiscuous mode [ 616.818807][T14584] veth1_macvtap: entered promiscuous mode [ 617.007558][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.037146][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.056925][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.079767][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.100130][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.122343][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.164891][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.176298][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.187042][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.198197][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.220605][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.233595][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 617.243391][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.253737][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 617.263620][T14584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.274889][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 617.281775][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.292521][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.306856][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 617.324898][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 617.334678][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 617.336978][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.364148][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.387733][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.410128][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.422711][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.435377][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.445595][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.456311][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.466281][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.478985][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.489056][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.499675][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.509573][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.520175][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.530087][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.542016][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.551942][T14584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.562688][T14584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.574036][T14584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.661397][T14584] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.684432][T14584] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.693573][T14584] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.704315][T14584] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.008550][T14832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.018331][T14832] batadv_slave_0: entered promiscuous mode [ 618.050364][T14836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2140'. [ 618.116104][ T11] hsr_slave_0: left promiscuous mode [ 618.123480][ T11] hsr_slave_1: left promiscuous mode [ 618.135885][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.158125][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.165777][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.179511][ T11] hsr_slave_0: left promiscuous mode [ 618.186867][ T11] hsr_slave_1: left promiscuous mode [ 618.193478][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.201483][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.222357][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.243057][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.244486][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2141'. [ 618.294762][ T11] veth1_macvtap: left promiscuous mode [ 618.300410][ T11] veth0_macvtap: left promiscuous mode [ 618.306382][ T11] veth1_vlan: left promiscuous mode [ 618.311779][ T11] veth0_vlan: left promiscuous mode [ 618.320110][ T11] veth1_macvtap: left promiscuous mode [ 618.330723][ T11] veth0_macvtap: left promiscuous mode [ 618.340495][ T11] veth1_vlan: left promiscuous mode [ 618.346589][ T11] veth0_vlan: left promiscuous mode [ 619.039403][ T11] team0 (unregistering): Port device team_slave_1 removed [ 619.102323][ T11] team0 (unregistering): Port device team_slave_0 removed [ 619.404233][ T5245] Bluetooth: hci2: command tx timeout [ 620.101272][ T11] team0 (unregistering): Port device team_slave_1 removed [ 620.153133][ T11] team0 (unregistering): Port device team_slave_0 removed [ 620.690420][T14837] bridge_slave_1: left allmulticast mode [ 620.698862][T14837] bridge_slave_1: left promiscuous mode [ 620.704609][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.754097][T14839] bridge0: port 3(team0) entered blocking state [ 620.785643][T14839] bridge0: port 3(team0) entered disabled state [ 620.792253][T14839] team0: entered allmulticast mode [ 620.797830][T14839] team_slave_0: entered allmulticast mode [ 620.805431][T14839] team_slave_1: entered allmulticast mode [ 620.814848][T14839] team0: entered promiscuous mode [ 620.821294][T14839] team_slave_0: entered promiscuous mode [ 620.827642][T14839] team_slave_1: entered promiscuous mode [ 620.838608][T14839] bridge0: port 3(team0) entered blocking state [ 620.845250][T14839] bridge0: port 3(team0) entered forwarding state [ 620.867454][T14691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 620.910069][T14843] tipc: Enabling of bearer rejected, failed to enable media [ 620.964845][T14691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 620.992331][T14691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.060407][T14691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.129747][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.172228][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.189960][T14856] hub 9-0:1.0: USB hub found [ 621.217353][T14856] hub 9-0:1.0: 8 ports detected [ 621.268003][T14827] chnl_net:caif_netlink_parms(): no params data found [ 621.303363][ T5285] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 621.359145][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.367376][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.386914][T14857] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2145'. [ 621.479249][ T5245] Bluetooth: hci2: command tx timeout [ 621.495523][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 621.543404][ T5285] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 621.560891][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 621.570887][ T5285] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 621.580808][ T5285] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.590812][ T5285] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 621.602883][ T5285] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 621.612213][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.621531][ T5285] usb 5-1: Product: syz [ 621.625891][ T5285] usb 5-1: Manufacturer: syz [ 621.631917][ T5285] usb 5-1: SerialNumber: syz [ 621.644218][ T5285] usb 5-1: config 0 descriptor?? [ 621.652165][ T5285] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 621.660910][T14827] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.684602][T14827] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.700695][T14827] bridge_slave_0: entered allmulticast mode [ 621.709729][T14827] bridge_slave_0: entered promiscuous mode [ 621.725470][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.753332][T14827] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.761519][T14827] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.770453][T14827] bridge_slave_1: entered allmulticast mode [ 621.789787][T14827] bridge_slave_1: entered promiscuous mode [ 621.825713][T14862] netlink: 'syz.2.2095': attribute type 21 has an invalid length. [ 621.845511][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 621.859947][T14862] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2095'. [ 621.906396][T14827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.932349][T14827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.025707][ T8] usb 5-1: USB disconnect, device number 72 [ 622.071958][T14827] team0: Port device team_slave_0 added [ 622.081575][T14827] team0: Port device team_slave_1 added [ 622.125120][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.154530][T14827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.162197][T14868] hub 9-0:1.0: USB hub found [ 622.167535][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.194219][T14868] hub 9-0:1.0: 8 ports detected [ 622.222605][T14827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.236321][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.243454][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.258092][T14827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.265062][T14827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.315205][T14827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.372120][T14868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2146'. [ 622.417515][T14827] hsr_slave_0: entered promiscuous mode [ 622.423943][T14827] hsr_slave_1: entered promiscuous mode [ 622.431513][T14827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.452274][T14827] Cannot create hsr debugfs directory [ 622.467056][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.474170][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.900408][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.010683][T14827] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.194284][T14827] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.331923][T14827] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.366534][T14691] veth0_vlan: entered promiscuous mode [ 623.383709][T14691] veth1_vlan: entered promiscuous mode [ 623.555699][ T5245] Bluetooth: hci2: command tx timeout [ 623.716255][T14827] bond0: (slave netdevsim0): Releasing backup interface [ 623.739523][T14827] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.862878][T14691] veth0_macvtap: entered promiscuous mode [ 623.906999][T14691] veth1_macvtap: entered promiscuous mode [ 624.035006][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.065470][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.106012][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.137445][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.162799][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.191762][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.215588][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.249694][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.271420][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.305221][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.326868][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.334324][T14827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.344465][T14899] FAULT_INJECTION: forcing a failure. [ 624.344465][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 624.361053][T14899] CPU: 1 UID: 0 PID: 14899 Comm: syz.0.2156 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 624.371853][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 624.381928][T14899] Call Trace: [ 624.385224][T14899] [ 624.388171][T14899] dump_stack_lvl+0x241/0x360 [ 624.392872][T14899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.398090][T14899] ? __pfx__printk+0x10/0x10 [ 624.402711][T14899] ? __kmalloc_node_noprof+0xb7/0x440 [ 624.408102][T14899] ? __pfx___might_resched+0x10/0x10 [ 624.413409][T14899] ? __asan_memset+0x23/0x50 [ 624.418025][T14899] should_fail_ex+0x3b0/0x4e0 [ 624.422734][T14899] should_failslab+0xac/0x100 [ 624.427445][T14899] __kmalloc_node_noprof+0xdf/0x440 [ 624.432836][T14899] ? __kvmalloc_node_noprof+0x72/0x190 [ 624.438332][T14899] __kvmalloc_node_noprof+0x72/0x190 [ 624.443645][T14899] alloc_netdev_mqs+0xa4a/0x1000 [ 624.448620][T14899] rtnl_create_link+0x2f9/0xc20 [ 624.453508][T14899] rtnl_newlink+0x1423/0x20a0 [ 624.458203][T14899] ? rtnl_newlink+0xa91/0x20a0 [ 624.462998][T14899] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.468041][T14899] ? do_raw_spin_unlock+0x13c/0x8b0 [ 624.473266][T14899] ? __mutex_lock+0x9ab/0xd70 [ 624.477961][T14899] ? __mutex_lock+0x52a/0xd70 [ 624.482683][T14899] ? __pfx_rtnl_newlink+0x10/0x10 [ 624.487728][T14899] rtnetlink_rcv_msg+0x73f/0xcf0 [ 624.492683][T14899] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 624.497820][T14899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.503307][T14899] ? ref_tracker_free+0x643/0x7e0 [ 624.508371][T14899] netlink_rcv_skb+0x1e3/0x430 [ 624.513429][T14899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 624.518918][T14899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.524245][T14899] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.529459][T14899] netlink_unicast+0x7f6/0x990 [ 624.534249][T14899] ? __pfx_netlink_unicast+0x10/0x10 [ 624.535244][ T5286] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 624.539536][T14899] ? __virt_addr_valid+0x183/0x530 [ 624.552226][T14899] ? __check_object_size+0x48e/0x900 [ 624.557713][T14899] netlink_sendmsg+0x8e4/0xcb0 [ 624.562514][T14899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.567822][T14899] ? aa_sock_msg_perm+0x91/0x160 [ 