last executing test programs: 18.202059119s ago: executing program 1 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010124bd7000000000", @ANYRES32=r2, @ANYBLOB="24003400fc6c487cac9668d772f6ebe93d361312733b5a80e7590800495bf236de7ad899080026006c090000040046001e0094"], 0x6c}}, 0x0) 18.007957227s ago: executing program 1 (id=345): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) sendmsg$nl_route(r3, 0x0, 0x240088c5) socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x65) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="453a4e4785a56b0d96a738a99159cc0000"]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[], 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r7, {0xffff}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) 13.876040168s ago: executing program 1 (id=363): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) 13.636740209s ago: executing program 1 (id=365): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000001440)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", r9, r10, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r4}, r9, 0x4, @unused=[0x832, 0x8, 0x5a, 0x7], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x13) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001340)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f98510", 0xc1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)}, {&(0x7f0000000e00)="d584132c6710c94c4fbf0cbd772bc95ecb4f7c2c6dbf979b1583404a7778cb520b", 0x21}], 0x2, 0x0, 0x88}}], 0x2, 0xc0) socket$kcm(0xa, 0x5, 0x0) 13.37770711s ago: executing program 0 (id=367): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)}], 0x1) 12.859280188s ago: executing program 3 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_list_modules(0x0, &(0x7f0000000a40), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x3, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@ifindex, 0xffffffffffffffff, 0x31, 0x5, 0xffffffffffffffff, @void, @value}, 0x20) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xab) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000100)={0x2, "efd0fb555e6cabf8cc3864f8ed903f01160f2e9674f3cb94d7e0fddced39ed78cbd23078632702b7d2e6c58ea5a699481523fc60440042e669b4df51e0cf662d", {0x2, 0x6}}) 12.362017467s ago: executing program 2 (id=371): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES32], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x40, 0x1cd) io_setup(0x3, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x32a5, r0, 0x0, 0x0, 0x10, 0x0, 0x2, r0}]) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000800000000000024001a8020000a8014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000040300000000000000080001000100000008000ac0"], 0x30}}, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x20000044}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x6, 0x80000001, 0x0, {0x5, 0x4, 0x7, 0x4, 0x0, 0x4, 0xfffffff8, 0x88, 0x6, 0x8000, 0x2686, r5, r6, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000bc0)="27050200590200000600002fb96dbef706e1050007008100000088a8", 0x1c}], 0x1}, 0x200048c4) 12.331427818s ago: executing program 0 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r2], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 12.046041582s ago: executing program 0 (id=374): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[0x0]) sendmsg$nl_route(r3, 0x0, 0x240088c5) socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, 0x0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x65) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="453a4e4785a56b0d96a738a99159cc0000"]) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e21, 0xfffff79e, @mcast1, 0xfffffdfc}}, 0x0, 0x0, 0x9, 0x0, "0c9e089c01860b471037f43d223b3c1b324debec40e55a07f709417eb48821996aff1c7154e746be4d7686455261c425a7519cc269d04e6205abaabde24a2b12440b329ad5bd35f21907c7988d1300"}, 0xd8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000000)=ANY=[], 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r7, {0xffff}, {0x0, 0x1}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) 10.958231866s ago: executing program 4 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010124bd7000000000002b000000", @ANYRES32=r2, @ANYBLOB="24003400fc6c487cac9668d772f6ebe93d361312733b5a80e7590800495bf236de7ad899080026006c090000040046001e0094"], 0x6c}}, 0x0) 10.882025079s ago: executing program 3 (id=378): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006c000000080003", @ANYRES32=r2, @ANYBLOB="08002600ad16"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.297287456s ago: executing program 3 (id=379): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="3f9a3e", 0x3}], 0x1) 10.282442356s ago: executing program 4 (id=380): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32], 0x4c}}, 0x0) 8.351948884s ago: executing program 2 (id=381): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 8.303356835s ago: executing program 1 (id=382): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f7902"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @time={0x7, 0x7b5}, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @time={0x9, 0x2}, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xe, 0x2}, @control={0x3, 0x7, 0x7fff}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), 0x1, 0x8, 0x1}) io_uring_enter(r2, 0x1ffe, 0x0, 0x0, 0x0, 0x0) 7.950007589s ago: executing program 3 (id=383): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)}], 0x1) 6.869674401s ago: executing program 2 (id=384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r2], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 6.286438835s ago: executing program 4 (id=385): r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x1000000, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.161229414s ago: executing program 0 (id=386): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x240040c0) capget(&(0x7f00000001c0)={0x20080522, r2}, &(0x7f0000000280)={0x6, 0xb3c, 0x10001, 0x0, 0x820, 0x8}) syz_extract_tcp_res(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x206) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b40)="0263159c47d4a83ae663a954cc181c4e", 0x10}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 5.859409417s ago: executing program 2 (id=387): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000"], 0xfe33) 5.664174677s ago: executing program 3 (id=388): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, 0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000001840)={0xc, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000009c0)={0x0, 0x9, 0xfff}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000002c0)={{}, {@val={r1}, @max}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd29, 0x6, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xf}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.430097956s ago: executing program 0 (id=389): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="010000000000000000006c00000008000300", @ANYRES32=r1, @ANYBLOB="08002600ad16"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.345659977s ago: executing program 1 (id=390): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lsm_list_modules(0x0, &(0x7f0000000a40), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x3, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe681}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x17}, 0x2000400c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) r5 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x4, 0xe, 0x4, 0x7fff, 0xf, 0xe}) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xab) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000100)={0x2, "efd0fb555e6cabf8cc3864f8ed903f01160f2e9674f3cb94d7e0fddced39ed78cbd23078632702b7d2e6c58ea5a699481523fc60440042e669b4df51e0cf662d", {0x2, 0x6}}) 5.304534109s ago: executing program 2 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010124bd7000000000002b000000", @ANYRES32=r2, @ANYBLOB="24003400fc6c487cac9668d772f6ebe93d361312733b5a80e7590800495bf236de7ad899080026006c090000040046001e0094"], 0x6c}}, 0x0) 5.045158713s ago: executing program 0 (id=392): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRES32], 0x48) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x40, 0x1cd) io_setup(0x3, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x32a5, r0, 0x0, 0x0, 0x10, 0x0, 0x2, r0}]) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="000800000000000024001a8020000a8014"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000040300000000000000080001000100000008000ac0"], 0x30}}, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x20000044}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f000000a380)="065748d9b7201aa0b78b7de922fadebde23085f7286d91a9a726e31c8d5bdde37cf9143da9cd46109b49bfaa90276cb858b34bbd86ce50be3ca34a012e8debba01cdabb953229b8b9e107bcd8176718c3e464ba51397fb2a9b0419e22faa0fe47c404a80e947345384857c843ac837c137cb2f80dc3eb198cd04df6dc7debcee1348a2e9f31610357bff2511876fc419aee012d479e33599e4c2f2004c4bc139f8e2d93b3aa078a7b3e2c6a800a9e99cfe5668cb3a92e286d073e2adfd49e4ed76ecd7b257b95955d2d4b908fb6d7eae977beffe662f044fc72361d6000314d2c1949bd77a974562172e0a6576e7503bc15503721b3002d48dff082f393f344f483da6431f200db0bef07361ee5ad0cdb3beef2046df35e705c46615cd99801287dd68a3ed4cd3e64474162b32a992c84224f9f873138bbb2905b773e79411c7a5da36490f6432e2c02f381b0992a65d24276e9d4f38518d6eb343e10e6087c30b660661543e4cd7aa52eaab5a599216396cc88205d0f1fc8d571b513ba28a841206ae80aea64d1817b1c68183a2fc11cca719c1a2892d023274487d7278522aca7f0094abc81ee44cf34635371889518c572cfd431f9ef293afed5e27b5b53ae2b2702d88ff531c801877dd232cd74ae66aecc2a2d6269696994444d15a50870300db65c764e55e0855dc6e658d84e9c7b7b35a0ce03d1fc1ca4d40f0419d48903c9de8d23d1fd9f20cedf2fc1c2fa18082fa88ab9694ef3ca98b732bb9b067c339ce4c52cf0f1e226c4a8f9bedbdc339e49f48eecd108501e944506ca688d47ee34bd76a3c6584f4840718c2c1f5325e1abde71c42f93055c00046f6444eadb46c0026bd69d80819eb9d66dbec1d69f3915e2ecee5e8f3fe8d6e7706373c0f104da9724f4ce08c454c02ac78a85ae3375dc4354eff648abc61b3f50f6e5cfdde78606de33e15cc13ad41caf3e40591711624132ca7f2b9e865d675e046fd0692d6d7154478722277103327265e77ec0612324c6c3997212060863ebbdf1aea928954e0d8b30ba196bcaacbb49674fe6815d45548fdfdca20fb5628ba26c67dcca0f2edfa8587f00188724eeadade9c9ef907d87bb4c3ef4dd4b9eb3ce00aa58e5735514204ec66c3f5b286e0aa6748e2b238357b571fd74184424b92afc07e58d4bc1ae0332f27b40b4eba38bde14a29825566086c10f383fcb44158f7113d70055ddc0729f3b820c921eea1c612016ba48d4705f251ddcd7f006b005cffa5465c354b7ba2cc2d6814b8a12199007e3309451d85db070a91fcc0e9408a6f00bd6ea7d39981e124b9f47dbc87b6cb81254d15afa535cc8380578e502a7ba710f777777852797f9d0bd31131ce725d36725a59dde63674007a92616fcab1e289f3b592e1f2ba52aed2e6e209e1b8f1e791ac4bf76a06b63d16df391d4306c03e7e69aa7f1e66e249be67318d41437853d4f89d360c98771ba0efe69a039f15c04e0f2690d7cfd14408c4b1dd18132af1107b19d728689a8300083a84e131316b48be17ff9961b6282c1ef2a8d8179987350b2ec9fa1d53f1f2024c3ffcd5057287c76a28a3274602ff71efb05d879992c06a8e08739c192f61ac3c4da7522ed53b3af0e0171511744a170f9b59bd203889e6a523198c28cd17ac642547a96d7e617ee0af59ea60fc8f991583ab35bdce1a7b55c41592b237e5b93b7401d56380ee2673d3197e3de56e1ebd6a3c47e49ba156a6465e3b6d7d2a7a4a18690a816d831ccda929c7c3ba4d7c3eda1825941ae7b7eae1e157440e1085dbf1783db6cf5ff21a2f357fd3caea58a92d0249983255a27cd7271020caaf94dc11d43e490a29ac0ee2ae7fbbee2bd4160cf87a8c1bd2815b93ca6ff0f1a58e036dbc32fdbd7a645bf28b330a313fabd3ee1a552f9a801c1360fd962cd7238247acce9e94662828f8294e820d557965503619da71a46b8ea0e6dd671793d6b95d2b91672c28e9f5bcd00d6002dd2514321df80e9b1087736f6c3836ec53f88c62a24b193b780c4600855749b4dcd966679ce329f49700b7e5e81c69dee3f944db6e7abc722dd477585dee084ad30007a8dc3a14d7cf247c6e79c66a5c0b656f89bec73bec2bf8d6a122e82b69d591e31b6bb16988b577c939528431d254b70d657f65882552898f8a8362c27bfd038d4263a744bfdb1d75a2c0640103532179a8d4a8aa5990a9cd1bcf50a6ad2b9dc0c6aa843275bc658389f518238035818c43e1bedb037fd064634e4d1c1dc3d88798e526ad1a8e6ac65bc5f84271211079c917f5db94ae032b9c31c7dfdfea3e541089f047f2695fc65e05c2c59dae4460ff54d52e9bc0b3921f77b5aeab1f588896753ebc583da303cde439a8e303e55f98134e2a7ae3cf9f7308cdee5e1971ea353ab9e5a070833b0ffba2aa3aa7de25a56472e99b7b5f6be08910626cdd55e9f438f5144f33976280cbf90738ac7f3d544f2f68e91209155c858ed7dea622740ae27be77376119dfabbae10f88082f50862151ee8ea345779933de42d62eecd9111b4225640cddf53a01614fa60b73e0144380bc4ad019048bb3ea2e77271dfe4e41c8d45fbe650137a0bbd23d8a6e8d82fb506a0f9d8322cb2bddbdecdb2c0675b0652f6eb36bb4644a6912a2e48b4791022dc7d7a8185f59145cb0c5c79b9a7cb608d0de9518002c442e7aa8f7f1a66e5c73a521c156ea80d857db4c8825b6cf8ce624a6d410f25e9e6a59f51ad5cf653a83c79d3a2fef5581843d923aeb94db2697ec4fa00e300719ff9c5829bb99704d94e4bc9997c645e7db0ffb40c2f5bbf3ee38e060aff51bdf027f54396b21485a0223c382853338d2bfce45dc0b15a4d5eca797186798195bc7b2ad733851656fcb65f80bd1222520463edd1e6ea91ec8c0ab5e9a2194095fd1bc827a6c93b0cce274f2bb8253d41a860e7fa675f1b3c5810dae9296f090e269aad4ce1fb9dab2009b83ed28772fca57492b5bbc1548a983ebb17c21285b0e38f3096db173fcce32ca57f7ac03ea907218f2ebc8b172154e2b79aef23455a93481f2ed5218e5075ba1db7b66c50526bf013485045c5eb173df6b79f9e63c13106b33655c63c2ad3d2e11bd2a45e7205046878d845411c00c2cae49afdc4ee9b8964e99d77d0428efd2cc7269d15c7517ee403d7ac42884bccb8aa8ff78226241a5e44140b8431eed9a441982976066b9c474ecb2d275341f95fdf3cf5386c350f00cabc58c5a877d8ae4811fa824f841b949cc168c0d03b9d27e3bbcd0dc5fc3f0accf68c4e03d52785155482a250f769f81d109b0231201d5ae78d38f13648e10d6637bcaf4ba54223e4fe86f598e60540d0