last executing test programs: 10.124424964s ago: executing program 4 (id=479): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_DELSETELEM={0x68, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x4}, {0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}]}], {0x14}}, 0x90}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) clock_gettime(0x2, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201}], {0x14}}, 0x70}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c80)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffeffffe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x30fb, 0x0, 0xfffffffc, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbec7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110b, 0x6, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x99]}) 9.880398481s ago: executing program 4 (id=481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0xa0, 0x700, 0x8000, 0xffffffff, {{0xc, 0x4, 0x1, 0x2f, 0x30, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xb7, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x10, 0x8000, 0x9aed, 0xd, {{0x8, 0x4, 0x3, 0x19, 0x20, 0x66, 0x0, 0xc, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x82, 0xa, "4bce6cb381f4386e"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @empty, @initdev}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x6, 0x9, 0x0, @remote, @empty, 0x20, 0x7840, 0x7fffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7800, 0x7, 0x6, 0x9, {{0x2d, 0x4, 0x2, 0x4, 0xb4, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @local, {[@end, @end, @timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0x2, [{@multicast1}, {@multicast2, 0x8}, {@remote, 0x8000}, {@multicast1}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0xd, [@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @broadcast, @rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @remote, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x8, 0x9c, 0x0, 0x6, [0x40]}, @timestamp_addr={0x44, 0x3c, 0x67, 0x1, 0xb, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@rand_addr=0x64010102, 0x9}, {@broadcast, 0x7}, {@local, 0x7}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x40e}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f00000005c0)={0x38c, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r5}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xe8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x5, 0xff, 0x8}, {0x3, 0xc, 0x4, 0xcf57}, {0x525f, 0x4, 0x41, 0x53f03119}, {0x1, 0x81, 0x4, 0xe}, {0x4, 0xdf, 0x7, 0xfffffff5}, {0x0, 0x0, 0x6, 0x4}, {0x80, 0x4, 0x5, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@newnexthop={0x28, 0x68, 0x200, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x31}, [@NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8, 0x5, r11}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000cc0)={'ip_vti0\x00', &(0x7f0000000c00)={'tunl0\x00', r13, 0x10, 0x8000, 0xc, 0x100, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x3b, 0x4, 0x0, @loopback, @private=0xa010100, {[@noop, @timestamp_prespec={0x44, 0x24, 0x46, 0x3, 0xe, [{@remote, 0x3c8}, {@multicast2, 0x80000001}, {@rand_addr=0x64010102, 0x957}, {@loopback, 0x6}]}, @timestamp={0x44, 0x2c, 0xcb, 0x0, 0x1, [0x7, 0x1, 0x9, 0x2, 0x0, 0x5d, 0xb59, 0x6, 0x6, 0x1000]}, @rr={0x7, 0xb, 0x5c, [@multicast2, @multicast1]}, @generic={0x89, 0xd, "c75d8d5a1aa39a5fd75bee"}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x88, r15, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x44050}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000e40)={0x1cb, 0xb, 0x8000, 0x1, 0x7ff, 0xb25, 0x4, 0x0, 0x0}, &(0x7f0000000e80)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000ec0)={r17, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x1, 0x4, 0x6564, 0x7, 0x40, 0xffffffff}, &(0x7f0000000f80)=0x9c) openat$audio(0xffffff9c, &(0x7f0000000fc0), 0x101001, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000001000)={'pimreg1\x00', {0x2, 0x0, @initdev}}) read$FUSE(r2, &(0x7f0000001040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000003080)={0x50, 0x0, r18, {0x7, 0x28, 0x98, 0x6, 0x9, 0x3, 0x200, 0x100}}, 0x50) read$FUSE(r2, &(0x7f0000003100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f0000005140)={0xb0, 0xffffffffffffffda, r18, [{{0x0, 0x2, 0x9, 0xffffffffffffffdc, 0x4, 0x3, {0x5, 0x2, 0x8000000000000000, 0x80000000, 0xff6f, 0x2, 0x1, 0x2, 0xf968, 0x8000, 0x401, 0xee00, r19, 0xffff, 0x4}}, {0x4, 0x2, 0x8, 0x80, 'ip6gre0\x00'}}]}, 0xb0) r20 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 9.74702412s ago: executing program 4 (id=482): syz_usb_connect(0x9000000, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xeb, 0x2b, 0x0, 0x40, 0xbfd, 0x1d, 0xf228, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc6, 0x79, 0xa}}]}}]}}, 0x0) 8.238865618s ago: executing program 4 (id=486): r0 = socket$inet6(0xa, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000700)=@ctrl_frame=@rts={{}, {0xa9}, @device_b, @broadcast}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000027c0)=ANY=[@ANYBLOB="144d05209fe184"], 0x10}], 0x1}, 0x0) syz_emit_ethernet(0x21ae, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@cf_end_cf_ack={{}, {0x13b7}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x341, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="14000400726f7365300000000000010000000000a1a46fdc36477aa3"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0xc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x10}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="8080000008021100000100021100000150505050505020000000000000000000000000006400000001"], 0x7b) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) recvfrom$inet6(r6, 0x0, 0x31, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac11286dd6000000000300200fe8000000000000000000000000000aafe8000"/53], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001900)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r9 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_elf32(r9, 0x0, 0x390) 7.85280188s ago: executing program 3 (id=487): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x0, &(0x7f0000000080)) mremap(&(0x7f0000167000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00000ff000/0x3000)=nil) mremap(&(0x7f0000146000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000088000/0x1000)=nil) madvise(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x15) write$P9_RSTATu(r0, &(0x7f0000000580)={0x232, 0x2, 0x0, {{0x500, 0xf0, 0x0, 0x0, {0x0, 0xfffffffe, 0x2}, 0x0, 0x4, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x125, 'odev/n\xb1z#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xaf\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/293}}, 0x232) 7.707266825s ago: executing program 3 (id=488): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) 7.405850427s ago: executing program 3 (id=489): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) syz_usbip_server_init(0x3) (async) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x0, 0x0, 0x2}, @flat, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) (async) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.961742167s ago: executing program 3 (id=490): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000002b80)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030000000000000008000a"], 0x20}}, 0x0) 5.976863337s ago: executing program 3 (id=493): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.499102056s ago: executing program 1 (id=458): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x9}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc2c45513, &(0x7f0000000080)=0x49) 5.25008291s ago: executing program 1 (id=494): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000400018006000600800a0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) 5.114457066s ago: executing program 4 (id=495): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x800000000006, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='H', 0x1}], 0x1) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000012c0)={'sit0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) 5.004860873s ago: executing program 1 (id=496): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 4.841601829s ago: executing program 0 (id=497): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000000000000500"}}}]}, 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pipe2$9p(&(0x7f0000000000), 0x800) munlock(&(0x7f00001c9000/0x1000)=nil, 0x1000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 4.323789787s ago: executing program 0 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x8, 0xa, 0x200, 0x29, 0x6, 0x8, 0x9, 0x6, r2}, &(0x7f00000003c0)=0x20) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x61c2, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1000003}) io_uring_enter(r3, 0x2def, 0x4000, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r6 = timerfd_create(0x1, 0x0) timerfd_settime(r6, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0xc0105500, &(0x7f0000000400)=ANY=[]) socket$kcm(0x29, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r0, &(0x7f00000004c0)=""/172, 0xac, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r9) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00100826bd7000fddbdf258020205dfd02c80200060000"], 0x1c}, 0x1, 0x0, 0x0, 0x2008c044}, 0x4000000) add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="9e5a2d0488bb8db86f44fcf9c452ea988620f3f4d5add967faf42499ab8f4ecba5ef6e5e230fd50c5c966c52ea53e5ee37a9a6859f525baab2952fbd22050259deb379b9948fc302e021a880fd79efc6f0d2421462edbae4", 0x58, 0xfffffffffffffffb) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x7, 0x4) 4.060663354s ago: executing program 4 (id=499): open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=':', @ANYBLOB], 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x1000000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x20) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000300)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = syz_usb_connect$cdc_ecm(0x7000000, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b0005011f0000090400001202060000052406000005240000000d240f01000000000000000000090582020002000000090503420002000000"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 3.995749482s ago: executing program 1 (id=500): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYBLOB='3'], 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffb]}, 0x8) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x2) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc2c45512, &(0x7f00000005c0)={{0x8, 0x5, 0xb7bf, 0x8000, 'syz1\x00', 0xb}, 0x0, [0x4, 0x4, 0x6, 0x4ae, 0x5, 0x9, 0x10001, 0x100, 0x1, 0x1943, 0xfff, 0x13ce0000, 0x101, 0x9, 0x7, 0x4, 0x93, 0xfffffffc, 0x9, 0xe858, 0x7, 0x87e2, 0x8, 0x7, 0x3, 0x3, 0x175a, 0x3, 0x3, 0xf, 0x1, 0x0, 0x7, 0x1, 0x0, 0x267c, 0x10001, 0x0, 0x0, 0x80000000, 0x0, 0xf, 0x3, 0x2, 0xe, 0x5, 0x7fffffff, 0x544, 0x8, 0x89, 0xe7, 0x4, 0x2fba84b5, 0x6, 0x5c7bdc59, 0x7f, 0x1, 0x6, 0x3, 0x1, 0x5, 0x8, 0x6, 0x8, 0xffff, 0x0, 0x6, 0x9, 0xffffff53, 0x401, 0x94, 0xfffffff9, 0x6, 0xff, 0x9, 0x6, 0x3, 0x6, 0x8, 0x9, 0xfffffffc, 0x3fb3, 0x85, 0x7, 0xf, 0x3, 0x6a, 0x7, 0xfffff81d, 0x3, 0x1ff, 0x9, 0x8, 0x3, 0x2b, 0x0, 0x3, 0x90c1, 0x9, 0x0, 0x7644, 0x6, 0x1, 0x80000001, 0xfffffffb, 0x3, 0x4, 0x9, 0x9, 0x5, 0x842d, 0xa, 0x76825a99, 0xb9c, 0x9, 0x7, 0x4, 0x6, 0x0, 0x6, 0x10000000, 0x8, 0x6a712ef5, 0xd, 0xffffff84, 0xffff, 0xffffffff]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}, 0x0) 3.493068892s ago: executing program 0 (id=501): r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000200)={0x3, 0x0, '\x00', {0x0, @bt={0x4, 0x8, 0x1, 0x0, 0x1, 0x80, 0x7, 0x5, 0xffff, 0xe, 0x9a39, 0x0, 0xffff8001, 0xb, 0x0, 0x1, {0xf5f, 0xffff}, 0x0, 0x4}}}) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x20000000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000001c40)={{0x12, 0x1, 0x0, 0x1c, 0xa3, 0x7b, 0x10, 0xc72, 0x13, 0xbabe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x56, 0xb0, 0xd3}}]}}]}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x11c, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x61, 0x3, "f24f78e327bf8f1f4d0bbdbba514f4b30338c117afe738f5e8036eda5507aa051f93f06f5d387477214d6341fedb6ad37e42ac68f20c45a2f082fd85f7244c69b0cbe122c4dc58cf30405150c291d6f112fa106e4c1963c0770a8229a0"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x11c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000001000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0}, 0x68) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000100)={0x3, 0x1, @stop_pts=0x7}) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x36314247, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000005c0)={0x18, &(0x7f0000000440)={0x40, 0xf, 0xbb, {0xbb, 0x38, "c1a0fa65c7a3cc81f0fb7f77430a88bd6e707567fafeb20722cbe3e59ff86fe40cacebd367c428f0fd767d301219193b52b805946ac89bede8323a1db8eb50b02f21beaf2264e834545ca3f04ab9525accdf8af98c846118d89df518fc928624b0863ef9cb053ea2f9dd1d017d9627ac0ad1db3df41c06e4f192075a42b545e8b7e1fee3e642049f669b236470ea2100fdb72106f79d8aeff7723bedbedc9d2ab4f88363f69668e1df77a70f9371fbacc65b3b7b97351f7487"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}, &(0x7f0000000380)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x63, "759249653e01e4f84ed6a4e6e456e04c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x10, 0x9, 0x2, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x7, 0x2}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x1, 0x3b, 0x6, "62665ef1", "62ac10b6"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x80, 0x2, 0x4, 0x5, 0x81}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x5, 0xf9, "44f1006edf68acf50bb73d0a6da509efffeb3d0f5b897025e68733f622fe24ef69c7a1cd83b6f60074659ce6f0a5d3fb76b5620904f10d5146b6364f176f73f73f5f98ac4d35e9a61d24252984a4ebc9a071c72e2fedd903e3203d030586c7118e587622fe60c3e51f86f73451ae67e63008cd84a991d30f0b06780cc2ea68d551117b7536c8bfd6d46b54469644d8193c8554b9a270987b701bb6809d1f7c24c2b1681bc448186c71df760c659eddc64d5f6571d5f0aa9b8802e5ad262e061ee7869f8493a9dcb2a4fbcc9154629281d2a6e113b6346eb0b039610175d94b98f2032481b65021adbb30e78fbc80795e947288dac56e27e139"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x100, 0x80}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x6b6}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0xb, 0x2, "30b0"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000900)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x19, 0x2, "a400"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0xc5}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xdb}}) 2.832571868s ago: executing program 2 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r1) r3 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00\x00', 0x2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r2, r3}, 0x0, 0x0, 0x0) r4 = socket(0x11, 0x80a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711083000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c00000006400000000000000000000002000000400004803c0401800a00010072616e67650000002c0002800800014000003ed2080002400000000b0c00048005000100690000000c00038005000100430000000900010073797a30000000ec0800020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, 0x4, 0x8, 0x500, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5554}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x3c81}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x98}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xdec9}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x40000) landlock_create_ruleset(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfc300000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000000)=""/8, &(0x7f0000000040)=0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000640)={r9, 0xfff, 0x0, [0x3, 0x77a6, 0x401, 0x400], [0x100, 0x7fd, 0x80000001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6b25fea2, 0xffffffff, 0x9, 0x0, 0x10000000000, 0x1, 0x4, 0x0, 0x8000000000000000, 0x7fffffff, 0x0, 0x10001, 0xfffffffffffffffc, 0x3, 0x3, 0xd9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5e, 0xaad, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x9, 0x1000000000, 0x14, 0x8c8, 0x0, 0xfffffffffffffff8, 0x100000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x200, 0x0, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x813f, 0x10001, 0x0, 0x0, 0x4e, 0x200000100000001, 0x0, 0x3, 0xfffffffffffffffe, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x8, 0x6, 0xffffffffffffffff, 0x0, 0x7f, 0xfffffffffffffffd, 0x8000000000800, 0x0, 0xffffffffdffffffb, 0x6, 0x9]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f00000006c0)={r9, 0xc1, 0x80000000, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104000000000000000100000000", @ANYRES32=r5, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004000000050006"], 0x44}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 2.831916841s ago: executing program 0 (id=504): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000001500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000340)={{r0}, r1, 0x1a, @inherit={0x0, 0xfffffffffffffffe}, @subvolid=0x80000000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d00)=ANY=[@ANYBLOB="140000040000000000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014080000000002400000001208000440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) close(r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000300)=[@acquire, @request_death], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b80)="a4"}) r7 = syz_clone(0x69b7080, 0x0, 0xfffffffffffffcea, &(0x7f00000014c0), 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149b82, 0x1e4) write$cgroup_int(r8, &(0x7f0000000000)=0x100, 