last executing test programs: 7.727562833s ago: executing program 1 (id=3056): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000500)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x2e, 0x0, @val=@iter={0x0}}, 0x40) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100005007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a", 0x8e}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/74, 0x4a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x47c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x3e0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x360, 0x6, [@m_tunnel_key={0xf8, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xac, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025"}, {0xc}, {0xc}}}, @m_ife={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xbc, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x41, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3"}, {0xc}, {0xc}}}, @m_connmark={0x10c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0xbd, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba79cd0c5b4b2b956f87fa20fc312fee715e452b"}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x47c}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a300000000030000000030a01030000000000000000050006000900010073797a30000000000900030073797a320000000004000c0014000000020a0901000000000000000000000000140000001100010000000000000000000000000a8a0dc8e3ae6e78d7c3d329f6b9d68219fd1d55b5b82908c81a82dc4dae745c150ac377730953316c9d069a3d18c4e31ea2a8b5423d35"], 0x8c}}, 0x0) socket$unix(0x1, 0x2, 0x0) 5.637089308s ago: executing program 4 (id=3075): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200030d0000000000000004000000030005000000100002000000e2000001000000000000000002000100000020000200000b00000000020009000020"], 0x68}}, 0x0) 5.543818258s ago: executing program 4 (id=3076): socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f00000003c0)='ext3\x00', 0x0) r0 = syz_usbip_server_init(0x3) write(r0, &(0x7f0000000f40)="b410a1e8252ce0a1a3be3d593e8bf96f9615aea940ed08d3", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, &(0x7f0000000500)) unshare(0x28020480) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x400100, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mbind(&(0x7f0000596000/0x3000)=nil, 0x303f, 0x0, 0x0, 0x0, 0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff7000000000000000000007fff", @ANYRES32=r5, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) 5.160827875s ago: executing program 1 (id=3078): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0xfb2, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @noop, @noop, @lsrr={0x83, 0x3}]}}}}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r7, 0x81204101, &(0x7f00000193c0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0x4, 0x0, 0x0, r10) statx(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000480)=0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f00000005c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r6, {0x0, 0xee00}}, './file0\x00'}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000640)={0x338, 0xffffffffffffffda, 0x0, [{{0x2, 0x1, 0xffffffffffffffff, 0xb, 0x2, 0x0, {0x1, 0xbd, 0x6, 0x9, 0x1c, 0xa00000000000, 0x6, 0x2, 0x4, 0xa000, 0x97, 0x0, 0x0, 0x1, 0x1000}}, {0x3, 0x4, 0x8, 0x9, 'nl80211\x00'}}, {{0x6, 0x2, 0x6, 0x1, 0x2, 0x800, {0x2, 0x5, 0x8, 0x4, 0x3, 0x98, 0x8, 0x7, 0x6, 0xa000, 0x9, 0xee01, r10, 0xffff0a1a, 0xd269}}, {0x2, 0x9, 0x3, 0x4, '!!\\'}}, {{0x3, 0x3, 0x1, 0x2, 0x6, 0x3, {0x5, 0x5e61, 0xc3df, 0x8, 0x5, 0x2, 0x2, 0x80000000, 0x4, 0x8000, 0xfffffff1, r11, r12, 0x6, 0x80}}, {0x1, 0x2, 0x6, 0x4, 'wlan0\x00'}}, {{0x4, 0x0, 0x8, 0x80000000, 0x43e, 0x5, {0x0, 0xfffffffffffffff7, 0x3ff, 0x400, 0x0, 0x80000000, 0x200, 0x6, 0x3, 0xc000, 0x9, r13, 0xee00, 0x9, 0x80000001}}, {0x2, 0x1000, 0x9, 0xb, '{-\a#[+![%'}}, {{0x4, 0x1, 0x7, 0xfffffffffffffff8, 0x51bc5747, 0x8, {0x3, 0x100000000, 0x6, 0x10001, 0x5, 0xe, 0x6, 0x33, 0x4, 0xc000, 0x29, r14, r15, 0xffffffff, 0x7ff}}, {0x4, 0x4, 0x4, 0x100, ']!&$'}}]}, 0x338) fstat(r7, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r9, @ANYBLOB="140055005d5022aca71034f83821facb17f2635a"], 0x3c}, 0x1, 0x0, 0x0, 0x44010}, 0x80) 4.872831429s ago: executing program 2 (id=3081): writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000001a00)=ANY=[], 0x9a) fsmount(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000140), 0x10, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000013c0)={'sit0\x00', &(0x7f0000001340)={'sit0\x00', 0x0, 0x40, 0x1, 0x594b, 0x20, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x9, 0x4, 0x2f, 0x0, @local, @local}}}}) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x23, 0x1}) 4.788058059s ago: executing program 0 (id=3082): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003fffd000800090002"], 0x24}}, 0x0) 4.730962451s ago: executing program 0 (id=3083): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677225f10100028006000e000000000004001200060003c1a2d669efba197b30f13f57f9c10000000000"], 0x44}}, 0x0) 4.71496513s ago: executing program 1 (id=3084): r0 = syz_open_dev$video(0x0, 0x10000000a7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) 4.555739231s ago: executing program 0 (id=3085): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x800000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000001fc0)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.554723461s ago: executing program 1 (id=3086): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x80001) socket$nl_route(0x10, 0x3, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x16, &(0x7f0000000340)="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x4040600) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r2 = add_key$user(0x0, &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r3, r3}, &(0x7f0000000040)=""/79, 0x4f, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x28, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0xc, 0x64, 0x0, 0x0, @u64=0x7f}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcd6, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@updsa={0x138, 0x16, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x0, 0x1000}, {@in6=@private1, 0x0, 0x32}, @in6=@mcast1, {0x2000000000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x8}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x5761, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2000000000019cf, 0x113202) socket(0x10, 0x4, 0x1003) 4.465119422s ago: executing program 0 (id=3087): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) close(r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0x20000044}]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xdc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3], 0x0, 0xfffffffe, 0x39, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd2a}, 0x90) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x1012}}) openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002880)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d000005240000010524"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c"], 0xec}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x90000, 0x0, [0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x9]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000003c0)="f20f1c0166b864912c870f23c80f21f80f20c06635000000800f22c00f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b804bc00000000ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 4.213508006s ago: executing program 2 (id=3088): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000c3ffffff06040000000000f93132", 0x39}], 0x1) 3.511622249s ago: executing program 2 (id=3089): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000500)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x2e, 0x0, @val=@iter={0x0}}, 0x40) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100005007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a", 0x8e}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000580)) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/74, 0x4a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x47c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x3e0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x360, 0x6, [@m_tunnel_key={0xf8, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xac, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025"}, {0xc}, {0xc}}}, @m_ife={0x5c, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0xbc, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x41, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3"}, {0xc}, {0xc}}}, @m_connmark={0x10c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0xbd, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba79cd0c5b4b2b956f87fa20fc312fee715e452b"}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6}]}, 0x47c}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x598}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a300000000030000000030a01030000000000000000050006000900010073797a30000000000900030073797a320000000004000c0014000000020a0901000000000000000000000000140000001100010000000000000000000000000a8a0dc8e3ae6e78d7c3d329f6b9d68219fd1d55b5b82908c81a82dc4dae745c150ac377730953316c9d069a3d18c4e31ea2a8b5423d35"], 0x8c}}, 0x0) socket$unix(0x1, 0x2, 0x0) 3.40974447s ago: executing program 4 (id=3090): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 3.209701842s ago: executing program 3 (id=3091): r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xfffd, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}], 0x20}}], 0x2, 0x0) 3.175361039s ago: executing program 4 (id=3092): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$inet6(0xa, 0x2, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="1bb3"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000880)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @random="b21375c4d1f0", @broadcast, @from_mac=@broadcast, {0x8, 0x1f}}, @random="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"}, 0x35b) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4048041, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3, "44f4c8"}, &(0x7f0000000080)=0x27) r10 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r10, &(0x7f000000cf00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x92, &(0x7f00000004c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @private, {[@generic={0x0, 0x2}, @timestamp={0x44, 0x4}, @timestamp_prespec={0x44, 0x4c, 0x0, 0x3, 0x0, [{@local}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x3f}}, {@dev}, {@loopback, 0x100331}, {@private}, {@broadcast}, {@local}, {@multicast2}]}]}}}}}}}, 0x0) 2.991853462s ago: executing program 3 (id=3093): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) (async) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x48}, 0x2}, 0x0) socket$inet(0x2, 0xa, 0x3f) (async) r2 = socket$inet(0x2, 0xa, 0x3f) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x1000, @local}, {0x2, 0x0, @private=0xa010100}, 0x105, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r6, @ANYBLOB="808bd609efd78bd9"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r6, @ANYBLOB="808bd609efd78bd9"], 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRES64, @ANYRES32=r2, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008001) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000c4) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000c4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x804) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) (async) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 2.75371637s ago: executing program 3 (id=3094): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x8000) setuid(0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010006000000082404007841e90000000109029200010000000009040000007acd3700"], 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4}, 0x90) r4 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000cc0)='[,\v]@+\x00', r4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="d4e666e247641d8d52a3ef9c12c8178a747bbd0977ea55bea644a3797cd4bd60faef2cacc01e4d7e7b27f8b0f4dbc1fde22bed4446377541a15dc8a2d0f1146c6c2ad4868908c8982f6ab02197684785fa68", 0x52}], 0x1, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0xf}, {&(0x7f0000000580)=""/66, 0x42}], 0x2}, 0x0) add_key(&(0x7f0000000400)='encrypted\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x40, 0xc, 0xfffffffb}) socket$kcm(0x10, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000eeffffffffffffff00000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e69c4ebfd400020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.365184126s ago: executing program 1 (id=3095): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x7058, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setsig(r4, 0xa, 0x3b) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000340)=@gcm_128={{}, "ded3230b29450259", "0e37553bdd6b7cb1f70cf33b43f7ad9b", "ce826994", "1d29e04b07602d61"}, 0x28) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r8) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000440)={0x591003, 0x12c, 0x4}, 0x18) 1.193802549s ago: executing program 0 (id=3096): r0 = syz_open_dev$video(0x0, 0x10000000a7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) 1.139900648s ago: executing program 3 (id=3097): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000380)="ba4200ec3e0f01cb260fc7b00a000f221166b8ff67ab990f23d80f21f86635400000800f23f82b920a000f01df0fe3611366b90f09000066b80000000066ba000000000f30baf80c66b8704e008266efbafc0c66ed", 0x55}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0), 0xffffffffffffff57, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.050202583s ago: executing program 1 (id=3098): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x400, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000380)={0x1, @win={{0x0, 0x0, 0x32314247, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x9, 0x0, 0x0, 0x80330}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x1a182000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@empty, @private2, @local, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000280}) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2000011a) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x33, 0x3c, 0x23, 0x40, 0x3fd, 0xebbe, 0xd20d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xcd, 0x64}}]}}]}}, 0x0) 1.010443992s ago: executing program 0 (id=3099): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000080)=[{0x1, 0xe9, 0xb, 0x81}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r4, 0x40106410, &(0x7f00000000c0)={0xb3, &(0x7f0000000200)="cb66e6b023bc2d9831ba8e318ad42630810a3a10a5af464dc698214a5849f8476a8f8ea1ffc2b1c4185c792ee12b905caf3bd0b004ba0867f2d220c81851d58e7f4dcf62caf3dd81b4dac3c3d0eeaed049fab84221febacf4942fc2304be663091ffb8572d2f9d45097c68838c1667153eb2de308d498f1183f2e27ebb74be0ff2d1a4b0444ad10f4261d44e8cfbf5d142d19882c8d88dec49e5089140b9887471add668839d5af4cf5f3fefabea741e76ed3d"}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) memfd_create(&(0x7f0000000000)='\xab!