c1ecde18929480cadbcc43210d9ef515aac4246aa88028f06f3ba5c29511f21f636c29f4ef3a6c725fcd6154be0182476dbdd0502c198fb92b37df83fc7aba910db906aaddbbb50307cae65b0f8ec9b93129747af1b836cfeacb51209c0fd465f7bc22437dcabd17d618e904043032b12c525664f87e3c4b698f8f09baa7e5dea3444331cf9be77d48286257aefb0e631e3e910ac29de8cd18380508a4d9e2e19f810352933847e651be135cac0bedf4aac280cf8fbbcd01de324e50b00e32ae830a0b2e273bd3af2b126b2149499d3055596c9a1e8666c05f202b8a76fcf316fc524b8de7632e9014a63f9378edac8fcf2520a3535c55833ac0c61d332d3ece1891090d151eb4a95e801bb11410dc7356d742dacff2153ddcfe1e4784fb70dbff3cb0b1745e69ca09b0d0a2dd5d3898e99f79f71c3e6524989c0e09b5a6fbeaa788fa28600702b8293546051eaac79c8caa6527b396f9878b7ac78cd0a243847b86b30cb8add0f9e26f7c35b0cda5b07d3789056f224937d815c2f026945eee3d4473aa46b0192b6faee92252d9d5bbff3194b9ebed539dea987bcd48c1445ea9e429a947b955876c7cf9360e580f38a7dbacd7257454198aaf3018601583c63aecde81915aa068ffa320e9d915f8d026534d992c5303f94c40d9bda02d4d74dc98e2b766d731f6b8e1474fa5d5400822808439678ca5c7ba8aadab2fbf3b78bcf779629db33c9278732dfb2d33f7fb27de3a80e6c467c6a4e0d09fcca9ad9edb16a87d77f7d5d00ae9c31b868fc767684e4086d8fa73be4dac01c80cd67b4833ebd199147725f35d89d357ebc30d33a756d39f6b83ec013e1ece2c0a5e7a89886bc3f7bb3360d554ce9bd52ac5b8ee48a0f05c8de19d403487321146a2ec091da62b7840dc95a905396a80f1a8dbcbac0d949fc3d56944634e32e69d0d6ae37506db7274a1f05b68d1f38b5b117b75881d5e1a617e894052be9d9546e3bd06f4c91e29a1e28c2b3273b3354993c6af189150d7ffcea609f88eacdb90bff39c1469851d3513d14b22ae9888b9ae916cb26ea3a4554ea4492ebeeaec2987b6df8925d21772ae72f685cde759b61db4e63a3dc6081d6bb41bc4c6c3dd0a60e27a05320d62bcb97393d8100119e969da03f748b1c704deb834f1367439187aa6c3b9b3db28ea068b87658c3f79b5b8664b6e548f24f66afa60b423a70784299126c5b064e9be1f2d4a825acfe23de7d2d161ca4593e9d0703cd3731520d09aa1b72bf95165baf7aca7f0052a0f6e7f3bd5a9969d48b6a6002d4513431f27ec938254a635f5a7c68e927aaa54509065a9f78eda2d8f086e297bd5305dc42e9f96f6fc3b2a17c832776bb0cef34d62eb933b3e7ecf8e4beb1a6540f563d9c9a88203f48b3b978718fa15b8e2b1ffb4667bf3cda922700a89b1bbe39d7ce149fd0d3a50dc17ea5eaad611c627f4f94438c05ebb35fdf88cc6c8fda5b6e6486e39e3efd219be5863bdd3b4bee4b09df2033008ce53cc39b6bfb3c0d4b1cda24737deb79bd9ff189e35d471163886190f5882c8443dec42b48fcd451212376f39f0312342e7b62dd733fc73d3e11fd43a7c24b80400314aad26e6d22b52fa9c8cea85ade80948bd8abea17b25978e9cb0980209056b80295f2eb6f953f1cd36e6eac86ec17a2fb2bfdc9a5eb7186b2fe3341f3ad82846a17993c7cdb148d65eaf0bee316252d2e9c268447d497005888ae68edf96ec97b8f86672abf3e2e039f04ff5b0e169f6106ae1941f9faa755582a4742e10882bff6cf15d5d64ebc84e0c1f4af1f9a91c9711fae41a8dd729d7f3c4739558aff77968e7ea29cf63bc3adc013fb427da5e9edb19f1fb7059eb2fdc35e9fc8022f0bd260ac7cb426bbf405ce59f44715370024d870bd56f6d3a8651d9a391253e7e5467437e022f0124afa1c5380bee17555ef126865312fa6cee8dedd66b6008f0d4988c4ec03a96bf2a341df62aeb1162ed0421b9bee22d6ce30666ee7df599d04c9c43f392b19ad0a616565bbbbce1946a30ebb61b86936b82ef4c3536c3519f251cba3c4e815e1fef58745ae5ea3d1204c0a6dd4927812b144681dc4ffca7e5bcb933a517f05f91d5232b9eb9d8e75152afa50d62b11df24fb82b249f467fb1adb66b0ed933e3ca9d411527c8d5467dd2c5fb84d708b83c59b3b516d8cc273824063a76b94aeb9c577789bb6fd182c6bfabe0539bf8c2b01f266f3c7d33f768aa89f57f32f0d433b4d75e39dd88bbb978d6212080adf36a74a7d8d96dee94c37b8cfe43ef73eb4e83845e13f46d3c29ddff3d54442923fa68e86123f340ec0fe225b9232c09f942db2871dda8851e6154926c400da5ea34b12d6425c47db84b18adb8e18d70b0cfb31be51d8957f5b26e8170b40acb37b3e0ff991fa0f9a92449fafe30c82dbe03a4732070771d797e7659182d1030a1325a6b7c2d5fe51c87c02ba779089c211db7ffcb2fc5594465707b5baecbae7ffb416d2535a4255811b180659e61547f54d839809ae61a7531718a50c9c6f29e12aed1615000f11be8f6668dc83520de17eb64a2e7782a9e10fa8d4ab8bf2a4f73263e0668515c683abf251e8c467dd8fca06e1c1f1ee72907d28b1e151edd6629b6594c8d4a66b3bb2669347e846c76427693f1c9d2160a2bd5757018d1c79dc34148f8f46ba365b692c4ea6724a8e65ed66a28164bce9f8aeafb17b49486f4281e10126d5dcb75dc885e5a388378642b9197cda99718edbb98a0b98d51faaa37208dbf7642c8d64a19b10073e30bf0e654a537a40eb74f08156f805143c299ac9092498cd0800d4d1703a8d867a7efcc677762a71870470a8ce1e4655b350805231ded49255f299101b36eee5f657f261298c9e1f285bac3419c368025f5bf0144256eb75d37b99b4d2bc69f4b24128e6b222c463b3d0320a89d43d6efb74bf35d6d41f2e320105aca2e3362a91fbb259752dcbf4039aebbea6433813d637027b5cc93bb659d99d7be3d9af84802a8036bcc80146290e4868021ee0b873da8cff62caaca96fa4f2f3210ec2a63bc63f43bca0367c5ee6a24627218855fe659068445a7a64943364a14df7a49a569b9a9007d49eff51985eeb3a97edae677e3d9d269703a972bdc694796e3a8013c492ebc7ea0b3e47ff2b3495705459d070559ceb6c92be5fac6312dcf93ac5b3c0575d4016ff211efe161df8443b57d51dba1f9cb9d2724d1bb5fb744c372d60c05bc20083b77a01a119713726879b997185f25abb869da9ba903bd40cdffaee3f863746595e5d4d6b630f46659d7cfec576dfae74f8b2c57c5c34b50174c7311d402f2299c074b288681d526dcfe10291afd93bc8780e5994a5f3b500394d5bcb8496035667ad5dacf0b610f0760eae71456d5cd1c81067e78dbec0de9242b65549434981322f5340b4abc7cc9ab54b22f8a33413355c32e29294a81fe5e0338e3f975a064c58d734a09d632f599260b9370034c0a9356a9d4ab58e72803475cb95a6dc4334351a257b2dfb7afb5709e008a77b4730c564936857834be2aed8365dcc3f7cc15f98585b02d448428324f652485e66eccbd87cc69c03abcc62de27c6c38c774343f128c54ff71d2146d80432549df7f7e4076652a4914e54b85a97e6d055d50c6212aa3bf723d9110c2488f88f6bef16666e224ce339c3fc07ebfb8bee55d8f68fc736151a530b573827b16f820df72c26674ba883544143c63904f2d955c9d79069f5c8cfc71d1288a95befc6ecfedc3b28f761d3628ae5285fd767f78011457be099f217830e4d9db7759b101768af743058fd678efde72ca10d8c6dc0f01748e71e9138e7e023cc2735f98c6095cc963274a0947702a3d9bce0eff3c84616c243a3055cd46f3af40ef2caf86178fc93da0d189c2cbe11271d3933b557a1b38fbc16e98f790b91d10468ae9216a9d155830cf9990a88d2991ecf966a1cfd664e6427680133e14a23d11bc4fd5a9020c5f1b7bd3ebe319d351b6aeffa4ea9364fe322aaf814f5982528b034c23cf8935c1e75bd18e06e9ec4dc7bd638965b00356484404527652bd125960b2898284b339b8d3199568a28b7f873737015b5712dd770ccdfa9dbdcdd37cf075d84dc67815afa219ccc9717f0b82f9336104b5c19a68bf6b838fff7e3fdc6a7067c88d40af83cdeb72907d57eab0794bdb9e7dd520c98665fc54eeef9be50d6b836390e60dd9d124639213d8f97abcc0ce2c8331a43232ac184ed11525b025e3cc590567eb9d151d62b76a1f15948460489a3a84fe49ea8e058c7636c5a15dc67c88d0df6724eab919f6eebc56f340ff8a862f2a88a339a5cb8541b434255cfdb2ac622c0ebaedce683b425bfff76b291409ec53afb6cd5a8b9b998972514125b417f7e9ae34b7a2e33f794706b767c644efe482ba46988915132e1c3cb2ec434af8326d8b22b2043e0f3d80a08fc5997afeb7c4c5c60cd38a687d100cc3ac811781d9978942a155e1e0e9427751e9f6d32814e8a2b96f15565eda33c89b0aeff1536b1ba4bf36f207c3507d3df89b50cef6318ab411d5721b2703ffd301a8992b4d61e34ada52bba910915180eb12a3c821dd97866a66ce9634bb9d6db7772b8fbbef35c11b4f69d4c6a156129b309de5e1b1c3718abf8e4d479046966e4686d7d2917d8a8d1f627ee4fe41469d6839d67dfd5f51503879371c33b130b68c0608e6509352d3ac8016f6c3dd8342249981141887673e0fbb145bea824b2ba6f140a3d22af3813f90256dae0a5d068d97a0d050f2aa1ccdaf329d5d898e90a18931e1053db28adf2931a33cc00836188e12205d18af01a2c54353b27b915cdf9b427c0b17e04099f8b7a43ccfc6bbc3516baae5d7cab3f123a43b623bce7a9e0dc55c5ed5cffe8afd1b404b27fb85fe9455a157c163e8c389695a8063d69eab25d252aa6a43872a6bdabeb382860b38aaf4825f3e5b56a84c5967de64ce7061ebf18f99f3472883329708b4c61f66ead92f457c8a9e8086d3f9d345e0337d0c9766732260473e75311ecb9f7bf610ba222555a8b14711f21bb76cd49a275409eb9d67640a3923759c0c4af42c2bec765a338c18f5c5857fc5cfe80be88da826f1f3867c04257d5b72727f7bff17d08cee8b7a28d074de0f451c9ca373abbbcd092071b0b71795d5e7a62159b37dcf902b0f610c8de0ec2fabae735871e56533cb3a754d6bd39dcf0a0085afb173fc85f3a42fd0bbceae9b2593502eaf2008e177686294930c8155d5621d8369f33541e2fcaadf191c6887a0104a5d87dae8c9488d870fe2e415ec0298a7da20f29c38252389166f304f5bb5d358cec045338c502bce1ae981fcac892c42aa56b6b867341405773cacb63eda91723b7c612a55dc2d9b602149d4728e964a5183d8cecdda8e97fdd6711cb0915921ca737c9fa9e56f8638f38c99cd9c2c48be548639f8d10c7afeea759ff10cd0c7e761e3a317061523c1d91015ee538b703f1e83bd460bd2a44aed8ee40ca9ba02c5126e5e5664c11df8b25e93418e2a1bdeea1113f5a4871dd001074f0f0d03d9d289690ad698115ff45e608d6d46a17250dcb409ffb4e053fdb4a9e359e466eb08fbdd19edc697765ac43c0e3ec192415a8cb5ada08247b9553eb0d9318872c0a711f995be72c402e792a3fb91b8444d0a66bef376db69eaa0bfe487db30554b236b7cd1377ba22fa1f7b0ca48125a0f27957b0984f8fa11a6e49c731f50c58f7e78d155c52c9072db463a37b3591bdc9a370260bfaa7d845cc4090c5edce816ad282184f3a02c3802405e9c888b4f0ca4517eb5499e68cfc5944934e626030aad8cc5e725e961a66d4613f9d28914858e07c8ce7d474c92ad5f5996e8e827d151729c8f55ad7ff405922c04162a745a7dbc2228807bb96acf40c350aff8fafeb6053f1bff920cec2809257deb1b57f705fe76e06409242955b9e3df523d2ead5ade85dafbf33b5c5722320556cb64e2eb1fcb6a087941c047cea24b535b5d36b5064783b7c0f3f7706cd486c0d8aacb7325e089c0cdd3d08fc87ed3a7402b9cbeefccf1beb051b655745cb491dbb505fc966702c5dbaa72ea6fa54cefdb6288bf489d5c80ed5b8ea5b266f248826e48f872ad1238c2d76f8bf7afc1d7c4a47964741fcba94c328c6740daf60ff783c2379fc45aa9172a43a83390b9525be41eccea840b05756c82b84690f5bd1268ae6164442c1b39efd8e31afc51d463fc4f01f0311daaaae2acb3f634cc257f3278542a416a69e4447ccb77afdd966f4c3fcdfa5bcc0eef02f15d5bda90eddb41b9523c3e37ed0c0d0bd79da91789bce33f59e9a28de77a2ce60365ced233dead6ecbde9ccbe6cd97864ae6063eaf10ce2af4597d22ceca973a72a561e3da7d773b21c71a3d273fdec4f978bbe493c4b17c55dd2fb722d22dc72ff056ec1949b27b7872f9cba69f044e6bff58b699f8c7bd00dab055c95d520436277de40d821cbd1574f63edec7a6b0cd558b977bba421659f2076c85fcc4be012ef3407a1b11aedf226795a61237d34c4cc7b5266542a72db471fbd54b47cb3b59fed8cbac6b0bb348f30904ff87126654b9b04682a2e72632b90a59acabcb1f1d52afabef4096860350f0c8282f3f70bd0393a80d96dfa076ae340a961d47bd29143768e67cf1904cafa56a76bec785a68fc0b6f1e6ee45182463214eb37b51eb967ba09d41714621b81fd4330dd9455cfcb7ba5baffee0686ef17965c29d1976eb1c69236a4ce61781fe9e8734667b35f610dcd47b2d4060e219d0342c06ce1ef5a6ffebbcb77bccbe94c047fc828112d0a82948f60d5afd4df5bee1fb5c709d05ae81fddbb2ddcc44b9cf0b1d99d3d873d13f6ab8d1c45df8adfed2bf171ca2db4c702586b63c3a7cc73a58cc538780029a80a5b8d09eab132646f8c98d47a9005991dc6a3f3d95b636d780be323be0a5eeb42e352a5351a473f65f8e2cc4cd470133b5cb9b59d444f1cc301b37c2cedf29744f68a40aa6cffa3dfbb5967f4ab3128a2ccfcd7f65d0584c35dac57a4ee266934c0449db1557b51ad6f9770e169c4dd31f9f47528a44409d112696964d3d6adf9ded4261783f63c9b6e0c0d07a292137edd3042821d2d8d6bee28e15c853818cb563384641e38feda07991c155c6e3ec1d8ece6a7f98cf25de3f03a477367e62e32b15a11d59a60eec2dffe84fe50387d7b6c2ebf6c933c35668464277dbb4bf4f27cf0b5bee138366458f3f34bc4d4eb7a6d999de9a20eddd96b88fd7866f1022a2db946cf19f996720fb44dd6c1be3322130429877b9c54a46348da05f9a52589a6a19edea80942985f459b8c4b270d0ec4a9f498f833b9c0f5c815065c2bb75cc248d6041caed90ef1d66b60e5a4585fe48c6723b750d75ce01e34700da77ccd3fd81f060a6a49301151e7926ae13fe58b791ce1e5cb5a1e960ccc8c7e3d07506c6790c949eec49dd45b4e8fde85a1f337446b269088bf8f5517ed30dd22fcdcc747ad756dd6ef3059fb72900bc6708a7f384f6e64d06ac68ff3850167dd4d20bd4e78ee3ba1dd85a90ee3af3d71ca45471375a3c2eda1bc6735be407a05e36d5972a59e7429985f481bd2e9444d82a9b0ee68d598c9ab8cdc0c535459821cae4e73a7bf76a5419e365d7847e865accda1da75300b1e695eaa10e14869564da3f7b2e8f8d369bc1a7b6d1924ee0982d0a77375ea7b98bb1c358cccc89041d29a2b0a797f78e55fbb32bfe5d9dd5e7422c085f0a287b22bae4769d68518ffffe559cf4d999826dd60216aae4a191b6e20b11923827382662c53cf6c367dbdd4929ab09364214bb43ceae2d13c9fa989b10609bbefd61ce0880a01394127138c3c33e1a15aca603418f759c31e697ffff9a4cd94b2fa21249b880ed9a9093096c518209dcab0124ff237715d59de99d74195e5e2bce80cc436ff0dd2ba5d27409e6b5ea77bd06e5bbdc97ed85063e8d323bfeb9fc31be007b13094a11b020fa3b62e24fca1d472d13498e158c1932b5af994f66d24a1d48931d88dc0d03e06986e27b3a01fa0f9e1395d2f1f4180d6c1b9c2b71f8c3508c0307e92dad460d30bffd16d225712a20d041028c8819d8bcc4023b8e42b8e56becb3430284ccaef7891ec17450a9c1e243b528540a8434c2212e98356b935ecdb40b90b6097ef4e9504c25ff7db8bb61ab561ff5bb76d7acc994c9f598b9", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x6, 0x80000001, 0x0, {0x5, 0x4, 0x7, 0x4, 0x0, 0x4, 0xfffffff8, 0x88, 0x6, 0x8000, 0x2686, r5, r6, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r7, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000bc0)="27050200590200000600002fb96dbef706e1050007008100000088a8", 0x1c}], 0x1}, 0x200048c4) 4.907453571s ago: executing program 2 (id=393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000001440)={0x24, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f00000007c0)={"dd9a64b420b1c69f4e76bb0761597e60", r9, r10, {0x6, 0x80000000}, {0x0, 0x72c2}, 0x1, [0x1ff, 0x9d, 0x3, 0x10, 0x962, 0x4, 0x1000000000000000, 0x6, 0x5, 0x9, 0xf6a5, 0x9, 0x2, 0x4, 0x8000, 0xc]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000380)={{r4}, r9, 0x4, @unused=[0x832, 0x8, 0x5a, 0x7], @subvolid=0x9}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x13) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001340)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f98510", 0xc1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)}, {&(0x7f0000000e00)="d584132c6710c94c4fbf0cbd772bc95ecb4f7c2c6dbf979b1583404a7778cb520b", 0x21}], 0x2, 0x0, 0x88}}], 0x2, 0xc0) socket$kcm(0xa, 0x5, 0x0) 4.560179023s ago: executing program 3 (id=394): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="3f9a3e", 0x3}], 0x1) 4.548563482s ago: executing program 4 (id=395): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r1 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) 3.534163614s ago: executing program 4 (id=396): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32], 0x4c}}, 0x0) 0s ago: executing program 4 (id=397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r2], 0x44}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): es