0x12) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000001440)={0xfffffffffffffeae}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000013c0)={r9, 0x2}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000001400)=0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "77bcd0228c13951a", "844c8615bf2c74ac88c46654e2d702a70d7cb798bd3b2ef154fa823f128fc09a", "fbc804b6", "d84c025a63dcb4b5"}, 0x38) ioprio_set$pid(0x1, r7, 0x2000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) 2.684606742s ago: executing program 3 (id=505): r0 = socket$inet6(0xa, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000700)=@ctrl_frame=@rts={{}, {0xa9}, @device_b, @broadcast}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000027c0)=ANY=[@ANYBLOB="144d05209fe184"], 0x10}], 0x1}, 0x0) syz_emit_ethernet(0x21ae, &(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@cf_end_cf_ack={{}, {0x13b7}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x341, &(0x7f0000000a80)=ANY=[@ANYBLOB="120100007563f140800410d04d170000000109022f030161dd278cdb2f6281b81010350cc46c5000000000fbc7450008bcb6060509050a10500408800e0905091020000605fa072501018cff034f2390ff7d70f25131dc05f71cb4daf956513cdd35949c9f61c53fa13d1fb9e7dfcc97325672f6f822e7be1102d5a96124f9b702c8871db0ac742901f8bc47bb9f652dfcf5bff009050e080002086906d931a60f4af357d3fcf584754f62ab4cc37c55932fd84dca583c4d1b5ac86ec58cb058681c84095d903902a63642c4f154c5ff8d1ece382f485b74c3f3e9be495b4788d281457bc6f34cddea8f6275eb29874d01031bca2e048a204265aa92b90086aa4b45fa9f34e166130a1c48a227287903fa56d900653ee3a1e0bd50de132585b719857d8f2356de1d80a1ac80b61374fccb9fe3aee2a46cd5e8608b5f2e8e3f7452ad3f6a2539dccb4ebf67161c6155c4a72dca6be20915dc9a32121ffaf0306edb9159820905041040008b02090725010309ea0e0725000440d50009050800ff0304"], 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="14000400726f7365300000000000010000000000a1a46fdc36477aa3"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0xc0, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x10}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="8080000008021100000100021100000150505050505020000000000000000000000000006400000001"], 0x7b) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) recvfrom$inet6(r6, 0x0, 0x31, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaac11286dd6000000000300200fe8000000000000000000000000000aafe8000"/53], 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001900)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r9 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_elf32(r9, 0x0, 0x390) 2.293890514s ago: executing program 2 (id=506): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x200, 0x0, @void, @value, @void, @value}, 0x50) close_range(r0, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) 2.116893677s ago: executing program 2 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 1.87215172s ago: executing program 2 (id=508): r0 = openat$dir(0xffffff9c, &(0x7f0000000480)='./cgroup/cgroup.procs\x00', 0x84400, 0x100) r1 = openat(r0, &(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x3, 0x0) read$alg(r1, &(0x7f0000000240)=""/213, 0xd5) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28080) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000740)=ANY=[], 0xff2e) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000002300)) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f0000000200), 0x4) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x120) ioctl$UI_DEV_CREATE(r5, 0x5501) r7 = socket(0x28, 0x1, 0x0) connect$packet(r7, &(0x7f0000000100)={0x28}, 0x14) connect$packet(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000005ffff0000c061c644000000", @ANYBLOB="e1805e3268bb507ff87c04418ec30c739ffeb8a321350feb34fb5d69bf4d952d4355717a00b70fad02902271662cee97fcbc9aefce04a31af47281126bfae5eb73b5100800b44ef7dc9daba932c91b2f10db91a6d78447f3a312d932065ffae1cb8c50c812852e51821b23df96d13d4a44df607e2444dd727d0fb28aef29ff", @ANYRES32, @ANYBLOB="8f438f0adc32615f9aed31fd8104db13736b2885c35fcee4a05a2f53349102e844460f0c8f63db3628bb4e74b0634afa147c70f751c6", @ANYRES32=0x0, @ANYBLOB="2bf5a16140220e137868b3b1a245224c8a918f30c3290c6893181c5b7b90050ac316cf448e36b224f2c16211fa2ebb2e7830d97f1c7e9766749bba9911c03a1682bb288480c01c5f5f4db4ce0be4373d22a0f0429e121c215e60748ad06024f45e6af2cb6f2d362df32c5ff3c0bea650336d51b5070d09ba46b2786aa83ea06b34dc64a537b2e360c03b15e8d3dc3d92c00cecf8b5798dc35514bab34cd1886ef327538680cb51de2f3a5740da29ef914288ab05975cb359ece0bf10a0eb7a2e729bb78b1cfd6f4358245f06768775c941", @ANYRES64=r5], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) r9 = fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x400080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r10, 0xc08c5334, &(0x7f0000000180)={0x9, 0x2, 0x1, 'queue1\x00', 0x3aa}) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f0000000340)={0x3, @output={0x0, 0x1, {0x9, 0x8}, 0x6, 0x4}}) 1.654876653s ago: executing program 0 (id=509): unshare(0x24020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c327ccf7641833fbb34", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,dont_measure,fscontext=root,pcr=00000000000000000054,obj_type=ecb(cast6)\x00,permit_directio,\x00'], 0x0, 0x0, &(0x7f00000002c0)="ac5c76ce1ee6b71f1d0c566b84ab593efe8b3943f6d4a48e3c640dd91f2c9756772cf8722be3a5439041022f22ba3d1e226c803b5fd2996171b6656dadf67562c7e3ef8d413a1369832c0e6997b862ef1e18fc748239893df99d52d79887a73fff2ebff23b97ed7439ba5d17f719511a210b29120abba54c6633e1e48526b3de9517bab45d6de022bba3814b") r2 = open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x80101) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, 0x0) 1.116734936s ago: executing program 0 (id=510): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b0", 0x27, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 476.115646ms ago: executing program 1 (id=511): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="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", 0x125) tee(r0, r4, 0x81, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) write(r2, 0x0, 0x0) 435.995537ms ago: executing program 2 (id=512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x40000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) 106.912579ms ago: executing program 2 (id=513): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000340)={0x5, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0xcfc}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x40005) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={0x0, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x10b101, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400"], 0x64}}, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x8000002}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000003380)=ANY=[@ANYRESHEX=r4], 0x0) syz_usb_connect(0x0, 0x2ee, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 0s ago: executing program 1 (id=514): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c00000004000000020040000000000001020000", @ANYRES32, @ANYBLOB="b400000000000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x77359400}}, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2f42, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) r1 = socket(0x18, 0x0, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @remote}, &(0x7f0000000100)=0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): ndor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.170972][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.179850][ T5276] usb 5-1: Product: syz [ 277.184433][ T5276] usb 5-1: Manufacturer: syz [ 277.202866][ T5276] usb 5-1: SerialNumber: syz [ 277.288270][ T9] usb 3-1: string descriptor 0 read error: -71 [ 277.318473][ T9] usb 3-1: USB disconnect, device number 18 [ 277.421207][ T5275] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 277.438330][ T5275] usbhid 2-1:0.0: can't add hid device: -71 [ 277.444406][ T5275] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 277.483409][ T5275] usb 2-1: USB disconnect, device number 22 [ 277.888792][ T5311] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 278.001465][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 278.010781][ T7076] netlink: 'syz.1.312': attribute type 7 has an invalid length. [ 278.048216][ T5311] usb 4-1: Using ep0 maxpacket: 8 [ 278.059958][ T5311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 278.072543][ T5311] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 278.084223][ T5311] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 278.093672][ T5311] usb 4-1: Product: syz [ 278.098816][ T5311] usb 4-1: Manufacturer: syz [ 278.103932][ T5311] usb 4-1: SerialNumber: syz [ 278.164414][ T7076] netlink: 'syz.1.312': attribute type 8 has an invalid length. [ 278.177453][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 278.288281][ T5282] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 278.341807][ T5311] usb 4-1: Invalid connection information received from device [ 278.431469][ T7080] netlink: 'syz.2.313': attribute type 3 has an invalid length. [ 278.441808][ T5282] usb 1-1: device descriptor read/64, error -71 [ 278.545450][ T5311] usb 4-1: USB disconnect, device number 36 [ 278.702312][ T5282] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 278.859957][ T5282] usb 1-1: device descriptor read/64, error -71 [ 278.974894][ T5282] usb usb1-port1: attempt power cycle [ 279.042050][ T6760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.157279][ T6760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.273037][ T6760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.303939][ T7085] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.318'. [ 279.315450][ T7085] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 279.318275][ T5282] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 279.374166][ T5282] usb 1-1: device descriptor read/8, error -71 [ 279.455583][ T6760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.491346][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.542013][ T7089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.630055][ T5282] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 279.686282][ T5282] usb 1-1: device descriptor read/8, error -71 [ 279.692994][ T5276] cdc_ncm 5-1:1.0: skipping garbage [ 279.713491][ T5276] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 279.727039][ T6760] bridge_slave_1: left allmulticast mode [ 279.752272][ T5276] cdc_ncm 5-1:1.0: bind() failure [ 279.758531][ T6760] bridge_slave_1: left promiscuous mode [ 279.778445][ T5276] usb 5-1: USB disconnect, device number 19 [ 279.789802][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.818638][ T5282] usb usb1-port1: unable to enumerate USB device [ 279.818863][ T6760] bridge_slave_0: left allmulticast mode [ 279.842152][ T5275] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 279.876566][ T6760] bridge_slave_0: left promiscuous mode [ 279.892261][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.898916][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.910582][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.935268][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.956471][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.976008][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 279.984888][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.051207][ T5275] usb 4-1: config 97 has an invalid interface descriptor of length 3, skipping [ 280.083780][ T5275] usb 4-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 280.138184][ T5275] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 280.147604][ T5275] usb 4-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 280.158374][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.392174][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 280.475275][ T29] audit: type=1804 audit(1727135862.918:53): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.325" name="file2" dev="ramfs" ino=22567 res=1 errno=0 [ 280.481940][ T7104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.764012][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.776380][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.801938][ T6760] bond0 (unregistering): Released all slaves [ 281.248846][ T58] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 281.323826][ T7094] chnl_net:caif_netlink_parms(): no params data found [ 281.430045][ T58] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.459402][ T58] usb 3-1: not running at top speed; connect to a high speed hub [ 281.469887][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.489496][ T6760] hsr_slave_0: left promiscuous mode [ 281.497241][ T58] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 281.509042][ T6760] hsr_slave_1: left promiscuous mode [ 281.518072][ T58] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.531521][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.549410][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.568792][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.604019][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.608145][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.621096][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.635559][ T58] usb 3-1: Product: syz [ 281.659581][ T58] usb 3-1: Manufacturer: syz [ 281.665129][ T58] usb 3-1: SerialNumber: syz [ 281.677311][ T6760] veth1_macvtap: left promiscuous mode [ 281.691924][ T6760] veth0_macvtap: left promiscuous mode [ 281.705660][ T6760] veth1_vlan: left promiscuous mode [ 281.716067][ T6760] veth0_vlan: left promiscuous mode [ 282.068331][ T54] Bluetooth: hci1: command tx timeout [ 282.328766][ T7144] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.334'. [ 282.517822][ T5275] usb 4-1: string descriptor 0 read error: -71 [ 282.577717][ T5275] usb 4-1: USB disconnect, device number 37 [ 282.638108][ T5747] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 282.778347][ T5282] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 282.844427][ T5747] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 282.854686][ T5747] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 282.866276][ T5747] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 282.885270][ T5747] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.912592][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.966757][ T5282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 282.989125][ T5282] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.006006][ T5282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.019963][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.027470][ T5275] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 283.028468][ T5282] usb 1-1: SerialNumber: syz [ 283.173887][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 283.194577][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 283.215459][ T5275] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.245630][ T5275] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 283.257057][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 283.268069][ T5275] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 283.283557][ T5282] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 283.302470][ T5275] usb 4-1: config 11 has no interface number 0 [ 283.312097][ T5275] usb 4-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 283.328247][ T5275] usb 4-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.342429][ T5275] usb 4-1: config 11 interface 244 has no altsetting 0 [ 283.351360][ T5275] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 283.361363][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 283.369797][ T5275] usb 4-1: Manufacturer: syz [ 283.374900][ T5275] usb 4-1: SerialNumber: syz [ 283.935252][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 284.056792][ T58] cdc_ncm 3-1:1.0: skipping garbage [ 284.056814][ T58] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 284.056835][ T58] cdc_ncm 3-1:1.0: bind() failure [ 284.085628][ T58] usb 3-1: USB disconnect, device number 19 [ 284.148143][ T54] Bluetooth: hci1: command tx timeout [ 284.345807][ T5275] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 284.364974][ T5275] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 284.469350][ T5275] peak_usb 4-1:11.244: probe with driver peak_usb failed with error -71 [ 284.504872][ T5275] usb 4-1: USB disconnect, device number 38 [ 284.539959][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.560637][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.576900][ T7094] bridge_slave_0: entered allmulticast mode [ 284.597682][ T7094] bridge_slave_0: entered promiscuous mode [ 284.607621][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.615258][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.625580][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.633992][ T7094] bridge_slave_1: entered allmulticast mode [ 284.656690][ T7094] bridge_slave_1: entered promiscuous mode [ 284.723830][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.749337][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.768344][ T8] usb 3-1: device descriptor read/64, error -71 [ 284.813806][ T7094] team0: Port device team_slave_0 added [ 284.833239][ T7094] team0: Port device team_slave_1 added [ 284.891719][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.914669][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.952521][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.967476][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.015966][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.047174][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 285.068330][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.198177][ T8] usb 3-1: device descriptor read/64, error -71 [ 285.210322][ T7094] hsr_slave_0: entered promiscuous mode [ 285.247534][ T7094] hsr_slave_1: entered