\x8f\x03\aY\xdc\xf1_\\\xd3\xbaN.z\x14\xa5\x1a\xaa5\x02\x00d\xbd\xa0\xf5\x96\x91\xa8\x92\xf7[\xe5\xbd\x8b\xb5\xc4\xd0\xd1E\x1c\xfeLQ\x88|\xbb\x9d\xbc\xcfi\x92\xbf\xd0h\xdc^\xaex\x16\x18_\x84\xa5J\x91\x1eZ{\xfd\xe6\x9b\";\xe1\t\x90\x12\xe3\xa6t\xfa\x95\xd9\xb7\xcc\x03\x98\xc3\xf7\xa9i#&\xda\x9bu\xd7t\xf9\xf5N\xbb\x1f\x1e\'\x81\xd1\xa9\x93\xbd\x06\x8b[J\x8b\x14\xf2\x80Aqa\x9c\xb1\xd8+\x13\xe6p\xf0\xa3E\x1d\x87\x15\t\xfa\xbd\x93\n\xf1R\xfa\xe1', 0x0) (async, rerun: 32) r5 = socket(0xa, 0x3, 0x4) (rerun: 32) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) time(0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}) socket$packet(0x11, 0x3, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x7fffdfd13000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) sendto$packet(r0, &(0x7f0000000180)="02035e04420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 856.054316ms ago: executing program 3 (id=3100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0xfb7f0000, 0x4}}) 768.444768ms ago: executing program 2 (id=3101): socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40000a00000000001c0012800b00010067656e65766500000c000280050004000000000008001f0002"], 0x44}}, 0x0) 534.142325ms ago: executing program 2 (id=3102): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x4100, 0x2}, 0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000080)={0x4280, r1}, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0x2b, 0x3}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40004, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r4, 0x7434) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {r6}}, './file0\x00'}) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000340)={0x2d}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "80592c54a145cf007b417f1e4cefe1873613719c3166ce6921bd830149342ae33df5e1bab0315579f5cfcc52417b9e2042b2bc7b08293c67bfd897a7c9a9557b09c2a0c6b41ffc16040bb57a093ed717efee32f27ec33e081c86cd6464e35ff6278d5ceae78ff37516e563cc945dd0878c508be0fa3c9eac2143edcfa45009a9479aa8d02c871e52621ad45c69a1474acbc372f2eb0c1e695af8a9530913ab27381016ebfd8b071ddc73328361237cb63b29a40f81e980ee4c3d2077656474a8fef80aac0ec98467871f49956971f346cb004b908f30e6ba3fb0b1d100c31795461db957a125040b03250438d96bf2b82912d598017a5c1f43ec4541c16c9537", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001380)={{r7, 0x502, 0x1003, 0x100, 0x5, 0x1, 0x23d981c4, 0x92, 0x0, 0x6, 0xf907, 0x7, 0x8, 0x400, 0xffffffffffffff7d}, 0x10, [0x0, 0x0]}) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f0000001740)) 459.278847ms ago: executing program 3 (id=3103): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r2}) ioctl$IOMMU_DESTROY$stdev(r1, 0x3b80, &(0x7f0000000280)={0x8}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x3, @vbi}}) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r5, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0d}]}]}, 0x58}}, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) socket$inet6(0xa, 0x800, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x3d, 0x0, 0x3, 0x24, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8, 0x1, 0x6, 0x7}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000e49a2ce64c81c800"/20, @ANYRES64=r4, @ANYRES16=0x0], 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x9) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0xc) socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) 215.484588ms ago: executing program 4 (id=3104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_NET_NS_PID={0x8}]}, 0x3c}}, 0x0) 111.127482ms ago: executing program 2 (id=3105): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e04020"], 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="140004006e6963766630000000000000000000000800050009000000"], 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x240480c0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x2d}, {0x15}, {0x6}]}) socket$inet6(0xa, 0x4, 0x80) (async) r8 = socket$inet6(0xa, 0x4, 0x80) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @empty}], 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0xffffff9b, @local}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0xffffff9b, @local}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000240)=0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000100)={r12}, &(0x7f0000000140)=0x8) listen(r8, 0x80080400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0d05"], 0x10) sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r7, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) fchmod(r0, 0x0) (async) fchmod(r0, 0x0) 0s ago: executing program 4 (id=3106): r0 = socket(0x2b, 0x80801, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0x21000000, @private}}}}) kernel console output (not intermixed with test programs): icast mode [ 784.608177][T11719] bridge_slave_1: left promiscuous mode [ 784.630572][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.671882][T11719] bridge_slave_0: left allmulticast mode [ 784.690031][T11719] bridge_slave_0: left promiscuous mode [ 784.706846][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.737214][T10678] Bluetooth: hci2: command tx timeout [ 784.948402][T18021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2701'. [ 784.977629][T18021] netlink: 1212 bytes leftover after parsing attributes in process `syz.2.2701'. [ 785.520888][T11719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.538654][T11719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.559890][T11719] bond0 (unregistering): Released all slaves [ 785.762809][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.785243][T17884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.802436][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.930709][T18057] QAT: Invalid ioctl 21531 [ 786.177168][T10678] Bluetooth: hci0: command tx timeout [ 786.483120][T11719] hsr_slave_0: left promiscuous mode [ 786.489606][T18069] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 786.533577][T11719] hsr_slave_1: left promiscuous mode [ 786.555832][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.572397][T11719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 786.620211][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.643262][T11719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.694868][T11719] veth1_macvtap: left promiscuous mode [ 786.702586][T11719] veth0_macvtap: left promiscuous mode [ 786.711805][T11719] veth1_vlan: left promiscuous mode [ 786.724956][T11719] veth0_vlan: left promiscuous mode [ 787.499820][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 788.142455][T11719] team0 (unregistering): Port device team_slave_1 removed [ 788.169135][T18094] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2713'. [ 788.180437][T18094] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.2713'. [ 788.261733][T11719] team0 (unregistering): Port device team_slave_0 removed [ 788.266641][T10678] Bluetooth: hci0: command tx timeout [ 789.018466][T17884] veth0_vlan: entered promiscuous mode [ 789.036262][T18002] chnl_net:caif_netlink_parms(): no params data found [ 789.088795][T17884] veth1_vlan: entered promiscuous mode [ 789.334030][T17884] veth0_macvtap: entered promiscuous mode [ 789.363985][T17884] veth1_macvtap: entered promiscuous mode [ 789.371194][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.393106][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.401245][T18002] bridge_slave_0: entered allmulticast mode [ 789.409609][T18002] bridge_slave_0: entered promiscuous mode [ 789.424187][T18117] netlink: 'syz.1.2717': attribute type 79 has an invalid length. [ 789.443701][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.482489][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.526380][T18002] bridge_slave_1: entered allmulticast mode [ 789.534053][T18002] bridge_slave_1: entered promiscuous mode [ 789.555834][ T29] audit: type=1326 audit(1722211038.669:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x0 [ 789.675047][ T29] audit: type=1326 audit(1722211038.789:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 789.725856][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.741507][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.754392][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.770823][ T29] audit: type=1326 audit(1722211038.819:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 789.806751][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.825054][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.845688][ T29] audit: type=1326 audit(1722211038.819:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 789.874354][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.896903][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.907585][ T29] audit: type=1326 audit(1722211038.819:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 789.935174][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.951109][T17884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.969710][ T29] audit: type=1326 audit(1722211038.819:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 790.027233][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.030353][ T29] audit: type=1326 audit(1722211038.839:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 790.067562][ T29] audit: type=1326 audit(1722211038.839:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 790.099323][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.125469][ T29] audit: type=1326 audit(1722211038.839:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 790.156532][ T5280] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 790.171691][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 790.185564][ T29] audit: type=1326 audit(1722211038.839:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18120 comm="syz.2.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a2f77299 code=0x7ffc0000 [ 790.241863][T18128] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2719'. [ 790.315501][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.333292][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.351639][T10678] Bluetooth: hci0: command tx timeout [ 790.351661][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.370302][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.381900][ T5280] usb 3-1: New USB device found, idVendor=13d3, idProduct=3333, bcdDevice=84.ed [ 790.392040][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.403137][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.426779][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.444363][ T5280] usb 3-1: Product: syz [ 790.450027][ T5280] usb 3-1: Manufacturer: syz [ 790.454897][T17884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.470379][ T5280] usb 3-1: SerialNumber: syz [ 790.477324][T17884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.491139][ T5280] usb 3-1: config 0 descriptor?? [ 790.500814][ T5280] r8712u: register rtl8712_netdev_ops to netdev_ops [ 790.512192][ T5280] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 790.545229][T17884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.600683][T18002] team0: Port device team_slave_0 added [ 790.641067][T18002] team0: Port device team_slave_1 added [ 790.675642][T17884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.692640][T17884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.702508][T17884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.718246][T17884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.731694][T18128] binder: 18120:18128 ioctl 80085502 7f50a3df6000 returned -22 [ 790.761328][T18128] binder: 18120:18128 ioctl 80085502 7f50a3df6000 returned -22 [ 790.799890][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.809853][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.842660][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.865810][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.873506][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.900341][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.915543][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 791.031145][ T5280] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 791.059218][ T5280] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 791.086747][ T5280] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 791.091760][T18002] hsr_slave_0: entered promiscuous mode [ 791.152438][T18002] hsr_slave_1: entered promiscuous mode [ 791.199273][T18002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.223182][T18002] Cannot create hsr debugfs directory [ 791.632941][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.649790][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.887548][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.905690][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.126191][T18174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.236309][T18181] blktrace: Concurrent blktraces are not allowed on loop0 [ 792.416612][T10678] Bluetooth: hci0: command tx timeout [ 792.525121][ T5274] usb 3-1: USB disconnect, device number 40 [ 792.775540][T18002] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.833187][T18002] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.983676][T18002] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 793.030077][T18002] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 793.243991][T18204] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 793.250561][T18204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 793.267234][T18204] vhci_hcd vhci_hcd.0: Device attached [ 793.278221][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.346712][ T5274] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 793.353604][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.408121][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.415261][ T5311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.463601][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.470880][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.546765][ T5274] usb 3-1: Using ep0 maxpacket: 32 [ 793.555077][ T5274] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 793.571545][ T5275] usb 17-1: new high-speed USB device number 5 using vhci_hcd [ 793.587865][ T5274] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17926, setting to 1024 [ 793.591673][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.614015][ T5274] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 793.631914][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.660083][T18197] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 793.672990][T18002] veth0_vlan: entered promiscuous mode [ 793.680338][ T5280] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 793.691427][ T5274] hub 3-1:4.0: USB hub found [ 793.704295][T18002] veth1_vlan: entered promiscuous mode [ 793.727070][ T25] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 793.754217][T18002] veth0_macvtap: entered promiscuous mode [ 793.771533][T18002] veth1_macvtap: entered promiscuous mode [ 793.778389][ T5311] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 793.806400][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.817918][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.828067][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.841513][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.851574][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.862689][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.875465][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.888053][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.899152][ T25] usb 4-1: device descriptor read/64, error -71 [ 793.902128][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.907881][ T5280] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 793.920748][ T5274] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 793.924916][ T5280] usb 2-1: config 0 has no interface number 0 [ 793.931893][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.946977][ T5280] usb 2-1: config 0 interface 122 has no altsetting 0 [ 793.964986][ T5280] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 793.968613][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.974554][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.988241][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.996681][ T5311] usb 5-1: Using ep0 maxpacket: 8 [ 794.003746][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.017612][ T5280] usb 2-1: Product: syz [ 794.021865][ T5280] usb 2-1: Manufacturer: syz [ 794.028831][ T5280] usb 2-1: SerialNumber: syz [ 794.033843][ T5311] usb 5-1: config 0 has no interfaces? [ 794.040076][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.042264][ T5311] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.057631][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.061024][ T5311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.076680][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.078694][ T5280] usb 2-1: config 0 descriptor?? [ 794.093718][ T5311] usb 5-1: Product: syz [ 794.096933][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.099796][ T5311] usb 5-1: Manufacturer: syz [ 794.112685][ T5311] usb 5-1: SerialNumber: syz [ 794.126196][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.138382][ T5311] usb 5-1: config 0 descriptor?? [ 794.143864][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.154453][T18002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.168789][T18002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.181812][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.189200][ T25] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 794.214698][T18002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.223528][T18002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.239396][T18002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.248253][T18002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.347218][ T25] usb 4-1: device descriptor read/64, error -71 [ 794.424283][ T2600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.441763][ T2600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.471496][ T25] usb usb4-port1: attempt power cycle [ 794.484811][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.493038][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.522028][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2731'. [ 794.564407][ T5280] usb 2-1: USB disconnect, device number 30 [ 794.582905][ T5280] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 794.898238][ T25] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 794.937318][ T25] usb 4-1: device descriptor read/8, error -71 [ 795.017290][T14550] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 795.162224][T18207] vhci_hcd: connection reset by peer [ 795.162607][ T5274] usb 5-1: USB disconnect, device number 52 [ 795.201651][ T52] vhci_hcd: stop threads [ 795.209854][ T52] vhci_hcd: release socket [ 795.216040][ T52] vhci_hcd: disconnect device [ 795.222864][ T25] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 795.243349][T14550] usb 1-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 795.261661][T14550] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.282909][T14550] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.293381][T14550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.302386][ T25] usb 4-1: device descriptor read/8, error -71 [ 795.311626][T14550] usb 1-1: Product: syz [ 795.316613][T14550] usb 1-1: Manufacturer: syz [ 795.331626][T14550] usb 1-1: SerialNumber: syz [ 795.402233][T18224] x_tables: ip_tables: osf match: only valid for protocol 6 [ 795.427885][ T25] usb usb4-port1: unable to enumerate USB device [ 795.562207][T18218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.597277][T18218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.663229][T14550] cdc_ncm 1-1:1.0: bind() failure [ 795.706035][T14550] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 795.719602][T14550] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 795.738887][T14550] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 795.790839][T14550] usb 1-1: USB disconnect, device number 47 [ 795.826610][ T943] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 795.848207][T18234] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2740'. [ 795.890380][T15051] usb 3-1: USB disconnect, device number 41 [ 795.952697][T18235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.977848][T18235] blktrace: Concurrent blktraces are not allowed on loop0 [ 796.017704][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 796.086959][ T943] usb 5-1: Using ep0 maxpacket: 32 [ 796.112596][ T943] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 796.136616][ T943] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 796.157091][ T943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 796.170333][ T943] usb 5-1: config 1 has no interface number 0 [ 796.191060][T18238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 796.201986][ T943] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 796.223901][ T943] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 796.245486][ T943] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 796.264904][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.293948][ T943] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 796.507696][ T943] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 796.616549][T15051] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 796.739336][T18226] fuse: Bad value for 'rootmode' [ 796.768771][ T8] usb 5-1: USB disconnect, device number 53 [ 796.797940][ T8] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 796.847012][T15051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.863882][T15051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.902308][T15051] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 796.914457][T15051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.925553][T15051] usb 2-1: config 0 descriptor?? [ 796.996405][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 797.011523][ T29] audit: type=1326 audit(1722211046.109:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18263 comm="syz.3.2750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc60777299 code=0x0 [ 797.140204][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.167914][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.195445][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.220798][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.244295][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.260425][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.272961][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.282203][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.316010][T18248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.341416][T18248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.469251][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.496535][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.512190][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.543966][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.590878][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.615076][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.640225][T15051] saitek 0003:06A3:0621.0039: unknown main item tag 0x0 [ 797.705318][T15051] saitek 0003:06A3:0621.0039: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.1-1/input0 [ 797.752377][T18278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.779977][T18278] blktrace: Concurrent blktraces are not allowed on loop0 [ 798.105272][T18282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2757'. [ 798.737960][ T5275] vhci_hcd: vhci_device speed not set [ 798.779802][T18297] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2762'. [ 798.795195][T18297] gretap0: entered promiscuous mode [ 799.276683][T14550] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 799.328573][ T58] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 799.344005][ T5339] usb 2-1: USB disconnect, device number 31 [ 799.466576][T14550] usb 3-1: Using ep0 maxpacket: 32 [ 799.474201][T14550] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 799.482799][T14550] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 799.491778][T14550] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 799.501155][T14550] usb 3-1: config 1 has no interface number 0 [ 799.507642][T14550] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 799.518856][T14550] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 799.532984][T14550] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 799.543840][T14550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.555568][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.567556][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 799.581008][T14550] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 799.588622][ T943] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 799.588729][ T58] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 799.605433][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 799.614082][ T58] usb 5-1: SerialNumber: syz [ 799.756594][ T5339] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 799.766633][ T943] usb 1-1: Using ep0 maxpacket: 32 [ 799.775925][ T943] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 799.784471][ T943] usb 1-1: config 0 has no interface number 0 [ 799.791138][ T943] usb 1-1: config 0 interface 81 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 799.803602][ T943] usb 1-1: New USB device found, idVendor=13d3, idProduct=3334, bcdDevice=7b.8b [ 799.809068][T14550] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 799.814992][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.828003][ T943] usb 1-1: Product: syz [ 799.851681][ T943] usb 1-1: Manufacturer: syz [ 799.856321][ T943] usb 1-1: SerialNumber: syz [ 799.867511][ T943] usb 1-1: config 0 descriptor?? [ 799.879642][ T943] r8712u: register rtl8712_netdev_ops to netdev_ops [ 799.884187][ T58] usb 5-1: 0:2 : does not exist [ 799.888946][ T943] usb 1-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 799.942910][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 799.953568][ T58] usb 5-1: USB disconnect, device number 54 [ 799.974500][ T5339] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 800.001655][ T5339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.062638][ T5339] usb 2-1: config 0 descriptor?? [ 800.098925][ T943] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 800.112703][T18302] fuse: Bad value for 'rootmode' [ 800.122744][ T943] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 800.139514][ T943] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 800.154626][ T5280] usb 3-1: USB disconnect, device number 42 [ 800.165843][ T943] usb 1-1: USB disconnect, device number 48 [ 800.179350][ T5280] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 800.261416][ T5456] udevd[5456]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 800.497662][T15051] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 800.701684][T15051] usb 4-1: Using ep0 maxpacket: 8 [ 800.742209][T15051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 800.795487][T15051] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 800.842773][T15051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.879070][T15051] usb 4-1: config 0 descriptor?? [ 801.198121][T15051] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 801.328710][ T5339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 801.346602][ T5339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 801.370728][ T5339] asix 2-1:0.0: probe with driver asix failed with error -71 [ 801.411075][ T5339] usb 2-1: USB disconnect, device number 32 [ 801.469137][T18349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.510871][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 801.995355][ T5339] usb 4-1: USB disconnect, device number 55 [ 802.022951][ T5339] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 802.094660][T18358] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 802.125806][T18358] team0: Failed to send options change via netlink (err -105) [ 802.133407][T18358] team0: Port device netdevsim0 added [ 802.157135][ T5275] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 802.166368][ T8] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 802.177545][T15051] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 802.198150][T18359] netlink: 'syz.1.2781': attribute type 10 has an invalid length. [ 802.242993][T18359] team0: Failed to send options change via netlink (err -105) [ 802.261966][T18359] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 802.282130][T18359] team0: Port device netdevsim0 removed [ 802.302085][T18359] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 802.367175][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 802.378123][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 802.389623][T15051] usb 3-1: Using ep0 maxpacket: 16 [ 802.402629][T15051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 802.414315][ T5275] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 802.425546][T15051] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 802.438685][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.440512][T18367] xt_NFQUEUE: number of total queues is 0 [ 802.456377][T15051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.472079][ T5275] usb 1-1: config 0 descriptor?? [ 802.491980][T15051] usb 3-1: config 0 descriptor?? [ 802.500805][ T5275] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 802.519731][T15051] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 802.737675][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.758344][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.067629][T18387] vivid-006: disconnect [ 803.087502][T18378] vivid-006: reconnect [ 803.317738][T15051] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 803.369226][T18396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2794'. [ 803.507177][T15051] usb 2-1: Using ep0 maxpacket: 8 [ 803.517633][T15051] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 803.529959][T15051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.548811][T15051] usb 2-1: config 0 descriptor?? [ 803.575652][T18402] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 803.606708][ T5275] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 803.776370][T18406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.826657][ T5275] usb 5-1: Using ep0 maxpacket: 32 [ 803.834389][ T5275] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 803.842920][ T5275] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 803.851877][ T5275] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 803.864535][ T5275] usb 5-1: config 1 has no interface number 0 [ 803.872140][ T5275] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 803.883696][ T5275] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 803.896889][ T5275] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 803.906364][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.926373][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 804.134440][ T5275] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 804.266644][ T4619] Bluetooth: hci3: command tx timeout [ 804.374553][T18393] fuse: Bad value for 'rootmode' [ 804.406827][ T5280] usb 5-1: USB disconnect, device number 55 [ 804.414896][ T5280] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 804.774499][T15051] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 804.796047][T15051] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 804.837798][T10678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 804.852482][T15051] asix 2-1:0.0: probe with driver asix failed with error -71 [ 804.862654][T10678] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.872311][T10678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.882715][T10678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 804.898712][T10678] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 804.907168][T10678] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 804.914645][T15051] usb 2-1: USB disconnect, device number 33 [ 804.966858][ T8] usb 1-1: USB disconnect, device number 49 [ 805.004405][ T5275] usb 3-1: USB disconnect, device