to fit new maximum fragment MTU (-320) [ 127.481012][ T6431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.490858][ T5833] usb 1-1: device descriptor read/64, error -71 [ 127.493034][ T6431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.508912][ T6431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.520500][ T6431] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 127.602275][ T1135] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 127.613264][ T1135] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 127.731481][ T5833] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 127.775291][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 127.805036][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 127.843646][ T10] usb 3-1: USB disconnect, device number 9 [ 127.870951][ T5833] usb 1-1: device descriptor read/64, error -71 [ 128.001863][ T5833] usb usb1-port1: attempt power cycle [ 128.350867][ T5833] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.383067][ T5833] usb 1-1: device descriptor read/8, error -71 [ 128.591123][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 128.620860][ T5833] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 128.641639][ T5833] usb 1-1: device descriptor read/8, error -71 [ 128.667269][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 128.751124][ T5833] usb usb1-port1: unable to enumerate USB device [ 128.768035][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.782968][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.923410][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.998542][ T10] usb 5-1: config 0 descriptor?? [ 129.084556][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 129.084574][ T30] audit: type=1326 audit(1746003433.600:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.187990][ T30] audit: type=1326 audit(1746003433.600:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.250838][ T30] audit: type=1326 audit(1746003433.600:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.308754][ T30] audit: type=1326 audit(1746003433.600:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.353903][ T6461] netlink: 'syz.4.169': attribute type 6 has an invalid length. [ 129.386446][ T30] audit: type=1326 audit(1746003433.600:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.462714][ T30] audit: type=1326 audit(1746003433.600:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.495531][ T30] audit: type=1326 audit(1746003433.600:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.519387][ T30] audit: type=1326 audit(1746003433.600:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.545990][ T30] audit: type=1326 audit(1746003433.600:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 129.677841][ T30] audit: type=1326 audit(1746003433.600:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6455 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 131.162456][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 131.168523][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 131.193210][ T6486] FAULT_INJECTION: forcing a failure. [ 131.193210][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 131.233621][ T10] usb 5-1: USB disconnect, device number 10 [ 131.255564][ T6486] CPU: 1 UID: 0 PID: 6486 Comm: syz.2.182 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 131.255587][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 131.255597][ T6486] Call Trace: [ 131.255604][ T6486] [ 131.255611][ T6486] dump_stack_lvl+0x189/0x250 [ 131.255642][ T6486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.255666][ T6486] ? __pfx__printk+0x10/0x10 [ 131.255687][ T6486] ? __pfx___might_resched+0x10/0x10 [ 131.255716][ T6486] should_fail_ex+0x414/0x560 [ 131.255747][ T6486] should_failslab+0xa8/0x100 [ 131.255771][ T6486] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 131.255793][ T6486] ? __alloc_skb+0x112/0x2d0 [ 131.255813][ T6486] __alloc_skb+0x112/0x2d0 [ 131.255833][ T6486] netlink_sendmsg+0x5c6/0xb30 [ 131.255858][ T6486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.255876][ T6486] ? __import_iovec+0x5d4/0x7f0 [ 131.255895][ T6486] ? aa_sock_msg_perm+0x94/0x160 [ 131.255914][ T6486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.255932][ T6486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.255948][ T6486] __sock_sendmsg+0x219/0x270 [ 131.255974][ T6486] ____sys_sendmsg+0x505/0x830 [ 131.255998][ T6486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.256031][ T6486] ___sys_sendmsg+0x21f/0x2a0 [ 131.256052][ T6486] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.256102][ T6486] ? __fget_files+0x2a/0x420 [ 131.256139][ T6486] ? __fget_files+0x3a0/0x420 [ 131.256198][ T6486] __sys_sendmsg+0x164/0x220 [ 131.256222][ T6486] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.256258][ T6486] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 131.256279][ T6486] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.256299][ T6486] __do_fast_syscall_32+0xb4/0x110 [ 131.256321][ T6486] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.256343][ T6486] do_fast_syscall_32+0x34/0x80 [ 131.256363][ T6486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.256386][ T6486] RIP: 0023:0xf70ee539 [ 131.256402][ T6486] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 131.256417][ T6486] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.256435][ T6486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 131.256449][ T6486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.256460][ T6486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.256470][ T6486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.256481][ T6486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.256508][ T6486] [ 131.601342][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 132.251782][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 132.311242][ T6503] netlink: 32 bytes leftover after parsing attributes in process `syz.1.187'. [ 132.517919][ T6507] FAULT_INJECTION: forcing a failure. [ 132.517919][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.544496][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.2.189 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 132.544523][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 132.544534][ T6507] Call Trace: [ 132.544542][ T6507] [ 132.544550][ T6507] dump_stack_lvl+0x189/0x250 [ 132.544582][ T6507] ? __lock_acquire+0xaac/0xd20 [ 132.544611][ T6507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.544639][ T6507] ? __pfx__printk+0x10/0x10 [ 132.544675][ T6507] ? __might_fault+0xb0/0x130 [ 132.544712][ T6507] should_fail_ex+0x414/0x560 [ 132.544749][ T6507] _copy_from_iter+0x1db/0x15a0 [ 132.544780][ T6507] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 132.544801][ T6507] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 132.544827][ T6507] ? __pfx__copy_from_iter+0x10/0x10 [ 132.544852][ T6507] ? __build_skb_around+0x257/0x3e0 [ 132.544889][ T6507] ? netlink_sendmsg+0x642/0xb30 [ 132.544905][ T6507] ? skb_put+0x11b/0x210 [ 132.544928][ T6507] netlink_sendmsg+0x6b2/0xb30 [ 132.544955][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.544976][ T6507] ? __import_iovec+0x5d4/0x7f0 [ 132.544999][ T6507] ? aa_sock_msg_perm+0x94/0x160 [ 132.545020][ T6507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.545040][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.545059][ T6507] __sock_sendmsg+0x219/0x270 [ 132.545106][ T6507] ____sys_sendmsg+0x505/0x830 [ 132.545151][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.545190][ T6507] ___sys_sendmsg+0x21f/0x2a0 [ 132.545215][ T6507] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.545275][ T6507] ? __fget_files+0x2a/0x420 [ 132.545300][ T6507] ? __fget_files+0x3a0/0x420 [ 132.545335][ T6507] __sys_sendmsg+0x164/0x220 [ 132.545360][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.545404][ T6507] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 132.545426][ T6507] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.545447][ T6507] __do_fast_syscall_32+0xb4/0x110 [ 132.545471][ T6507] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.545493][ T6507] do_fast_syscall_32+0x34/0x80 [ 132.545515][ T6507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.545539][ T6507] RIP: 0023:0xf70ee539 [ 132.545555][ T6507] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 132.545571][ T6507] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 132.545591][ T6507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 132.545604][ T6507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 132.545614][ T6507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.545625][ T6507] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 132.545635][ T6507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.545663][ T6507] [ 132.874794][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.610506][ T6525] FAULT_INJECTION: forcing a failure. [ 133.610506][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.642597][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.1.196 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 133.642625][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 133.642635][ T6525] Call Trace: [ 133.642642][ T6525] [ 133.642651][ T6525] dump_stack_lvl+0x189/0x250 [ 133.642685][ T6525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.642712][ T6525] ? __pfx__printk+0x10/0x10 [ 133.642743][ T6525] should_fail_ex+0x414/0x560 [ 133.642776][ T6525] _copy_to_user+0x31/0xb0 [ 133.642804][ T6525] simple_read_from_buffer+0xe1/0x170 [ 133.642842][ T6525] proc_fail_nth_read+0x1df/0x250 [ 133.642869][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.642895][ T6525] ? rw_verify_area+0x258/0x650 [ 133.642913][ T6525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 133.642938][ T6525] vfs_read+0x1fd/0x980 [ 133.642960][ T6525] ? __pfx___mutex_lock+0x10/0x10 [ 133.642979][ T6525] ? __pfx_vfs_read+0x10/0x10 [ 133.642999][ T6525] ? __fget_files+0x2a/0x420 [ 133.643026][ T6525] ? __fget_files+0x3a0/0x420 [ 133.643046][ T6525] ? __fget_files+0x2a/0x420 [ 133.643075][ T6525] ksys_read+0x145/0x250 [ 133.643096][ T6525] ? __pfx_ksys_read+0x10/0x10 [ 133.643126][ T6525] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 133.643143][ T6525] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.643161][ T6525] __do_fast_syscall_32+0xb4/0x110 [ 133.643180][ T6525] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.643198][ T6525] do_fast_syscall_32+0x34/0x80 [ 133.643216][ T6525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.643235][ T6525] RIP: 0023:0xf709e539 [ 133.643248][ T6525] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.643267][ T6525] RSP: 002b:00000000f508e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 133.643284][ T6525] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f508e620 [ 133.643294][ T6525] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000 [ 133.643303][ T6525] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 133.643312][ T6525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.643321][ T6525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.643344][ T6525] [ 133.872642][ T120] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 133.991311][ T5916] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 134.066063][ T120] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.083000][ T6528] FAULT_INJECTION: forcing a failure. [ 134.083000][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.137604][ T120] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.137624][ T6528] CPU: 0 UID: 0 PID: 6528 Comm: syz.1.197 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 134.137648][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.137658][ T6528] Call Trace: [ 134.137665][ T6528] [ 134.137673][ T6528] dump_stack_lvl+0x189/0x250 [ 134.137705][ T6528] ? __lock_acquire+0xaac/0xd20 [ 134.137739][ T6528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.137769][ T6528] ? __pfx__printk+0x10/0x10 [ 134.137790][ T6528] ? __might_fault+0xb0/0x130 [ 134.137827][ T6528] should_fail_ex+0x414/0x560 [ 134.137865][ T6528] _copy_from_user+0x2d/0xb0 [ 134.137892][ T6528] video_usercopy+0x354/0x14f0 [ 134.137930][ T6528] ? __pfx___video_do_ioctl+0x10/0x10 [ 134.137961][ T6528] ? __pfx_video_usercopy+0x10/0x10 [ 134.138007][ T6528] ? __fget_files+0x2a/0x420 [ 134.138036][ T6528] v4l2_ioctl+0x18a/0x1e0 [ 134.138064][ T6528] v4l2_compat_ioctl32+0x1d4/0x260 [ 134.138102][ T6528] __ia32_compat_sys_ioctl+0x551/0x840 [ 134.138127][ T6528] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 134.138149][ T6528] ? __fget_files+0x3a0/0x420 [ 134.138181][ T6528] ? fput+0xa0/0xd0 [ 134.138211][ T6528] ? ksys_write+0x1f0/0x250 [ 134.138249][ T6528] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 134.138272][ T6528] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.138294][ T6528] __do_fast_syscall_32+0xb4/0x110 [ 134.138317][ T6528] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.138341][ T6528] do_fast_syscall_32+0x34/0x80 [ 134.138363][ T6528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.138386][ T6528] RIP: 0023:0xf709e539 [ 134.138404][ T6528] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 134.138420][ T6528] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 134.138441][ T6528] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5616 [ 134.138455][ T6528] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.138467][ T6528] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.138478][ T6528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.138489][ T6528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.138518][ T6528] [ 134.448495][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.198'. [ 134.489134][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.525417][ T5916] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 134.644939][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.705120][ T5916] usb 3-1: config 0 descriptor?? [ 134.752855][ T120] usb 1-1: config 0 has no interface number 0 [ 134.791198][ T120] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.824689][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.908646][ T120] usb 1-1: config 0 descriptor?? [ 134.952466][ T120] ldusb 1-1:0.55: Interrupt in endpoint not found [ 135.077692][ T6543] netlink: 'syz.2.194': attribute type 6 has an invalid length. [ 135.351293][ T10] usb 1-1: USB disconnect, device number 22 [ 135.531009][ T120] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.681479][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 135.689458][ T120] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 135.699063][ T120] usb 5-1: config 0 has no interface number 0 [ 135.706423][ T120] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.745214][ T120] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 135.755755][ T120] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 135.766366][ T120] usb 5-1: Product: syz [ 135.775898][ T120] usb 5-1: SerialNumber: syz [ 135.809435][ T120] usb 5-1: config 0 descriptor?? [ 135.845624][ T120] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 135.864185][ T120] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6 [ 136.456199][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 136.457068][ T5884] usb 5-1: USB disconnect, device number 11 [ 136.463803][ C1] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 136.533420][ T5884] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 136.543747][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.552572][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 136.638511][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 136.665496][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.701842][ T10] usb 1-1: device descriptor read/64, error -71 [ 136.739111][ T5883] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.768156][ T5916] usb 3-1: USB disconnect, device number 10 [ 136.776081][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.798611][ T5883] usb 4-1: Product: syz [ 136.813741][ T5883] usb 4-1: Manufacturer: syz [ 136.818377][ T5883] usb 4-1: SerialNumber: syz [ 136.838729][ T5883] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 136.881807][ T5884] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 136.961984][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 137.028618][ T6561] FAULT_INJECTION: forcing a failure. [ 137.028618][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.052004][ T120] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 137.065146][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.2.209 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 137.065175][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 137.065187][ T6561] Call Trace: [ 137.065194][ T6561] [ 137.065202][ T6561] dump_stack_lvl+0x189/0x250 [ 137.065234][ T6561] ? __lock_acquire+0xaac/0xd20 [ 137.065264][ T6561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.065292][ T6561] ? __pfx__printk+0x10/0x10 [ 137.065311][ T6561] ? __might_fault+0xb0/0x130 [ 137.065347][ T6561] should_fail_ex+0x414/0x560 [ 137.065383][ T6561] _copy_from_iter+0x1db/0x15a0 [ 137.065411][ T6561] ? sock_alloc_send_pskb+0x875/0x990 [ 137.065442][ T6561] ? __pfx__copy_from_iter+0x10/0x10 [ 137.065474][ T6561] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 137.065503][ T6561] skb_copy_datagram_from_iter+0xf5/0x720 [ 137.065532][ T6561] ? ipgre_header+0x174/0x290 [ 137.065560][ T6561] packet_sendmsg+0x3ab9/0x5400 [ 137.065612][ T6561] ? __pfx___might_resched+0x10/0x10 [ 137.065644][ T6561] ? __lock_acquire+0xaac/0xd20 [ 137.065684][ T6561] ? __pfx_packet_sendmsg+0x10/0x10 [ 137.065701][ T6561] ? aa_sk_perm+0x81e/0x950 [ 137.065737][ T6561] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 137.065767][ T6561] ? aa_sock_msg_perm+0x94/0x160 [ 137.065790][ T6561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.065811][ T6561] ? __pfx_packet_sendmsg+0x10/0x10 [ 137.065831][ T6561] __sock_sendmsg+0x219/0x270 [ 137.065858][ T6561] __sys_sendto+0x3bd/0x520 [ 137.065875][ T6561] ? __pfx___sys_sendto+0x10/0x10 [ 137.065889][ T6561] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 137.065915][ T6561] ? __fget_files+0x3a0/0x420 [ 137.065944][ T6561] ? ksys_write+0x1f0/0x250 [ 137.065969][ T6561] __ia32_sys_sendto+0xdd/0x100 [ 137.065988][ T6561] __do_fast_syscall_32+0xb4/0x110 [ 137.066006][ T6561] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.066030][ T6561] do_fast_syscall_32+0x34/0x80 [ 137.066047][ T6561] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.066066][ T6561] RIP: 0023:0xf70ee539 [ 137.066079][ T6561] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 137.066092][ T6561] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 137.066109][ T6561] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 137.066120][ T6561] RDX: 0000000000000001 RSI: 0000000020008801 RDI: 0000000080000100 [ 137.066129][ T6561] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 137.066138][ T6561] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.066147][ T6561] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.066168][ T6561] [ 137.095797][ T6554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.121680][ T10] usb 1-1: device descriptor read/64, error -71 [ 137.242254][ T10] usb usb1-port1: attempt power cycle [ 137.298914][ T6554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.327965][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 137.784088][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.814200][ T5915] usb 4-1: USB disconnect, device number 7 [ 137.830089][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 137.830107][ T30] audit: type=1326 audit(1746003442.370:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 137.861181][ T10] usb 1-1: device descriptor read/8, error -71 [ 137.993233][ T30] audit: type=1326 audit(1746003442.380:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 138.030396][ T5884] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 138.049494][ T5884] ath9k_htc: Failed to initialize the device [ 138.059242][ T5915] usb 4-1: ath9k_htc: USB layer deinitialized [ 138.137223][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 138.146927][ T5836] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.188715][ T10] usb 1-1: device descriptor read/8, error -71 [ 138.301808][ T10] usb usb1-port1: unable to enumerate USB device [ 138.314059][ T5836] usb 3-1: config 1 interface 0 has no altsetting 0 [ 138.339013][ T5836] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 138.361338][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.377413][ T5836] usb 3-1: Product: syz [ 138.385282][ T5836] usb 3-1: Manufacturer: syz [ 138.391822][ T5836] usb 3-1: SerialNumber: syz [ 138.746031][ T6585] FAULT_INJECTION: forcing a failure. [ 138.746031][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.785181][ T6585] CPU: 0 UID: 0 PID: 6585 Comm: syz.3.216 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 138.785211][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 138.785222][ T6585] Call Trace: [ 138.785231][ T6585] [ 138.785240][ T6585] dump_stack_lvl+0x189/0x250 [ 138.785281][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.785310][ T6585] ? __pfx__printk+0x10/0x10 [ 138.785341][ T6585] should_fail_ex+0x414/0x560 [ 138.785379][ T6585] _copy_to_user+0x31/0xb0 [ 138.785408][ T6585] simple_read_from_buffer+0xe1/0x170 [ 138.785436][ T6585] proc_fail_nth_read+0x1df/0x250 [ 138.785467][ T6585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.785497][ T6585] ? rw_verify_area+0x258/0x650 [ 138.785517][ T6585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.785545][ T6585] vfs_read+0x1fd/0x980 [ 138.785570][ T6585] ? __pfx___mutex_lock+0x10/0x10 [ 138.785591][ T6585] ? __pfx_vfs_read+0x10/0x10 [ 138.785614][ T6585] ? __fget_files+0x2a/0x420 [ 138.785643][ T6585] ? __fget_files+0x3a0/0x420 [ 138.785677][ T6585] ? __fget_files+0x2a/0x420 [ 138.785711][ T6585] ksys_read+0x145/0x250 [ 138.785735][ T6585] ? __pfx_ksys_read+0x10/0x10 [ 138.785759][ T6585] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 138.785781][ T6585] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.785803][ T6585] __do_fast_syscall_32+0xb4/0x110 [ 138.785823][ T6585] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.785847][ T6585] do_fast_syscall_32+0x34/0x80 [ 138.785868][ T6585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.785893][ T6585] RIP: 0023:0xf70fe539 [ 138.785909][ T6585] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 138.785924][ T6585] RSP: 002b:00000000f50ee590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 138.785945][ T6585] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50ee620 [ 138.785957][ T6585] RDX: 000000000000000f RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 138.785968][ T6585] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 138.785978][ T6585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.785989][ T6585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.786017][ T6585] [ 139.145464][ T5836] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input7 [ 139.176550][ T5836] usb 3-1: USB disconnect, device number 11 [ 139.187189][ T5187] bcm5974 3-1:1.0: could not read from device [ 139.234191][ T6592] FAULT_INJECTION: forcing a failure. [ 139.234191][ T6592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.311515][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.3.219 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 139.311543][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 139.311555][ T6592] Call Trace: [ 139.311563][ T6592] [ 139.311572][ T6592] dump_stack_lvl+0x189/0x250 [ 139.311603][ T6592] ? __lock_acquire+0xaac/0xd20 [ 139.311645][ T6592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.311673][ T6592] ? __pfx__printk+0x10/0x10 [ 139.311693][ T6592] ? __might_fault+0xb0/0x130 [ 139.311729][ T6592] should_fail_ex+0x414/0x560 [ 139.311765][ T6592] _copy_from_iter+0x1db/0x15a0 [ 139.311796][ T6592] ? trace_kmalloc+0x1f/0xd0 [ 139.311816][ T6592] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 139.311843][ T6592] ? __pfx__copy_from_iter+0x10/0x10 [ 139.311867][ T6592] ? __build_skb_around+0x257/0x3e0 [ 139.311891][ T6592] ? netlink_sendmsg+0x642/0xb30 [ 139.311907][ T6592] ? skb_put+0x11b/0x210 [ 139.311930][ T6592] netlink_sendmsg+0x6b2/0xb30 [ 139.311958][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.311979][ T6592] ? __import_iovec+0x5d4/0x7f0 [ 139.312002][ T6592] ? aa_sock_msg_perm+0x94/0x160 [ 139.312024][ T6592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.312046][ T6592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.312065][ T6592] __sock_sendmsg+0x219/0x270 [ 139.312096][ T6592] ____sys_sendmsg+0x505/0x830 [ 139.312123][ T6592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.312161][ T6592] ___sys_sendmsg+0x21f/0x2a0 [ 139.312185][ T6592] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.312243][ T6592] ? __fget_files+0x2a/0x420 [ 139.312268][ T6592] ? __fget_files+0x3a0/0x420 [ 139.312304][ T6592] __sys_sendmsg+0x164/0x220 [ 139.312329][ T6592] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.312367][ T6592] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 139.312390][ T6592] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.312410][ T6592] __do_fast_syscall_32+0xb4/0x110 [ 139.312432][ T6592] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.312454][ T6592] do_fast_syscall_32+0x34/0x80 [ 139.312475][ T6592] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.312499][ T6592] RIP: 0023:0xf70fe539 [ 139.312516][ T6592] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 139.312532][ T6592] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 139.312563][ T6592] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 139.312576][ T6592] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.312587][ T6592] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.312598][ T6592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.312608][ T6592] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.312641][ T6592] [ 139.952398][ T5884] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 139.978714][ T5941] udevd[5941]: Error opening device "/dev/input/event4": No such file or directory [ 140.090038][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.137206][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.178318][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.201291][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.276355][ T5884] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.292986][ T5941] udevd[5941]: Unable to EVIOCGABS device "/dev/input/event4" [ 