promiscuous mode [ 285.329288][ T8] usb usb3-port1: attempt power cycle [ 285.441230][ T5282] usb 5-1: USB disconnect, device number 20 [ 285.492485][ T5275] usb 1-1: USB disconnect, device number 40 [ 285.500129][ T5311] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 285.648291][ T5311] usb 4-1: device descriptor read/64, error -71 [ 285.698522][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 285.729735][ T8] usb 3-1: device descriptor read/8, error -71 [ 285.898196][ T5311] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 285.991826][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.022060][ T6760] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.057319][ T8] usb 3-1: device descriptor read/8, error -71 [ 286.068207][ T5311] usb 4-1: device descriptor read/64, error -71 [ 286.198418][ T5311] usb usb4-port1: attempt power cycle [ 286.198611][ T8] usb usb3-port1: unable to enumerate USB device [ 286.218273][ T54] Bluetooth: hci1: command tx timeout [ 286.358514][ T5276] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 286.404567][ T6760] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.508652][ T5276] usb 3-1: device descriptor read/64, error -71 [ 286.563599][ T5311] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 286.585745][ T6760] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.604364][ T5311] usb 4-1: device descriptor read/8, error -71 [ 286.613725][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.626177][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.644377][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.657326][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.667913][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.679014][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.724072][ T6760] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.781590][ T7094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.789184][ T5276] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 286.829523][ T7094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.840794][ T7094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.858301][ T5311] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 286.898255][ T7094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.905836][ T5311] usb 4-1: device descriptor read/8, error -71 [ 286.938158][ T5282] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 286.945876][ T5276] usb 3-1: device descriptor read/64, error -71 [ 286.953007][ T6760] bridge_slave_1: left allmulticast mode [ 286.959265][ T6760] bridge_slave_1: left promiscuous mode [ 286.965625][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.974936][ T6760] bridge_slave_0: left allmulticast mode [ 286.984509][ T6760] bridge_slave_0: left promiscuous mode [ 286.990877][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.018856][ T5311] usb usb4-port1: unable to enumerate USB device [ 287.068639][ T5276] usb usb3-port1: attempt power cycle [ 287.088158][ T5282] usb 1-1: device descriptor read/64, error -71 [ 287.331251][ T5282] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 287.389619][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.404422][ T7207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.445301][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.457183][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.468141][ T5282] usb 1-1: device descriptor read/64, error -71 [ 287.475689][ T6760] bond0 (unregistering): Released all slaves [ 287.568776][ T5276] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 287.580212][ T5282] usb usb1-port1: attempt power cycle [ 287.689824][ T7204] chnl_net:caif_netlink_parms(): no params data found [ 287.728225][ T5276] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 287.764358][ T5276] usb 3-1: config 97 has an invalid interface descriptor of length 3, skipping [ 287.775740][ T5276] usb 3-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 287.786786][ T5276] usb 3-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 287.798255][ T5276] usb 3-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 287.808524][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.891646][ T6760] hsr_slave_0: left promiscuous mode [ 287.898932][ T6760] hsr_slave_1: left promiscuous mode [ 287.905252][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.915007][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.928343][ T5282] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 287.937318][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.945026][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.960488][ T5282] usb 1-1: device descriptor read/8, error -71 [ 287.968163][ T6760] veth1_macvtap: left promiscuous mode [ 287.973757][ T6760] veth0_macvtap: left promiscuous mode [ 287.979782][ T6760] veth1_vlan: left promiscuous mode [ 287.985145][ T6760] veth0_vlan: left promiscuous mode [ 288.025414][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 288.082732][ T7214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.205811][ T5282] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 288.252695][ T5282] usb 1-1: device descriptor read/8, error -71 [ 288.308548][ T54] Bluetooth: hci1: command tx timeout [ 288.369569][ T5282] usb usb1-port1: unable to enumerate USB device [ 288.669802][ T8] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 288.778386][ T54] Bluetooth: hci4: command tx timeout [ 288.891809][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 288.903949][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.922834][ T8] usb 4-1: not running at top speed; connect to a high speed hub [ 288.941374][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.951733][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.961553][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.997362][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.007000][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 289.015083][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.036937][ T8] usb 4-1: Product: syz [ 289.042050][ T8] usb 4-1: Manufacturer: syz [ 289.046699][ T8] usb 4-1: SerialNumber: syz [ 289.080583][ T5282] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 289.238249][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 289.252726][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 289.274087][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 289.287593][ T5282] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 289.305537][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.317711][ T5282] usb 1-1: config 0 descriptor?? [ 289.730995][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.739943][ T7204] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.752073][ T7204] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.771771][ T7204] bridge_slave_0: entered allmulticast mode [ 289.790751][ T7204] bridge_slave_0: entered promiscuous mode [ 289.807173][ T7204] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.815198][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.825649][ T7204] bridge_slave_1: entered allmulticast mode [ 289.852157][ T7204] bridge_slave_1: entered promiscuous mode [ 289.865012][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 289.903849][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.936710][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.980711][ T5282] hid (null): bogus close delimiter [ 290.003331][ T7204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.027590][ T5282] hid-generic 0003:0158:0100.0004: unknown main item tag 0x0 [ 290.039444][ T5282] hid-generic 0003:0158:0100.0004: unknown main item tag 0x0 [ 290.047684][ T5282] hid-generic 0003:0158:0100.0004: bogus close delimiter [ 290.057373][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.065510][ T5282] hid-generic 0003:0158:0100.0004: item 0 0 2 10 parsing failed [ 290.074627][ T5282] hid-generic 0003:0158:0100.0004: probe with driver hid-generic failed with error -22 [ 290.095566][ T7204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.200437][ T5747] usb 1-1: USB disconnect, device number 45 [ 290.323441][ T7204] team0: Port device team_slave_0 added [ 290.345748][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.353129][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.365230][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.373416][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.404680][ T7204] team0: Port device team_slave_1 added [ 290.495905][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.518189][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.560141][ T7204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.602812][ T7204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.610607][ T7204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.641454][ T7204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.741687][ T7204] hsr_slave_0: entered promiscuous mode [ 290.752894][ T7204] hsr_slave_1: entered promiscuous mode [ 290.762045][ T7204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.773702][ T7204] Cannot create hsr debugfs directory [ 290.868574][ T54] Bluetooth: hci4: command tx timeout [ 290.990126][ T5276] usb 3-1: string descriptor 0 read error: -71 [ 291.010920][ T5276] usb 3-1: USB disconnect, device number 27 [ 291.040897][ T7245] FAULT_INJECTION: forcing a failure. [ 291.040897][ T7245] name failslab, interval 1, probability 0, space 0, times 0 [ 291.079853][ T7245] CPU: 0 UID: 0 PID: 7245 Comm: syz.0.350 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 291.090265][ T7245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 291.100370][ T7245] Call Trace: [ 291.103688][ T7245] [ 291.106702][ T7245] dump_stack_lvl+0x241/0x360 [ 291.111443][ T7245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.116691][ T7245] ? __pfx__printk+0x10/0x10 [ 291.121315][ T7245] ? fs_reclaim_acquire+0x93/0x140 [ 291.126573][ T7245] ? __pfx___might_resched+0x10/0x10 [ 291.131916][ T7245] should_fail_ex+0x3b0/0x4e0 [ 291.136655][ T7245] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 291.142432][ T7245] should_failslab+0xac/0x100 [ 291.147196][ T7245] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 291.152975][ T7245] __kmalloc_noprof+0xd8/0x400 [ 291.157812][ T7245] tomoyo_realpath_from_path+0xcf/0x5e0 [ 291.163519][ T7245] tomoyo_path_number_perm+0x23a/0x880 [ 291.169050][ T7245] ? tomoyo_path_number_perm+0x208/0x880 [ 291.174828][ T7245] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.180881][ T7245] ? __pfx_lock_acquire+0x10/0x10 [ 291.185982][ T7245] ? __fget_files+0x29/0x470 [ 291.190628][ T7245] ? __fget_files+0x3f3/0x470 [ 291.195371][ T7245] security_file_ioctl_compat+0xc6/0x2a0 [ 291.201102][ T7245] __se_compat_sys_ioctl+0xd6/0xc90 [ 291.206374][ T7245] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 291.212255][ T7245] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 291.218305][ T7245] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.224704][ T7245] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 291.231362][ T7245] ? lockdep_hardirqs_on+0x99/0x150 [ 291.236621][ T7245] __do_fast_syscall_32+0xb4/0x110 [ 291.241793][ T7245] ? exc_page_fault+0x590/0x8c0 [ 291.246702][ T7245] do_fast_syscall_32+0x34/0x80 [ 291.251609][ T7245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.257991][ T7245] RIP: 0023:0xf746d579 [ 291.262121][ T7245] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.281779][ T7245] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 291.290339][ T7245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c85512 [ 291.298361][ T7245] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.306381][ T7245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.314404][ T7245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.322427][ T7245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.330462][ T7245] [ 291.347059][ T7245] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.443251][ T8] cdc_ncm 4-1:1.0: skipping garbage [ 291.449886][ T8] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 291.468508][ T8] cdc_ncm 4-1:1.0: bind() failure [ 291.483561][ T8] usb 4-1: USB disconnect, device number 43 [ 291.523249][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.562137][ T7094] veth0_vlan: entered promiscuous mode [ 291.578356][ T1172] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 291.604590][ T7094] veth1_vlan: entered promiscuous mode [ 291.718829][ T7261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.768160][ T1172] usb 3-1: Using ep0 maxpacket: 16 [ 291.779811][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 291.812902][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 291.850390][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 291.869049][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 291.888798][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 291.972037][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 291.997136][ T7094] veth0_macvtap: entered promiscuous mode [ 292.024471][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 292.076925][ T7094] veth1_macvtap: entered promiscuous mode [ 292.103509][ T1172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 292.153953][ T1172] usb 3-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 292.166817][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.187021][ T1172] usb 3-1: Product: syz [ 292.194012][ T1172] usb 3-1: Manufacturer: syz [ 292.203281][ T1172] usb 3-1: SerialNumber: syz [ 292.238501][ T1172] usb 3-1: config 0 descriptor?? [ 292.250836][ T1172] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 292.258194][ T5292] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 292.305201][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.326581][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.351093][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.372598][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.418588][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.425837][ T5292] usb 1-1: device descriptor read/64, error -71 [ 292.466925][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.488973][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.528140][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.571380][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.604025][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.617587][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.629683][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.644335][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.651562][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.659431][ T5292] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 292.694483][ T1172] gspca_sn9c20x: Write register 1000 failed -71 [ 292.723122][ T1172] gspca_sn9c20x: Device initialization failed [ 292.746979][ T7094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.761637][ T1172] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 292.778549][ T7094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.798096][ T1172] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 292.818047][ T7094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.818999][ T5292] usb 1-1: device descriptor read/64, error -71 [ 292.837899][ T1172] usb 3-1: USB disconnect, device number 28 [ 292.844076][ T7094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.885664][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.356'. [ 292.931385][ T7299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.356'. [ 292.943223][ T54] Bluetooth: hci4: command tx timeout [ 292.978392][ T5292] usb usb1-port1: attempt power cycle [ 293.187038][ T7204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.236807][ T7204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.248840][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.280274][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.308507][ T7204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.325095][ T7204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.358118][ T5292] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 293.369765][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.387484][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.408280][ T5292] usb 1-1: device descriptor read/8, error -71 [ 293.587477][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.658177][ T5292] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 293.675434][ T7204] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.703643][ T5292] usb 1-1: device descriptor read/8, error -71 [ 293.718741][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.726015][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.750509][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.769749][ T7330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.790725][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.797864][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.825994][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.846938][ T5292] usb usb1-port1: unable to enumerate USB device [ 293.882861][ T7204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.961769][ T7204] veth0_vlan: entered promiscuous mode [ 293.982134][ T7204] veth1_vlan: entered promiscuous mode [ 294.062411][ T7204] veth0_macvtap: entered promiscuous mode [ 294.081605][ T7204] veth1_macvtap: entered promiscuous mode [ 294.101537][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.112825][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.123106][ T5275] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.131675][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.143927][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.154127][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.165897][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.184538][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.199976][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.212254][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.224371][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.235161][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.245075][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.256009][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.266918][ T7204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.279929][ T7204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.288296][ T5292] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 294.292024][ T7204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.308059][ T5275] usb 4-1: config 97 has an invalid interface descriptor of length 3, skipping [ 294.323417][ T5275] usb 4-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 294.335215][ T5275] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 294.350845][ T7204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.365716][ T5275] usb 4-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 294.375163][ T7204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.391922][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.400998][ T7204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.431043][ T7204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.478613][ T5292] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.507023][ T5292] usb 3-1: not running at top speed; connect to a high speed hub [ 294.518288][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.567526][ T5292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 294.601308][ T5292] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.618540][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 294.630191][ T5292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 294.639586][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.648447][ T5292] usb 3-1: Product: syz [ 294.652661][ T5292] usb 3-1: Manufacturer: syz [ 294.657286][ T5292] usb 3-1: SerialNumber: syz [ 294.665782][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.695924][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.722672][ T7334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.726491][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.746339][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.857893][ T6760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.028884][ T54] Bluetooth: hci4: command tx timeout [ 295.103380][ T6760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.266157][ T6760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.382840][ T6760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.803991][ T7352] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 295.815479][ T7352] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 295.861939][ T6760] bridge_slave_1: left allmulticast mode [ 295.880098][ T6760] bridge_slave_1: left promiscuous mode [ 295.886213][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.919298][ T6760] bridge_slave_0: left allmulticast mode [ 295.925543][ T6760] bridge_slave_0: left promiscuous mode [ 295.934920][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.983805][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.994488][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.013773][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.023828][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.033896][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.042236][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.078146][ T5282] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 296.250893][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 296.279354][ T5282] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=14.e5 [ 296.303238][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.343672][ T5282] usb 1-1: config 0 descriptor?? [ 296.390325][ T5282] usb 1-1: selecting invalid altsetting 1 [ 296.396155][ T5282] catc 1-1:0.0: Can't set altsetting 1. [ 296.405260][ T5282] catc 1-1:0.0: probe with driver catc failed with error -5 [ 296.586494][ T5276] usb 1-1: USB disconnect, device number 50 [ 296.724650][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.738202][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.762485][ T6760] bond0 (unregistering): Released all slaves [ 296.781161][ T5275] usb 4-1: string descriptor 0 read error: -71 [ 296.839202][ T5275] usb 4-1: USB disconnect, device number 44 [ 297.091496][ T5292] cdc_ncm 3-1:1.0: skipping garbage [ 297.091517][ T5292] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 297.091538][ T5292] cdc_ncm 3-1:1.0: bind() failure [ 297.110436][ T5292] usb 3-1: USB disconnect, device number 29 [ 297.298903][ T7368] netlink: 56 bytes leftover after parsing attributes in process `syz.4.371'. [ 297.567784][ T6760] hsr_slave_0: left promiscuous mode [ 297.577214][ T6760] hsr_slave_1: left promiscuous mode [ 297.655283][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.678188][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.693278][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.704749][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.728155][ T58] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 297.747148][ T6760] veth1_macvtap: left promiscuous mode [ 297.765638][ T6760] veth0_macvtap: left promiscuous mode [ 297.776441][ T6760] veth1_vlan: left promiscuous mode [ 297.817280][ T6760] veth0_vlan: left promiscuous mode [ 297.889864][ T58] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.918918][ T58] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.973123][ T58] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.998134][ T5292] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.019151][ T58] usb 3-1: config 1 interface 1 has no altsetting 0 [ 298.039764][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.050470][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.068440][ T58] usb 3-1: Product: syz [ 298.078188][ T58] usb 3-1: Manufacturer: syz [ 298.084513][ T58] usb 3-1: SerialNumber: syz [ 298.108989][ T58] cdc_ncm 3-1:1.0: skipping garbage [ 298.115255][ T58] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 298.134684][ T58] cdc_ncm 3-1:1.0: bind() failure [ 298.148313][ T5229] Bluetooth: hci1: command tx timeout [ 298.149756][ T5292] usb 5-1: device descriptor read/64, error -71 [ 298.287602][ T7399] FAULT_INJECTION: forcing a failure. [ 298.287602][ T7399] name failslab, interval 1, probability 0, space 0, times 0 [ 298.305126][ T58] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 298.305404][ T7399] CPU: 0 UID: 0 PID: 7399 Comm: syz.0.376 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 298.323522][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.333864][ T7399] Call Trace: [ 298.337165][ T7399] [ 298.340108][ T7399] dump_stack_lvl+0x241/0x360 [ 298.344816][ T7399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.350488][ T7399] ? __pfx__printk+0x10/0x10 [ 298.355104][ T7399] ? fs_reclaim_acquire+0x93/0x140 [ 298.360293][ T7399] ? __pfx___might_resched+0x10/0x10 [ 298.365644][ T7399] should_fail_ex+0x3b0/0x4e0 [ 298.370359][ T7399] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 298.376099][ T7399] should_failslab+0xac/0x100 [ 298.380797][ T7399] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 298.386550][ T7399] __kmalloc_noprof+0xd8/0x400 [ 298.391375][ T7399] tomoyo_realpath_from_path+0xcf/0x5e0 [ 298.396955][ T7399] tomoyo_path_number_perm+0x23a/0x880 [ 298.402433][ T7399] ? tomoyo_path_number_perm+0x208/0x880 [ 298.408081][ T7399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.414087][ T7399] ? __pfx_lock_acquire+0x10/0x10 [ 298.419157][ T7399] ? __fget_files+0x29/0x470 [ 298.423764][ T7399] ? __fget_files+0x3f3/0x470 [ 298.428471][ T7399] security_file_ioctl_compat+0xc6/0x2a0 [ 298.434157][ T7399] __se_compat_sys_ioctl+0xd6/0xc90 [ 298.439488][ T7399] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 298.445335][ T7399] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.451350][ T7399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.457724][ T7399] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 298.464344][ T7399] ? lockdep_hardirqs_on+0x99/0x150 [ 298.469568][ T7399] __do_fast_syscall_32+0xb4/0x110 [ 298.474709][ T7399] ? exc_page_fault+0x590/0x8c0 [ 298.479589][ T7399] do_fast_syscall_32+0x34/0x80 [ 298.484469][ T7399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.490824][ T7399] RIP: 0023:0xf746d579 [ 298.494919][ T7399] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.514566][ T7399] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 298.523003][ T7399] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008932 [ 298.531016][ T7399] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.539016][ T7399] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.547003][ T7399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.554992][ T7399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.563081][ T7399] [ 298.589814][ T58] usb 3-1: USB disconnect, device number 30 [ 298.611853][ T7399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.631637][ T5292] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 298.780995][ T5292] usb 5-1: device descriptor read/64, error -71 [ 298.889745][ T5292] usb usb5-port1: attempt power cycle [ 298.993744][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 299.041945][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 299.234255][ T5292] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 299.278815][ T5292] usb 5-1: device descriptor read/8, error -71 [ 299.535201][ T5292] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 299.585018][ T5292] usb 5-1: device descriptor read/8, error -71 [ 299.731888][ T5292] usb usb5-port1: unable to enumerate USB device [ 299.923333][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 300.172651][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.185949][ T7424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.227340][ T5229] Bluetooth: hci1: command tx timeout [ 300.247891][ T7357] chnl_net:caif_netlink_parms(): no params data found [ 300.460206][ T5275] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 300.534555][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.542544][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.551474][ T7357] bridge_slave_0: entered allmulticast mode [ 300.559028][ T7357] bridge_slave_0: entered promiscuous mode [ 300.566966][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.574957][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.583562][ T7357] bridge_slave_1: entered allmulticast mode [ 300.590758][ T7357] bridge_slave_1: entered promiscuous mode [ 300.632895][ T5275] usb 3-1: config 97 has an invalid interface descriptor of length 3, skipping [ 300.642258][ T5275] usb 3-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 300.667754][ T7436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 300.689250][ T5275] usb 3-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 300.691731][ T5292] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 300.747256][ T5275] usb 3-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 300.766846][ T7357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.806997][ T7357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.826055][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.884079][ T7357] team0: Port device team_slave_0 added [ 300.904074][ T7357] team0: Port device team_slave_1 added [ 300.920843][ T5292] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.929713][ T5292] usb 1-1: not running at top speed; connect to a high speed hub [ 300.951346][ T5292] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.978577][ T5292] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.009696][ T5292] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.069227][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.077915][ T5292] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.095798][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.107515][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.130915][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 301.142848][ T5292] usb 1-1: Product: syz [ 301.149819][ T5292] usb 1-1: Manufacturer: syz [ 301.157307][ T5292] usb 1-1: SerialNumber: syz [ 301.183949][ T7357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.204874][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.218827][ T7357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.242215][ T7357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.298442][ T7357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.318289][ T29] audit: type=1326 audit(1727135883.758:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.408210][ T29] audit: type=1326 audit(1727135883.758:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.461653][ T29] audit: type=1326 audit(1727135883.758:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.508730][ T29] audit: type=1326 audit(1727135883.758:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.518580][ T7357] hsr_slave_0: entered promiscuous mode [ 301.559479][ T7357] hsr_slave_1: entered promiscuous mode [ 301.602285][ T29] audit: type=1326 audit(1727135883.758:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.624228][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.697168][ T29] audit: type=1326 audit(1727135883.758:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.747583][ T29] audit: type=1326 audit(1727135883.758:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.792416][ T29] audit: type=1326 audit(1727135883.758:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.824977][ T29] audit: type=1326 audit(1727135883.758:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 301.859576][ T29] audit: type=1326 audit(1727135883.758:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.3.382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 302.298533][ T5229] Bluetooth: hci1: command tx timeout [ 303.011536][ T7357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.032836][ T7357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.068960][ T7357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.100553][ T7357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.225970][ T5275] usb 3-1: string descriptor 0 read error: -71 [ 303.262904][ T5275] usb 3-1: USB disconnect, device number 31 [ 303.446231][ T7357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.477787][ T5292] cdc_ncm 1-1:1.0: skipping garbage [ 303.483738][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 303.508093][ T5292] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 303.521904][ T7357] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.538909][ T5292] cdc_ncm 1-1:1.0: bind() failure [ 303.580158][ T5292] usb 1-1: USB disconnect, device number 51 [ 303.597191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.604513][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.660366][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.667777][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.795291][ T7438] coredump: 20(syz.4.383): interrupted: fatal signal pending [ 303.805062][ T7438] coredump: 20(syz.4.383): written to core: VMAs: 31, size 97292288; core: 42304898 bytes, pos 79630336 [ 303.948819][ T7357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.076479][ T7357] veth0_vlan: entered promiscuous mode [ 304.108398][ T5292] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 304.110519][ T7357] veth1_vlan: entered promiscuous mode [ 304.210033][ T7357] veth0_macvtap: entered promiscuous mode [ 304.227123][ T7357] veth1_macvtap: entered promiscuous mode [ 304.280045][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.290423][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 304.298418][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.335242][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.348691][ T5292] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 304.365726][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.373994][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.388183][ T5229] Bluetooth: hci1: command tx timeout [ 304.403902][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.425250][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.435225][ T5292] usb 3-1: Product: syz [ 304.441367][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.459153][ T5292] usb 3-1: Manufacturer: syz [ 304.463825][ T5292] usb 3-1: SerialNumber: syz [ 304.492624][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.510114][ T5292] usb 3-1: config 0 descriptor?? [ 304.535112][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.555609][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.572754][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.589765][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.613109][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.637040][ T7357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.679117][ T7357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.733216][ T7357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.741101][ T5292] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 304.841116][ T7357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.876456][ T7357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.898085][ T5747] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 304.906048][ T7357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.935430][ T7357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.062142][ T5747] usb 4-1: device descriptor read/64, error -71 [ 