number 43 [ 805.273977][T11719] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.504329][T11719] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.529247][T18433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 805.535813][T18433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 805.585621][T18433] vhci_hcd vhci_hcd.0: Device attached [ 805.667820][T11719] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.814465][T11719] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.857015][ T58] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 805.899534][T18411] chnl_net:caif_netlink_parms(): no params data found [ 805.908556][T18437] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 806.096850][ T5339] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 806.216898][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.234290][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.244853][T18411] bridge_slave_0: entered allmulticast mode [ 806.266002][T18411] bridge_slave_0: entered promiscuous mode [ 806.283733][T11719] bridge_slave_1: left allmulticast mode [ 806.296115][T11719] bridge_slave_1: left promiscuous mode [ 806.302083][ T8] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 806.316687][ T5339] usb 2-1: Using ep0 maxpacket: 8 [ 806.318985][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.329772][ T5339] usb 2-1: config 0 has no interfaces? [ 806.338608][ T5339] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 806.349060][ T5339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.358759][ T5339] usb 2-1: Product: syz [ 806.362914][T11719] bridge_slave_0: left allmulticast mode [ 806.362940][T11719] bridge_slave_0: left promiscuous mode [ 806.376540][ T5339] usb 2-1: Manufacturer: syz [ 806.381166][ T5339] usb 2-1: SerialNumber: syz [ 806.385052][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.407175][ T5339] usb 2-1: config 0 descriptor?? [ 806.436763][T14550] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 806.528648][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.553481][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.564386][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 806.585228][ T8] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 806.595507][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.622718][ T8] usb 1-1: config 0 descriptor?? [ 806.629224][T14550] usb 5-1: Using ep0 maxpacket: 16 [ 806.665309][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 806.677954][T14550] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 806.706117][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.743426][T14550] usb 5-1: config 0 descriptor?? [ 806.778530][T14550] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 806.981586][T10678] Bluetooth: hci1: command tx timeout [ 807.046042][ T8] hid-udraw 0003:20D6:CB17.003A: item fetching failed at offset 5/7 [ 807.054873][T11719] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.055797][ T8] hid-udraw 0003:20D6:CB17.003A: parse failed [ 807.073463][ T8] hid-udraw 0003:20D6:CB17.003A: probe with driver hid-udraw failed with error -22 [ 807.093600][T11719] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.121979][T11719] bond0 (unregistering): Released all slaves [ 807.151818][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.161377][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.169312][T18411] bridge_slave_1: entered allmulticast mode [ 807.177371][T18411] bridge_slave_1: entered promiscuous mode [ 807.232064][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 807.276921][T15051] usb 1-1: USB disconnect, device number 50 [ 807.374193][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.432359][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.694007][T18411] team0: Port device team_slave_0 added [ 807.712980][T18411] team0: Port device team_slave_1 added [ 807.750434][T11719] hsr_slave_0: left promiscuous mode [ 807.764843][T11719] hsr_slave_1: left promiscuous mode [ 807.782994][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.796387][T11719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.829957][T11719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.841553][T11719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.856094][ T8] usb 2-1: USB disconnect, device number 34 [ 807.865167][T18434] vhci_hcd: connection closed [ 807.865933][ T2467] vhci_hcd: stop threads [ 807.917635][ T2467] vhci_hcd: release socket [ 807.934297][ T2467] vhci_hcd: disconnect device [ 807.963489][T11719] veth1_macvtap: left promiscuous mode [ 807.989671][T11719] veth0_macvtap: left promiscuous mode [ 808.011369][T11719] veth1_vlan: left promiscuous mode [ 808.029857][T11719] veth0_vlan: left promiscuous mode [ 808.346686][T15051] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 808.546541][T15051] usb 1-1: Using ep0 maxpacket: 8 [ 808.563249][T15051] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 808.570760][T18498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.580940][T15051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.609253][T15051] usb 1-1: config 0 descriptor?? [ 808.990485][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.002094][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.066879][T10678] Bluetooth: hci1: command tx timeout [ 809.087893][T11719] team0 (unregistering): Port device team_slave_1 removed [ 809.181197][T11719] team0 (unregistering): Port device team_slave_0 removed [ 809.202033][ T5280] usb 5-1: USB disconnect, device number 56 [ 809.626589][ T5280] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 809.837171][ T5280] usb 5-1: Using ep0 maxpacket: 16 [ 809.843559][T15051] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 809.866833][ T5280] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 809.875009][T15051] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 809.879845][ T5280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 809.896131][T15051] asix 1-1:0.0: probe with driver asix failed with error -71 [ 809.898563][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.911368][T15051] usb 1-1: USB disconnect, device number 51 [ 809.932228][ T5280] usb 5-1: Product: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 809.953802][ T5280] usb 5-1: Manufacturer: 䎼컨枈䰊晆睧ﵼ⊬⏈뾭ࡄ诸珽뜒잽袪Ɤɍ馹♒䪚겁㯹ᮭ籠ꌇ錵遞ᶩ⯚੤㊽釾⥺ࢊ楝﷾硨쯧꣪ᢦ㮛⏄✔ꆎ㼏ׁᘡ晋༰㥥␃ꯓ숒㆙㳒》队渍ন㿳뗘Ӕ臭릍硔䗆鏈ᰣ튍둞ꓝ撯퓫鰚꘱錈竍쉤䨚⎙튃伩ㄴ⢹﫱嚊궰㜖쬓䐓줓ͱ磵萩㋼謁룒辂裢烐繺ɹ佇엤⺠ [ 809.990043][ T5280] usb 5-1: SerialNumber: 㰊 [ 810.159720][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'. [ 810.183631][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.200009][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.230575][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.258354][ T5280] cdc_ncm 5-1:1.0: bind() failure [ 810.267094][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.294540][ T5280] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 810.302189][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 810.336813][ T5280] cdc_ncm 5-1:1.1: bind() failure [ 810.357478][ T5280] usb 5-1: USB disconnect, device number 57 [ 810.390402][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.651348][T18411] hsr_slave_0: entered promiscuous mode [ 810.700395][T18411] hsr_slave_1: entered promiscuous mode [ 810.978453][ T58] vhci_hcd: vhci_device speed not set [ 811.137803][T10678] Bluetooth: hci1: command tx timeout [ 811.156589][ T5280] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 811.192107][T18539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 811.406948][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 811.443659][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 811.462080][ T5280] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 811.504881][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.542620][ T5280] usb 3-1: config 0 descriptor?? [ 811.563597][ T5280] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 812.344083][T18411] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 812.431177][T18411] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 812.464722][T18411] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 812.519804][T18411] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.900772][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.970593][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.009738][T15051] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.016949][T15051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.052853][T15051] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.060143][T15051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.106734][ T58] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 813.179893][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.198755][ T5280] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 813.217476][T10678] Bluetooth: hci1: command tx timeout [ 813.312396][T18411] veth0_vlan: entered promiscuous mode [ 813.318386][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 813.326303][ T58] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 813.356182][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.371541][T18411] veth1_vlan: entered promiscuous mode [ 813.393750][ T58] usb 1-1: config 0 descriptor?? [ 813.402791][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.427760][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.464034][ T5280] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 813.487945][T18411] veth0_macvtap: entered promiscuous mode [ 813.497718][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.512089][T18411] veth1_macvtap: entered promiscuous mode [ 813.528065][ T5280] usb 5-1: config 0 descriptor?? [ 813.548517][T18609] xt_hashlimit: size too large, truncated to 1048576 [ 813.571449][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.595564][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.619476][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.648717][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.670836][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.694662][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.705352][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.716741][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.736739][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.752784][T18609] x_tables: ip_tables: ah match: only valid for protocol 51 [ 813.760157][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.789014][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.817311][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.847282][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.898117][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.922347][ T943] usb 3-1: USB disconnect, device number 44 [ 813.938330][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.961630][ T5280] usbhid 5-1:0.0: can't add hid device: -71 [ 813.962651][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.997130][ T5280] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 814.016834][ T5280] usb 5-1: USB disconnect, device number 58 [ 814.028435][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.060043][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.123714][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.163881][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.194185][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.233823][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.310629][T18411] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.332631][T18411] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.356311][T18411] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.373126][T18411] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.641416][ T58] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 814.677501][ T58] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 814.714357][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.728139][ T58] asix 1-1:0.0: probe with driver asix failed with error -71 [ 814.746472][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.781012][ T58] usb 1-1: USB disconnect, device number 52 [ 814.882720][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.923571][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.052885][T18638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.636824][T18648] tipc: Started in network mode [ 815.646615][T18648] tipc: Node identity ac1414aa, cluster identity 4711 [ 815.669898][T18648] tipc: Enabled bearer , priority 10 [ 815.728267][T18656] fuse: Bad value for 'fd' [ 815.934432][ T29] audit: type=1326 audit(1722211065.049:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.019550][ T29] audit: type=1326 audit(1722211065.079:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.092038][ T29] audit: type=1326 audit(1722211065.109:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.171306][ T29] audit: type=1326 audit(1722211065.109:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.254899][ T29] audit: type=1326 audit(1722211065.109:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.280767][ T29] audit: type=1326 audit(1722211065.109:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.327281][ T29] audit: type=1326 audit(1722211065.109:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.360755][ T29] audit: type=1326 audit(1722211065.109:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.383572][ T29] audit: type=1326 audit(1722211065.109:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.460992][ T29] audit: type=1326 audit(1722211065.119:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18661 comm="syz.0.