140.343680][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.433960][ T5884] usb 2-1: config 0 descriptor?? [ 140.591796][ T6615] net_ratelimit: 10 callbacks suppressed [ 140.591817][ T6615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.786837][ T6620] netlink: 'syz.1.217': attribute type 6 has an invalid length. [ 140.845429][ T6622] FAULT_INJECTION: forcing a failure. [ 140.845429][ T6622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.862817][ T6599] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 140.921440][ T6622] CPU: 0 UID: 0 PID: 6622 Comm: syz.2.224 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 140.921469][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.921481][ T6622] Call Trace: [ 140.921490][ T6622] [ 140.921498][ T6622] dump_stack_lvl+0x189/0x250 [ 140.921534][ T6622] ? __lock_acquire+0xaac/0xd20 [ 140.921563][ T6622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.921591][ T6622] ? __pfx__printk+0x10/0x10 [ 140.921610][ T6622] ? __might_fault+0xb0/0x130 [ 140.921645][ T6622] should_fail_ex+0x414/0x560 [ 140.921681][ T6622] _copy_from_iter+0x1db/0x15a0 [ 140.921719][ T6622] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 140.921741][ T6622] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 140.921766][ T6622] ? __pfx__copy_from_iter+0x10/0x10 [ 140.921791][ T6622] ? __build_skb_around+0x257/0x3e0 [ 140.921815][ T6622] ? netlink_sendmsg+0x642/0xb30 [ 140.921832][ T6622] ? skb_put+0x11b/0x210 [ 140.921856][ T6622] netlink_sendmsg+0x6b2/0xb30 [ 140.921884][ T6622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.921905][ T6622] ? __import_iovec+0x5d4/0x7f0 [ 140.921928][ T6622] ? aa_sock_msg_perm+0x94/0x160 [ 140.921950][ T6622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.921971][ T6622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.921990][ T6622] __sock_sendmsg+0x219/0x270 [ 140.922021][ T6622] ____sys_sendmsg+0x505/0x830 [ 140.922049][ T6622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.922091][ T6622] ___sys_sendmsg+0x21f/0x2a0 [ 140.922117][ T6622] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.922176][ T6622] ? __fget_files+0x2a/0x420 [ 140.922212][ T6622] ? __fget_files+0x3a0/0x420 [ 140.922246][ T6622] __sys_sendmsg+0x164/0x220 [ 140.922269][ T6622] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.922304][ T6622] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 140.922325][ T6622] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.922346][ T6622] __do_fast_syscall_32+0xb4/0x110 [ 140.922367][ T6622] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.922389][ T6622] do_fast_syscall_32+0x34/0x80 [ 140.922409][ T6622] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.922432][ T6622] RIP: 0023:0xf70ee539 [ 140.922448][ T6622] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 140.922463][ T6622] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 140.922484][ T6622] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 140.922497][ T6622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.922508][ T6622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.922518][ T6622] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.922530][ T6622] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.922557][ T6622] [ 141.304874][ T6627] FAULT_INJECTION: forcing a failure. [ 141.304874][ T6627] name failslab, interval 1, probability 0, space 0, times 0 [ 141.323052][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.3.226 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 141.323080][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 141.323092][ T6627] Call Trace: [ 141.323100][ T6627] [ 141.323108][ T6627] dump_stack_lvl+0x189/0x250 [ 141.323143][ T6627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.323169][ T6627] ? __pfx__printk+0x10/0x10 [ 141.323194][ T6627] ? __pfx___might_resched+0x10/0x10 [ 141.323223][ T6627] ? fs_reclaim_acquire+0x7d/0x100 [ 141.323257][ T6627] should_fail_ex+0x414/0x560 [ 141.323293][ T6627] should_failslab+0xa8/0x100 [ 141.323320][ T6627] __kmalloc_noprof+0xcb/0x4f0 [ 141.323342][ T6627] ? kfree+0x4d/0x440 [ 141.323360][ T6627] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 141.323406][ T6627] tomoyo_realpath_from_path+0xe3/0x5d0 [ 141.323439][ T6627] ? tomoyo_domain+0xda/0x130 [ 141.323470][ T6627] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 141.323501][ T6627] tomoyo_path_number_perm+0x1e8/0x5a0 [ 141.323534][ T6627] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 141.323607][ T6627] ? __fget_files+0x2a/0x420 [ 141.323637][ T6627] ? __fget_files+0x3a0/0x420 [ 141.323661][ T6627] ? __fget_files+0x2a/0x420 [ 141.323689][ T6627] security_file_ioctl_compat+0xcb/0x2d0 [ 141.323723][ T6627] __ia32_compat_sys_ioctl+0x128/0x840 [ 141.323749][ T6627] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 141.323771][ T6627] ? __fget_files+0x3a0/0x420 [ 141.323803][ T6627] ? fput+0xa0/0xd0 [ 141.323830][ T6627] ? ksys_write+0x1f0/0x250 [ 141.323865][ T6627] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 141.323888][ T6627] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.323909][ T6627] __do_fast_syscall_32+0xb4/0x110 [ 141.323931][ T6627] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.323955][ T6627] do_fast_syscall_32+0x34/0x80 [ 141.323977][ T6627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.324001][ T6627] RIP: 0023:0xf70fe539 [ 141.324019][ T6627] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 141.324036][ T6627] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 141.324057][ T6627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5604 [ 141.324071][ T6627] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.324083][ T6627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 141.324094][ T6627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 141.324106][ T6627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 141.324134][ T6627] [ 141.324668][ T6627] ERROR: Out of memory at tomoyo_realpath_from_path. [ 141.821566][ T5915] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 141.908544][ T5884] usbhid 2-1:0.0: can't add hid device: -71 [ 141.937605][ T5884] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 142.038930][ T30] audit: type=1326 audit(1746003446.580:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.175129][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.186293][ T30] audit: type=1326 audit(1746003446.580:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186343][ T30] audit: type=1326 audit(1746003446.580:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186412][ T30] audit: type=1326 audit(1746003446.580:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186451][ T30] audit: type=1326 audit(1746003446.580:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186490][ T30] audit: type=1326 audit(1746003446.580:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186529][ T30] audit: type=1326 audit(1746003446.580:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.186567][ T30] audit: type=1326 audit(1746003446.580:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6633 comm="syz.2.228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 142.280905][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 142.393633][ T5884] usb 2-1: USB disconnect, device number 15 [ 142.531785][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.548983][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.569193][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.605438][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.607099][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 142.634869][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.648165][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.656935][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.656965][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.671783][ T24] usb 1-1: config 0 descriptor?? [ 142.764849][ T5915] usb 5-1: config 0 descriptor?? [ 142.854662][ T5915] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 143.224717][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 143.232177][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 143.291100][ T24] usb 1-1: USB disconnect, device number 27 [ 143.428708][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.472161][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 143.495282][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.522354][ T6659] FAULT_INJECTION: forcing a failure. [ 143.522354][ T6659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.556473][ T6659] CPU: 0 UID: 0 PID: 6659 Comm: syz.2.236 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 143.556503][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 143.556523][ T6659] Call Trace: [ 143.556531][ T6659] [ 143.556540][ T6659] dump_stack_lvl+0x189/0x250 [ 143.556577][ T6659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.556606][ T6659] ? __pfx__printk+0x10/0x10 [ 143.556639][ T6659] should_fail_ex+0x414/0x560 [ 143.556677][ T6659] _copy_to_user+0x31/0xb0 [ 143.556706][ T6659] simple_read_from_buffer+0xe1/0x170 [ 143.556737][ T6659] proc_fail_nth_read+0x1df/0x250 [ 143.556769][ T6659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.556801][ T6659] ? rw_verify_area+0x258/0x650 [ 143.556822][ T6659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.556851][ T6659] vfs_read+0x1fd/0x980 [ 143.556879][ T6659] ? __pfx___mutex_lock+0x10/0x10 [ 143.556900][ T6659] ? __pfx_vfs_read+0x10/0x10 [ 143.556924][ T6659] ? __fget_files+0x2a/0x420 [ 143.556954][ T6659] ? __fget_files+0x3a0/0x420 [ 143.556978][ T6659] ? __fget_files+0x2a/0x420 [ 143.557012][ T6659] ksys_read+0x145/0x250 [ 143.557037][ T6659] ? __pfx_ksys_read+0x10/0x10 [ 143.557061][ T6659] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 143.557083][ T6659] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.557105][ T6659] __do_fast_syscall_32+0xb4/0x110 [ 143.557127][ T6659] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.557151][ T6659] do_fast_syscall_32+0x34/0x80 [ 143.557173][ T6659] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.557197][ T6659] RIP: 0023:0xf70ee539 [ 143.557214][ T6659] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 143.557231][ T6659] RSP: 002b:00000000f50de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 143.557250][ T6659] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50de620 [ 143.557263][ T6659] RDX: 000000000000000f RSI: 00000000f7452ff4 RDI: 0000000000000000 [ 143.557274][ T6659] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 143.557284][ T6659] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.557295][ T6659] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.557324][ T6659] [ 143.947884][ T6669] trusted_key: encrypted_key: insufficient parameters specified [ 144.303673][ T6680] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 144.530849][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.704696][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.742031][ T5884] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 144.787853][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.816594][ T5884] usb 3-1: config 0 descriptor?? [ 144.846767][ T6688] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 145.022791][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 145.191029][ T6697] netlink: 'syz.2.240': attribute type 6 has an invalid length. [ 145.998161][ T5836] usb 5-1: USB disconnect, device number 12 [ 146.363966][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 146.363986][ T30] audit: type=1326 audit(1746003450.890:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 146.460986][ T30] audit: type=1326 audit(1746003450.890:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 146.600944][ T30] audit: type=1326 audit(1746003450.890:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 146.684297][ T30] audit: type=1326 audit(1746003450.890:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 146.874028][ T30] audit: type=1326 audit(1746003450.890:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 146.895872][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.188769][ T30] audit: type=1326 audit(1746003450.890:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 147.210662][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.309703][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 147.337227][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.381689][ T6699] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.394129][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 147.444930][ T5884] usb 3-1: USB disconnect, device number 12 [ 147.499212][ T30] audit: type=1326 audit(1746003450.890:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 147.511915][ T6723] FAULT_INJECTION: forcing a failure. [ 147.511915][ T6723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.604174][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.630806][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.645219][ T30] audit: type=1326 audit(1746003450.890:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 147.778410][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.779822][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.2.251 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 147.779848][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 147.779861][ T6723] Call Trace: [ 147.779869][ T6723] [ 147.779877][ T6723] dump_stack_lvl+0x189/0x250 [ 147.779909][ T6723] ? __lock_acquire+0xaac/0xd20 [ 147.779939][ T6723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.779968][ T6723] ? __pfx__printk+0x10/0x10 [ 147.779987][ T6723] ? __might_fault+0xb0/0x130 [ 147.780023][ T6723] should_fail_ex+0x414/0x560 [ 147.780071][ T6723] _copy_from_iter+0x1db/0x15a0 [ 147.780102][ T6723] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 147.780124][ T6723] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 147.780150][ T6723] ? __pfx__copy_from_iter+0x10/0x10 [ 147.780186][ T6723] ? __build_skb_around+0x257/0x3e0 [ 147.780221][ T6723] ? netlink_sendmsg+0x642/0xb30 [ 147.780236][ T6723] ? skb_put+0x11b/0x210 [ 147.780258][ T6723] netlink_sendmsg+0x6b2/0xb30 [ 147.780283][ T6723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.780302][ T6723] ? __import_iovec+0x5d4/0x7f0 [ 147.780324][ T6723] ? aa_sock_msg_perm+0x94/0x160 [ 147.780343][ T6723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.780363][ T6723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.780381][ T6723] __sock_sendmsg+0x219/0x270 [ 147.780409][ T6723] ____sys_sendmsg+0x505/0x830 [ 147.780435][ T6723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.780471][ T6723] ___sys_sendmsg+0x21f/0x2a0 [ 147.780494][ T6723] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.780548][ T6723] ? __fget_files+0x2a/0x420 [ 147.780570][ T6723] ? __fget_files+0x3a0/0x420 [ 147.780602][ T6723] __sys_sendmsg+0x164/0x220 [ 147.780624][ T6723] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.780658][ T6723] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 147.780698][ T6723] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.780719][ T6723] __do_fast_syscall_32+0xb4/0x110 [ 147.780741][ T6723] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.780763][ T6723] do_fast_syscall_32+0x34/0x80 [ 147.780783][ T6723] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.780807][ T6723] RIP: 0023:0xf70ee539 [ 147.780823][ T6723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 147.780838][ T6723] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 147.780858][ T6723] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 147.780871][ T6723] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.780882][ T6723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.780893][ T6723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.780904][ T6723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.780929][ T6723] [ 147.911755][ T30] audit: type=1326 audit(1746003450.890:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 147.911808][ T30] audit: type=1326 audit(1746003450.890:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6702 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 148.308033][ T6724] gtp0: entered allmulticast mode [ 148.937152][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.948980][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.986063][ T24] usb 1-1: config 0 descriptor?? [ 149.370201][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 149.404062][ T6735] Zero length message leads to an empty skb [ 149.677851][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.257'. [ 149.698798][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 149.885077][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 149.931486][ T24] usb 1-1: USB disconnect, device number 28 [ 149.986735][ T6747] FAULT_INJECTION: forcing a failure. [ 149.986735][ T6747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.028146][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.2.258 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 150.028176][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.028188][ T6747] Call Trace: [ 150.028196][ T6747] [ 150.028204][ T6747] dump_stack_lvl+0x189/0x250 [ 150.028237][ T6747] ? __lock_acquire+0xaac/0xd20 [ 150.028267][ T6747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.028295][ T6747] ? __pfx__printk+0x10/0x10 [ 150.028315][ T6747] ? __might_fault+0xb0/0x130 [ 150.028352][ T6747] should_fail_ex+0x414/0x560 [ 150.028389][ T6747] _copy_from_iter+0x1db/0x15a0 [ 150.028420][ T6747] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 150.028453][ T6747] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 150.028479][ T6747] ? __pfx__copy_from_iter+0x10/0x10 [ 150.028503][ T6747] ? __build_skb_around+0x257/0x3e0 [ 150.028527][ T6747] ? netlink_sendmsg+0x642/0xb30 [ 150.028544][ T6747] ? skb_put+0x11b/0x210 [ 150.028568][ T6747] netlink_sendmsg+0x6b2/0xb30 [ 150.028613][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.028635][ T6747] ? __import_iovec+0x5d4/0x7f0 [ 150.028659][ T6747] ? aa_sock_msg_perm+0x94/0x160 [ 150.028681][ T6747] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.028703][ T6747] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.028723][ T6747] __sock_sendmsg+0x219/0x270 [ 150.028755][ T6747] ____sys_sendmsg+0x505/0x830 [ 150.028784][ T6747] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.028830][ T6747] ___sys_sendmsg+0x21f/0x2a0 [ 150.028855][ T6747] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.028915][ T6747] ? __fget_files+0x2a/0x420 [ 150.028940][ T6747] ? __fget_files+0x3a0/0x420 [ 150.028987][ T6747] __sys_sendmsg+0x164/0x220 [ 150.029012][ T6747] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.029048][ T6747] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 150.029070][ T6747] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.029091][ T6747] __do_fast_syscall_32+0xb4/0x110 [ 150.029113][ T6747] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.029136][ T6747] do_fast_syscall_32+0x34/0x80 [ 150.029161][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.029183][ T6747] RIP: 0023:0xf70ee539 [ 150.029200][ T6747] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 150.029217][ T6747] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 150.029237][ T6747] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 150.029251][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.029262][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.029273][ T6747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.029285][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.029313][ T6747] [ 150.304002][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.831455][ T5915] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.000964][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 151.095050][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.110851][ T5915] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.121552][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.182808][ T5915] usb 3-1: config 0 descriptor?? [ 151.189410][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.209125][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.248688][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 151.270731][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.296796][ T24] usb 2-1: config 0 descriptor?? [ 151.526756][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 151.574523][ T6767] netlink: 'syz.2.261': attribute type 6 has an invalid length. [ 151.579459][ T6768] netlink: 'syz.1.262': attribute type 32 has an invalid length. [ 151.683031][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 151.790841][ T6768] netlink: 'syz.1.262': attribute type 32 has an invalid length. [ 152.037235][ T24] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 152.084822][ T24] kone 0003:1E7D:2CED.0001: item fetching failed at offset 2/5 [ 152.111803][ T24] kone 0003:1E7D:2CED.0001: parse failed [ 152.127371][ T24] kone 0003:1E7D:2CED.0001: probe with driver kone failed with error -22 [ 152.141697][ T5836] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.231966][ T6755] usb usb8: usbfs: process 6755 (syz.1.262) did not claim interface 0 before use [ 152.273759][ T10] usb 2-1: USB disconnect, device number 16 [ 152.301361][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 152.308240][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.330991][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.382098][ T5836] usb 4-1: New USB device found, idVendor=0466, idProduct=c20e, bcdDevice= 0.00 [ 152.419516][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.458549][ T5836] usb 4-1: config 0 descriptor?? [ 152.574569][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 152.951086][ T120] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 153.055205][ T5836] usbhid 4-1:0.0: can't add hid device: -71 [ 153.071514][ T5836] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 153.091779][ T5836] usb 4-1: USB disconnect, device number 8 [ 153.104805][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.128925][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.147188][ T120] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 153.160414][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.187980][ T120] usb 5-1: config 0 descriptor?? [ 153.222972][ T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 153.362009][ T5884] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 153.393458][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.404410][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.411837][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.266'. [ 153.416737][ T10] usb 2-1: config 0 has no interface number 0 [ 153.433482][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.446685][ T6774] netlink: 'syz.4.266': attribute type 32 has an invalid length. [ 153.446943][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.469331][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.481343][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 153.493011][ T6774] netlink: 'syz.4.266': attribute type 32 has an invalid length. [ 153.513433][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.519534][ T6780] FAULT_INJECTION: forcing a failure. [ 153.519534][ T6780] name failslab, interval 1, probability 0, space 0, times 0 [ 153.541343][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.554269][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.565866][ T5884] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 153.593337][ T10] usb 2-1: config 0 descriptor?? [ 153.601455][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.621095][ T6780] CPU: 1 UID: 0 PID: 6780 Comm: syz.4.266 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 153.621126][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.621139][ T6780] Call Trace: [ 153.621147][ T6780] [ 153.621156][ T6780] dump_stack_lvl+0x189/0x250 [ 153.621195][ T6780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.621247][ T6780] should_fail_ex+0x414/0x560 [ 153.621284][ T6780] should_failslab+0xa8/0x100 [ 153.621311][ T6780] kmem_cache_alloc_noprof+0x73/0x3c0 [ 153.621335][ T6780] ? ep_insert+0x272/0x1a00 [ 153.621361][ T6780] ep_insert+0x272/0x1a00 [ 153.621391][ T6780] ? epoll_mutex_lock+0x4b/0x60 [ 153.621416][ T6780] ? __pfx_ep_insert+0x10/0x10 [ 153.621436][ T6780] ? __pfx___mutex_lock+0x10/0x10 [ 153.621480][ T6780] do_epoll_ctl+0x80e/0xe80 [ 153.621512][ T6780] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 153.621546][ T6780] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 153.621572][ T6780] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 153.621595][ T6780] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.621617][ T6780] __do_fast_syscall_32+0xb4/0x110 [ 153.621641][ T6780] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.621665][ T6780] do_fast_syscall_32+0x34/0x80 [ 153.621687][ T6780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 153.621711][ T6780] RIP: 0023:0xf7f17539 [ 153.621729][ T6780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 153.621746][ T6780] RSP: 002b:00000000f501555c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 153.621766][ T6780] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000001 [ 153.621779][ T6780] RDX: 0000000000000008 RSI: 0000000080000340 RDI: 0000000000000000 [ 153.621790][ T6780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 153.621801][ T6780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 153.621812][ T6780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 153.621843][ T6780] [ 153.625589][ T10] ldusb 2-1:0.55: Interrupt in endpoint not found [ 153.798132][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.887286][ T120] kone 0003:1E7D:2CED.0002: unknown main item tag 0x0 [ 153.927852][ T120] kone 0003:1E7D:2CED.0002: item fetching failed at offset 2/5 [ 153.963178][ T5884] usb 1-1: config 0 descriptor?? [ 153.968346][ T120] kone 0003:1E7D:2CED.0002: parse failed [ 153.998446][ T120] kone 0003:1E7D:2CED.0002: probe with driver kone failed with error -22 [ 154.007840][ T5915] usbhid 3-1:0.0: can't add hid device: -71 [ 154.007967][ T5915] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.021826][ T5915] usb 3-1: USB disconnect, device number 13 [ 154.053924][ T10] usb 2-1: USB disconnect, device number 17 [ 154.077806][ T6774] usb usb8: usbfs: process 6774 (syz.4.266) did not claim interface 0 before use [ 154.185117][ T120] usb 5-1: USB disconnect, device number 13 [ 154.197308][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.267'. [ 154.216970][ T6778] netlink: 'syz.0.267': attribute type 32 has an invalid length. [ 