305.128677][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 305.276278][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.300997][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.328531][ T5747] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 305.358363][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.416146][ T6763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.427408][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.442640][ T6763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.508167][ T5747] usb 4-1: device descriptor read/64, error -71 [ 305.621655][ T5747] usb usb4-port1: attempt power cycle [ 305.651036][ T7524] bond1: entered promiscuous mode [ 305.657707][ T7524] bond1: entered allmulticast mode [ 305.663904][ T7524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 305.750770][ T7529] FAULT_INJECTION: forcing a failure. [ 305.750770][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 305.811350][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz.1.364 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 305.821658][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.832531][ T7529] Call Trace: [ 305.835850][ T7529] [ 305.838792][ T7529] dump_stack_lvl+0x241/0x360 [ 305.843561][ T7529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.848795][ T7529] ? __pfx__printk+0x10/0x10 [ 305.853403][ T7529] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 305.858992][ T7529] ? __pfx___might_resched+0x10/0x10 [ 305.864340][ T7529] should_fail_ex+0x3b0/0x4e0 [ 305.869084][ T7529] ? sk_prot_alloc+0x58/0x210 [ 305.873836][ T7529] should_failslab+0xac/0x100 [ 305.878554][ T7529] ? sk_prot_alloc+0x58/0x210 [ 305.883247][ T7529] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 305.888648][ T7529] ? __pfx_lock_release+0x10/0x10 [ 305.893711][ T7529] sk_prot_alloc+0x58/0x210 [ 305.898265][ T7529] ? sk_alloc+0x26/0x370 [ 305.902526][ T7529] sk_alloc+0x38/0x370 [ 305.906635][ T7529] inet_create+0x652/0xe70 [ 305.911092][ T7529] ? inet_create+0x9c/0xe70 [ 305.915630][ T7529] ? __sock_create+0x337/0x920 [ 305.920404][ T7529] __sock_create+0x490/0x920 [ 305.925042][ T7529] mptcp_subflow_create_socket+0x132/0xdf0 [ 305.930894][ T7529] ? mark_lock+0x9a/0x360 [ 305.935240][ T7529] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 305.942031][ T7529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.948376][ T7529] __mptcp_nmpc_sk+0x178/0x800 [ 305.953150][ T7529] ? __local_bh_enable_ip+0x168/0x200 [ 305.958625][ T7529] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 305.963958][ T7529] mptcp_setsockopt+0xea5/0x3bc0 [ 305.968928][ T7529] ? aa_sk_perm+0x96d/0xab0 [ 305.973465][ T7529] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 305.978980][ T7529] ? __pfx_aa_sk_perm+0x10/0x10 [ 305.983854][ T7529] ? __pfx_lock_acquire+0x10/0x10 [ 305.988914][ T7529] ? __fget_files+0x29/0x470 [ 305.993504][ T7529] ? aa_sock_opt_perm+0x79/0x120 [ 305.998465][ T7529] ? sock_common_setsockopt+0x37/0xc0 [ 306.003857][ T7529] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 306.009763][ T7529] do_sock_setsockopt+0x3af/0x720 [ 306.014797][ T7529] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 306.020365][ T7529] ? __fget_files+0x3f3/0x470 [ 306.025085][ T7529] ? __fget_files+0x29/0x470 [ 306.029713][ T7529] __sys_setsockopt+0x1a8/0x250 [ 306.034597][ T7529] __ia32_sys_setsockopt+0xb5/0xd0 [ 306.039749][ T7529] __do_fast_syscall_32+0xb4/0x110 [ 306.045308][ T7529] ? exc_page_fault+0x590/0x8c0 [ 306.050172][ T7529] do_fast_syscall_32+0x34/0x80 [ 306.055057][ T7529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.061645][ T7529] RIP: 0023:0xf7f9f579 [ 306.065751][ T7529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.085392][ T7529] RSP: 002b:00000000f572656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 306.093839][ T7529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 306.101817][ T7529] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000000 [ 306.109900][ T7529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.117887][ T7529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.125878][ T7529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.133880][ T7529] [ 306.258592][ T5747] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 306.288215][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.329948][ T5747] usb 4-1: device descriptor read/8, error -71 [ 306.365120][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.365178][ T5292] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 306.433125][ T5292] usb 3-1: USB disconnect, device number 32 [ 306.579492][ T5747] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 306.628173][ T5747] usb 4-1: device descriptor read/8, error -71 [ 306.648092][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 306.740475][ T5747] usb usb4-port1: unable to enumerate USB device [ 306.808118][ T5282] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 306.823923][ T8] usb 5-1: config 97 has an invalid interface descriptor of length 3, skipping [ 306.844543][ T8] usb 5-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 306.860008][ T8] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 306.888160][ T8] usb 5-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 306.918705][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.986586][ T5282] usb 1-1: unable to get BOS descriptor or descriptor too short [ 306.995810][ T5282] usb 1-1: not running at top speed; connect to a high speed hub [ 307.013829][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.034013][ T5282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.047661][ T5282] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.070621][ T5282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.083421][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.094393][ T5282] usb 1-1: Product: syz [ 307.106124][ T5282] usb 1-1: Manufacturer: syz [ 307.113784][ T5282] usb 1-1: SerialNumber: syz [ 307.173932][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 307.189880][ T7534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.840103][ T7580] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.404'. [ 308.108189][ T5276] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 308.279665][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 308.292602][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.339492][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.353437][ T5276] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 308.363477][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.380662][ T5276] usb 2-1: config 0 descriptor?? [ 309.226910][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 309.417849][ T8] usb 5-1: string descriptor 0 read error: -71 [ 309.442602][ T8] usb 5-1: USB disconnect, device number 25 [ 309.640459][ T5282] cdc_ncm 1-1:1.0: skipping garbage [ 309.645816][ T5282] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 309.679061][ T5282] cdc_ncm 1-1:1.0: bind() failure [ 309.744317][ T5282] usb 1-1: USB disconnect, device number 52 [ 309.966604][ T7636] bond0: entered promiscuous mode [ 309.983648][ T7636] bond_slave_0: entered promiscuous mode [ 309.993309][ T5229] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 310.007222][ T7636] bond_slave_1: entered promiscuous mode [ 310.181767][ T7635] ALSA: mixer_oss: invalid OSS volume 'GPL' [ 310.213804][ T7635] bond0: left promiscuous mode [ 310.242251][ T7635] bond_slave_0: left promiscuous mode [ 310.259762][ T7635] bond_slave_1: left promiscuous mode [ 310.509962][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 310.668703][ T5275] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 310.774948][ T5276] usbhid 2-1:0.0: can't add hid device: -71 [ 310.781623][ T5276] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.799190][ T5276] usb 2-1: USB disconnect, device number 23 [ 310.818411][ T5275] usb 3-1: device descriptor read/64, error -71 [ 310.854423][ T7658] sg_write: data in/out 655484/1 bytes for SCSI command 0xf2-- guessing data in; [ 310.854423][ T7658] program syz.0.417 not setting count and/or reply_len properly [ 311.058064][ T5275] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 311.198268][ T8] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 311.208031][ T5275] usb 3-1: device descriptor read/64, error -71 [ 311.286699][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.300228][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.308260][ T1172] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 311.324219][ T5275] usb usb3-port1: attempt power cycle [ 311.348543][ T5276] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 311.408555][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 311.416816][ T8] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 311.429491][ T8] usb 1-1: config 1 interface 0 has no altsetting 0 [ 311.442068][ T8] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.40 [ 311.451298][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.460925][ T8] usb 1-1: Product: 뽏ش䁿⧨僷ଶ눰┲볈〞ณ襚辕ㅸ렰铲搥빎锏绪ံ徥剤ⶢ胱뮈䍻쿮牯끦䫊菟ᅟ폧呡樾炲晗頎먴㽃⼈凢䈢鎋庲털ॣߕ䢒쥞솽榭咫踰 [ 311.482409][ T8] usb 1-1: Manufacturer: 獛쿹䡄됼돧䭭䎭ᗫ੝〡Ǿ婩笍樔㐱추鷾㙀쭪훨쵕愱ⲱ稄䐄兼퉱⭥踥䟣ㅪ멥죐꬗흲霧灲燅缅䩻䭳⭂⨋뻮䈆᫃◜쟦寇䍳攟侮奤㡀퍑䀾煠É譂㡑膁嶩ꠚ䢯糅餱悼블꺟쫼㛄鑭㸲慲䁇Ĝ訤씈 [ 311.498536][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 311.510185][ T8] usb 1-1: SerialNumber: “꾑䍊완ꀸ㭼⩦ [ 311.528109][ T1172] usb 2-1: Using ep0 maxpacket: 8 [ 311.536353][ T1172] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.547631][ T1172] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.549550][ T5282] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 311.558358][ T1172] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.576349][ T5276] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 311.576384][ T5276] usb 4-1: config 0 has an invalid interface number: 221 but max is 0 [ 311.576406][ T5276] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 311.576430][ T5276] usb 4-1: config 0 has no interface number 0 [ 311.576449][ T5276] usb 4-1: config 0 has no interface number 1 [ 311.576492][ T5276] usb 4-1: config 0 interface 230 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.576517][ T5276] usb 4-1: config 0 interface 230 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.576552][ T5276] usb 4-1: config 0 interface 221 altsetting 79 has an invalid descriptor for endpoint zero, skipping [ 311.605353][ T1172] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.612034][ T5276] usb 4-1: config 0 interface 221 altsetting 79 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.615919][ T1172] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.627815][ T5276] usb 4-1: config 0 interface 221 has no altsetting 0 [ 311.648516][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.654401][ T5276] usb 4-1: New USB device found, idVendor=055e, idProduct=028c, bcdDevice=59.35 [ 311.714186][ T5275] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 311.724936][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.733241][ T5276] usb 4-1: Product: syz [ 311.737550][ T5276] usb 4-1: Manufacturer: syz [ 311.742417][ T5276] usb 4-1: SerialNumber: syz [ 311.749940][ T5276] usb 4-1: config 0 descriptor?? [ 311.754771][ T8] usbhid 1-1:1.0: can't add hid device: -71 [ 311.770173][ T5275] usb 3-1: device descriptor read/8, error -71 [ 311.781903][ T8] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 311.806362][ T8] usb 1-1: USB disconnect, device number 53 [ 311.850225][ T5282] usb 5-1: config 97 has an invalid interface descriptor of length 3, skipping [ 311.860642][ T5282] usb 5-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 311.873683][ T5282] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 311.884117][ T5282] usb 5-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 311.892176][ T1172] usb 2-1: GET_CAPABILITIES returned 0 [ 311.894171][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.908048][ T1172] usbtmc 2-1:16.0: can't read capabilities [ 311.992128][ T5276] usb 4-1: USB disconnect, device number 49 [ 312.038270][ T5275] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 312.059133][ T5275] usb 3-1: device descriptor read/8, error -71 [ 312.113256][ T8] usb 2-1: USB disconnect, device number 24 [ 312.120983][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 312.136062][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.180905][ T5275] usb usb3-port1: unable to enumerate USB device [ 312.618558][ T5276] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 312.788292][ T5276] usb 1-1: unable to get BOS descriptor or descriptor too short [ 312.817814][ T5276] usb 1-1: not running at top speed; connect to a high speed hub [ 312.839993][ T5276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.865175][ T5276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 312.892552][ T5276] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.919763][ T5276] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.936792][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.939817][ T6763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.946223][ T5276] usb 1-1: Product: syz [ 312.975595][ T5276] usb 1-1: Manufacturer: syz [ 312.982119][ T5276] usb 1-1: SerialNumber: syz [ 313.119636][ C1] hrtimer: interrupt took 187848 ns [ 313.194141][ T6763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.406430][ T6763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.514012][ T7687] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 313.521037][ T7687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 313.589527][ T7690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.610446][ T6763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.619555][ T7687] vhci_hcd vhci_hcd.0: Device attached [ 313.677905][ T7690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.727461][ T7687] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.746239][ T7687] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.796123][ T7690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.829099][ T58] vhci_hcd: vhci_device speed not set [ 313.829819][ T7687] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.862711][ T7690] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 313.898632][ T58] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 313.947144][ T7687] vhci_hcd vhci_hcd.0: port 0 already used [ 313.959019][ T6763] bridge_slave_1: left allmulticast mode [ 313.980147][ T6763] bridge_slave_1: left promiscuous mode [ 313.992149][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.001830][ T7687] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.429'. [ 314.003308][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.020739][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.031135][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.039419][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.047515][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.048079][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.139296][ T6763] bridge_slave_0: left allmulticast mode [ 314.145222][ T6763] bridge_slave_0: left promiscuous mode [ 314.151602][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.353517][ T5282] usb 5-1: string descriptor 0 read error: -71 [ 314.377576][ T5282] usb 5-1: USB disconnect, device number 26 [ 314.918300][ T1172] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 314.996893][ T6763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.029351][ T6763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.043410][ T6763] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 315.071438][ T6763] bond0 (unregistering): Released all slaves [ 315.156877][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 315.397332][ T5276] cdc_ncm 1-1:1.0: skipping garbage [ 315.427124][ T5276] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 315.453066][ T5276] cdc_ncm 1-1:1.0: bind() failure [ 315.480092][ T5276] usb 1-1: USB disconnect, device number 54 [ 315.696505][ T6763] hsr_slave_0: left promiscuous mode [ 315.707065][ T6763] hsr_slave_1: left promiscuous mode [ 315.728989][ T6763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.748812][ T7688] vhci_hcd: connection reset by peer [ 315.763691][ T12] vhci_hcd: stop threads [ 315.787833][ T12] vhci_hcd: release socket [ 315.792794][ T6763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.813393][ T12] vhci_hcd: disconnect device [ 315.891708][ T6763] veth1_macvtap: left promiscuous mode [ 315.908104][ T5276] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 315.909696][ T6763] veth0_macvtap: left promiscuous mode [ 315.942189][ T6763] veth1_vlan: left promiscuous mode [ 315.947642][ T6763] veth0_vlan: left promiscuous mode [ 316.048595][ T5276] usb 1-1: device descriptor read/64, error -71 [ 316.140374][ T54] Bluetooth: hci3: command tx timeout [ 316.308426][ T5276] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 316.478176][ T5276] usb 1-1: device descriptor read/64, error -71 [ 316.592979][ T5276] usb usb1-port1: attempt power cycle [ 316.650726][ T5282] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 316.828087][ T5282] usb 5-1: device descriptor read/64, error -71 [ 316.961584][ T5276] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 317.013995][ T5276] usb 1-1: device descriptor read/8, error -71 [ 317.085090][ T5282] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 317.273165][ T5282] usb 5-1: device descriptor read/64, error -71 [ 317.318198][ T5276] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 317.330596][ T6763] team0 (unregistering): Port device team_slave_1 removed [ 317.338991][ T5276] usb 1-1: device descriptor read/8, error -71 [ 317.392702][ T5282] usb usb5-port1: attempt power cycle [ 317.409828][ T6763] team0 (unregistering): Port device team_slave_0 