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 816.507081][ T5275] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 816.577178][T18677] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2853'. [ 816.708676][ T5274] tipc: Node number set to 2886997162 [ 816.714937][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 816.731601][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 816.758590][ T5275] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 816.794488][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.818032][ T5275] usb 1-1: config 0 descriptor?? [ 816.840187][ T5275] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 817.126561][ T5274] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 817.316583][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 817.324003][ T5274] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 817.360772][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.368468][ T58] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 817.416357][ T5274] usb 4-1: config 0 descriptor?? [ 817.576683][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 817.707261][T18688] netlink: 'syz.2.2856': attribute type 11 has an invalid length. [ 818.639939][ T5274] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 818.689650][ T5274] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 818.715496][ T5274] asix 4-1:0.0: probe with driver asix failed with error -71 [ 818.749078][ T5274] usb 4-1: USB disconnect, device number 56 [ 818.863296][T18702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.888647][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 819.017017][T14550] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 819.224148][T14550] usb 5-1: Using ep0 maxpacket: 32 [ 819.242679][ T5339] usb 1-1: USB disconnect, device number 53 [ 819.261728][T14550] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 819.303932][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.328113][T14550] usb 5-1: config 0 descriptor?? [ 819.350648][T14550] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 819.411497][T18706] FAULT_INJECTION: forcing a failure. [ 819.411497][T18706] name failslab, interval 1, probability 0, space 0, times 0 [ 819.446752][T18706] CPU: 0 UID: 0 PID: 18706 Comm: syz.0.2862 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 819.457313][T18706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 819.467389][T18706] Call Trace: [ 819.470678][T18706] [ 819.473622][T18706] dump_stack_lvl+0x241/0x360 [ 819.478308][T18706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 819.483511][T18706] ? __pfx__printk+0x10/0x10 [ 819.488115][T18706] ? fs_reclaim_acquire+0x93/0x140 [ 819.493226][T18706] ? __pfx___might_resched+0x10/0x10 [ 819.498607][T18706] should_fail_ex+0x3b0/0x4e0 [ 819.503307][T18706] ? security_inode_alloc+0x28/0x120 [ 819.508593][T18706] should_failslab+0xac/0x100 [ 819.513274][T18706] ? security_inode_alloc+0x28/0x120 [ 819.518570][T18706] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 819.523954][T18706] security_inode_alloc+0x28/0x120 [ 819.529081][T18706] inode_init_always+0x966/0xc90 [ 819.534030][T18706] ? __pfx_sock_alloc_inode+0x10/0x10 [ 819.539424][T18706] new_inode_pseudo+0x9e/0x1a0 [ 819.544199][T18706] do_accept+0x16e/0x6c0 [ 819.548548][T18706] ? __pfx_do_accept+0x10/0x10 [ 819.553347][T18706] __sys_accept4+0x11e/0x1c0 [ 819.557953][T18706] ? __pfx___sys_accept4+0x10/0x10 [ 819.563069][T18706] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 819.569401][T18706] ? do_syscall_64+0x100/0x230 [ 819.574176][T18706] __x64_sys_accept4+0x9a/0xb0 [ 819.578959][T18706] do_syscall_64+0xf3/0x230 [ 819.583465][T18706] ? clear_bhb_loop+0x35/0x90 [ 819.588171][T18706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.594122][T18706] RIP: 0033:0x7f4786377299 [ 819.598557][T18706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.618169][T18706] RSP: 002b:00007f47870f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 819.626594][T18706] RAX: ffffffffffffffda RBX: 00007f4786505f80 RCX: 00007f4786377299 [ 819.634565][T18706] RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 0000000000000003 [ 819.642537][T18706] RBP: 00007f47870f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 819.650510][T18706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.658480][T18706] R13: 000000000000000b R14: 00007f4786505f80 R15: 00007f478662fa38 [ 819.666496][T18706] [ 819.705070][T18707] tipc: Started in network mode [ 819.711304][T18707] tipc: Node identity 1, cluster identity 4711 [ 819.718799][T18707] tipc: Node number set to 1 [ 819.988438][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 820.054892][ T58] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 820.067151][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'. [ 820.097197][ T58] usb 3-1: can't read configurations, error -71 [ 820.202288][T18720] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2865'. [ 820.684663][T18716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 820.803047][ T58] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 821.069915][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 821.096199][ T58] usb 3-1: config index 0 descriptor too short (expected 164, got 36) [ 821.116228][T14550] gspca_sunplus: reg_w_riv err -71 [ 821.121584][T14550] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 821.137984][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.157715][T14550] usb 5-1: USB disconnect, device number 59 [ 821.165013][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.203715][ T58] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 821.224367][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.277316][ T58] usb 3-1: config 0 descriptor?? [ 821.305530][T18740] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 821.429000][ T2565] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.496626][ T943] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 821.565753][ T4619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.577457][ T4619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.596927][ T4619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.605793][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.613615][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 821.621435][ T4619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.653678][ T2565] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.696586][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 821.722705][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 821.754052][ T943] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 821.789927][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.840058][ T943] usb 1-1: config 0 descriptor?? [ 821.863097][ T2565] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.864974][ T943] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 822.045611][ T2565] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.146001][T18750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 822.179988][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 822.186031][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 822.210091][ T58] usb 3-1: USB disconnect, device number 46 [ 822.224813][T18755] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2876'. [ 822.454936][T18742] chnl_net:caif_netlink_parms(): no params data found [ 822.574880][ T2565] bridge_slave_1: left allmulticast mode [ 822.604306][ T2565] bridge_slave_1: left promiscuous mode [ 822.615484][ T2565] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.628147][ T2565] bridge_slave_0: left allmulticast mode [ 822.634596][ T2565] bridge_slave_0: left promiscuous mode [ 822.647088][ T2565] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.157360][T14550] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 823.354882][T14550] usb 2-1: Using ep0 maxpacket: 32 [ 823.390652][T14550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.413705][T14550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.460252][T14550] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 823.472689][T14550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.491216][T14550] usb 2-1: config 0 descriptor?? [ 823.602144][ T2565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.624523][ T2565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.637704][ T2565] bond0 (unregistering): Released all slaves [ 823.707178][T10678] Bluetooth: hci1: command tx timeout [ 823.759065][ T2565] tipc: Left network mode [ 823.931080][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.941540][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.953706][T18742] bridge_slave_0: entered allmulticast mode [ 823.976667][T18742] bridge_slave_0: entered promiscuous mode [ 824.005345][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.019995][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.065112][T18742] bridge_slave_1: entered allmulticast mode [ 824.082589][T18742] bridge_slave_1: entered promiscuous mode [ 824.104725][T14550] usbhid 2-1:0.0: can't add hid device: -71 [ 824.141269][T14550] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 824.167679][T14550] usb 2-1: USB disconnect, device number 35 [ 824.258934][ T5274] usb 1-1: USB disconnect, device number 54 [ 824.355050][T18807] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2886'. [ 824.388702][T18742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.416407][T18810] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.424223][T18810] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.461196][T18810] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.468877][T18810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.478685][T18810] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.485890][T18810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.579864][T18810] team0: Port device bridge0 added [ 824.673542][ T2565] hsr_slave_0: left promiscuous mode [ 824.757057][ T2565] hsr_slave_1: left promiscuous mode [ 824.785510][ T2565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.808144][ T2565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.825592][ T2565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.837516][ T2565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.878252][ T2565] veth1_macvtap: left promiscuous mode [ 824.891936][ T2565] veth0_macvtap: left promiscuous mode [ 824.906874][ T2565] veth1_vlan: left promiscuous mode [ 824.917948][ T2565] veth0_vlan: left promiscuous mode [ 825.027358][ T5274] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 825.097268][ T5275] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 825.252894][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.272413][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 47, changing to 9 [ 825.303848][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 825.311163][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 58219, setting to 1024 [ 825.325604][ T5274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.355498][ T5275] usb 5-1: too many endpoints for config 1 interface 0 altsetting 7: 119, using maximum allowed: 30 [ 825.378214][ T5275] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 253, changing to 11 [ 825.389556][ T5274] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.401533][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.413249][ T5275] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 119 [ 825.441115][ T5274] usb 1-1: config 0 descriptor?? [ 825.446194][ T5275] usb 5-1: config 1 interface 0 has no altsetting 0 [ 825.482126][ T5275] usb 5-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.40 [ 825.500472][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.508724][ T5275] usb 5-1: Product: syz [ 825.513040][ T5275] usb 5-1: Manufacturer: ⿆廮ԋ壾緒ᗵ曪ⰵ䘀℠鹆襾≾鳃ꗯ㸐資͊쇷躝貣ꐇ뽞鶮賖ㄠǦﱷꉑ衩䩔숯桯猪處鼴薼尺轓ᑪ꾯焴붆竧ﺵڣ趪龹䗫咠茟᪛窵껟櫩﯑嬐﷉橀쑨䄏ۥ㰌夙妶妗챟๿➬㒠깸ᐺ㷗ᒅ䧟닥쮡ֹꁺ䳐㼇ᘁ敡逨Ƹ업㘖䯌퐾횔ᥲꊙ먂䭣ⷃ㊌૙벎擇䈼썁缌 [ 825.557041][ T5275] usb 5-1: SerialNumber: syz [ 825.776915][T10678] Bluetooth: hci1: command tx timeout [ 825.877466][ T5274] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x1 [ 825.885957][ T5274] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 825.900374][ T5274] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 825.913587][ T2565] team0 (unregistering): Port device team_slave_1 removed [ 826.024224][ T2565] team0 (unregistering): Port device team_slave_0 removed [ 826.113296][ T5275] usbhid 5-1:1.0: can't add hid device: -71 [ 826.128274][ T5275] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 826.151913][ T5275] usb 5-1: USB disconnect, device number 60 [ 826.685011][T18742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.709340][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.723506][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.731977][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.789094][T18742] team0: Port device team_slave_0 added [ 826.809641][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.847829][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.872697][T18742] team0: Port device team_slave_1 added [ 826.877094][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.905845][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.920224][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.946917][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.988899][T18842] dccp_invalid_packet: P.Data Offset(172) too large [ 826.996610][ T5274] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 827.024408][T18742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.058299][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.095201][T18742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.126569][T18848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 827.138199][T18742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.161389][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.226914][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 827.242851][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.271212][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.282865][T18742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.308525][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.364126][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.386892][ T5275] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 827.398436][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.419063][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.461297][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.510381][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.516532][T18742] hsr_slave_0: entered promiscuous mode [ 827.534867][T18742] hsr_slave_1: entered promiscuous mode [ 827.550333][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.582209][ T5275] usb 1-1: device descriptor read/64, error -32 [ 827.593944][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.729112][ T5274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 827.775688][ T5274] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 827.800883][ T5274] usb 5-1: can't read configurations, error -71 [ 827.856564][T10678] Bluetooth: hci1: command tx timeout [ 827.925948][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'. [ 828.445994][T18879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2900'. [ 828.466553][ T5275] usb 1-1: reset high-speed USB device number 55 using dummy_hcd [ 828.485765][T18878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2900'. [ 828.505643][ T5275] usb 1-1: device reset changed ep0 maxpacket size! [ 828.514318][ T943] usb 1-1: USB disconnect, device number 55 [ 828.554447][T18882] xt_limit: Overflow, try lower: 0/0 [ 828.618292][T18885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.672203][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2897'. [ 828.682489][T18885] blktrace: Concurrent blktraces are not allowed on loop0 [ 828.696598][ T943] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 828.886785][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 828.903548][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 828.924829][ T943] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 828.948580][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.983214][ T943] usb 1-1: config 0 descriptor?? [ 828.993110][T18742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 828.993943][ T943] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 829.043352][T18742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 829.078350][T18742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 829.098493][T18742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 829.236579][ T5280] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 829.342708][T18742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.411627][T18742] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.442422][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 829.474166][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.495135][ T5280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 829.496336][ T5275] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.508251][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.511388][ T5275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.567576][ T5280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.587241][ T5275] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.594459][ T5275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.620437][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.649637][ T5280] usb 3-1: Product: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎 [ 829.682966][ T5280] usb 3-1: Manufacturer: 䎼컨枈䰊晆睧ﵼ⊬⏈뾭ࡄ诸珽뜒잽袪Ɤɍ馹♒䪚겁㯹ᮭ籠ꌇ錵遞ᶩ⯚੤㊽釾⥺ࢊ楝﷾硨쯧꣪ᢦ㮛⏄✔ꆎ㼏ׁᘡ晋༰㥥␃ꯓ숒㆙㳒》队渍ন㿳뗘Ӕ臭릍硔䗆鏈ᰣ튍둞ꓝ撯퓫鰚꘱錈竍쉤䨚⎙튃伩ㄴ⢹﫱嚊궰㜖쬓䐓줓ͱ磵萩㋼謁룒辂裢烐繺ɹ佇엤⺠ [ 829.695467][T18742] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 829.776135][T18742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 829.821469][ T5280] usb 3-1: SerialNumber: 㰊 [ 829.849015][ T5280] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 