624.572781][T14899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.578081][T14899] __sock_sendmsg+0x221/0x270 [ 624.582778][T14899] ____sys_sendmsg+0x52a/0x7e0 [ 624.587570][T14899] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.592889][T14899] __sys_sendmsg+0x292/0x380 [ 624.597500][T14899] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.602645][T14899] ? __pfx_vfs_write+0x10/0x10 [ 624.607461][T14899] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 624.613896][T14899] ? do_syscall_64+0x100/0x230 [ 624.618676][T14899] ? do_syscall_64+0xb6/0x230 [ 624.623374][T14899] do_syscall_64+0xf3/0x230 [ 624.627894][T14899] ? clear_bhb_loop+0x35/0x90 [ 624.632599][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.638519][T14899] RIP: 0033:0x7fa8af57dff9 [ 624.642954][T14899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.662660][T14899] RSP: 002b:00007fa8b034e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.671099][T14899] RAX: ffffffffffffffda RBX: 00007fa8af735f80 RCX: 00007fa8af57dff9 [ 624.679087][T14899] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 624.687083][T14899] RBP: 00007fa8b034e090 R08: 0000000000000000 R09: 0000000000000000 [ 624.695070][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.703062][T14899] R13: 0000000000000000 R14: 00007fa8af735f80 R15: 00007fa8af85fa28 [ 624.711069][T14899] [ 624.736687][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.743036][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.755498][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 624.762698][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.800071][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 624.820573][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.836017][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 624.844894][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.857926][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.868200][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.878815][ T5286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 624.879347][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.906256][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 624.908492][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.935359][ T5286] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 624.949629][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.965395][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.982721][ T5286] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 624.985377][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.005490][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.014778][ T5286] usb 3-1: Product: syz [ 625.020690][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.039332][ T5286] usb 3-1: Manufacturer: syz [ 625.041678][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.043969][ T5286] usb 3-1: SerialNumber: syz [ 625.065566][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.095247][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.114578][ T5286] usb 3-1: config 0 descriptor?? [ 625.124233][ T5286] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 625.128177][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.178366][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.199144][T14691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.225373][T14691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.247220][T14691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.257250][T14827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.286903][T14827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.356224][T14691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.364973][T14691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.400689][T14691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.409666][T14691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.445978][T14827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.465078][T14904] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2158'. [ 625.483640][T14904] x_tables: ip_tables: udp match: only valid for protocol 17 [ 625.585450][ T5286] usb 3-1: USB disconnect, device number 87 [ 625.635610][ T5245] Bluetooth: hci2: command tx timeout [ 625.816263][T12493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.824118][T12493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.975965][T14827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.992317][T14827] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.019376][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.026581][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.051641][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.058840][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.115976][T12493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.128893][T14827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.155336][T12493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.156132][T14827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.285365][ T8] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 626.376187][T14827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.454657][T14919] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 626.466237][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.495490][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 626.538281][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 626.553035][T14827] veth0_vlan: entered promiscuous mode [ 626.575669][ T8] usb 5-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 626.585025][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.598594][T14827] veth1_vlan: entered promiscuous mode [ 626.618487][ T8] usb 5-1: config 0 descriptor?? [ 626.639669][T14827] veth0_macvtap: entered promiscuous mode [ 626.655074][T14827] veth1_macvtap: entered promiscuous mode [ 626.946557][T14934] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 627.149834][T12493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.227451][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.259344][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.291767][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.308157][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.329076][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.344019][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.357635][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.375750][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.393112][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.406152][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.423314][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.434979][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.489256][T14827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.671726][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 627.683961][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 627.736213][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 627.747152][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 627.756181][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 627.764039][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 627.826918][T12493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.877181][ T5287] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 627.891786][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.924042][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.946297][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.971555][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.989434][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.000068][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.019740][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.034852][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.049145][ T5287] usb 1-1: Using ep0 maxpacket: 8 [ 628.061109][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.072552][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 628.094300][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 628.104325][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.124634][ T5287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 628.137269][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.155257][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 628.168912][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.185272][ T5287] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 628.205551][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.207999][ T25] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 628.227746][ T5287] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 628.237163][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.247410][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.262838][ T5287] usb 1-1: Product: syz [ 628.268930][ T5287] usb 1-1: Manufacturer: syz [ 628.273634][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.286069][ T5287] usb 1-1: SerialNumber: syz [ 628.303745][ T5287] usb 1-1: config 0 descriptor?? [ 628.311849][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.332935][ T5287] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 628.346964][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.380658][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.400727][T14827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.413096][T14827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.432599][T14827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.437597][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.466699][ T25] usb 3-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 628.476224][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.486397][ T25] usb 3-1: config 0 descriptor?? [ 628.559047][ T9] usb 1-1: USB disconnect, device number 116 [ 628.632659][T12493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.720517][T14827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.741419][T14827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.766547][T14827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.787180][T14827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.882914][T12493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.907843][T14943] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2173'. [ 628.965699][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 629.010486][ T25] elecom 0003:056E:00E6.001F: unknown main item tag 0x0 [ 629.017938][ T25] elecom 0003:056E:00E6.001F: unknown main item tag 0x0 [ 629.027861][ T25] elecom 0003:056E:00E6.001F: unknown main item tag 0x1 [ 629.034952][ T25] elecom 0003:056E:00E6.001F: unexpected long global item [ 629.043254][ T25] elecom 0003:056E:00E6.001F: probe with driver elecom failed with error -22 [ 629.126094][ T8] usb 5-1: string descriptor 0 read error: -71 [ 629.150004][ T8] usb 5-1: USB disconnect, device number 73 [ 629.194147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.205301][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.436233][ T1051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.444237][ T1051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.468301][T12493] bridge_slave_1: left allmulticast mode [ 629.473993][T12493] bridge_slave_1: left promiscuous mode [ 629.479941][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.507749][T12493] bridge_slave_0: left allmulticast mode [ 629.509368][ T9] usb 3-1: USB disconnect, device number 88 [ 629.516141][T12493] bridge_slave_0: left promiscuous mode [ 629.528634][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.877145][ T5245] Bluetooth: hci1: command tx timeout [ 630.393616][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.395388][ T51] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 630.462982][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.479022][T12493] bond0 (unregistering): Released all slaves [ 630.506332][ T5285] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 630.530522][T14941] chnl_net:caif_netlink_parms(): no params data found [ 630.587403][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 630.599870][ T51] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 630.609728][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.617973][ T51] usb 5-1: Product: syz [ 630.622236][ T51] usb 5-1: Manufacturer: syz [ 630.626921][ T51] usb 5-1: SerialNumber: syz [ 630.634318][ T51] usb 5-1: config 0 descriptor?? [ 630.716532][ T5285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 630.755501][ T5286] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 630.774921][ T5285] usb 3-1: can't read configurations, error -61 [ 630.929955][ T5285] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 630.967746][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 630.986637][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 630.998699][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 631.009365][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 631.019589][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.029785][ T5286] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 631.084107][ T5286] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 631.113336][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.125312][ T5286] usb 1-1: Product: syz [ 631.135081][ T5286] usb 1-1: Manufacturer: syz [ 631.137664][ T5285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 631.154941][ T5286] usb 1-1: SerialNumber: syz [ 631.173299][ T5286] usb 1-1: config 0 descriptor?? [ 631.186034][ T5285] usb 3-1: can't read configurations, error -61 [ 631.192949][ T5285] usb usb3-port1: attempt power cycle [ 631.194403][ T5286] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 631.218678][T14941] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.234509][T14941] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.288489][T14941] bridge_slave_0: entered allmulticast mode [ 631.313594][T14941] bridge_slave_0: entered promiscuous mode [ 631.404295][T14941] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.434475][T14941] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.445853][ T5286] usb 1-1: USB disconnect, device number 117 [ 631.475002][T14941] bridge_slave_1: entered allmulticast mode [ 631.503691][T14941] bridge_slave_1: entered promiscuous mode [ 631.536144][ T5285] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 631.580941][ T5285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 631.595340][ T5285] usb 3-1: can't read configurations, error -61 [ 631.624777][T12493] hsr_slave_0: left promiscuous mode [ 631.653504][T12493] hsr_slave_1: left promiscuous mode [ 631.684633][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.702698][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.724139][ T51] airspy 5-1:0.0: usb_control_msg() failed -110 request 09 [ 631.745305][ T51] airspy 5-1:0.0: Could not detect board [ 631.751085][ T51] airspy 5-1:0.0: probe with driver airspy failed with error -110 [ 631.770215][ T5285] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 631.786384][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.795525][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.813673][T15006] binder: 15005:15006 ioctl c0502100 20000400 returned -22 [ 631.814995][ T5285] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 631.836690][ T5285] usb 3-1: can't read configurations, error -61 [ 631.847321][T12493] veth1_macvtap: left promiscuous mode [ 631.851624][ T5285] usb usb3-port1: unable to enumerate USB device [ 631.852996][T12493] veth0_macvtap: left promiscuous mode [ 631.865892][T12493] veth1_vlan: left promiscuous mode [ 631.876942][T12493] veth0_vlan: left promiscuous mode [ 631.955530][ T5245] Bluetooth: hci1: command tx timeout [ 632.302255][ T5287] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 632.482456][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 632.504132][ T5287] usb 4-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=44.fe [ 632.527477][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.546328][ T5287] usb 4-1: config 0 descriptor?? [ 632.554454][ T5287] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 632.564983][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 632.578219][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 632.594778][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 632.619566][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 632.628033][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 632.636151][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 632.643935][ T5287] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 632.673582][ T5287] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 632.690378][T12493] team0 (unregistering): Port device team_slave_1 removed [ 632.751722][T12493] team0 (unregistering): Port device team_slave_0 removed [ 632.793798][ T5240] usb 4-1: USB disconnect, device number 95 [ 632.823809][ T5240] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 632.841053][ T5240] keyspan 4-1:0.0: device disconnected [ 632.999125][ T5285] usb 5-1: USB disconnect, device number 74 [ 633.285765][ T5240] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 633.457886][ T5240] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 633.498972][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.563876][ T5240] usb 1-1: config 0 descriptor?? [ 633.595668][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 633.771097][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 633.807240][ T9] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 633.855943][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 633.915377][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 633.930882][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 633.942229][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 633.950676][ T9] usb 3-1: Product: syz [ 633.954987][ T9] usb 3-1: Manufacturer: syz [ 633.974211][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 633.979640][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 633.986409][T15034] SET target dimension over the limit! [ 634.005307][ T5240] usb 1-1: Cannot set autoneg [ 634.010300][ T5240] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 634.010510][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 634.047934][ T5245] Bluetooth: hci1: command tx timeout [ 634.050745][ T5240] usb 1-1: USB disconnect, device number 118 [ 634.264975][T15040] FAULT_INJECTION: forcing a failure. [ 634.264975][T15040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.279870][T15040] CPU: 0 UID: 0 PID: 15040 Comm: syz.0.2194 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 634.290638][T15040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 634.300689][T15040] Call Trace: [ 634.303972][T15040] [ 634.306916][T15040] dump_stack_lvl+0x241/0x360 [ 634.311594][T15040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.316779][T15040] ? __pfx__printk+0x10/0x10 [ 634.321375][T15040] ? __pfx_lock_release+0x10/0x10 [ 634.326416][T15040] should_fail_ex+0x3b0/0x4e0 [ 634.331126][T15040] _copy_from_iter+0x1ed/0x1d60 [ 634.335984][T15040] ? __virt_addr_valid+0x183/0x530 [ 634.341107][T15040] ? __pfx_lock_release+0x10/0x10 [ 634.346156][T15040] ? __alloc_skb+0x28f/0x440 [ 634.350754][T15040] ? __pfx__copy_from_iter+0x10/0x10 [ 634.356039][T15040] ? __virt_addr_valid+0x183/0x530 [ 634.361153][T15040] ? __virt_addr_valid+0x183/0x530 [ 634.366281][T15040] ? __virt_addr_valid+0x45f/0x530 [ 634.371410][T15040] ? __check_object_size+0x48e/0x900 [ 634.376691][T15040] netlink_sendmsg+0x73d/0xcb0 [ 634.381454][T15040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.386745][T15040] ? aa_sock_msg_perm+0x91/0x160 [ 634.391693][T15040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.396965][T15040] __sock_sendmsg+0x221/0x270 [ 634.401646][T15040] ____sys_sendmsg+0x52a/0x7e0 [ 634.406406][T15040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.411696][T15040] __sys_sendmsg+0x292/0x380 [ 634.416277][T15040] ? __pfx___sys_sendmsg+0x10/0x10 [ 634.421393][T15040] ? __pfx_vfs_write+0x10/0x10 [ 634.426166][T15040] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 634.432504][T15040] ? do_syscall_64+0x100/0x230 [ 634.437268][T15040] ? do_syscall_64+0xb6/0x230 [ 634.441939][T15040] do_syscall_64+0xf3/0x230 [ 634.446442][T15040] ? clear_bhb_loop+0x35/0x90 [ 634.451133][T15040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.457031][T15040] RIP: 0033:0x7fa8af57dff9 [ 634.461457][T15040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.481063][T15040] RSP: 002b:00007fa8b032d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.489577][T15040] RAX: ffffffffffffffda RBX: 00007fa8af736058 RCX: 00007fa8af57dff9 [ 634.498158][T15040] RDX: 0000000000000000 RSI: 0000000020000900 RDI: 0000000000000005 [ 634.506137][T15040] RBP: 00007fa8b032d090 R08: 0000000000000000 R09: 0000000000000000 [ 634.514099][T15040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.522065][T15040] R13: 0000000000000000 R14: 00007fa8af736058 R15: 00007fa8af85fa28 [ 634.530062][T15040] [ 634.731041][T15038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2194'. [ 634.757338][ T8] usb 3-1: USB disconnect, device number 93 [ 634.851009][T14941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.907390][T14941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.063714][T14941] team0: Port device team_slave_0 added [ 635.147731][T14941] team0: Port device team_slave_1 added [ 635.296071][T14941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.325658][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.357317][T15058] input: syz1 as /devices/virtual/input/input38 [ 635.409869][T15062] FAULT_INJECTION: forcing a failure. [ 635.409869][T15062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.445327][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.0.2200 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 635.456143][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 635.466232][T15062] Call Trace: [ 635.469529][T15062] [ 635.472471][T15062] dump_stack_lvl+0x241/0x360 [ 635.477174][T15062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.478092][T14941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.482380][T15062] ? __pfx__printk+0x10/0x10 [ 635.497460][T15062] ? __pfx_lock_release+0x10/0x10 [ 635.502519][T15062] should_fail_ex+0x3b0/0x4e0 [ 635.507234][T15062] _copy_from_user+0x2f/0xe0 [ 635.511851][T15062] input_event_from_user+0x1e2/0x4a0 [ 635.517163][T15062] ? __pfx_input_event_from_user+0x10/0x10 [ 635.523001][T15062] ? input_event+0xa4/0xd0 [ 635.526470][T14941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.527421][T15062] uinput_write+0x47c/0x12b0 [ 635.538950][T15062] ? __pfx_uinput_write+0x10/0x10 [ 635.544013][T15062] ? bpf_lsm_file_permission+0x9/0x10 [ 635.549408][T15062] ? security_file_permission+0x74/0x280 [ 635.555068][T15062] ? rw_verify_area+0x1c3/0x6f0 [ 635.557789][T14941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.559919][T15062] ? __pfx_uinput_write+0x10/0x10 [ 635.591189][T15062] vfs_write+0x29c/0xc90 [ 635.595453][T15062] ? kmem_cache_free+0x1a2/0x420 [ 635.600426][T15062] ? __pfx_vfs_write+0x10/0x10 [ 635.605207][T15062] ? __fget_files+0x29/0x470 [ 635.609829][T15062] ? __fget_files+0x3f3/0x470 [ 635.614533][T15062] ? __fget_files+0x29/0x470 [ 635.619155][T15062] ? fdget_pos+0x19a/0x320 [ 635.623596][T15062] ksys_write+0x183/0x2b0 [ 635.627947][T15062] ? __pfx_ksys_write+0x10/0x10 [ 635.632827][T15062] ? do_syscall_64+0x100/0x230 [ 635.637629][T15062] ? do_syscall_64+0xb6/0x230 [ 635.642328][T15062] do_syscall_64+0xf3/0x230 [ 635.646846][T15062] ? clear_bhb_loop+0x35/0x90 [ 635.651544][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.657462][T15062] RIP: 0033:0x7fa8af57dff9 [ 635.661896][T15062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.665481][T14941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.681506][T15062] RSP: 002b:00007fa8b02c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.681536][T15062] RAX: ffffffffffffffda RBX: 00007fa8af736058 RCX: 00007fa8af57dff9 [ 635.681552][T15062] RDX: 000000000000045c RSI: 0000000020000080 RDI: 0000000000000004 [ 635.681565][T15062] RBP: 00007fa8b02c8090 R08: 0000000000000000 R09: 0000000000000000 [ 635.681578][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.681590][T15062] R13: 0000000000000001 R14: 00007fa8af736058 R15: 00007fa8af85fa28 [ 635.681617][T15062] [ 635.786753][T15068] fuse: Unknown parameter '' [ 636.034915][T14941] hsr_slave_0: entered promiscuous mode [ 636.088034][T14941] hsr_slave_1: entered promiscuous mode [ 636.125435][ T5245] Bluetooth: hci1: command tx timeout [ 636.142601][T12493] bridge_slave_1: left allmulticast mode [ 636.160501][T12493] bridge_slave_1: left promiscuous mode [ 636.205407][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.222455][T12493] bridge_slave_0: left allmulticast mode [ 636.235461][T12493] bridge_slave_0: left promiscuous mode [ 636.256489][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.593825][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 636.608601][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 636.621527][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 636.634180][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 636.647166][ T25] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 636.666338][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 636.673647][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.815516][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 636.824097][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 636.833609][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.842004][ T25] usb 1-1: Product: syz [ 636.846607][ T25] usb 1-1: Manufacturer: syz [ 636.851229][ T25] usb 1-1: SerialNumber: syz [ 636.866133][ T25] usb 1-1: config 0 descriptor?? [ 636.878752][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 637.002945][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.014914][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.035741][T12493] bond0 (unregistering): Released all slaves [ 637.660409][T12493] hsr_slave_0: left promiscuous mode [ 637.693929][T12493] hsr_slave_1: left promiscuous mode [ 637.711924][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.730238][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.745409][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.760616][ T25] gspca_sonixj: reg_r err -71 [ 637.805469][ T25] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 637.819983][T12493] veth1_macvtap: left promiscuous mode [ 637.831132][ T25] usb 1-1: USB disconnect, device number 119 [ 637.833717][T12493] veth0_macvtap: left promiscuous mode [ 637.849574][T12493] veth1_vlan: left promiscuous mode [ 637.856367][T12493] veth0_vlan: left