removed [ 317.448374][ T5275] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 317.453676][ T5276] usb usb1-port1: unable to enumerate USB device [ 317.515488][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.522418][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.531631][ T7701] coredump: 22(syz.1.431): Error writing out the process memory [ 317.540830][ T7701] coredump: 22(syz.1.431): written to core: VMAs: 35, size 97554432; core: 56017802 bytes, pos 93577216 [ 317.630847][ T5275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.648743][ T5275] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.668983][ T5275] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.680760][ T5275] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.687529][ T5275] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 317.700309][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.717357][ T5275] usb 3-1: config 0 descriptor?? [ 317.756262][ T5282] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 317.789162][ T5282] usb 5-1: device descriptor read/8, error -71 [ 318.035216][ T5282] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 318.077003][ T5282] usb 5-1: device descriptor read/8, error -71 [ 318.177516][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.188668][ T5282] usb usb5-port1: unable to enumerate USB device [ 318.211205][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.231582][ T54] Bluetooth: hci3: command tx timeout [ 318.351080][ T5275] usbhid 3-1:0.0: can't add hid device: -71 [ 318.359444][ T5275] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 318.378560][ T5275] usb 3-1: USB disconnect, device number 37 [ 318.477078][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 318.508163][ T1172] usb 2-1: device descriptor read/64, error -71 [ 318.685165][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.703723][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.717181][ T7696] bridge_slave_0: entered allmulticast mode [ 318.728297][ T7696] bridge_slave_0: entered promiscuous mode [ 318.746200][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.763907][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.779982][ T7696] bridge_slave_1: entered allmulticast mode [ 318.781971][ T1172] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 318.790405][ T7696] bridge_slave_1: entered promiscuous mode [ 318.907300][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.926400][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.032926][ T7696] team0: Port device team_slave_0 added [ 319.061081][ T7696] team0: Port device team_slave_1 added [ 319.075469][ T1172] usb 2-1: config 97 has an invalid interface descriptor of length 3, skipping [ 319.088465][ T58] vhci_hcd: vhci_device speed not set [ 319.094244][ T1172] usb 2-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 319.104937][ T1172] usb 2-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 319.114417][ T1172] usb 2-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 319.123879][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.175538][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.187486][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.214187][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.228238][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.235351][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.264724][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.341210][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 319.351150][ T5282] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 319.377733][ T7696] hsr_slave_0: entered promiscuous mode [ 319.395474][ T7696] hsr_slave_1: entered promiscuous mode [ 319.402850][ T7696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.417338][ T7696] Cannot create hsr debugfs directory [ 319.430838][ T7777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.453496][ T7778] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 319.477067][ T7778] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 319.514474][ T7778] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 319.527207][ T5282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.537912][ T5282] usb 3-1: not running at top speed; connect to a high speed hub [ 319.548213][ T5282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.561327][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 319.571798][ T5282] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.597778][ T5282] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.620843][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.637027][ T5282] usb 3-1: Product: syz [ 319.657139][ T5282] usb 3-1: Manufacturer: syz [ 319.667886][ T5282] usb 3-1: SerialNumber: syz [ 319.681140][ T7781] netlink: 'syz.4.444': attribute type 29 has an invalid length. [ 320.299232][ T54] Bluetooth: hci3: command tx timeout [ 320.363935][ T7802] FAULT_INJECTION: forcing a failure. [ 320.363935][ T7802] name failslab, interval 1, probability 0, space 0, times 0 [ 320.387123][ T7802] CPU: 1 UID: 0 PID: 7802 Comm: syz.4.446 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 320.397536][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 320.407728][ T7802] Call Trace: [ 320.411068][ T7802] [ 320.414035][ T7802] dump_stack_lvl+0x241/0x360 [ 320.418765][ T7802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.424017][ T7802] ? __pfx__printk+0x10/0x10 [ 320.428658][ T7802] ? fs_reclaim_acquire+0x93/0x140 [ 320.433845][ T7802] ? __pfx___might_resched+0x10/0x10 [ 320.439265][ T7802] should_fail_ex+0x3b0/0x4e0 [ 320.444010][ T7802] ? tomoyo_encode+0x26f/0x540 [ 320.448846][ T7802] should_failslab+0xac/0x100 [ 320.453674][ T7802] ? tomoyo_encode+0x26f/0x540 [ 320.458555][ T7802] __kmalloc_noprof+0xd8/0x400 [ 320.463371][ T7802] tomoyo_encode+0x26f/0x540 [ 320.468135][ T7802] tomoyo_realpath_from_path+0x59e/0x5e0 [ 320.473819][ T7802] tomoyo_path_number_perm+0x23a/0x880 [ 320.479341][ T7802] ? tomoyo_path_number_perm+0x208/0x880 [ 320.485023][ T7802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 320.491068][ T7802] ? __pfx_lock_acquire+0x10/0x10 [ 320.496139][ T7802] ? __fget_files+0x29/0x470 [ 320.500845][ T7802] ? __fget_files+0x3f3/0x470 [ 320.505566][ T7802] security_file_ioctl_compat+0xc6/0x2a0 [ 320.511234][ T7802] __se_compat_sys_ioctl+0xd6/0xc90 [ 320.516500][ T7802] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 320.522375][ T7802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.528402][ T7802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.534781][ T7802] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 320.541421][ T7802] ? lockdep_hardirqs_on+0x99/0x150 [ 320.546667][ T7802] __do_fast_syscall_32+0xb4/0x110 [ 320.551920][ T7802] ? exc_page_fault+0x590/0x8c0 [ 320.556826][ T7802] do_fast_syscall_32+0x34/0x80 [ 320.561771][ T7802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 320.568123][ T7802] RIP: 0023:0xf73cd579 [ 320.572219][ T7802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 320.591944][ T7802] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 320.600398][ T7802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c2c45513 [ 320.608391][ T7802] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 320.616641][ T7802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 320.624640][ T7802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 320.632645][ T7802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 320.640653][ T7802] [ 320.651616][ T7802] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.904181][ T7696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.919312][ T7696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.942114][ T7696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.955922][ T7696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 321.216118][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.223557][ T1172] usb 2-1: string descriptor 0 read error: -71 [ 321.232156][ T1172] usb 2-1: USB disconnect, device number 26 [ 321.296971][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.317140][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.324395][ T6763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.366446][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.373712][ T6763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.477331][ T7696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.544442][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.631626][ T7696] veth0_vlan: entered promiscuous mode [ 321.654798][ T7696] veth1_vlan: entered promiscuous mode [ 321.755145][ T7696] veth0_macvtap: entered promiscuous mode [ 321.777780][ T7696] veth1_macvtap: entered promiscuous mode [ 321.840445][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.873137][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.890864][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.912863][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.926472][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.948348][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.965642][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.997108][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.033424][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.061244][ T7775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.073206][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.107477][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.146891][ T5282] cdc_ncm 3-1:1.0: skipping garbage [ 322.153499][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.162663][ T5282] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 322.173615][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.191734][ T5282] cdc_ncm 3-1:1.0: bind() failure [ 322.204847][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.222958][ T5282] usb 3-1: USB disconnect, device number 38 [ 322.243931][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.294756][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.318375][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.340743][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.381665][ T54] Bluetooth: hci3: command tx timeout [ 322.390743][ T7696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.433519][ T7696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.455004][ T7696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.476724][ T7696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.528183][ T8] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 322.710623][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 322.730382][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.744838][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.757241][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.817643][ T8] usb 1-1: config 0 descriptor?? [ 322.840302][ T5282] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 322.870373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.887139][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.901368][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 322.947064][ T7850] ip6gretap0: entered promiscuous mode [ 322.960263][ T7850] ip6gretap0: left promiscuous mode [ 323.014122][ T5282] usb 3-1: device descriptor read/64, error -71 [ 323.123389][ T7857] mmap: syz.0.452 (7857): VmData 37502976 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 323.153829][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.190809][ T7853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 323.212364][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.230055][ T7853] batman_adv: batadv0: Adding interface: ip6gretap1 [ 323.255447][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.271873][ T5282] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 323.285064][ T7853] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.331705][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.390812][ T7853] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 323.435434][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 323.445582][ T5282] usb 3-1: device descriptor read/64, error -71 [ 323.475896][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.517103][ T7856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.558459][ T5282] usb usb3-port1: attempt power cycle [ 323.639417][ T7856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.665222][ T7856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.698619][ T7856] batman_adv: batadv0: Removing interface: ip6gretap1 [ 323.898484][ T5282] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 323.951172][ T5282] usb 3-1: device descriptor read/8, error -71 [ 324.101096][ T6760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.221219][ T5282] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 324.264559][ T5282] usb 3-1: device descriptor read/8, error -71 [ 324.401503][ T5282] usb usb3-port1: unable to enumerate USB device [ 324.457342][ T6760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.665940][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 324.675425][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 324.712292][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 324.771020][ T6760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.828605][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 324.854033][ T8] [drm] Initialized udl on minor 2 [ 324.882158][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 324.934199][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 324.955120][ T1172] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 324.992922][ T8] usb 1-1: USB disconnect, device number 59 [ 325.000423][ T1172] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 325.021786][ T6760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.034346][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.046999][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.059275][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.077664][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.089248][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 325.098836][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.314283][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 325.324812][ T7905] sctp: [Deprecated]: syz.4.463 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.324812][ T7905] Use struct sctp_sack_info instead [ 325.383619][ T6760] bridge_slave_1: left allmulticast mode [ 325.415471][ T6760] bridge_slave_1: left promiscuous mode [ 325.422546][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.433603][ T6760] bridge_slave_0: left allmulticast mode [ 325.440124][ T6760] bridge_slave_0: left promiscuous mode [ 325.446611][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.654722][ T8] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 325.697422][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.717114][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.819648][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 325.827673][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 325.838085][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.848680][ T8] usb 4-1: config 0 has no interface number 0 [ 325.854864][ T8] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.869949][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 325.879440][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 325.887634][ T8] usb 4-1: Product: syz [ 325.896093][ T8] usb 4-1: SerialNumber: syz [ 325.908381][ T8] usb 4-1: config 0 descriptor?? [ 325.919793][ T8] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 325.968187][ T5282] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 326.032439][ T6760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.045897][ T6760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.058314][ T6760] bond0 (unregistering): Released all slaves [ 326.164218][ T5282] usb 1-1: config 97 has an invalid interface descriptor of length 3, skipping [ 326.188268][ T5282] usb 1-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 326.211801][ T5282] usb 1-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 326.227003][ T5282] usb 1-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 326.236628][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.469261][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.468'. [ 326.528131][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.645431][ T6760] hsr_slave_0: left promiscuous mode [ 326.668391][ T6760] hsr_slave_1: left promiscuous mode [ 326.678336][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.694036][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.754417][ T6760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.770033][ T6760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.802472][ T6760] veth1_macvtap: left promiscuous mode [ 326.814159][ T6760] veth0_macvtap: left promiscuous mode [ 326.824570][ T6760] veth1_vlan: left promiscuous mode [ 326.830268][ T6760] veth0_vlan: left promiscuous mode [ 326.981290][ T7931] kernel profiling enabled (shift: 0) [ 327.026688][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 327.178634][ T5229] Bluetooth: hci1: command tx timeout [ 328.019597][ T7931] syz.2.471: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.038052][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.2.471 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 328.048428][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 328.058528][ T7931] Call Trace: [ 328.061842][ T7931] [ 328.064892][ T7931] dump_stack_lvl+0x241/0x360 [ 328.069631][ T7931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.074876][ T7931] ? __pfx__printk+0x10/0x10 [ 328.079599][ T7931] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 