829.855956][ T5280] cdc_ncm 3-1:1.0: bind() failure [ 829.896047][T18742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.936764][T10678] Bluetooth: hci1: command tx timeout [ 829.979158][T18742] veth0_vlan: entered promiscuous mode [ 830.017181][T18742] veth1_vlan: entered promiscuous mode [ 830.052135][ T5280] usb 3-1: USB disconnect, device number 47 [ 830.088234][ T5274] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 830.105734][T18742] veth0_macvtap: entered promiscuous mode [ 830.137740][T18742] veth1_macvtap: entered promiscuous mode [ 830.187498][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.220587][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.243335][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.262650][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.276522][ T5274] usb 5-1: Using ep0 maxpacket: 16 [ 830.287800][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 830.304102][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.321043][ T5274] usb 5-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 830.326539][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.348482][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.370840][ T5274] usb 5-1: config 0 descriptor?? [ 830.380941][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.387327][ T5274] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 830.399041][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.426361][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.458320][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.480882][T18742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.512836][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.536023][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.560008][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.581164][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.600791][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.623416][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.623440][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.623459][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.623476][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.623490][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.625380][T18742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.637679][ T5280] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 830.648867][T18742] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.648906][T18742] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.648945][T18742] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.648972][T18742] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.692547][T18943] vxcan0: entered promiscuous mode [ 830.692641][T18943] vlan2: entered promiscuous mode [ 830.692751][T18943] vlan2: entered allmulticast mode [ 830.692768][T18943] vxcan0: entered allmulticast mode [ 830.698614][T18943] vxcan0: left allmulticast mode [ 830.698767][T18943] vxcan0: left promiscuous mode [ 830.706459][T18946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 830.746705][T18946] blktrace: Concurrent blktraces are not allowed on loop0 [ 830.823164][ T5280] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 830.823199][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.827934][ T5280] usb 2-1: config 0 descriptor?? [ 831.020294][T15051] usb 1-1: USB disconnect, device number 56 [ 831.114774][ T5274] usb 5-1: USB disconnect, device number 63 [ 831.175611][ T2565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.195126][ T2565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.298362][ T2565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.311661][ T5280] usb 2-1: Cannot set autoneg [ 831.326736][ T5280] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 831.328676][ T2565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.401048][ T5280] usb 2-1: USB disconnect, device number 36 [ 831.524623][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2916'. [ 831.536770][T18970] netlink: 'syz.1.2917': attribute type 2 has an invalid length. [ 831.865928][T18983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2916'. [ 832.094751][T18991] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2922'. [ 832.416779][T10678] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 832.427166][T10678] Bluetooth: hci3: Injecting HCI hardware error event [ 832.436395][T10678] Bluetooth: hci3: hardware error 0x00 [ 832.443211][T19002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.590254][T19004] blktrace: Concurrent blktraces are not allowed on loop0 [ 833.071356][T19027] sctp: [Deprecated]: syz.2.2929 (pid 19027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.071356][T19027] Use struct sctp_sack_info instead [ 833.367491][T19038] SET target dimension over the limit! [ 833.495705][T19042] FAULT_INJECTION: forcing a failure. [ 833.495705][T19042] name failslab, interval 1, probability 0, space 0, times 0 [ 833.513302][T19042] CPU: 1 UID: 0 PID: 19042 Comm: syz.1.2935 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 833.523735][T19042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 833.533849][T19042] Call Trace: [ 833.537141][T19042] [ 833.540090][T19042] dump_stack_lvl+0x241/0x360 [ 833.544773][T19042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 833.549972][T19042] ? __pfx__printk+0x10/0x10 [ 833.554569][T19042] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 833.560197][T19042] ? __pfx___might_resched+0x10/0x10 [ 833.565477][T19042] should_fail_ex+0x3b0/0x4e0 [ 833.570159][T19042] ? audit_log_start+0x15e/0xa30 [ 833.575094][T19042] should_failslab+0xac/0x100 [ 833.579763][T19042] ? audit_log_start+0x15e/0xa30 [ 833.584692][T19042] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 833.590063][T19042] audit_log_start+0x15e/0xa30 [ 833.594830][T19042] ? alloc_file_pseudo+0x1da/0x290 [ 833.599941][T19042] ? __pfx_audit_log_start+0x10/0x10 [ 833.605241][T19042] ? migrate_enable+0x3b5/0x520 [ 833.610108][T19042] ? __pfx_migrate_enable+0x10/0x10 [ 833.615316][T19042] ? __pfx___cant_migrate+0x10/0x10 [ 833.620520][T19042] ? __asan_memset+0x23/0x50 [ 833.625133][T19042] audit_seccomp+0x63/0x1f0 [ 833.629634][T19042] ? migrate_disable+0xce/0x180 [ 833.634488][T19042] __seccomp_filter+0xb38/0x1fe0 [ 833.639448][T19042] ? __pfx___seccomp_filter+0x10/0x10 [ 833.644850][T19042] ? fd_install+0x9c/0x5d0 [ 833.649278][T19042] ? __pfx_lock_release+0x10/0x10 [ 833.654328][T19042] ? rcu_read_lock_sched_held+0x8d/0x130 [ 833.660249][T19042] ? __secure_computing+0x125/0x370 [ 833.665461][T19042] syscall_trace_enter+0xa8/0x150 [ 833.670505][T19042] do_syscall_64+0xcc/0x230 [ 833.675019][T19042] ? clear_bhb_loop+0x35/0x90 [ 833.679705][T19042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.685607][T19042] RIP: 0033:0x7f31cc975d7c [ 833.690025][T19042] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 833.709625][T19042] RSP: 002b:00007f31cd684040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 833.718038][T19042] RAX: ffffffffffffffda RBX: 00007f31ccb05f80 RCX: 00007f31cc975d7c [ 833.726011][T19042] RDX: 000000000000000f RSI: 00007f31cd6840b0 RDI: 0000000000000003 [ 833.733986][T19042] RBP: 00007f31cd6840a0 R08: 0000000000000000 R09: 0000000000000000 [ 833.741959][T19042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.749925][T19042] R13: 000000000000000b R14: 00007f31ccb05f80 R15: 00007f31ccc2fa38 [ 833.757909][T19042] [ 833.766807][T19042] audit_log_lost: 15 callbacks suppressed [ 833.766824][T19042] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 833.766978][ T29] audit: type=1326 audit(1722211082.609:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 833.774765][T19042] audit: out of memory in audit_log_start [ 833.802942][ T29] audit: type=1326 audit(1722211082.609:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 833.802993][ T29] audit: type=1326 audit(1722211082.609:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31cc975cd0 code=0x7ffc0000 [ 833.882803][ T29] audit: type=1326 audit(1722211082.609:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31cc975e1f code=0x7ffc0000 [ 833.905542][ T29] audit: type=1326 audit(1722211082.609:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 833.954759][ T29] audit: type=1326 audit(1722211083.059:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31cc975e1f code=0x7ffc0000 [ 834.012238][ T29] audit: type=1326 audit(1722211083.059:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31cc975fca code=0x7ffc0000 [ 834.047564][ T29] audit: type=1326 audit(1722211083.059:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19041 comm="syz.1.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 834.146569][ T5274] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 834.326596][ T5274] usb 1-1: Invalid ep0 maxpacket: 32 [ 834.496651][ T5274] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 834.657743][T10678] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 834.717868][ T5274] usb 1-1: Invalid ep0 maxpacket: 32 [ 834.736165][ T5274] usb usb1-port1: attempt power cycle [ 834.774867][T19086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.792171][T19086] blktrace: Concurrent blktraces are not allowed on loop0 [ 835.176608][ T5274] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 835.227841][ T5274] usb 1-1: Invalid ep0 maxpacket: 32 [ 835.343793][T19107] net_ratelimit: 55 callbacks suppressed [ 835.343814][T19107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 835.386699][ T5274] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 835.435264][ T5274] usb 1-1: Invalid ep0 maxpacket: 32 [ 835.443590][ T5274] usb usb1-port1: unable to enumerate USB device [ 835.587020][ T58] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 835.787239][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 835.810276][ T58] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 835.826571][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.842448][ T58] usb 2-1: Product: syz [ 835.852674][ T58] usb 2-1: Manufacturer: syz [ 835.871505][ T58] usb 2-1: SerialNumber: syz [ 835.886789][ T58] usb 2-1: config 0 descriptor?? [ 836.105761][ T58] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 836.363839][T19128] FAULT_INJECTION: forcing a failure. [ 836.363839][T19128] name failslab, interval 1, probability 0, space 0, times 0 [ 836.418518][T19128] CPU: 1 UID: 0 PID: 19128 Comm: syz.2.2954 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 836.428975][T19128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 836.439023][T19128] Call Trace: [ 836.442295][T19128] [ 836.445237][T19128] dump_stack_lvl+0x241/0x360 [ 836.449950][T19128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.455162][T19128] ? __pfx__printk+0x10/0x10 [ 836.459742][T19128] ? fs_reclaim_acquire+0x93/0x140 [ 836.464862][T19128] ? __pfx___might_resched+0x10/0x10 [ 836.470153][T19128] ? dynamic_dname+0x141/0x1b0 [ 836.474909][T19128] should_fail_ex+0x3b0/0x4e0 [ 836.479597][T19128] ? tomoyo_encode+0x26f/0x540 [ 836.484379][T19128] should_failslab+0xac/0x100 [ 836.489069][T19128] ? tomoyo_encode+0x26f/0x540 [ 836.493821][T19128] __kmalloc_noprof+0xd8/0x400 [ 836.498574][T19128] tomoyo_encode+0x26f/0x540 [ 836.503147][T19128] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 836.508677][T19128] tomoyo_realpath_from_path+0x59e/0x5e0 [ 836.514303][T19128] tomoyo_path_number_perm+0x23a/0x880 [ 836.519753][T19128] ? tomoyo_path_number_perm+0x208/0x880 [ 836.525365][T19128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.531354][T19128] ? __fget_files+0x29/0x470 [ 836.535937][T19128] ? __fget_files+0x3f6/0x470 [ 836.540596][T19128] ? __fget_files+0x29/0x470 [ 836.545178][T19128] security_file_ioctl+0x75/0xb0 [ 836.550100][T19128] __se_sys_ioctl+0x47/0x170 [ 836.554671][T19128] do_syscall_64+0xf3/0x230 [ 836.559166][T19128] ? clear_bhb_loop+0x35/0x90 [ 836.563830][T19128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.569725][T19128] RIP: 0033:0x7f50a2f77299 [ 836.574138][T19128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.593780][T19128] RSP: 002b:00007f50a3e18048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.602186][T19128] RAX: ffffffffffffffda RBX: 00007f50a3105f80 RCX: 00007f50a2f77299 [ 836.610152][T19128] RDX: 0000000020000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 836.618128][T19128] RBP: 00007f50a3e180a0 R08: 0000000000000000 R09: 0000000000000000 [ 836.626090][T19128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.634054][T19128] R13: 000000000000000b R14: 00007f50a3105f80 R15: 00007f50a322fa38 [ 836.642030][T19128] [ 836.700011][T19128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 836.887263][ C1] eth0: bad gso: type: 1, size: 1408 [ 837.137209][ T943] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 837.330763][T19151] blktrace: Concurrent blktraces are not allowed on loop0 [ 837.345321][T19150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.359172][ T943] usb 5-1: device descriptor read/64, error -71 [ 837.656979][ T943] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 837.826610][ T943] usb 5-1: device descriptor read/64, error -71 [ 837.986973][ T943] usb usb5-port1: attempt power cycle [ 838.174415][T19171] vivid-004: disconnect [ 838.180151][T19162] vivid-004: reconnect [ 838.298750][ T58] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 838.344635][ T58] usb 2-1: USB disconnect, device number 37 [ 838.407250][ T943] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 838.467188][ T943] usb 5-1: device descriptor read/8, error -71 [ 838.477519][ T5274] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 838.676536][ T5274] usb 1-1: Using ep0 maxpacket: 8 [ 838.699411][ T5274] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 838.716557][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.751762][ T5274] usb 1-1: config 0 descriptor?? [ 838.757214][ T943] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 838.772611][ T5274] ums-jumpshot 1-1:0.0: USB Mass Storage device detected [ 838.797413][ T5274] ums-jumpshot 1-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 838.817293][ T943] usb 5-1: device descriptor read/8, error -71 [ 838.948265][ T943] usb usb5-port1: unable to enumerate USB device [ 839.066582][ T58] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 839.196658][ T5339] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 839.256626][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 839.273486][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 839.284888][ T58] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 839.295082][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.307551][ T58] usb 4-1: config 0 descriptor?? [ 839.356657][ T5339] usb 2-1: device descriptor read/64, error -71 [ 839.638539][ T5339] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 839.726191][T19181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.739560][T19181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.753488][ T58] hid (null): unknown global tag 0x83 [ 839.762886][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'. [ 839.776876][ T58] hid (null): unknown global tag 0xc [ 839.815398][ T58] hid-generic 0003:0158:0100.003C: unknown main item tag 0x1 [ 839.826580][ T5339] usb 2-1: device descriptor read/64, error -71 [ 839.843176][ T58] hid-generic 0003:0158:0100.003C: unexpected long global item [ 839.852000][ T58] hid-generic 0003:0158:0100.003C: probe with driver hid-generic failed with error -22 [ 839.927393][T19191] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 839.954708][ T5339] usb usb2-port1: attempt power cycle [ 840.039604][ T5274] usb 4-1: USB disconnect, device number 57 [ 840.178590][ T58] usb 1-1: USB disconnect, device number 61 [ 840.366579][ T5339] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 840.397480][ T5339] usb 2-1: device descriptor read/8, error -71 [ 840.526546][T14550] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 840.590800][T19205] blktrace: Concurrent blktraces are not allowed on loop0 [ 840.600063][T19204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.666910][ T5339] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 840.709879][ T5339] usb 2-1: device descriptor read/8, error -71 [ 840.725301][T14550] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 840.737520][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 840.749997][T14550] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 840.760432][T14550] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 840.795945][T14550] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 840.807260][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.828458][T14550] usb 5-1: config 0 descriptor?? [ 840.840198][ T5339] usb usb2-port1: unable to enumerate USB device [ 841.253426][T14550] plantronics 0003:047F:FFFF.003D: unbalanced collection at end of report description [ 841.260900][T19226] fuse: Bad value for 'fd' [ 841.265217][T14550] plantronics 0003:047F:FFFF.003D: parse failed [ 841.277235][T14550] plantronics 0003:047F:FFFF.003D: probe with driver plantronics failed with error -22 [ 841.446729][ T5280] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 841.518885][ T943] usb 5-1: USB disconnect, device number 68 [ 841.537047][ T58] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 841.546628][ T5274] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 841.647052][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 841.664972][ T5280] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 841.686473][ T5280] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 841.696797][ T5280] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.706938][ T5280] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.721042][ T58] usb 4-1: device descriptor read/64, error -71 [ 841.728204][ T5280] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 841.746530][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.746574][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 841.807587][ T5274] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 841.844246][ T5274] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 841.871467][ T5274] usb 3-1: New USB device found, idVendor=8d89, idProduct=8139, bcdDevice=ef.13 [ 841.886801][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.894942][ T5274] usb 3-1: Product: syz [ 841.901475][ T5274] usb 3-1: Manufacturer: syz [ 841.906201][ T5274] usb 3-1: SerialNumber: syz [ 841.932312][ T5274] usb 3-1: config 0 descriptor?? [ 842.010018][ T58] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 842.017053][T19223] pim6reg1: entered promiscuous mode [ 842.019309][T19223] pim6reg1: entered allmulticast mode [ 842.196718][ T58] usb 4-1: device descriptor read/64, error -71 [ 842.235809][ T5280] usb 1-1: usb_control_msg returned -71 [ 842.276993][ T5280] usbtmc 1-1:16.0: can't read capabilities [ 842.305051][ T5280] usb 1-1: USB disconnect, device number 62 [ 842.305168][T19230] erspan0: entered promiscuous mode [ 842.355435][ T58] usb usb4-port1: attempt power cycle [ 842.362069][T19230] erspan0: left promiscuous mode [ 842.795778][ T58] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 842.853957][ T58] usb 4-1: device descriptor read/8, error -71 [ 842.873701][ T5280] usb 3-1: USB disconnect, device number 49 [ 843.136663][ T58] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 843.154427][ T943] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 843.161380][T19250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'. [ 843.207829][ T58] usb 4-1: device descriptor read/8, error -71 [ 843.337435][ T58] usb usb4-port1: unable to enumerate USB device [ 843.346646][ T943] usb 5-1: Using ep0 maxpacket: 16 [ 843.367366][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 843.406241][ T943] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 843.435489][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.454687][ T943] usb 5-1: config 0 descriptor?? [ 843.894166][T19240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.923864][T19240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.004390][ T943] hid (null): unknown global tag 0x83 [ 844.050215][ T943] hid (null): unknown global tag 0xc [ 844.112317][ T943] hid-generic 0003:0158:0100.003E: unknown main item tag 0x1 [ 844.124123][T19264] blktrace: Concurrent blktraces are not allowed on loop0 [ 844.143300][ T943] hid-generic 0003:0158:0100.003E: unexpected long global item [ 844.163628][T19260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.193172][ T943] hid-generic 0003:0158:0100.003E: probe with driver hid-generic failed with error -22 [ 844.376650][ T58] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 844.499474][ T8] usb 5-1: USB disconnect, device number 69 [ 844.606545][ T58] usb 2-1: device descriptor read/64, error -71 [ 844.736980][ T5274] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 844.889291][ T58] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 844.943872][ T5274] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 844.969026][ T5274] usb 4-1: can't read configurations, error -22 [ 845.086629][ T58] usb 2-1: device descriptor read/64, error -71 [ 845.197573][ T5274] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 845.216946][ T58] usb usb2-port1: attempt power cycle [ 845.346767][ T943] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 845.389783][ T5274] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 845.417295][ T5274] usb 4-1: can't read configurations, error -22 [ 845.424563][ T5274] usb usb4-port1: attempt power cycle [ 845.581310][ T943] usb 3-1: Using ep0 maxpacket: 32 [ 845.606496][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.634565][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.646593][ T58] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 845.647467][ T943] usb 3-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 845.686688][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.707449][ T58] usb 2-1: device descriptor read/8, error -71 [ 845.736325][ T943] usb 3-1: config 0 descriptor?? [ 845.783153][T19300] blktrace: Concurrent blktraces are not allowed on loop0 [ 845.809301][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.857982][ T5274] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 845.912353][ T5274] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 845.931745][ T5274] usb 4-1: can't read configurations, error -22 [ 845.986578][ T58] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 846.043596][ T58] usb 2-1: device descriptor read/8, error -71 [ 846.076838][ T8] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 846.098921][ T5274] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 846.174664][ T58] usb usb2-port1: unable to enumerate USB device [ 846.175905][ T5274] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 846.236795][ T5274] usb 4-1: can't read configurations, error -22 [ 846.260783][ T5274] usb usb4-port1: unable to enumerate USB device [ 846.277518][ T8] usb 5-1: device descriptor read/64, error -71 [ 846.414216][ T5274] usb 3-1: USB disconnect, device number 50 [ 846.556746][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 846.716561][ T8] usb 5-1: device descriptor read/64, error -71 [ 846.817702][ T5275] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 846.842331][ T8] usb usb5-port1: attempt power cycle [ 847.005737][ T5275] usb 1-1: device descriptor read/64, error -71 [ 847.213170][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 847.213182][ T29] audit: type=1326 audit(1722211096.329:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 847.248040][T19311] FAULT_INJECTION: forcing a failure. [ 847.248040][T19311] name failslab, interval 1, probability 0, space 0, times 0 [ 847.269537][T19311] CPU: 1 UID: 0 PID: 19311 Comm: syz.1.3012 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 847.276166][ T29] audit: type=1326 audit(1722211096.369:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 847.279979][T19311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 847.279994][T19311] Call Trace: [ 847.280002][T19311] [ 847.280011][T19311] dump_stack_lvl+0x241/0x360 [ 847.280043][T19311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 847.302500][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.312617][T19311] ? __pfx__printk+0x10/0x10 [ 847.328803][ T29] audit: type=1326 audit(1722211096.369:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31cc975cd0 code=0x7ffc0000 [ 847.334620][T19311] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 847.334650][T19311] ? __pfx___might_resched+0x10/0x10 [ 847.334676][T19311] should_fail_ex+0x3b0/0x4e0 [ 847.340023][ T29] audit: type=1326 audit(1722211096.369:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31cc975e1f code=0x7ffc0000 [ 847.361535][T19311] should_failslab+0xac/0x100 [ 847.361564][T19311] ? __alloc_skb+0x1c3/0x440 [ 847.361587][T19311] kmem_cache_alloc_node_noprof+0x71/0x320 [ 847.361613][T19311] __alloc_skb+0x1c3/0x440 [ 847.361640][T19311] ? __pfx___alloc_skb+0x10/0x10 [ 847.361662][T19311] ? rcu_is_watching+0x15/0xb0 [ 847.361685][T19311] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 847.361702][T19311] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 847.361724][T19311] audit_log_start+0x186/0xa30 [ 847.361744][T19311] ? alloc_file_pseudo+0x1da/0x290 [ 847.361772][T19311] ? __pfx_audit_log_start+0x10/0x10 [ 847.361792][T19311] ? migrate_enable+0x3b5/0x520 [ 847.361823][T19311] ? __pfx_migrate_enable+0x10/0x10 [ 847.361847][T19311] ? __pfx___cant_migrate+0x10/0x10 [ 847.361869][T19311] ? __asan_memset+0x23/0x50 [ 847.361896][T19311] audit_seccomp+0x63/0x1f0 [ 847.361915][T19311] ? migrate_disable+0xce/0x180 [ 847.361947][T19311] __seccomp_filter+0xb38/0x1fe0 [ 847.361984][T19311] ? __pfx___seccomp_filter+0x10/0x10 [ 847.362012][T19311] ? fd_install+0x9c/0x5d0 [ 847.362036][T19311] ? __pfx_lock_release+0x10/0x10 [ 847.362062][T19311] ? rcu_read_lock_sched_held+0x8d/0x130 [ 847.362101][T19311] ? __secure_computing+0x125/0x370 [ 847.362123][T19311] syscall_trace_enter+0xa8/0x150 [ 847.362143][T19311] do_syscall_64+0xcc/0x230 [ 847.362167][T19311] ? clear_bhb_loop+0x35/0x90 [ 847.362185][T19311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.362211][T19311] RIP: 0033:0x7f31cc975d7c [ 847.362231][T19311] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 847.362248][T19311] RSP: 002b:00007f31cd684040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.362272][T19311] RAX: ffffffffffffffda RBX: 00007f31ccb05f80 RCX: 00007f31cc975d7c [ 847.362287][T19311] RDX: 000000000000000f RSI: 00007f31cd6840b0 RDI: 0000000000000003 [ 847.362301][T19311] RBP: 00007f31cd6840a0 R08: 0000000000000000 R09: 0000000000000000 [ 847.362314][T19311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 847.362327][T19311] R13: 000000000000000b R14: 00007f31ccb05f80 R15: 00007f31ccc2fa38 [ 847.362357][T19311] [ 847.402323][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.623012][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 847.630627][ T5275] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 847.667738][ T29] audit: type=1326 audit(1722211096.369:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 847.702557][T19311] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 847.710987][ T8] usb 5-1: device descriptor read/8, error -71 [ 847.717288][T19311] audit: out of memory in audit_log_start [ 847.777836][ T29] audit: type=1326 audit(1722211096.839:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f31cc975e1f code=0x7ffc0000 [ 847.807942][ T5275] usb 1-1: device descriptor read/64, error -71 [ 847.888559][ T29] audit: type=1326 audit(1722211096.839:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f31cc975fca code=0x7ffc0000 [ 847.942179][ T29] audit: type=1326 audit(1722211096.839:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19310 comm="syz.1.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31cc977299 code=0x7ffc0000 [ 847.966899][ T5275] usb usb1-port1: attempt power cycle [ 847.996907][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 848.051148][ T8] usb 5-1: device descriptor read/8, error -71 [ 848.203331][ T8] usb usb5-port1: unable to enumerate USB device [ 848.209874][ T5274] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 848.406686][ T5275] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 848.420831][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 848.442077][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 848.458783][ T5275] usb 1-1: device descriptor read/8, error -71 [ 848.471464][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 848.502235][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 848.522261][ T5274] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 848.543236][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.574373][ T5274] usb 4-1: config 0 descriptor?? [ 848.743959][ T5275] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 848.800480][ T5275] usb 1-1: device descriptor read/8, error -71 [ 848.936843][ T5275] usb usb1-port1: unable to enumerate USB device [ 848.999602][ T5274] plantronics 0003:047F:FFFF.0040: unbalanced collection at end of report description [ 849.035772][ T5274] plantronics 0003:047F:FFFF.0040: parse failed [ 849.058931][ T5274] plantronics 0003:047F:FFFF.0040: probe with driver plantronics failed with error -22 [ 849.105817][T19331] blktrace: Concurrent blktraces are not allowed on loop0 [ 849.132002][T19330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 849.286052][ T5274] usb 4-1: USB disconnect, device number 66 [ 849.539747][T10678] Bluetooth: to_multiplier 7 < 10 [ 849.642709][T19349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.689193][T19349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.842147][T19353] Invalid logical block size (4095) [ 849.906579][ T58] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 850.097979][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 850.112215][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.162003][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.201062][ T58] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 850.234078][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.260764][ T58] usb 5-1: config 0 descriptor?? [ 850.687281][ T58] kye 0003:0458:5017.0041: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 850.760198][ T58] kye 0003:0458:5017.0041: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.4-1/input0 [ 850.825801][ T58] kye 0003:0458:5017.0041: tablet-enabling feature report not found [ 850.843792][ T58] kye 0003:0458:5017.0041: tablet enabling failed [ 850.918490][ T58] usb 5-1: USB disconnect, device number 74 [ 851.066659][T14550] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 851.256638][T14550] usb 3-1: device descriptor read/64, error -71 [ 851.316575][ T5274] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 851.536837][ T5274] usb 4-1: Using ep0 maxpacket: 16 [ 851.537135][T14550] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 851.572975][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 851.602253][ T5274] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 851.616970][T10678] Bluetooth: hci2: command tx timeout [ 851.626949][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.635821][ T5274] usb 4-1: Product: syz [ 851.640891][ T5274] usb 4-1: Manufacturer: syz [ 851.648135][ T5274] usb 4-1: SerialNumber: syz [ 851.667454][ T5274] usb 4-1: config 0 descriptor?? [ 851.681983][ T5274] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 