promiscuous mode [ 638.414286][T12493] team0 (unregistering): Port device team_slave_1 removed [ 638.482638][T12493] team0 (unregistering): Port device team_slave_0 removed [ 638.763748][ T5245] Bluetooth: hci2: command tx timeout [ 638.835491][ T51] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 639.015387][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 639.024742][ T51] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 639.044638][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.062941][ T51] usb 3-1: Product: syz [ 639.071231][ T51] usb 3-1: Manufacturer: syz [ 639.084610][ T51] usb 3-1: SerialNumber: syz [ 639.095437][ T25] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 639.103962][ T51] usb 3-1: config 0 descriptor?? [ 639.116955][ T51] ftdi_sio 3-1:0.0: Ignoring interface reserved for JTAG [ 639.203776][T15106] batadv_slave_0: mtu less than device minimum [ 639.297326][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 639.320651][ T25] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 639.374714][T15087] chnl_net:caif_netlink_parms(): no params data found [ 639.383007][ T51] usb 3-1: USB disconnect, device number 94 [ 639.389994][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 639.425799][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 639.440432][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 639.452811][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 639.486758][ T25] usb 5-1: Product: syz [ 639.490975][ T25] usb 5-1: Manufacturer: syz [ 639.510049][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 639.518772][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 639.527125][ T25] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 639.735439][T15087] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.757915][ T25] usb 5-1: USB disconnect, device number 75 [ 639.765463][T15087] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.772783][T15087] bridge_slave_0: entered allmulticast mode [ 639.786735][T15087] bridge_slave_0: entered promiscuous mode [ 639.794257][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.814636][T15087] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.824115][T15087] bridge_slave_1: entered allmulticast mode [ 639.836798][T15087] bridge_slave_1: entered promiscuous mode [ 639.908379][T15087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.931969][T15087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.944976][T15129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 639.967425][ T51] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 639.988628][ T9] IPVS: starting estimator thread 0... [ 640.085487][T15130] IPVS: using max 18 ests per chain, 43200 per kthread [ 640.095908][T15087] team0: Port device team_slave_0 added [ 640.106191][T14941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 640.122253][T15087] team0: Port device team_slave_1 added [ 640.125347][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 640.147632][ T51] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 640.158948][T14941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 640.165467][ T51] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 640.179990][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 640.192559][ T51] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 640.204515][ T51] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 640.220389][T15087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.228691][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.255108][ T51] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 640.287759][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.358320][T15087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.824352][ T51] usb 1-1: usb_control_msg returned -32 [ 640.835673][ T5245] Bluetooth: hci2: command tx timeout [ 640.871453][ T51] usbtmc 1-1:16.0: can't read capabilities [ 640.957943][T15144] hub 9-0:1.0: USB hub found [ 640.963581][T15144] hub 9-0:1.0: 8 ports detected [ 641.043742][T12493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.119557][T14941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 641.192829][T12493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.225866][T15087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.234019][T15087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.261808][T15087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.287352][T15148] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2216'. [ 641.324173][T14941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 641.385080][T12493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.507715][T15087] hsr_slave_0: entered promiscuous mode [ 641.529971][T15087] hsr_slave_1: entered promiscuous mode [ 641.545729][T15087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.557583][T15087] Cannot create hsr debugfs directory [ 641.603971][T12493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.954476][T12493] bridge_slave_1: left allmulticast mode [ 641.969620][T12493] bridge_slave_1: left promiscuous mode [ 641.975738][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.986428][T12493] bridge_slave_0: left allmulticast mode [ 641.992237][T12493] bridge_slave_0: left promiscuous mode [ 642.004883][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.105939][ T8] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 642.277729][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.295389][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.330221][ T8] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 642.339377][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.375716][ T8] usb 5-1: config 0 descriptor?? [ 642.745138][T12493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.770494][T12493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.792985][ T8] hid-thrustmaster 0003:044F:B65D.0020: unknown main item tag 0x0 [ 642.794387][T12493] bond0 (unregistering): Released all slaves [ 642.820255][ T8] hid-thrustmaster 0003:044F:B65D.0020: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 642.855992][ T8] hid-thrustmaster 0003:044F:B65D.0020: Wrong number of endpoints? [ 642.887915][ T5240] usb 1-1: USB disconnect, device number 120 [ 642.902575][T14941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.915483][ T5245] Bluetooth: hci2: command tx timeout [ 642.997605][ C0] hid-thrustmaster 0003:044F:B65D.0020: Unknown packet type 0x0, unable to proceed further with wheel init [ 643.100749][T15191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2221'. [ 643.144658][T14941] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.226059][ T5284] usb 5-1: USB disconnect, device number 76 [ 643.288435][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.295608][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.449482][T12493] hsr_slave_0: left promiscuous mode [ 643.465316][T12493] hsr_slave_1: left promiscuous mode [ 643.476839][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.494518][T12493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.515049][T12493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.533015][T12493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.586679][T12493] veth1_macvtap: left promiscuous mode [ 643.592386][T12493] veth0_macvtap: left promiscuous mode [ 643.598993][T12493] veth1_vlan: left promiscuous mode [ 643.604445][T12493] veth0_vlan: left promiscuous mode [ 644.165475][ T8] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 644.347759][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 644.379333][ T8] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 644.403434][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 644.435501][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 644.476933][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 644.489881][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 644.521951][ T8] usb 5-1: Product: syz [ 644.540481][ T8] usb 5-1: Manufacturer: syz [ 644.560743][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 644.604818][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 644.639505][ T8] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 645.007675][ T5245] Bluetooth: hci2: command tx timeout [ 645.407605][T12493] team0 (unregistering): Port device team_slave_1 removed [ 645.499896][T12493] team0 (unregistering): Port device team_slave_0 removed [ 646.679943][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.687181][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.765452][T15251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.777586][T15251] batadv_slave_0: entered promiscuous mode [ 646.818374][ T9] usb 5-1: USB disconnect, device number 77 [ 646.876262][T14941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.902638][T14941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.113797][T15087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 647.161361][T15087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 647.191426][T15087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 647.242594][T15087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 647.284750][T14941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.586336][T14941] veth0_vlan: entered promiscuous mode [ 647.643238][T14941] veth1_vlan: entered promiscuous mode [ 647.676189][T15087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.704555][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 647.722388][T15087] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.768706][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.775889][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.795519][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 647.817126][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.824257][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.845852][T14941] veth0_macvtap: entered promiscuous mode [ 647.867481][T14941] veth1_macvtap: entered promiscuous mode [ 647.951024][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.961935][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 647.968916][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 647.981958][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.992588][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 648.004734][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.016973][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 648.027954][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.037110][T15268] binder_alloc: 15267: binder_alloc_buf, no vma [ 648.044111][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 648.056903][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.070317][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 648.080609][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.096384][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.107981][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.118873][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 648.131763][T14941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.140023][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.149394][ T9] usb 5-1: Product: syz [ 648.154582][ T9] usb 5-1: Manufacturer: syz [ 648.159767][ T9] usb 5-1: SerialNumber: syz [ 648.168521][ T9] usb 5-1: config 0 descriptor?? [ 648.176429][ T9] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 648.188201][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.206495][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.217398][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.228317][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.239466][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.268714][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.289257][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.302158][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.313090][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.323883][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.333755][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.344617][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.368324][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.383240][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.397413][T14941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.412127][T14941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.426875][T14941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.430803][ T25] usb 5-1: USB disconnect, device number 78 [ 648.449812][T14941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.473899][T14941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.484444][T14941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.500463][T14941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.534280][ T51] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 648.549389][T15087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.642005][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.653254][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.685705][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 648.692807][ T51] usb 1-1: config 0 has an invalid interface number: 19 but max is 0 [ 648.703169][T15087] veth0_vlan: entered promiscuous mode [ 648.716433][ T51] usb 1-1: config 0 has no interface number 0 [ 648.736799][ T7348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.746295][T15087] veth1_vlan: entered