328.086058][ T7931] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 328.092609][ T7931] warn_alloc+0x278/0x410 [ 328.097231][ T7931] ? __pfx_warn_alloc+0x10/0x10 [ 328.102176][ T7931] ? profile_init+0xb1/0x100 [ 328.106830][ T7931] ? __get_vm_area_node+0x23d/0x270 [ 328.112123][ T7931] __vmalloc_node_range_noprof+0x691/0x13f0 [ 328.118108][ T7931] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.124480][ T7931] ? rcu_is_watching+0x15/0xb0 [ 328.129284][ T7931] ? rcu_is_watching+0x15/0xb0 [ 328.134084][ T7931] ? profile_init+0xb1/0x100 [ 328.138713][ T7931] ? __pfx_sysfs_kf_write+0x10/0x10 [ 328.143967][ T7931] vzalloc_noprof+0x79/0x90 [ 328.148523][ T7931] ? profile_init+0xb1/0x100 [ 328.153162][ T7931] profile_init+0xb1/0x100 [ 328.157615][ T7931] profiling_store+0x6c/0xf0 [ 328.162282][ T7931] kernfs_fop_write_iter+0x3a0/0x500 [ 328.167634][ T7931] vfs_write+0xa6d/0xc90 [ 328.171933][ T7931] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 328.177778][ T7931] ? __pfx_vfs_write+0x10/0x10 [ 328.182677][ T7931] ? do_futex+0x392/0x560 [ 328.187064][ T7931] ? __fdget_pos+0x265/0x320 [ 328.192039][ T7931] ksys_write+0x1a0/0x2c0 [ 328.196422][ T7931] ? __pfx_ksys_write+0x10/0x10 [ 328.201361][ T7931] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 328.207991][ T7931] ? lockdep_hardirqs_on+0x99/0x150 [ 328.213235][ T7931] __do_fast_syscall_32+0xb4/0x110 [ 328.218396][ T7931] ? exc_page_fault+0x590/0x8c0 [ 328.223292][ T7931] do_fast_syscall_32+0x34/0x80 [ 328.228188][ T7931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.234563][ T7931] RIP: 0023:0xf747d579 [ 328.238680][ T7931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 328.258435][ T7931] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 328.266899][ T7931] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000280 [ 328.274906][ T7931] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.282912][ T7931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.290918][ T7931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 328.298925][ T7931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.306954][ T7931] [ 328.311003][ T7931] Mem-Info: [ 328.314164][ T7931] active_anon:7143 inactive_anon:0 isolated_anon:11 [ 328.314164][ T7931] active_file:15876 inactive_file:2847 isolated_file:0 [ 328.314164][ T7931] unevictable:768 dirty:124 writeback:0 [ 328.314164][ T7931] slab_reclaimable:8965 slab_unreclaimable:97791 [ 328.314164][ T7931] mapped:24930 shmem:4100 pagetables:756 [ 328.314164][ T7931] sec_pagetables:0 bounce:0 [ 328.314164][ T7931] kernel_misc_reclaimable:0 [ 328.314164][ T7931] free:1352704 free_pcp:3537 free_cma:0 [ 328.359911][ T7931] Node 0 active_anon:28572kB inactive_anon:0kB active_file:63440kB inactive_file:11384kB unevictable:1536kB isolated(anon):44kB isolated(file):0kB mapped:99660kB dirty:496kB writeback:0kB shmem:14864kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10520kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no [ 328.392855][ T7931] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 328.423434][ T7931] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 328.451417][ T7931] lowmem_reserve[]: 0 2465 2466 0 0 [ 328.456751][ T7931] Node 0 DMA32 free:1462840kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:28456kB inactive_anon:0kB active_file:63176kB inactive_file:10896kB unevictable:1536kB writepending:492kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:14380kB local_pcp:14036kB free_cma:0kB [ 328.487839][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 328.492962][ T7931] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:116kB inactive_anon:0kB active_file:264kB inactive_file:488kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 328.520381][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 328.525202][ T7931] Node 1 Normal free:3932488kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 328.554355][ T7931] lowmem_reserve[]: 0 0 0 0 0 [ 328.559274][ T7931] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.572634][ T7931] Node 0 DMA32: 10*4kB (E) 188*8kB (ME) 30*16kB (UME) 34*32kB (UME) 14*64kB (ME) 420*128kB (UME) 322*256kB (UM) 197*512kB (UME) 67*1024kB (UME) 7*2048kB (UM) 278*4096kB (UM) = 1462696kB [ 328.591785][ T7931] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 328.603729][ T7931] Node 1 Normal: 144*4kB (UME) 37*8kB (UME) 22*16kB (UME) 166*32kB (UE) 83*64kB (UME) 28*128kB (UME) 13*256kB (UM) 10*512kB (UME) 3*1024kB (UM) 1*2048kB (U) 953*4096kB (UM) = 3932488kB [ 328.622518][ T7931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.632333][ T7931] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.641898][ T7931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 328.650253][ T58] usb 4-1: USB disconnect, device number 50 [ 328.651665][ T7931] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 328.667262][ T7931] 22823 total pagecache pages [ 328.672575][ T7931] 0 pages in swap cache [ 328.676820][ T7931] Free swap = 124528kB [ 328.681207][ T7931] Total swap = 124996kB [ 328.685508][ T7931] 2097051 pages RAM [ 328.689499][ T7931] 0 pages HighMem/MovableOnly [ 328.694317][ T7931] 427078 pages reserved [ 328.698574][ T7931] 0 pages cma reserved [ 329.268439][ T5229] Bluetooth: hci1: command tx timeout [ 329.465915][ T6760] team0 (unregistering): Port device team_slave_1 removed [ 329.518129][ T6760] team0 (unregistering): Port device team_slave_0 removed [ 329.568094][ T9] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 329.678127][ T1172] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 329.678329][ T5292] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 329.723742][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 329.733158][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.744593][ T9] usb 5-1: config 0 descriptor?? [ 329.767552][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 329.774990][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 329.794148][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 329.815202][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 329.830347][ T5292] usb 4-1: device descriptor read/64, error -71 [ 329.837649][ T9] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 329.851607][ T1172] usb 3-1: Using ep0 maxpacket: 8 [ 329.859812][ T1172] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 329.874610][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.885738][ T1172] usb 3-1: config 0 descriptor?? [ 330.070528][ T5276] usb 5-1: USB disconnect, device number 31 [ 330.078166][ T5292] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 330.118627][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.133212][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.152520][ T1172] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 330.164240][ T1172] asix 3-1:0.0: probe with driver asix failed with error -71 [ 330.180723][ T1172] usb 3-1: USB disconnect, device number 43 [ 330.221494][ T5292] usb 4-1: device descriptor read/64, error -71 [ 330.326663][ T7901] chnl_net:caif_netlink_parms(): no params data found [ 330.329083][ T5292] usb usb4-port1: attempt power cycle [ 330.361121][ T5282] usb 1-1: string descriptor 0 read error: -71 [ 330.380136][ T5282] usb 1-1: USB disconnect, device number 60 [ 330.522404][ T7901] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.534135][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.541730][ T7901] bridge_slave_0: entered allmulticast mode [ 330.550098][ T7901] bridge_slave_0: entered promiscuous mode [ 330.566562][ T7901] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.574046][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.581638][ T7901] bridge_slave_1: entered allmulticast mode [ 330.589041][ T7901] bridge_slave_1: entered promiscuous mode [ 330.659542][ T7901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.698148][ T5292] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 330.706880][ T7901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.761430][ T5292] usb 4-1: device descriptor read/8, error -71 [ 330.832992][ T7901] team0: Port device team_slave_0 added [ 330.858163][ T5282] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 330.867042][ T7901] team0: Port device team_slave_1 added [ 330.955006][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.981916][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.018134][ T5292] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 331.045694][ T5282] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.059907][ T5292] usb 4-1: device descriptor read/8, error -71 [ 331.066753][ T5282] usb 1-1: not running at top speed; connect to a high speed hub [ 331.101412][ T7901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.113862][ T5282] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.129646][ T5282] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.143567][ T7901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.156832][ T7901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.183692][ T5282] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.208301][ T5292] usb usb4-port1: unable to enumerate USB device [ 331.230940][ T5282] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.232530][ T7901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.240327][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.240357][ T5282] usb 1-1: Product: syz [ 331.240421][ T5282] usb 1-1: Manufacturer: syz [ 331.240440][ T5282] usb 1-1: SerialNumber: syz [ 331.340800][ T5229] Bluetooth: hci1: command tx timeout [ 331.382120][ T7901] hsr_slave_0: entered promiscuous mode [ 331.402849][ T7901] hsr_slave_1: entered promiscuous mode [ 331.410142][ T1172] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 331.477573][ T5282] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 331.488591][ T5282] cdc_ncm 1-1:1.0: bind() failure [ 331.518540][ T5282] usb 1-1: USB disconnect, device number 61 [ 331.572388][ T1172] usb 5-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=f2.28 [ 331.592643][ T1172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.622217][ T1172] usb 5-1: Product: syz [ 331.631792][ T1172] usb 5-1: Manufacturer: syz [ 331.647083][ T1172] usb 5-1: SerialNumber: syz [ 331.665323][ T1172] usb 5-1: config 0 descriptor?? [ 331.689352][ T1172] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 331.939614][ T5282] usb 5-1: USB disconnect, device number 32 [ 332.672055][ T8018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.711771][ T8019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.746579][ T7901] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 332.794014][ T7901] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 332.806740][ T7901] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 332.828633][ T5282] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 332.982257][ T7901] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 332.999683][ T58] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 333.008592][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 333.022795][ T5282] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 333.037904][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.059928][ T5282] usb 1-1: Product: syz [ 333.087178][ T5282] usb 1-1: Manufacturer: syz [ 333.145558][ T5282] usb 1-1: SerialNumber: syz [ 333.177901][ T5282] usb 1-1: config 0 descriptor?? [ 333.185569][ T58] usb 5-1: config 97 has an invalid interface descriptor of length 3, skipping [ 333.207136][ T58] usb 5-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 333.224428][ T5282] as10x_usb: device has been detected [ 333.252711][ T5282] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 333.270010][ T58] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 333.317151][ T58] usb 5-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 333.387694][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.410678][ T5282] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 333.428184][ T5229] Bluetooth: hci1: command tx timeout [ 333.569273][ T5282] as10x_usb: error during firmware upload part1 [ 333.588867][ T5282] Registered device Sky IT Digital Key (green led) [ 333.624825][ T7901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.667860][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.486'. [ 333.696769][ T8018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.714072][ T7901] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.796967][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.804393][ T6760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.815947][ T8031] random: crng reseeded on system resumption [ 333.926806][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.934043][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.057360][ T8041] fuse: Bad value for 'fd' [ 334.065146][ T7901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.078310][ T7901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.127283][ T7901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.174172][ T7901] veth0_vlan: entered promiscuous mode [ 334.220467][ T7901] veth1_vlan: entered promiscuous mode [ 334.317782][ T7901] veth0_macvtap: entered promiscuous mode [ 334.356826][ T7901] veth1_macvtap: entered promiscuous mode [ 334.421312][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.449788][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.473451][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.492770][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.507791][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.521054][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.537173][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.572406][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.614539][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.646383][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.688045][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.731573][ T7901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.760757][ T8031] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 334.775219][ T7901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.801641][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.862126][ T7901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.874517][ T7901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.892151][ T7901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.927196][ T7901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.066501][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.094175][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.147360][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.158329][ T5276] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 335.183803][ T5282] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 335.193678][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.329629][ T5276] usb 3-1: device descriptor read/64, error -71 [ 335.339929][ T5282] usb 4-1: device descriptor read/64, error -71 [ 335.569171][ T5276] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 335.591581][ T5282] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 335.642655][ T58] usb 5-1: string descriptor 0 read error: -71 [ 335.654388][ T58] usb 5-1: USB disconnect, device number 33 [ 335.729133][ T5276] usb 3-1: device descriptor read/64, error -71 [ 335.738180][ T5282] usb 4-1: device descriptor read/64, error -71 [ 335.838891][ T5276] usb usb3-port1: attempt power cycle [ 335.848498][ T5282] usb usb4-port1: attempt power cycle [ 335.892078][ T8] usb 1-1: USB disconnect, device number 62 [ 335.967015][ T8] Unregistered device Sky IT Digital Key (green led) [ 335.973993][ T8] as10x_usb: device has been disconnected [ 336.208175][ T5276] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 336.216116][ T5282] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 336.248697][ T5276] usb 3-1: device descriptor read/8, error -71 [ 336.256968][ T5282] usb 4-1: device descriptor read/8, error -71 [ 336.488665][ T5276] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 336.499081][ T5282] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 336.509090][ T5276] usb 3-1: device descriptor read/8, error -71 [ 336.518794][ T5282] usb 4-1: device descriptor read/8, error -71 [ 336.618776][ T5276] usb usb3-port1: unable to enumerate USB device [ 336.642997][ T5282] usb usb4-port1: unable to enumerate USB device [ 336.832798][ T8104] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.499'. [ 337.108225][ T5276] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 337.158170][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 337.268088][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 337.293122][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.306952][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.324082][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 337.334255][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.334263][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 5 [ 337.334310][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 337.354052][ T5276] usb 2-1: config 0 descriptor?? [ 337.380551][ T5276] hub 2-1:0.0: USB hub found [ 337.394278][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.403712][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 337.412134][ T9] usb 5-1: SerialNumber: syz [ 337.652260][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 337.964752][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 337.964773][ T29] audit: type=1326 audit(1727135920.408:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 337.968940][ T8115] IPVS: length: 8 != 2504 [ 338.002969][ T29] audit: type=1326 audit(1727135920.418:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.060409][ T29] audit: type=1326 