851.699719][ T5274] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 851.746661][T14550] usb 3-1: device descriptor read/64, error -71 [ 851.764028][T19381] blktrace: Concurrent blktraces are not allowed on loop0 [ 851.790570][T19379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.897085][T14550] usb usb3-port1: attempt power cycle [ 852.199015][ T8] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 852.299473][ T5274] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 852.326743][T14550] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 852.378108][T14550] usb 3-1: device descriptor read/8, error -71 [ 852.410179][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 852.444380][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 852.514667][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 852.543884][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.577847][ T8] usb 1-1: config 0 descriptor?? [ 852.676752][T14550] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 852.748015][T14550] usb 3-1: device descriptor read/8, error -71 [ 852.883821][T14550] usb usb3-port1: unable to enumerate USB device [ 852.933225][ T8] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 852.952892][ T5274] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 852.985034][ T5274] em28xx 4-1:0.0: board has no eeprom [ 853.216643][ T5274] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 853.226643][T14550] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 853.241438][ T5274] em28xx 4-1:0.0: dvb set to bulk mode. [ 853.288268][ T5275] em28xx 4-1:0.0: Binding DVB extension [ 853.328112][ T5274] usb 4-1: USB disconnect, device number 67 [ 853.349615][ T5274] em28xx 4-1:0.0: Disconnecting em28xx [ 853.440597][T14550] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 853.489801][T14550] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 853.504622][ T5275] em28xx 4-1:0.0: Registering input extension [ 853.523559][ T5274] em28xx 4-1:0.0: Closing input extension [ 853.528840][T14550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.565967][T14550] usb 5-1: config 0 descriptor?? [ 853.638142][ T5274] em28xx 4-1:0.0: Freeing device [ 853.744117][T14550] usb 1-1: USB disconnect, device number 67 [ 853.761732][T14550] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 853.917089][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 854.435052][T19421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.481009][T19421] ipt_REJECT: TCP_RESET invalid for non-tcp [ 854.812491][T19428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.883034][T19428] blktrace: Concurrent blktraces are not allowed on loop0 [ 854.973043][T19431] input: syz0 as /devices/virtual/input/input42 [ 855.311049][T19440] QAT: Invalid ioctl 21531 [ 855.336295][T19443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 855.355045][T19444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3051'. [ 855.864908][T19461] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3054'. [ 855.924959][T19461] gretap0: entered promiscuous mode [ 856.042012][ T5274] usb 5-1: USB disconnect, device number 75 [ 856.176845][ T5280] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 856.406247][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 856.448618][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.496677][ T5280] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 856.496712][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.517499][ T5280] usb 2-1: config 0 descriptor?? [ 856.532341][T19480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.589361][T19480] blktrace: Concurrent blktraces are not allowed on loop0 [ 856.612192][T19483] QAT: Invalid ioctl 21531 [ 856.876941][ T5280] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 857.506535][ T5274] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 857.697774][ T5280] usb 2-1: USB disconnect, device number 46 [ 857.741540][ T5280] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 857.750712][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 857.863455][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 857.929749][ T5274] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.939717][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.975364][ T5274] usb 4-1: config 0 descriptor?? [ 857.996775][ T5274] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 858.045962][T19518] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 858.052515][T19518] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 858.068620][T19518] vhci_hcd vhci_hcd.0: Device attached [ 858.336853][T14550] usb 17-1: new high-speed USB device number 6 using vhci_hcd [ 858.539953][T19526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3078'. [ 858.548978][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3080'. [ 858.587090][ T58] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 858.680502][T19536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.684784][T19537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 858.712738][T19536] blktrace: Concurrent blktraces are not allowed on loop0 [ 858.781477][T19540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3083'. [ 858.816852][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 858.828827][ T58] usb 5-1: config 0 has no interfaces? [ 858.854383][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.876633][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.884738][ T58] usb 5-1: Product: syz [ 858.903323][ T58] usb 5-1: Manufacturer: syz [ 858.923876][ T58] usb 5-1: SerialNumber: syz [ 858.935708][ T58] usb 5-1: config 0 descriptor?? [ 859.053902][T19549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3086'. [ 859.213727][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 859.336052][T19557] netlink: 'syz.2.3088': attribute type 4 has an invalid length. [ 859.347017][ T58] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 859.446827][ T5280] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 859.548858][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 859.568652][ T58] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 859.592890][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.606345][ T58] usb 2-1: config 0 descriptor?? [ 859.627711][ T58] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 859.649352][ T5280] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.661577][ T5280] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 859.673090][ T5280] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.690336][ T5280] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.705171][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.716000][ T5280] usb 1-1: Product: syz [ 859.720499][ T5280] usb 1-1: Manufacturer: syz [ 859.725878][ T5280] usb 1-1: SerialNumber: syz [ 859.745530][ T5280] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 859.752663][ T5280] cdc_ncm 1-1:1.0: bind() failure [ 859.993053][T19519] vhci_hcd: connection closed [ 859.993532][T11719] vhci_hcd: stop threads [ 860.003718][ T5275] usb 5-1: USB disconnect, device number 76 [ 860.052679][T11719] vhci_hcd: release socket [ 860.065813][T11719] vhci_hcd: disconnect device [ 860.157529][ T58] gspca_sunplus: reg_w_riv err -110 [ 860.187348][ T58] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 860.239676][ T58] usb 4-1: USB disconnect, device number 68 [ 860.407705][ T5274] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 860.578041][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3093'. [ 860.578282][T19568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3093'. [ 860.638942][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 860.666293][ T5274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 860.724162][ T5274] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 860.740994][ T5275] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 860.768043][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.834951][ T5274] usb 3-1: config 0 descriptor?? [ 860.863471][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 860.886522][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 860.979322][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.030010][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.071986][ T5275] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 861.142570][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.192923][ T5275] usb 5-1: config 0 descriptor?? [ 861.206635][ T58] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 861.234223][ T5274] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 861.466670][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 861.725004][ T58] usb 4-1: unable to get BOS descriptor or descriptor too short [ 861.774670][ T58] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 861.798145][ T58] usb 4-1: can't read configurations, error -71 [ 861.818723][ T5275] usb 5-1: language id specifier not provided by device, defaulting to English [ 861.932356][ T5339] usb 2-1: USB disconnect, device number 47 [ 862.069851][ T5280] usb 3-1: USB disconnect, device number 55 [ 862.089794][ T5280] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 862.165070][ T5274] usb 1-1: USB disconnect, device number 68 [ 862.240426][T19566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.247962][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 862.284255][T19566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.528592][ T5275] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #200: -71 [ 862.545332][ T5275] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 862.573229][ T5275] uclogic 0003:256C:006D.0042: failed probing pen v2 parameters: -71 [ 862.603395][ T5275] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 862.642466][ T5275] uclogic 0003:256C:006D.0042: probe with driver uclogic failed with error -71 [ 862.690717][ T5275] usb 5-1: USB disconnect, device number 77 [ 862.947113][ T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 863.133021][T19608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 863.159523][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 863.159542][ T29] audit: type=1326 audit(1722211112.269:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 863.211444][ T8] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d [ 863.237138][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.273588][ T8] usb 2-1: Product: syz [ 863.278919][ T29] audit: type=1326 audit(1722211112.269:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 863.298716][ T8] usb 2-1: Manufacturer: syz [ 863.305865][ T8] usb 2-1: SerialNumber: syz [ 863.311391][ T29] audit: type=1326 audit(1722211112.269:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 863.358648][ T8] usb 2-1: config 0 descriptor?? [ 863.437088][ T8] xillyusb 2-1:0.0: Failed to send quiesce request. Aborting. [ 863.444631][ T8] xillyusb 2-1:0.0: probe with driver xillyusb failed with error -5 [ 863.456648][ T10] [ 863.458084][T14550] vhci_hcd: vhci_device speed not set [ 863.458979][ T10] ============================================ [ 863.470565][ T10] WARNING: possible recursive locking detected [ 863.476701][ T10] 6.10.0-syzkaller-12888-g5437f30d3458 #0 Not tainted [ 863.483453][ T10] -------------------------------------------- [ 863.489631][ T10] kworker/0:0H/10 is trying to acquire lock: [ 863.495596][ T10] ffff88803015ed48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 863.505947][ T10] [ 863.505947][ T10] but task is already holding lock: [ 863.513309][ T10] ffff88803015ed48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 863.524014][ T10] [ 863.524014][ T10] other info that might help us debug this: [ 863.532065][ T10] Possible unsafe locking scenario: [ 863.532065][ T10] [ 863.539501][ T10] CPU0 [ 863.542769][ T10] ---- [ 863.546034][ T10] lock((wq_completion)xillyusb); [ 863.551150][ T10] lock((wq_completion)xillyusb); [ 863.556273][ T10] [ 863.556273][ T10] *** DEADLOCK *** [ 863.556273][ T10] [ 863.564401][ T10] May be due to missing lock nesting notation [ 863.564401][ T10] [ 863.572702][ T10] 2 locks held by kworker/0:0H/10: [ 863.577794][ T10] #0: ffff88803015ed48 ((wq_completion)xillyusb){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 863.589100][ T10] #1: ffffc900000f7d00 ((work_completion)(&xdev->wakeup_workitem)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 863.601791][ T10] [ 863.601791][ T10] stack backtrace: [ 863.607666][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:0H Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 863.617993][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 863.628055][ T10] Workqueue: xillyusb wakeup_all [ 863.632999][ T10] Call Trace: [ 863.636271][ T10] [ 863.639194][ T10] dump_stack_lvl+0x241/0x360 [ 863.643888][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.649100][ T10] ? print_deadlock_bug+0x479/0x620 [ 863.654303][ T10] validate_chain+0x15d3/0x5900 [ 863.659346][ T10] ? __pfx_validate_chain+0x10/0x10 [ 863.664640][ T10] ? __pfx_validate_chain+0x10/0x10 [ 863.669939][ T10] ? __pfx_validate_chain+0x10/0x10 [ 863.675134][ T10] ? mark_lock+0x9a/0x350 [ 863.679546][ T10] __lock_acquire+0x137a/0x2040 [ 863.684396][ T10] lock_acquire+0x1ed/0x550 [ 863.688892][ T10] ? __flush_workqueue+0x1b0/0x1710 [ 863.694085][ T10] ? __pfx_lock_acquire+0x10/0x10 [ 863.699103][ T10] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 863.704909][ T10] ? __init_swait_queue_head+0xae/0x150 [ 863.710451][ T10] ? __flush_workqueue+0x1b0/0x1710 [ 863.715642][ T10] __flush_workqueue+0x1c9/0x1710 [ 863.720686][ T10] ? __flush_workqueue+0x1b0/0x1710 [ 863.725895][ T10] ? rcu_is_watching+0x15/0xb0 [ 863.730664][ T10] ? trace_contention_end+0x3c/0x120 [ 863.735942][ T10] ? __pfx___flush_workqueue+0x10/0x10 [ 863.741403][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 863.747389][ T10] drain_workqueue+0xc9/0x3a0 [ 863.752064][ T10] destroy_workqueue+0xba/0xc40 [ 863.756905][ T10] ? kfree+0x149/0x360 [ 863.760963][ T10] kref_put+0x104/0x180 [ 863.765194][ T10] ? process_scheduled_works+0x945/0x1830 [ 863.770907][ T10] process_scheduled_works+0xa2c/0x1830 [ 863.776473][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 863.782460][ T10] ? assign_work+0x364/0x3d0 [ 863.787132][ T10] worker_thread+0x86d/0xd40 [ 863.791725][ T10] ? __kthread_parkme+0x169/0x1d0 [ 863.796754][ T10] ? __pfx_worker_thread+0x10/0x10 [ 863.801860][ T10] kthread+0x2f0/0x390 [ 863.805945][ T10] ? __pfx_worker_thread+0x10/0x10 [ 863.811074][ T10] ? __pfx_kthread+0x10/0x10 [ 863.815692][ T10] ret_from_fork+0x4b/0x80 [ 863.820206][ T10] ? __pfx_kthread+0x10/0x10 [ 863.824888][ T10] ret_from_fork_asm+0x1a/0x30 [ 863.829678][ T10] [ 863.855559][ T8] usb 2-1: USB disconnect, device number 48 [ 863.861729][ T29] audit: type=1326 audit(1722211112.269:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 863.908523][T19619] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3105'. [ 863.911941][ T29] audit: type=1326 audit(1722211112.269:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 863.985911][ T29] audit: type=1326 audit(1722211112.269:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 864.066682][ T29] audit: type=1326 audit(1722211112.399:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 864.101781][ T29] audit: type=1326 audit(1722211112.399:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 864.137114][ T29] audit: type=1326 audit(1722211112.399:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 864.160458][ T29] audit: type=1326 audit(1722211112.399:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19591 comm="syz.0.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4786377299 code=0x7ffc0000 [ 870.418076][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.424396][ T1269] ieee802154 phy1 wpan1: encryption failed: -22