promiscuous mode [ 648.748497][ T51] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.d6 [ 648.751997][ T7348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.778487][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.800252][ T51] usb 1-1: Product: syz [ 648.810093][ T51] usb 1-1: Manufacturer: syz [ 648.824477][T15087] veth0_macvtap: entered promiscuous mode [ 648.829400][ T51] usb 1-1: SerialNumber: syz [ 648.850152][T15087] veth1_macvtap: entered promiscuous mode [ 648.866517][ T51] usb 1-1: config 0 descriptor?? [ 648.880030][ T51] etas_es58x 1-1:0.19: Starting syz syz (Serial Number syz) [ 648.899804][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.917867][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.929080][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.940542][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.952786][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.963574][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.974701][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.986284][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.996913][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.009040][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.020775][T15087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.053944][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.078632][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.089512][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.100698][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.110958][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.121521][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.131687][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.144101][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.154168][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.165666][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.177561][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.188400][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.201018][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.214278][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.224514][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.235906][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.246402][T15087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.257180][T15087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.270955][T15087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.317376][T15087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.334851][T15087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.351242][T15087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.361082][T15087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.504559][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.520503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.551595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.561671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.641457][T15291] batman_adv: batadv0: Adding interface: dummy0 [ 649.649136][T15291] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.676771][T15291] batman_adv: batadv0: Interface activated: dummy0 [ 649.691498][T15291] batadv0: mtu less than device minimum [ 649.699734][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.712781][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.724562][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.737141][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.749699][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.762229][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.773783][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.785969][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.798499][T15291] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 649.840565][ T5233] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 649.884823][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2206'. [ 650.027530][ T5233] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.036877][ T5233] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 650.048454][ T5233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.057621][ T5233] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 650.071294][ T5233] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.080635][ T5233] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.088878][ T5233] usb 2-1: Product: syz [ 650.093270][ T5233] usb 2-1: Manufacturer: syz [ 650.116621][ T5233] cdc_wdm 2-1:1.0: skipping garbage [ 650.123822][ T5233] cdc_wdm 2-1:1.0: skipping garbage [ 650.140104][ T5233] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 650.322301][ T5233] usb 2-1: USB disconnect, device number 98 [ 650.328460][ T8] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 650.489170][ T8] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 650.495354][ T5240] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 650.507103][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.507133][ T8] usb 5-1: Product: syz [ 650.507151][ T8] usb 5-1: Manufacturer: syz [ 650.507168][ T8] usb 5-1: SerialNumber: syz [ 650.535850][ T8] usb 5-1: config 0 descriptor?? [ 650.549509][ T8] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 079 [ 650.675724][ T5284] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 650.684304][ T5240] usb 3-1: Using ep0 maxpacket: 8 [ 650.691564][ T5240] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 650.705228][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 650.718551][ T5240] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 650.728602][ T5240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.738704][ T5240] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 650.753986][T15295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.765676][ T5240] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 650.774920][ T5240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.783488][ T5240] usb 3-1: Product: syz [ 650.788003][ T5240] usb 3-1: Manufacturer: syz [ 650.792657][ T5240] usb 3-1: SerialNumber: syz [ 650.797715][T15295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.800562][ T5240] usb 3-1: config 0 descriptor?? [ 650.819022][ T5240] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 650.857381][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 650.875833][ T5284] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 650.887836][T15295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.897214][ T5284] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 650.944715][T15295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.956095][ T5284] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 650.978073][ T5284] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 651.000877][ T5284] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.055323][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.082132][ T5284] usb 4-1: Product: syz [ 651.089386][ T5284] usb 4-1: Manufacturer: syz [ 651.096440][ T5284] usb 4-1: SerialNumber: syz [ 651.139484][T15308] batman_adv: batadv0: Adding interface: geneve2 [ 651.146082][T15308] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 651.168676][ T5285] usb 3-1: USB disconnect, device number 95 [ 651.359702][ T5286] usb 1-1: USB disconnect, device number 121 [ 651.419460][ T5284] usb 4-1: USB disconnect, device number 96 [ 651.482411][T14729] udevd[14729]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.682409][ T8] (null): failure setting delay to 10us [ 651.689272][ T8] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 651.735960][ T8] usb 5-1: USB disconnect, device number 79 [ 651.841948][ T7348] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.988570][ T7348] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.140935][ T7348] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.278436][ T7348] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.332242][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.344550][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.362143][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.371009][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.375720][ T51] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 652.386386][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 652.397197][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 652.425364][ T5285] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 652.565846][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 652.584527][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.596921][ T7348] bridge_slave_0: left allmulticast mode [ 652.617728][ T7348] bridge_slave_0: left promiscuous mode [ 652.626568][ T51] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 652.636500][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.644231][ T5285] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 652.662329][ T5285] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 652.680244][ T51] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 652.715749][ T5285] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 652.724751][ T5285] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 652.735991][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.746996][ T51] usb 4-1: config 0 descriptor?? [ 652.769838][ T5285] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 652.784264][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 652.822795][ T5285] usb 3-1: Product: syz [ 652.834698][ T5285] usb 3-1: Manufacturer: syz [ 652.843073][T15335] xt_CT: No such helper "netbios-ns" [ 652.852584][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 652.858240][ T5285] cdc_wdm 3-1:1.0: skipping garbage [ 652.871324][ T5285] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 652.986739][T15324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2259'. [ 653.301361][ T51] usb 4-1: USB disconnect, device number 97 [ 653.462944][ T7348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.474449][ T7348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.490031][ T7348] bond0 (unregistering): Released all slaves [ 653.504158][ T7348] bond1 (unregistering): Released all slaves [ 653.517612][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2262'. [ 653.526806][T15332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2262'. [ 653.544831][ T25] usb 3-1: USB disconnect, device number 96 [ 654.201528][T15328] chnl_net:caif_netlink_parms(): no params data found [ 654.216266][ T5284] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 654.309988][ T7348] hsr_slave_0: left promiscuous mode [ 654.316224][ T7348] hsr_slave_1: left promiscuous mode [ 654.322158][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.329773][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.340598][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.348174][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.395425][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 654.409315][ T7348] veth1_macvtap: left promiscuous mode [ 654.415348][ T7348] veth0_macvtap: left promiscuous mode [ 654.421048][ T7348] veth1_vlan: left promiscuous mode [ 654.447279][ T7348] veth0_vlan: left promiscuous mode [ 654.449033][ T5245] Bluetooth: hci5: command tx timeout [ 654.534291][T15380] netlink: 'syz.1.2272': attribute type 9 has an invalid length. [ 654.542272][T15380] netlink: 69104 bytes leftover after parsing attributes in process `syz.1.2272'. [ 654.556335][T15380] FAULT_INJECTION: forcing a failure. [ 654.556335][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 654.576469][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 654.587539][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 654.590501][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 654.596945][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 654.624033][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 654.632993][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 654.640549][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 654.675596][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.1.2272 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 654.686410][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 654.696471][T15380] Call Trace: [ 654.699751][T15380] [ 654.702681][T15380] dump_stack_lvl+0x241/0x360 [ 654.707382][T15380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.712592][T15380] ? __pfx__printk+0x10/0x10 [ 654.717202][T15380] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 654.722752][T15380] ? __pfx___might_resched+0x10/0x10 [ 654.728048][T15380] should_fail_ex+0x3b0/0x4e0 [ 654.732730][T15380] ? ovs_flow_alloc+0x24/0x1e0 [ 654.737502][T15380] should_failslab+0xac/0x100 [ 654.742187][T15380] ? ovs_flow_alloc+0x24/0x1e0 [ 654.746953][T15380] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 654.752329][T15380] ovs_flow_alloc+0x24/0x1e0 [ 654.756921][T15380] ovs_packet_cmd_execute+0x586/0xcc0 [ 654.762297][T15380] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 654.768537][T15380] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 654.774435][T15380] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 654.780763][T15380] genl_rcv_msg+0xb14/0xec0 [ 654.785269][T15380] ? mark_lock+0x9a/0x360 [ 654.789603][T15380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.794648][T15380] ? __pfx_lock_acquire+0x10/0x10 [ 