audit(1727135920.448:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.084030][ T29] audit: type=1326 audit(1727135920.448:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.092923][ T8115] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 338.108326][ T29] audit: type=1326 audit(1727135920.468:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.136515][ T29] audit: type=1326 audit(1727135920.468:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.159511][ T29] audit: type=1326 audit(1727135920.468:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.181620][ T29] audit: type=1326 audit(1727135920.468:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf746d5a7 code=0x7ffc0000 [ 338.204648][ T29] audit: type=1326 audit(1727135920.468:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.227445][ T29] audit: type=1326 audit(1727135920.468:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 338.262229][ T8115] syz_tun: entered promiscuous mode [ 338.284318][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.306250][ T8115] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 338.354678][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.628251][ T1172] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 338.756145][ T8117] binder: 8116:8117 ioctl 54e3 0 returned -22 [ 338.801279][ T1172] usb 4-1: config 97 has an invalid interface descriptor of length 3, skipping [ 338.818097][ T1172] usb 4-1: config 97 has an invalid descriptor of length 0, skipping remainder of the config [ 338.857374][ T1172] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 1 [ 338.880908][ T1172] usb 4-1: New USB device found, idVendor=0480, idProduct=d010, bcdDevice=17.4d [ 338.913878][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.075261][ T8127] input: syz0 as /devices/virtual/input/input8 [ 339.154945][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 339.220852][ T8119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.377604][ T8133] fuse: Bad value for 'fd' [ 340.207564][ T5276] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 340.249184][ T5276] usbhid 2-1:0.0: can't add hid device: -71 [ 340.287204][ T5276] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 340.384788][ T5276] usb 2-1: USB disconnect, device number 27 [ 445.827933][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 445.834975][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7901/1:b..l [ 445.843491][ C1] rcu: (detected by 1, t=10502 jiffies, g=45905, q=638 ncpus=2) [ 445.851309][ C1] task:syz-executor state:R running task stack:21088 pid:7901 tgid:7901 ppid:7876 flags:0x20000000 [ 445.864548][ C1] Call Trace: [ 445.867962][ C1] [ 445.871025][ C1] __schedule+0x1895/0x4b30 [ 445.875621][ C1] ? __pfx___schedule+0x10/0x10 [ 445.880531][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 445.886591][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 445.891937][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 445.897288][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 445.903348][ C1] irqentry_exit+0x5e/0x90 [ 445.907819][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.913887][ C1] RIP: 0010:page_ext_get+0x138/0x2a0 [ 445.919256][ C1] Code: 40 9a e8 9b 31 f3 ff 48 8b 05 44 bc 35 18 48 85 c0 74 41 4c 89 e1 48 c1 e9 16 48 8d 1c c8 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 6e 31 f3 ff 48 8b 1b 48 85 db 74 1f 4c 89 e5 48 [ 445.938915][ C1] RSP: 0018:ffffc9000310f3f8 EFLAGS: 00000246 [ 445.945140][ C1] RAX: 1ffff11047ffdea8 RBX: ffff88823ffef540 RCX: 0000000000000000 [ 445.953253][ C1] RDX: 0000000000000000 RSI: 0000000001cc22c0 RDI: 000000ffffffffc0 [ 445.961276][ C1] RBP: 000000ffffffffc0 R08: ffffffff820b3bee R09: 1ffffffff284b2f8 [ 445.969299][ C1] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: 000000000007308b [ 445.977338][ C1] R13: ffffea0001cc22c8 R14: ffffffff820b3b20 R15: dffffc0000000000 [ 445.985374][ C1] ? page_ext_get+0x20/0x2a0 [ 445.990081][ C1] ? page_ext_get+0xee/0x2a0 [ 445.994865][ C1] ? page_ext_get+0xee/0x2a0 [ 445.999779][ C1] __page_table_check_zero+0xb1/0x350 [ 446.005216][ C1] free_unref_page+0xd0f/0xf20 [ 446.010108][ C1] vfree+0x186/0x2e0 [ 446.014077][ C1] xt_compat_flush_offsets+0x77/0xb0 [ 446.019416][ C1] do_ebt_get_ctl+0x10e3/0x29f0 [ 446.024327][ C1] ? __pfx_validate_chain+0x10/0x10 [ 446.029577][ C1] ? mark_lock+0x9a/0x360 [ 446.033970][ C1] ? __pfx_do_ebt_get_ctl+0x10/0x10 [ 446.039268][ C1] ? __pfx___might_resched+0x10/0x10 [ 446.044622][ C1] ? nf_getsockopt+0x248/0x2c0 [ 446.049448][ C1] ? __pfx_lock_release+0x10/0x10 [ 446.054566][ C1] ? __mutex_lock+0x2ef/0xd70 [ 446.059312][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 446.065351][ C1] ? __might_fault+0xaa/0x120 [ 446.070090][ C1] ? __pfx_lock_release+0x10/0x10 [ 446.075194][ C1] nf_getsockopt+0x299/0x2c0 [ 446.079846][ C1] ip_getsockopt+0x222/0x2e0 [ 446.084599][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 446.089871][ C1] ? aa_sk_perm+0x96d/0xab0 [ 446.094562][ C1] tcp_getsockopt+0x163/0x1c0 [ 446.099301][ C1] ? __pfx_tcp_getsockopt+0x10/0x10 [ 446.104551][ C1] ? aa_sock_opt_perm+0x79/0x120 [ 446.109539][ C1] ? sock_common_getsockopt+0x2e/0xb0 [ 446.114967][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 446.120914][ C1] do_sock_getsockopt+0x3c4/0x7e0 [ 446.126005][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 446.131706][ C1] ? __pfx___might_resched+0x10/0x10 [ 446.137057][ C1] __sys_getsockopt+0x26b/0x330 [ 446.141970][ C1] ? __pfx___sys_getsockopt+0x10/0x10 [ 446.147399][ C1] ? __might_fault+0xc6/0x120 [ 446.152141][ C1] __se_compat_sys_socketcall+0x349/0x1430 [ 446.158008][ C1] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 446.164327][ C1] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 446.170977][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 446.176244][ C1] __do_fast_syscall_32+0xb4/0x110 [ 446.181416][ C1] ? exc_page_fault+0x590/0x8c0 [ 446.186318][ C1] do_fast_syscall_32+0x34/0x80 [ 446.191223][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 446.197874][ C1] RIP: 0023:0xf73cd579 [ 446.201985][ C1] RSP: 002b:00000000f751f690 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 446.210450][ C1] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000f751f6c8 [ 446.218471][ C1] RDX: 00000000f751f74c RSI: 00000000f751f750 RDI: 00000000f73bbff4 [ 446.226678][ C1] RBP: 00000000f751f750 R08: 0000000000000000 R09: 0000000000000000 [ 446.234796][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 446.242823][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 446.250960][ C1] [ 446.254024][ C1] rcu: rcu_preempt kthread starved for 10411 jiffies! g45905 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 446.265277][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 446.275297][ C1] rcu: RCU grace-period kthread stack dump: [ 446.281395][ C1] task:rcu_preempt state:R running task stack:22224 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 446.293227][ C1] Call Trace: [ 446.296576][ C1] [ 446.299549][ C1] __schedule+0x1895/0x4b30 [ 446.304217][ C1] ? __pfx___schedule+0x10/0x10 [ 446.309171][ C1] ? __pfx_lock_release+0x10/0x10 [ 446.314251][ C1] ? __asan_memset+0x23/0x50 [ 446.318902][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 446.324766][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.331164][ C1] ? schedule+0x90/0x320 [ 446.335465][ C1] schedule+0x14b/0x320 [ 446.339761][ C1] schedule_timeout+0x1be/0x310 [ 446.344661][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 446.350080][ C1] ? __pfx_process_timeout+0x10/0x10 [ 446.355429][ C1] ? prepare_to_swait_event+0x330/0x350 [ 446.361035][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 446.365930][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 446.371194][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 446.377399][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 446.382737][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 446.388775][ C1] ? finish_swait+0xd4/0x1e0 [ 446.393421][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 446.398058][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.403382][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 446.409341][ C1] ? __kthread_parkme+0x169/0x1d0 [ 446.414433][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.419678][ C1] kthread+0x2f0/0x390 [ 446.423839][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.429088][ C1] ? __pfx_kthread+0x10/0x10 [ 446.433814][ C1] ret_from_fork+0x4b/0x80 [ 446.438395][ C1] ? __pfx_kthread+0x10/0x10 [ 446.443035][ C1] ret_from_fork_asm+0x1a/0x30 [ 446.447877][ C1] [ 446.450941][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 446.457303][ C1] CPU: 1 UID: 0 PID: 5311 Comm: kworker/1:8 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 446.467846][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 446.477974][ C1] Workqueue: events nsim_dev_trap_report_work [ 446.484108][ C1] RIP: 0010:unwind_next_frame+0x1817/0x22d0 [ 446.490883][ C1] Code: 8d 7d 08 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 7d 2f bd 00 4c 8b 75 08 48 8d 5d 10 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 5f 2f bd 00 4d 39 fe 0f 87 b2 00 00 00 48 8b 03 [ 446.511271][ C1] RSP: 0018:ffffc90000a17a70 EFLAGS: 00000246 [ 446.517573][ C1] RAX: 1ffff92000142f6a RBX: ffffc90000a17b50 RCX: 0000000000000000 [ 446.526135][ C1] RDX: dffffc0000000000 RSI: ffffc90003c60000 RDI: ffffc90000a17b48 [ 446.534790][ C1] RBP: ffffc90000a17b40 R08: ffffc90003c67ed0 R09: 0000000000000000 [ 446.543093][ C1] R10: ffffc90000a17b90 R11: fffff52000142f74 R12: dffffc0000000000 [ 446.552695][ C1] R13: ffffc90000a17b40 R14: ffffc90003c60000 R15: ffffc90003c67ee0 [ 446.561045][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 446.570143][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.576784][ C1] CR2: 00000000f72a1760 CR3: 000000004f56a000 CR4: 00000000003506f0 [ 446.584813][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.592870][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.600960][ C1] Call Trace: [ 446.604371][ C1] [ 446.607259][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 446.613744][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 446.619436][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 446.624802][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 446.631221][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 446.637629][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 446.643075][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 446.648860][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 446.654109][ C1] ? acct_account_cputime+0x207/0x210 [ 446.659714][ C1] ? update_process_times+0x1ce/0x230 [ 446.667347][ C1] ? tick_nohz_handler+0x37c/0x500 [ 446.673409][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 446.678927][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 446.684376][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 446.690235][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 446.696364][ C1] ? hrtimer_interrupt+0x396/0x990 [ 446.701545][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 446.707834][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 446.713744][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.719958][ C1] ? unwind_next_frame+0x1817/0x22d0 [ 446.725318][ C1] ? worker_thread+0x870/0xd30 [ 446.730136][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.736334][ C1] arch_stack_walk+0x11c/0x150 [ 446.741151][ C1] ? kthread+0x2f0/0x390 [ 446.745529][ C1] stack_trace_save+0x118/0x1d0 [ 446.750430][ C1] ? stack_trace_save+0x118/0x1d0 [ 446.755505][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 446.760941][ C1] ? __asan_memset+0x23/0x50 [ 446.765722][ C1] ? unwind_next_frame+0x193b/0x22d0 [ 446.771122][ C1] kasan_save_track+0x3f/0x80 [ 446.776023][ C1] ? kasan_save_track+0x3f/0x80 [ 446.780920][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 446.785991][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 446.792153][ C1] ? __alloc_skb+0x1c3/0x440 [ 446.796812][ C1] ? synproxy_send_client_synack+0x1ba/0xf30 [ 446.802951][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 446.808499][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 446.813979][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 446.818793][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 446.824040][ C1] ? nf_hook_slow+0xc3/0x220 [ 446.828761][ C1] ? NF_HOOK+0x29e/0x450 [ 446.833056][ C1] ? NF_HOOK+0x3a4/0x450 [ 446.837363][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 446.842699][ C1] ? process_backlog+0x662/0x15b0 [ 446.847767][ C1] ? __napi_poll+0xcb/0x490 [ 446.852309][ C1] ? net_rx_action+0x89b/0x1240 [ 446.857209][ C1] ? handle_softirqs+0x2c5/0x980 [ 446.862205][ C1] ? do_softirq+0x11b/0x1e0 [ 446.866766][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 446.872204][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 446.878080][ C1] ? process_scheduled_works+0xa63/0x1850 [ 446.883858][ C1] ? worker_thread+0x870/0xd30 [ 446.888835][ C1] __kasan_slab_alloc+0x66/0x80 [ 446.893909][ C1] ? __alloc_skb+0x1c3/0x440 [ 446.898559][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 446.904544][ C1] __alloc_skb+0x1c3/0x440 [ 446.909019][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 446.914018][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 446.919874][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 446.925214][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 446.930638][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 446.937286][ C1] ? synproxy_pernet+0x45/0x270 [ 446.942283][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 446.947541][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 446.953312][ C1] ? nf_ip_checksum+0x13a/0x500 [ 446.958481][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 446.963733][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 446.969503][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 446.974588][ C1] ? __pfx_validate_chain+0x10/0x10 [ 446.980275][ C1] ? stack_trace_save+0x118/0x1d0 [ 446.985356][ C1] nft_do_chain+0x4ad/0x1da0 [ 446.990011][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 446.995083][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 447.000725][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 447.006074][ C1] nft_do_chain_inet+0x418/0x6b0 [ 447.011067][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 447.016572][ C1] ? ipt_do_table+0x312/0x1860 [ 447.021576][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 447.027081][ C1] nf_hook_slow+0xc3/0x220 [ 447.031543][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 447.037579][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 447.043616][ C1] NF_HOOK+0x29e/0x450 [ 447.047753][ C1] ? NF_HOOK+0x9a/0x450 [ 447.052049][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 447.056739][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 447.062879][ C1] ? ip_rcv_finish+0x406/0x560 [ 447.067723][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 447.073087][ C1] NF_HOOK+0x3a4/0x450 [ 447.077214][ C1] ? __lock_acquire+0x1384/0x2050 [ 447.082296][ C1] ? NF_HOOK+0x9a/0x450 [ 447.086699][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 447.092066][ C1] ? ip_rcv_core+0x801/0xd10 [ 447.096730][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 447.101917][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 447.106478][ C1] __netif_receive_skb+0x2bf/0x650 [ 447.111646][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 447.116729][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 447.122405][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.128443][ C1] ? __pfx_lock_release+0x10/0x10 [ 447.133524][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 447.138750][ C1] process_backlog+0x662/0x15b0 [ 447.143655][ C1] ? process_backlog+0x33b/0x15b0 [ 447.148745][ C1] ? __pfx_process_backlog+0x10/0x10 [ 447.154080][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.160223][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 447.167605][ C1] __napi_poll+0xcb/0x490 [ 447.172107][ C1] net_rx_action+0x89b/0x1240 [ 447.176883][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 447.182064][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 447.187789][ C1] handle_softirqs+0x2c5/0x980 [ 447.192617][ C1] ? do_softirq+0x11b/0x1e0 [ 447.197176][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 447.202524][ C1] do_softirq+0x11b/0x1e0 [ 447.206906][ C1] [ 447.209878][ C1] [ 447.212939][ C1] ? __pfx_do_softirq+0x10/0x10 [ 447.217879][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 447.223595][ C1] ? rcu_is_watching+0x15/0xb0 [ 447.228419][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 447.233689][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 447.239549][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 447.245320][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 447.250655][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 447.256521][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 447.262226][ C1] ? process_scheduled_works+0x976/0x1850 [ 447.268090][ C1] process_scheduled_works+0xa63/0x1850 [ 447.273726][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.279771][ C1] ? assign_work+0x364/0x3d0 [ 447.284416][ C1] worker_thread+0x870/0xd30 [ 447.289077][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 447.295025][ C1] ? __kthread_parkme+0x169/0x1d0 [ 447.300108][ C1] ? __pfx_worker_thread+0x10/0x10 [ 447.305273][ C1] kthread+0x2f0/0x390 [ 447.309385][ C1] ? __pfx_worker_thread+0x10/0x10 [ 447.314592][ C1] ? __pfx_kthread+0x10/0x10 [ 447.319226][ C1] ret_from_fork+0x4b/0x80 [ 447.323693][ C1] ? __pfx_kthread+0x10/0x10 [ 447.328324][ C1] ret_from_fork_asm+0x1a/0x30 [ 447.333160][ C1]