654.799674][T15380] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 654.805569][T15380] ? __pfx___might_resched+0x10/0x10 [ 654.810859][T15380] netlink_rcv_skb+0x1e3/0x430 [ 654.815635][T15380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 654.820673][T15380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 654.825968][T15380] ? __netlink_deliver_tap+0x77e/0x7c0 [ 654.831429][T15380] genl_rcv+0x28/0x40 [ 654.835411][T15380] netlink_unicast+0x7f6/0x990 [ 654.840192][T15380] ? __pfx_netlink_unicast+0x10/0x10 [ 654.845476][T15380] ? __virt_addr_valid+0x183/0x530 [ 654.850587][T15380] ? __check_object_size+0x48e/0x900 [ 654.855873][T15380] netlink_sendmsg+0x8e4/0xcb0 [ 654.860640][T15380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.865924][T15380] ? aa_sock_msg_perm+0x91/0x160 [ 654.870858][T15380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.876137][T15380] __sock_sendmsg+0x221/0x270 [ 654.880819][T15380] ____sys_sendmsg+0x52a/0x7e0 [ 654.885587][T15380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.890877][T15380] __sys_sendmsg+0x292/0x380 [ 654.895466][T15380] ? __pfx___sys_sendmsg+0x10/0x10 [ 654.900591][T15380] ? __pfx_vfs_write+0x10/0x10 [ 654.905373][T15380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 654.911701][T15380] ? do_syscall_64+0x100/0x230 [ 654.916465][T15380] ? do_syscall_64+0xb6/0x230 [ 654.921143][T15380] do_syscall_64+0xf3/0x230 [ 654.925643][T15380] ? clear_bhb_loop+0x35/0x90 [ 654.930321][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.936214][T15380] RIP: 0033:0x7f276437dff9 [ 654.940623][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.960227][T15380] RSP: 002b:00007f2765136038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.968638][T15380] RAX: ffffffffffffffda RBX: 00007f2764536130 RCX: 00007f276437dff9 [ 654.976602][T15380] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 654.984566][T15380] RBP: 00007f2765136090 R08: 0000000000000000 R09: 0000000000000000 [ 654.992532][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.000496][T15380] R13: 0000000000000000 R14: 00007f2764536130 R15: 00007f276465fa28 [ 655.008473][T15380] [ 655.013922][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 655.024652][ T5284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 655.034532][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 655.044603][ T5284] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 655.086307][ T5284] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 655.097320][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.132076][ T5284] usb 4-1: Product: syz [ 655.138971][ T5284] usb 4-1: Manufacturer: syz [ 655.143879][ T5284] usb 4-1: SerialNumber: syz [ 655.153510][ T5284] usb 4-1: config 0 descriptor?? [ 655.155570][T15384] net_ratelimit: 10 callbacks suppressed [ 655.155586][T15384] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 655.175081][ T5284] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 656.134922][ T7348] team0 (unregistering): Port device team_slave_1 removed [ 656.195031][ T7348] team0 (unregistering): Port device team_slave_0 removed [ 656.520570][ T5245] Bluetooth: hci5: command tx timeout [ 656.679325][ T54] Bluetooth: hci0: command tx timeout [ 656.809338][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2275'. [ 656.826561][ T8] usb 4-1: USB disconnect, device number 98 [ 656.961867][T15328] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.980130][T15328] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.006034][T15328] bridge_slave_0: entered allmulticast mode [ 657.021754][T15328] bridge_slave_0: entered promiscuous mode [ 657.055568][T15328] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.074071][T15328] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.081776][T15328] bridge_slave_1: entered allmulticast mode [ 657.096443][T15328] bridge_slave_1: entered promiscuous mode [ 657.283395][T15328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.327891][ T2973] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.380191][T15328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.397186][T15412] netlink: 'syz.1.2280': attribute type 9 has an invalid length. [ 657.422417][T15412] netlink: 69104 bytes leftover after parsing attributes in process `syz.1.2280'. [ 657.507349][T15328] team0: Port device team_slave_0 added [ 657.554257][T15328] team0: Port device team_slave_1 added [ 657.655746][ T5284] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 657.725965][T15328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.750321][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.857965][T15328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.886904][T15430] netlink: 'syz.1.2283': attribute type 13 has an invalid length. [ 657.896431][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 657.901987][T15430] gretap0: refused to change device tx_queue_len [ 657.933554][ T5284] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 657.962924][ T5284] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 657.988156][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.006599][ T5286] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 658.041849][ T7348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.041903][ T5284] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.041931][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.107487][T15383] chnl_net:caif_netlink_parms(): no params data found [ 658.123087][T15328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.134368][T15328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.165277][ T5286] usb 2-1: device descriptor read/64, error -71 [ 658.180969][ T5284] usb 3-1: Product: syz [ 658.191158][ T5284] usb 3-1: Manufacturer: syz [ 658.201465][ T5284] usb 3-1: SerialNumber: syz [ 658.235580][T15328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.320169][ T7348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.404463][T15328] hsr_slave_0: entered promiscuous mode [ 658.413014][T15328] hsr_slave_1: entered promiscuous mode [ 658.434072][T15328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.442457][ T5286] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 658.453629][T15328] Cannot create hsr debugfs directory [ 658.532348][ T7348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.586356][ T5286] usb 2-1: device descriptor read/64, error -71 [ 658.600122][ T54] Bluetooth: hci5: command tx timeout [ 658.710606][ T5286] usb usb2-port1: attempt power cycle [ 658.755799][ T54] Bluetooth: hci0: command tx timeout [ 658.789940][ T7348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.027498][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.051073][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.075020][T15383] bridge_slave_0: entered allmulticast mode [ 659.090364][T15383] bridge_slave_0: entered promiscuous mode [ 659.108185][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.115473][ T5286] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 659.135832][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.146386][ T5286] usb 2-1: device descriptor read/8, error -71 [ 659.165518][T15383] bridge_slave_1: entered allmulticast mode [ 659.176508][T15383] bridge_slave_1: entered promiscuous mode [ 659.340812][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.379758][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.405546][ T5286] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 659.447180][ T5286] usb 2-1: device descriptor read/8, error -71 [ 659.558456][ T5286] usb usb2-port1: unable to enumerate USB device [ 659.723762][T15383] team0: Port device team_slave_0 added [ 659.871436][ T7348] team0: left allmulticast mode [ 659.878959][ T7348] team_slave_0: left allmulticast mode [ 659.884506][ T7348] team_slave_1: left allmulticast mode [ 659.902527][ T7348] team0: left promiscuous mode [ 659.909356][ T7348] team_slave_0: left promiscuous mode [ 659.915103][ T7348] team_slave_1: left promiscuous mode [ 659.921450][ T7348] bridge0: port 3(team0) entered disabled state [ 659.937547][ T7348] bridge_slave_1: left allmulticast mode [ 659.947802][ T7348] bridge_slave_1: left promiscuous mode [ 659.953764][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.963451][ T7348] bridge_slave_0: left allmulticast mode [ 659.969681][ T7348] bridge_slave_0: left promiscuous mode [ 659.976157][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.396521][ T5284] usb 3-1: 0:2 : does not exist [ 660.435703][ T5284] usb 3-1: USB disconnect, device number 97 [ 660.456271][ T5286] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 660.497147][T14729] udevd[14729]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 660.668287][ T5286] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 660.675693][ T54] Bluetooth: hci5: command tx timeout [ 660.696238][ T5286] usb 4-1: config 5 has no interface number 0 [ 660.702378][ T5286] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 660.765341][ T5286] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 660.794740][ T5286] usb 4-1: config 5 interface 123 has no altsetting 0 [ 660.804138][ T5286] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 660.824461][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.834044][ T5286] usb 4-1: Product: syz [ 660.837392][ T54] Bluetooth: hci0: command tx timeout [ 660.901046][ T5286] usb 4-1: Manufacturer: syz [ 660.919528][ T5286] usb 4-1: SerialNumber: syz [ 660.965544][T15461] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 661.136105][ T7348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.151317][ T7348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.202988][ T7348] bond0 (unregistering): Released all slaves [ 661.256072][T15383] team0: Port device team_slave_1 added [ 661.335740][ T51] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 661.475713][ T51] usb 2-1: device descriptor read/64, error -71 [ 661.765297][ T51] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 661.836417][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.866288][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.905308][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.925317][ T51] usb 2-1: device descriptor read/64, error -71 [ 661.981741][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.006276][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.035991][ T51] usb usb2-port1: attempt power cycle [ 662.060333][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.162953][T15328] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 662.194653][T15328] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 662.231640][T15328] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 662.269675][T15328] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 662.367454][T15383] hsr_slave_0: entered promiscuous mode [ 662.395347][ T51] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 662.405754][T15383] hsr_slave_1: entered promiscuous mode [ 662.433562][T15383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 662.466231][ T51] usb 2-1: device descriptor read/8, error -71 [ 662.485366][T15383] Cannot create hsr debugfs directory [ 662.554259][ T7348] hsr_slave_0: left promiscuous mode [ 662.598929][ T7348] hsr_slave_1: left promiscuous mode [ 662.618170][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.662569][ T7348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.710583][ T7348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.716353][ T51] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 662.756460][ T51] usb 2-1: device descriptor read/8, error -71 [ 662.805014][ T7348] veth1_macvtap: left promiscuous mode [ 662.828493][ T7348] veth0_macvtap: left promiscuous mode [ 662.841492][ T7348] veth1_vlan: left promiscuous mode [ 662.854024][ T7348] veth0_vlan: left promiscuous mode [ 662.880222][ T51] usb usb2-port1: unable to enumerate USB device [ 662.918090][ T54] Bluetooth: hci0: command tx timeout [ 662.969997][T15491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2289'. [ 663.048217][ T5286] comedi comedi0: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 663.080226][ T5286] usb 4-1: USB disconnect, device number 99 [ 663.291119][ T5285] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 663.447172][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 663.481669][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 663.494225][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 663.504089][ T5285] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 663.515432][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.525924][ T5285] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 663.537811][ T5285] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 663.547563][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.560514][ T5285] usb 3-1: Product: syz [ 663.564711][ T5285] usb 3-1: Manufacturer: syz [ 663.569404][ T5285] usb 3-1: SerialNumber: syz [ 663.576392][ T5285] usb 3-1: config 0 descriptor?? [ 663.589204][ T5285] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 663.736959][ T7348] team0 (unregistering): Port device team_slave_1 removed [ 663.800134][ T7348] team0 (unregistering): Port device team_slave_0 removed [ 664.190294][ T5240] usb 4-1: new low-speed USB device number 100 using dummy_hcd [ 664.346762][ T5240] usb 4-1: device descriptor read/64, error -71 [ 664.513447][ T51] usb 3-1: USB disconnect, device number 98 [ 664.595374][ T5240] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 664.746844][ T5240] usb 4-1: device descriptor read/64, error -71 [ 664.806215][T15328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.866713][ T5240] usb usb4-port1: attempt power cycle [ 664.877079][T15328] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.903651][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.910830][ T7354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.942019][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.949174][ T7354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.086531][ T7354] bridge_slave_1: left allmulticast mode [ 665.106712][ T7354] bridge_slave_1: left promiscuous mode [ 665.128604][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.154050][ T7354] bridge_slave_0: left allmulticast mode [ 665.160962][ T7354] bridge_slave_0: left promiscuous mode [ 665.179150][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.225429][ T5240] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 665.274800][ T5240] usb 4-1: device descriptor read/8, error -71 [ 665.385530][ T5287] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 665.535301][ T5240] usb 4-1: new low-speed USB device number 103 using dummy_hcd [ 665.555597][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 665.564910][ T5240] usb 4-1: device descriptor read/8, error -71 [ 665.575914][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 665.594180][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 665.605588][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 665.625220][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.635661][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 665.649024][ T5287] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=9b.1d [ 665.658776][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.668465][ T5287] usb 2-1: Product: syz [ 665.673697][ T5287] usb 2-1: Manufacturer: syz [ 665.683760][ T5287] usb 2-1: SerialNumber: syz [ 665.694024][ T5287] usb 2-1: config 0 descriptor?? [ 665.701733][ T5240] usb usb4-port1: unable to enumerate USB device [ 665.705262][ T5287] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 665.819428][ T7354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.830678][ T7354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.842225][ T7354] bond0 (unregistering): Released all slaves [ 666.029066][ T5285] usb 2-1: USB disconnect, device number 107 [ 666.248913][ T7354] hsr_slave_0: left promiscuous mode [ 666.257190][ T7354] hsr_slave_1: left promiscuous mode [ 666.263089][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.271710][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.280876][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.303639][ T7354] veth1_macvtap: left promiscuous mode [ 666.309334][ T7354] veth0_macvtap: left promiscuous mode [ 666.314865][ T7354] veth1_vlan: left promiscuous mode [ 666.320465][ T7354] veth0_vlan: left promiscuous mode [ 667.258156][ T7354] team0 (unregistering): Port device team_slave_1 removed [ 667.309481][ T5287] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 667.426099][ T7354] team0 (unregistering): Port device team_slave_0 removed [ 667.511604][ T5287] usb 4-1: not running at top speed; connect to a high speed hub [ 667.521107][ T5287] usb 4-1: config 4 has an invalid interface number: 2 but max is 1 [ 667.562778][ T5287] usb 4-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 667.602229][ T5287] usb 4-1: config 4 has an invalid interface number: 11 but max is 1 [ 667.653183][ T5287] usb 4-1: config 4 has no interface number 0 [ 667.678920][ T5287] usb 4-1: config 4 has no interface number 1 [ 667.703685][ T5287] usb 4-1: config 4 interface 2 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 667.718097][ T5287] usb 4-1: config 4 interface 2 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 667.729537][ T5287] usb 4-1: config 4 interface 2 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 667.756410][ T5287] usb 4-1: config 4 interface 2 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 667.775605][ T5287] usb 4-1: config 4 interface 11 altsetting 12 has a duplicate endpoint with address 0x3, skipping [ 667.792208][ T5287] usb 4-1: config 4 interface 2 has no altsetting 0 [ 667.805493][ T5287] usb 4-1: config 4 interface 11 has no altsetting 0 [ 667.835810][ T5287] usb 4-1: New USB device found, idVendor=05ab, idProduct=0002, bcdDevice=6d.66 [ 667.846001][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.854008][ T5287] usb 4-1: Product: Ъ [ 667.875531][ T5287] usb 4-1: Manufacturer: ꛴묨퓮 [ 667.881868][ T5287] usb 4-1: SerialNumber: syz [ 668.223250][ T5287] usb 4-1: USB disconnect, device number 104 [ 668.432959][T15383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 668.446552][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2297'. [ 668.481861][T15535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2297'. [ 668.511681][T15383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.562010][T15383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.593965][T15383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.622268][T15328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.806546][ T5286] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 668.895102][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.930981][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.948557][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.955741][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.977725][ T5286] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 668.987307][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.008716][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.015860][T12493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.030114][ T5286] usb 3-1: config 0 descriptor?? [ 669.068643][T15328] veth0_vlan: entered promiscuous mode [ 669.114860][T15328] veth1_vlan: entered promiscuous mode [ 669.280640][ T5286] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 669.328715][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 669.368735][ T5286] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 669.387490][ T5286] [drm] Initialized udl on minor 2 [ 669.822267][ T5286] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 669.837162][ T5286] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 669.983569][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.990537][ T5284] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 670.077612][T15328] veth0_macvtap: entered promiscuous mode [ 670.652376][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 674.715173][ C0] sched: DL replenish lagged too much [ 715.496385][ T5287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 775.235188][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 775.242196][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4901/2:b..l P15578/2:b..l [ 775.252017][ C0] rcu: (detected by 0, t=10503 jiffies, g=114269, q=790816 ncpus=2) [ 775.260107][ C0] task:syz.1.2308 state:R running task stack:23072 pid:15578 tgid:15575 ppid:14941 flags:0x00000002 [ 775.273520][ C0] Call Trace: [ 775.276831][ C0] [ 775.279789][ C0] __schedule+0x1895/0x4b30 [ 775.284324][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 775.289553][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 775.295482][ C0] ? __lock_acquire+0x1384/0x2050 [ 775.300542][ C0] ? __pfx___schedule+0x10/0x10 [ 775.305436][ C0] ? netif_rx_internal+0x17a/0x630 [ 775.310577][ C0] ? preempt_schedule+0xe1/0xf0 [ 775.315452][ C0] preempt_schedule_common+0x84/0xd0 [ 775.320769][ C0] preempt_schedule+0xe1/0xf0 [ 775.325476][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 775.330875][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 775.336890][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.343248][ C0] preempt_schedule_thunk+0x1a/0x30 [ 775.348469][ C0] ? mark_lock+0x9a/0x360 [ 775.352823][ C0] __local_bh_enable_ip+0x179/0x200 [ 775.358046][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 775.363351][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 775.368491][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 775.374242][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 775.379379][ C0] __dev_queue_xmit+0x171d/0x3ed0 [ 775.384436][ C0] ? __dev_queue_xmit+0x2da/0x3ed0 [ 775.389567][ C0] ? __lock_acquire+0x1384/0x2050 [ 775.394621][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 775.400045][ C0] ? mark_lock+0x9a/0x360 [ 775.404409][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 775.410429][ C0] ? ip_finish_output2+0xa14/0x1390 [ 775.415663][ C0] ? ip_finish_output2+0x45f/0x1390 [ 775.420889][ C0] ip_finish_output2+0xd41/0x1390 [ 775.425944][ C0] ? ip_finish_output2+0x45f/0x1390 [ 775.431180][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 775.436669][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 775.441548][ C0] ? __ip_finish_output+0x349/0x400 [ 775.446779][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 775.451743][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 775.457409][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 775.462387][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 775.467536][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 775.472787][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 775.478386][ C0] ? __asan_memset+0x23/0x50 [ 775.483010][ C0] ? tcp_rbtree_insert+0x12e/0x180 [ 775.488153][ C0] tcp_connect+0x1b7b/0x4940 [ 775.492796][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 775.497761][ C0] ? sk_setup_caps+0x816/0xa50 [ 775.502551][ C0] tcp_v4_connect+0x1127/0x1ba0 [ 775.507443][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 775.512662][ C0] ? mptcp_connect+0x656/0xb20 [ 775.517457][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 775.522690][ C0] mptcp_connect+0x701/0xb20 [ 775.527326][ C0] __inet_stream_connect+0x262/0xf30 [ 775.532667][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.539038][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 775.544445][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 775.549678][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 775.555514][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 775.560917][ C0] ? inet_stream_connect+0x50/0xa0 [ 775.566057][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 775.571819][ C0] inet_stream_connect+0x65/0xa0 [ 775.576786][ C0] ? __pfx_inet_stream_connect+0x10/0x10 [ 775.582449][ C0] __sys_connect+0x2d1/0x300 [ 775.587075][ C0] ? __pfx___sys_connect+0x10/0x10 [ 775.592262][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.598625][ C0] ? do_syscall_64+0x100/0x230 [ 775.603417][ C0] __x64_sys_connect+0x7a/0x90 [ 775.608210][ C0] do_syscall_64+0xf3/0x230 [ 775.612741][ C0] ? clear_bhb_loop+0x35/0x90 [ 775.617461][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.623384][ C0] RIP: 0033:0x7f276437dff9 [ 775.627820][ C0] RSP: 002b:00007f2765157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 775.636257][ C0] RAX: ffffffffffffffda RBX: 00007f2764536058 RCX: 00007f276437dff9 [ 775.644250][ C0] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 000000000000000a [ 775.652239][ C0] RBP: 00007f27643f0296 R08: 0000000000000000 R09: 0000000000000000 [ 775.660230][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.668222][ C0] R13: 0000000000000000 R14: 00007f2764536058 R15: 00007f276465fa28 [ 775.676404][ C0] [ 775.679443][ C0] task:dhcpcd state:R running task stack:20352 pid:4901 tgid:4901 ppid:4900 flags:0x00000002 [ 775.691217][ C0] Call Trace: [ 775.694515][ C0] [ 775.697467][ C0] __schedule+0x1895/0x4b30 [ 775.702018][ C0] ? __pfx___schedule+0x10/0x10 [ 775.706902][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 775.712918][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 775.718242][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 775.723399][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 775.729156][ C0] ? mark_lock+0x9a/0x360 [ 775.733524][ C0] irqentry_exit+0x5e/0x90 [ 775.737964][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 775.743969][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 [ 775.750760][ C0] Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 c0 d7 03 00 65 8b 05 80 eb [ 775.770489][ C0] RSP: 0018:ffffc90002f4f048 EFLAGS: 00000247 [ 775.776594][ C0] RAX: ffffffff8bc0a7c0 RBX: 0000000000000006 RCX: 0000000000000006 [ 775.784595][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000003f [ 775.792591][ C0] RBP: 0000000000000000 R08: ffffffff8bc0a7b2 R09: ffffffff8bc11fbb [ 775.800585][ C0] R10: 0000000000000002 R11: ffff88802bf80000 R12: ffffc90002f4f1e8 [ 775.808671][ C0] R13: ffff8880234682c2 R14: ffffc90002f4f1f8 R15: 1ffff920005e9e3f [ 775.816677][ C0] ? xas_find+0xfb/0x960 [ 775.820942][ C0] ? xas_start+0x372/0x7b0 [ 775.825386][ C0] ? xas_start+0x380/0x7b0 [ 775.829838][ C0] xas_start+0x392/0x7b0 [ 775.834112][ C0] ? xas_load+0x24/0x5c0 [ 775.838382][ C0] xas_load+0x2c/0x5c0 [ 775.842477][ C0] ? xa_find+0x17f/0x420 [ 775.846739][ C0] ? __pfx_lock_release+0x10/0x10 [ 775.851795][ C0] xas_find+0x13f/0x960 [ 775.855982][ C0] xa_find+0x267/0x420 [ 775.860076][ C0] ? xa_find+0x17f/0x420 [ 775.864342][ C0] ? __pfx_xa_find+0x10/0x10 [ 775.868960][ C0] ? in_dev_dump_addr+0x380/0x430 [ 775.874022][ C0] inet_dump_ifaddr+0x5a2/0x1330 [ 775.878992][ C0] ? inet_dump_ifaddr+0x243/0x1330 [ 775.884129][ C0] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 775.889527][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.894322][ C0] ? trace_contention_end+0x3c/0x120 [ 775.899638][ C0] ? __mutex_lock+0x2ef/0xd70 [ 775.904344][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.909135][ C0] ? trace_kmalloc+0x1f/0xd0 [ 775.913763][ C0] ? __pfx_inet_dump_ifaddr+0x10/0x10 [ 775.919165][ C0] rtnl_dump_all+0x300/0x520 [ 775.923785][ C0] ? __pfx_rtnl_dump_all+0x10/0x10 [ 775.928918][ C0] rtnl_dumpit+0xa9/0x200 [ 775.933281][ C0] netlink_dump+0x647/0xd80 [ 775.937829][ C0] ? __pfx_netlink_dump+0x10/0x10 [ 775.942892][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 775.947952][ C0] __netlink_dump_start+0x5a2/0x790 [ 775.953185][ C0] ? __pfx_rtnl_dump_all+0x10/0x10 [ 775.958326][ C0] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 775.963309][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.968804][ C0] ? __pfx_rtnl_dumpit+0x10/0x10 [ 775.973766][ C0] ? __pfx_rtnl_dump_all+0x10/0x10 [ 775.978913][ C0] netlink_rcv_skb+0x1e3/0x430 [ 775.983704][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.989188][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 775.994523][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.999748][ C0] netlink_unicast+0x7f6/0x990 [ 776.004546][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 776.009854][ C0] ? __virt_addr_valid+0x183/0x530 [ 776.014988][ C0] ? __check_object_size+0x48e/0x900 [ 776.020313][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 776.025109][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.030417][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 776.035390][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 776.040699][ C0] __sock_sendmsg+0x221/0x270 [ 776.045410][ C0] __sys_sendto+0x39b/0x4f0 [ 776.049944][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 776.055013][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.061027][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.067393][ C0] __x64_sys_sendto+0xde/0x100 [ 776.072193][ C0] do_syscall_64+0xf3/0x230 [ 776.076721][ C0] ? clear_bhb_loop+0x35/0x90 [ 776.081424][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.087350][ C0] RIP: 0033:0x7f4a691c2ad7 [ 776.091792][ C0] RSP: 002b:00007ffcbc79dab8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 776.100242][ C0] RAX: ffffffffffffffda RBX: 00007ffcbc79ebe0 RCX: 00007f4a691c2ad7 [ 776.108247][ C0] RDX: 0000000000000014 RSI: 00007ffcbc79eb00 RDI: 0000000000000017 [ 776.116255][ C0] RBP: 00007ffcbc79eb70 R08: 00007ffcbc79eae4 R09: 000000000000000c [ 776.124263][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 776.132270][ C0] R13: 00007ffcbc79eae4 R14: 00007ffcbc79eb00 R15: 0000000000000105 [ 776.140296][ C0] [ 776.143347][ C0] rcu: rcu_preempt kthread starved for 10381 jiffies! g114269 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 776.154744][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 776.164734][ C0] rcu: RCU grace-period kthread stack dump: [ 776.170639][ C0] task:rcu_preempt state:R running task stack:25552 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 776.182416][ C0] Call Trace: [ 776.185716][ C0] [ 776.188669][ C0] __schedule+0x1895/0x4b30 [ 776.193235][ C0] ? __pfx___schedule+0x10/0x10 [ 776.198126][ C0] ? __pfx_lock_release+0x10/0x10 [ 776.203174][ C0] ? __asan_memset+0x23/0x50 [ 776.207797][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 776.213630][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.219993][ C0] ? schedule+0x90/0x320 [ 776.224262][ C0] schedule+0x14b/0x320 [ 776.228452][ C0] schedule_timeout+0x1be/0x310 [ 776.233327][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 776.238725][ C0] ? __pfx_process_timeout+0x10/0x10 [ 776.244039][ C0] ? prepare_to_swait_event+0x330/0x350 [ 776.249617][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 776.254489][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 776.259713][ C0] ? rcu_gp_init+0x1256/0x1630 [ 776.264509][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 776.269469][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 776.275651][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 776.280960][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 776.286887][ C0] ? finish_swait+0xd4/0x1e0 [ 776.291508][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 776.296120][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.301341][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 776.307274][ C0] ? __kthread_parkme+0x169/0x1d0 [ 776.312338][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.317567][ C0] kthread+0x2f0/0x390 [ 776.321656][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 776.326873][ C0] ? __pfx_kthread+0x10/0x10 [ 776.331487][ C0] ret_from_fork+0x4b/0x80 [ 776.335926][ C0] ? __pfx_kthread+0x10/0x10 [ 776.340534][ C0] ret_from_fork_asm+0x1a/0x30 [ 776.345334][ C0] [ 776.348366][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 776.354696][ C0] Sending NMI from CPU 0 to CPUs 1: [ 776.359934][ C1] NMI backtrace for cpu 1 [ 776.359948][ C1] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.12.0-rc2-syzkaller-00307-g36c254515dc6 #0 [ 776.359968][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 776.359979][ C1] Workqueue: events_power_efficient neigh_managed_work [ 776.360010][ C1] RIP: 0010:preempt_count_add+0x44/0x190 [ 776.360032][ C1] Code: 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d fc ac d9 18 00 75 07 65 8b 05 7b 9b a0 7e 65 01 1d 74 9b a0 7e <48> c7 c0 40 e9 3c 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 [ 776.360046][ C1] RSP: 0018:ffffc90000a17c50 EFLAGS: 00000282 [ 776.360059][ C1] RAX: 0000000080000101 RBX: 0000000000000001 RCX: ffffffff9a3ce903 [ 776.360071][ C1] RDX: dffffc0000000000 RSI: ffffffff89e8c35d RDI: 0000000000000001 [ 776.360084][ C1] RBP: ffffc90000a17d78 R08: 0000000000000006 R09: ffffc90000a17e30 [ 776.360096][ C1] R10: ffffc90000a17d90 R11: ffffffff8180a0e0 R12: dffffc0000000000 [ 776.360109][ C1] R13: ffffc90000a17d40 R14: ffffffff89e8c35d R15: dffffc0000000000 [ 776.360122][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 776.360136][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.360148][ C1] CR2: 00007f3253070521 CR3: 0000000064a10000 CR4: 00000000003526f0 [ 776.360164][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 776.360174][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 776.360185][ C1] Call Trace: [ 776.360191][ C1] [ 776.360199][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 776.360218][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 776.360240][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 776.360258][ C1] ? nmi_handle+0x2a/0x5a0 [ 776.360282][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 776.360301][ C1] ? nmi_handle+0x14f/0x5a0 [ 776.360317][ C1] ? nmi_handle+0x2a/0x5a0 [ 776.360334][ C1] ? preempt_count_add+0x44/0x190 [ 776.360352][ C1] ? default_do_nmi+0x63/0x160 [ 776.360370][ C1] ? exc_nmi+0x123/0x1f0 [ 776.360387][ C1] ? end_repeat_nmi+0xf/0x53 [ 776.360403][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 776.360425][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.360445][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 776.360464][ C1] ? preempt_count_add+0x44/0x190 [ 776.360483][ C1] ? preempt_count_add+0x44/0x190 [ 776.360501][ C1] ? preempt_count_add+0x44/0x190 [ 776.360520][ C1] [ 776.360526][ C1] [ 776.360532][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 776.360551][ C1] unwind_next_frame+0xb0/0x22d0 [ 776.360571][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 776.360593][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 776.360611][ C1] arch_stack_walk+0x11c/0x150 [ 776.360630][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 776.360652][ C1] stack_trace_save+0x118/0x1d0 [ 776.360670][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 776.360689][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.360712][ C1] kasan_save_track+0x3f/0x80 [ 776.360727][ C1] ? kasan_save_track+0x3f/0x80 [ 776.360742][ C1] ? kasan_save_free_info+0x40/0x50 [ 776.360761][ C1] ? __kasan_slab_free+0x59/0x70 [ 776.360776][ C1] ? kmem_cache_free+0x1a2/0x420 [ 776.360795][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 776.360813][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 776.360832][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 776.360870][ C1] ? skb_release_data+0x6a0/0x8a0 [ 776.360887][ C1] kasan_save_free_info+0x40/0x50 [ 776.360907][ C1] __kasan_slab_free+0x59/0x70 [ 776.360923][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 776.360942][ C1] kmem_cache_free+0x1a2/0x420 [ 776.360960][ C1] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 776.360982][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 776.361010][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 776.361031][ C1] ? nf_ip_checksum+0x13a/0x500 [ 776.361053][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 776.361075][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 776.361095][ C1] ? validate_chain+0x11e/0x5920 [ 776.361114][ C1] ? __pfx_validate_chain+0x10/0x10 [ 776.361135][ C1] nft_do_chain+0x4ad/0x1da0 [ 776.361162][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 776.361180][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 776.361212][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 776.361230][ C1] nft_do_chain_inet+0x418/0x6b0 [ 776.361252][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 776.361271][ C1] ? ipt_do_table+0x312/0x1860 [ 776.361298][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 776.361317][ C1] nf_hook_slow+0xc3/0x220 [ 776.361336][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 776.361354][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 776.361371][ C1] NF_HOOK+0x29e/0x450 [ 776.361388][ C1] ? NF_HOOK+0x9a/0x450 [ 776.361404][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 776.361421][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 776.361442][ C1] ? ip_rcv_finish+0x406/0x560 [ 776.361459][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 776.361475][ C1] NF_HOOK+0x3a4/0x450 [ 776.361491][ C1] ? __lock_acquire+0x1384/0x2050 [ 776.361512][ C1] ? NF_HOOK+0x9a/0x450 [ 776.361528][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 776.361543][ C1] ? ip_rcv_core+0x801/0xd10 [ 776.361561][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 776.361581][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 776.361597][ C1] __netif_receive_skb+0x2bf/0x650 [ 776.361617][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 776.361636][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 776.361654][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.361674][ C1] ? __pfx_lock_release+0x10/0x10 [ 776.361694][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 776.361720][ C1] process_backlog+0x662/0x15b0 [ 776.361741][ C1] ? process_backlog+0x33b/0x15b0 [ 776.361763][ C1] ? __pfx_process_backlog+0x10/0x10 [ 776.361780][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.361801][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.361821][ C1] __napi_poll+0xcb/0x490 [ 776.361841][ C1] net_rx_action+0x89b/0x1240 [ 776.361869][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 776.361887][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 776.361922][ C1] handle_softirqs+0x2c5/0x980 [ 776.361943][ C1] ? do_softirq+0x11b/0x1e0 [ 776.361962][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 776.361984][ C1] do_softirq+0x11b/0x1e0 [ 776.362008][ C1] [ 776.362014][ C1] [ 776.362021][ C1] ? __pfx_do_softirq+0x10/0x10 [ 776.362039][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 776.362059][ C1] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 776.362081][ C1] ? rcu_is_watching+0x15/0xb0 [ 776.362099][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 776.362118][ C1] ? process_scheduled_works+0xa63/0x1850 [ 776.362138][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 776.362157][ C1] ? process_scheduled_works+0x976/0x1850 [ 776.362176][ C1] ? neigh_managed_work+0x20d/0x240 [ 776.362193][ C1] ? process_scheduled_works+0x976/0x1850 [ 776.362212][ C1] ? process_scheduled_works+0x976/0x1850 [ 776.362231][ C1] process_scheduled_works+0xa63/0x1850 [ 776.362262][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 776.362285][ C1] ? assign_work+0x364/0x3d0 [ 776.362306][ C1] worker_thread+0x870/0xd30 [ 776.362331][ C1] ? __kthread_parkme+0x169/0x1d0 [ 776.362352][ C1] ? __pfx_worker_thread+0x10/0x10 [ 776.362371][ C1] kthread+0x2f0/0x390 [ 776.362386][ C1] ? __pfx_worker_thread+0x10/0x10 [ 776.362405][ C1] ? __pfx_kthread+0x10/0x10 [ 776.362420][ C1] ret_from_fork+0x4b/0x80 [ 776.362440][ C1] ? __pfx_kthread+0x10/0x10 [ 776.362455][ C1] ret_from_fork_asm+0x1a/0x30 [ 776.362481][ C1] [ 782.257352][ T5287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 782.329802][ T5287] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 783.437836][ T5284] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 783.471033][ T5284] usb 4-1: can't read configurations, error -110 [ 783.548075][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.554410][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.564435][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 783.573075][ T1268] ieee802154 phy1 wpan1: encryption failed: -22