154.234189][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 154.251219][ T6778] netlink: 'syz.0.267': attribute type 32 has an invalid length. [ 154.428357][ T6791] FAULT_INJECTION: forcing a failure. [ 154.428357][ T6791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.442563][ T6791] CPU: 1 UID: 0 PID: 6791 Comm: syz.3.273 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 154.442590][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.442603][ T6791] Call Trace: [ 154.442612][ T6791] [ 154.442620][ T6791] dump_stack_lvl+0x189/0x250 [ 154.442650][ T6791] ? __lock_acquire+0xaac/0xd20 [ 154.442678][ T6791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.442712][ T6791] ? __pfx__printk+0x10/0x10 [ 154.442729][ T6791] ? __might_fault+0xb0/0x130 [ 154.442758][ T6791] should_fail_ex+0x414/0x560 [ 154.442787][ T6791] _copy_from_iter+0x1db/0x15a0 [ 154.442812][ T6791] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 154.442829][ T6791] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 154.442855][ T6791] ? __pfx__copy_from_iter+0x10/0x10 [ 154.442875][ T6791] ? __build_skb_around+0x257/0x3e0 [ 154.442895][ T6791] ? netlink_sendmsg+0x642/0xb30 [ 154.442908][ T6791] ? skb_put+0x11b/0x210 [ 154.442927][ T6791] netlink_sendmsg+0x6b2/0xb30 [ 154.442949][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.442966][ T6791] ? __import_iovec+0x5d4/0x7f0 [ 154.442990][ T6791] ? aa_sock_msg_perm+0x94/0x160 [ 154.443009][ T6791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.443026][ T6791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.443042][ T6791] __sock_sendmsg+0x219/0x270 [ 154.443067][ T6791] ____sys_sendmsg+0x505/0x830 [ 154.443089][ T6791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.443124][ T6791] ___sys_sendmsg+0x21f/0x2a0 [ 154.443146][ T6791] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.443192][ T6791] ? __fget_files+0x2a/0x420 [ 154.443212][ T6791] ? __fget_files+0x3a0/0x420 [ 154.443240][ T6791] __sys_sendmsg+0x164/0x220 [ 154.443262][ T6791] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.443293][ T6791] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 154.443311][ T6791] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.443328][ T6791] __do_fast_syscall_32+0xb4/0x110 [ 154.443346][ T6791] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.443364][ T6791] do_fast_syscall_32+0x34/0x80 [ 154.443381][ T6791] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 154.443405][ T6791] RIP: 0023:0xf70fe539 [ 154.443439][ T6791] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 154.443454][ T6791] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 154.443472][ T6791] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 154.443483][ T6791] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.443493][ T6791] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 154.443502][ T6791] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 154.443511][ T6791] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 154.443536][ T6791] [ 154.830880][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 154.968835][ T6778] usb usb8: usbfs: process 6778 (syz.0.267) did not claim interface 0 before use [ 154.990384][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 154.997580][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.007993][ T24] usb 3-1: config 129 has an invalid interface number: 218 but max is 0 [ 155.020866][ T24] usb 3-1: config 129 has no interface number 0 [ 155.027202][ T24] usb 3-1: config 129 interface 218 has no altsetting 0 [ 155.046442][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice=a5.ce [ 155.057490][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.069160][ T5884] usbhid 1-1:0.0: can't add hid device: -71 [ 155.075074][ T24] usb 3-1: Product: syz [ 155.077193][ T5884] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 155.087406][ T24] usb 3-1: Manufacturer: syz [ 155.087425][ T24] usb 3-1: SerialNumber: syz [ 155.154185][ T5884] usb 1-1: USB disconnect, device number 29 [ 155.327639][ T24] pxrc 3-1:129.218: Could not find endpoint [ 155.377809][ T24] usb 3-1: USB disconnect, device number 14 [ 155.973062][ T6825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.285'. [ 156.761710][ T5884] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 156.831367][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 156.941381][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 156.948567][ T5884] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.958618][ T5915] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 157.056184][ T5884] usb 4-1: config 0 has no interface number 0 [ 157.071313][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 157.078450][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.113688][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.173327][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.224905][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.237754][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 157.248012][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.257026][ T5884] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.369009][ T5915] usb 5-1: config 0 has no interfaces? [ 157.385545][ T10] usb 3-1: config 0 descriptor?? [ 157.407990][ T5884] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 157.408584][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.296'. [ 157.459423][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.474821][ T5884] usb 4-1: config 0 descriptor?? [ 157.503129][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 157.516562][ T5884] ldusb 4-1:0.55: Interrupt in endpoint not found [ 157.525029][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.605970][ T5915] usb 5-1: Product: syz [ 157.615811][ T5915] usb 5-1: Manufacturer: syz [ 157.623806][ T5915] usb 5-1: SerialNumber: syz [ 157.634910][ T5915] usb 5-1: config 0 descriptor?? [ 157.723549][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.291'. [ 157.737608][ T5885] usb 4-1: USB disconnect, device number 9 [ 157.991390][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'. [ 159.597422][ T5915] usb 5-1: USB disconnect, device number 14 [ 159.796653][ T6876] syz_tun: entered promiscuous mode [ 160.125634][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 160.158697][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'. [ 160.187258][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 160.244140][ T10] usb 3-1: USB disconnect, device number 15 [ 160.560670][ T120] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 160.771524][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 160.771546][ T30] audit: type=1326 audit(1746003465.230:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 160.893552][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 160.950815][ T120] usb 4-1: Using ep0 maxpacket: 8 [ 160.958028][ T30] audit: type=1326 audit(1746003465.230:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 160.982957][ T120] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 160.998034][ T120] usb 4-1: config 0 has no interface number 0 [ 161.005742][ T120] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.033172][ T120] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.079515][ T30] audit: type=1326 audit(1746003465.230:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.091399][ T120] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.150925][ T120] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 161.165948][ T30] audit: type=1326 audit(1746003465.230:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.184233][ T120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.193192][ T6898] bridge0: port 3(veth1_to_bridge) entered blocking state [ 161.240911][ T120] usb 4-1: config 0 descriptor?? [ 161.262867][ T6898] bridge0: port 3(veth1_to_bridge) entered disabled state [ 161.282297][ T6898] veth1_to_bridge: entered allmulticast mode [ 161.342489][ T6898] veth1_to_bridge: entered promiscuous mode [ 161.373465][ T120] ldusb 4-1:0.55: Interrupt in endpoint not found [ 161.391187][ T6898] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 161.426327][ T30] audit: type=1326 audit(1746003465.230:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.479483][ T30] audit: type=1326 audit(1746003465.230:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.487680][ T6898] bridge0: port 3(veth1_to_bridge) entered blocking state [ 161.508861][ T6898] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 161.553295][ T6903] netlink: 40 bytes leftover after parsing attributes in process `syz.3.309'. [ 161.581838][ T30] audit: type=1326 audit(1746003465.230:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.732772][ T30] audit: type=1326 audit(1746003465.230:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.732807][ T30] audit: type=1326 audit(1746003465.230:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.732835][ T30] audit: type=1326 audit(1746003465.230:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6889 comm="syz.2.312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 161.762119][ T5836] usb 4-1: USB disconnect, device number 10 [ 161.871647][ T5915] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 161.918280][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 162.401140][ T5915] usb 2-1: config 0 has no interfaces? [ 162.444246][ T5915] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 162.444276][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.444295][ T5915] usb 2-1: Product: syz [ 162.444308][ T5915] usb 2-1: Manufacturer: syz [ 162.444322][ T5915] usb 2-1: SerialNumber: syz [ 162.447235][ T5915] usb 2-1: config 0 descriptor?? [ 163.338464][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 163.405414][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 163.431497][ T6921] syz_tun: entered promiscuous mode [ 163.576881][ T6930] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.619075][ T5915] usb 2-1: USB disconnect, device number 18 [ 164.978976][ T6947] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.326' sets config #1 [ 165.380270][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 165.644946][ T24] usb 2-1: config 0 has no interfaces? [ 165.722054][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.777659][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.901349][ T24] usb 2-1: Product: syz [ 165.905779][ T24] usb 2-1: Manufacturer: syz [ 165.912491][ T24] usb 2-1: SerialNumber: syz [ 165.935406][ T24] usb 2-1: config 0 descriptor?? [ 166.183520][ T6953] wireguard: wg1: Could not create IPv4 socket [ 166.851272][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 167.027668][ T6975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'. [ 167.640921][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 167.867086][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 167.886790][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 167.897597][ T24] usb 4-1: config 0 has no interface number 0 [ 167.897642][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.031283][ T5884] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 168.045805][ T6994] bridge0: port 3(veth1_to_bridge) entered blocking state [ 168.074697][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.087372][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 168.102620][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 168.113391][ T6994] bridge0: port 3(veth1_to_bridge) entered disabled state [ 168.136062][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.152122][ T6994] veth1_to_bridge: entered allmulticast mode [ 168.159831][ T6994] veth1_to_bridge: entered promiscuous mode [ 168.179284][ T6994] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 168.212887][ T5884] usb 1-1: config 0 has no interfaces? [ 168.213115][ T24] usb 4-1: config 0 descriptor?? [ 168.253836][ T5884] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.266285][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.275689][ T5884] usb 1-1: Product: syz [ 168.285674][ T6994] bridge0: port 3(veth1_to_bridge) entered blocking state [ 168.285868][ T120] usb 2-1: USB disconnect, device number 19 [ 168.292950][ T6994] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 168.293225][ T5884] usb 1-1: Manufacturer: syz [ 168.293243][ T5884] usb 1-1: SerialNumber: syz [ 168.296363][ T5884] usb 1-1: config 0 descriptor?? [ 168.382691][ T24] ldusb 4-1:0.55: Interrupt in endpoint not found [ 168.642097][ T6983] netlink: 40 bytes leftover after parsing attributes in process `syz.3.339'. [ 168.671361][ T5884] usb 4-1: USB disconnect, device number 11 [ 168.891197][ T120] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 169.053192][ T120] usb 2-1: Using ep0 maxpacket: 16 [ 169.135456][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.147874][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.159498][ T120] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 169.181013][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.211642][ T120] usb 2-1: config 0 descriptor?? [ 169.282874][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 169.563351][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 169.672966][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 169.672979][ T30] audit: type=1326 audit(1746003474.190:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 169.756176][ T30] audit: type=1326 audit(1746003474.190:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.026407][ T30] audit: type=1326 audit(1746003474.200:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.092006][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.345'. [ 170.146069][ T30] audit: type=1326 audit(1746003474.200:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.196059][ T30] audit: type=1326 audit(1746003474.200:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.440969][ T30] audit: type=1326 audit(1746003474.200:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.465338][ T30] audit: type=1326 audit(1746003474.200:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.516752][ T30] audit: type=1326 audit(1746003474.200:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 170.743969][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 170.784955][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 170.961859][ T30] audit: type=1326 audit(1746003474.200:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 171.176544][ T5884] usb 1-1: USB disconnect, device number 30 [ 171.233330][ T30] audit: type=1326 audit(1746003474.200:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7008 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17539 code=0x7ffc0000 [ 172.022012][ T7035] bridge0: port 4(veth1_to_bridge) entered blocking state [ 172.061541][ T7035] bridge0: port 4(veth1_to_bridge) entered disabled state [ 172.072988][ T7035] veth1_to_bridge: entered allmulticast mode [ 172.118724][ T7035] veth1_to_bridge: entered promiscuous mode [ 172.171645][ T7035] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 172.234907][ T7035] bridge0: port 4(veth1_to_bridge) entered blocking state [ 172.242279][ T7035] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 172.501482][ T5884] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 172.559337][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 172.661565][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 172.675470][ T120] usbhid 2-1:0.0: can't add hid device: -71 [ 172.693538][ T5884] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 172.702483][ T120] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 172.713646][ T120] usb 2-1: USB disconnect, device number 20 [ 172.775201][ T5884] usb 3-1: config 0 has no interface number 0 [ 172.814420][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.821869][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 172.856104][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.887963][ T5884] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 172.935700][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 172.961075][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.991636][ T5884] usb 3-1: config 0 descriptor?? [ 173.008870][ T5884] ldusb 3-1:0.55: Interrupt in endpoint not found [ 173.043008][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.364'. [ 173.067244][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 173.268641][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.357'. [ 173.284815][ T5884] usb 3-1: USB disconnect, device number 16 [ 173.408621][ T120] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 173.617486][ T120] usb 2-1: config 0 has no interfaces? [ 173.629001][ T120] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 173.642480][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.664474][ T120] usb 2-1: Product: syz [ 173.668763][ T120] usb 2-1: Manufacturer: syz [ 173.677364][ T120] usb 2-1: SerialNumber: syz [ 173.689325][ T120] usb 2-1: config 0 descriptor?? [ 174.800894][ T120] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 174.960838][ T120] usb 1-1: Using ep0 maxpacket: 16 [ 174.968166][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.980932][ T120] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.077954][ T120] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 175.115196][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.169101][ T120] usb 1-1: config 0 descriptor?? [ 175.632062][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.646869][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.661586][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.676082][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.690777][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.705519][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.720373][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.735067][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.749928][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.764588][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 175.802400][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.378'. [ 175.834180][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.377'. [ 176.207673][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 176.775154][ T7098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.380'. [ 176.788946][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.380'. [ 178.198896][ T5884] usb 2-1: USB disconnect, device number 21 [ 178.881450][ T5884] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 179.184933][ T7089] team0 (unregistering): Port device team_slave_0 removed [ 179.222155][ T5884] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 179.256435][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.273044][ T7089] team0 (unregistering): Port device team_slave_1 removed [ 179.407856][ T5884] usb 2-1: config 0 has no interface number 0 [ 179.420377][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.514873][ T5884] usb 2-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.543160][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 179.565355][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.683101][ T5884] usb 2-1: config 0 descriptor?? [ 180.263955][ T5884] ldusb 2-1:0.55: Interrupt in endpoint not found [ 180.467630][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.384'. [ 180.526499][ T5884] usb 2-1: USB disconnect, device number 22 [ 180.639911][ C1] net_ratelimit: 18000 callbacks suppressed [ 180.639934][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.660572][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.675314][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.689998][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.704853][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.719652][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.734514][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.749174][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.764038][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.778708][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 180.831409][ T120] usbhid 1-1:0.0: can't add hid device: -71 [ 180.853547][ T120] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 181.087045][ T120] usb 1-1: USB disconnect, device number 31 [ 181.467354][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 181.818650][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 181.818672][ T30] audit: type=1326 audit(1746003486.330:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 181.941761][ T30] audit: type=1326 audit(1746003486.330:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.1.390" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 182.887980][ T120] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 182.926586][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 183.150414][ T120] usb 3-1: device descriptor read/64, error -32 [ 183.547932][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.396'. [ 183.564202][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.396'. [ 185.649869][ C1] net_ratelimit: 17384 callbacks suppressed [ 185.649891][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.670358][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.685015][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.699523][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.714591][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.729096][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.743691][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.758198][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.772768][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 185.787286][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 186.341465][ T120] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 190.336645][ T7143] sched: DL replenish lagged too much [ 190.659638][ C0] net_ratelimit: 28674 callbacks suppressed [ 190.659659][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.659681][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.665967][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.680178][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.694402][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.708530][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.722933][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.737099][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.751312][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 190.765434][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 194.314783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.331016][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.669745][ C1] net_ratelimit: 33223 callbacks suppressed [ 195.669767][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.669984][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.675878][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.690297][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.704562][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.718859][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.732978][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.747393][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.761549][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 195.775783][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.679598][ C0] net_ratelimit: 32804 callbacks suppressed [ 200.679620][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.681005][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.685840][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.700244][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.714312][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.728825][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.743000][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.757170][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.771316][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 200.785779][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.689621][ C0] net_ratelimit: 32402 callbacks suppressed [ 205.689642][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.691010][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.695951][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.710072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.724575][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.739083][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.750899][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.765210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 205.777071][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 205.791145][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:9b:f7:86:1a:be [ 210.699747][ C1] net_ratelimit: 27841 callbacks suppressed [ 210.699769][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.701021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 210.707228][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 210.718338][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 210.729912][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.744249][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 210.758621][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.770294][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.784710][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 210.796657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 215.709652][ C0] net_ratelimit: 24426 callbacks suppressed [ 215.709673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.711932][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 215.715973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 215.727718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.742408][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 215.754166][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 215.765974][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 215.780374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 215.792127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.806346][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:9b:f7:86:1a:be [ 220.719693][ C0] net_ratelimit: 24791 callbacks suppressed [ 220.719715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.720980][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 220.726125][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 220.737814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.752404][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 220.764078][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 220.776025][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 220.790376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 220.804437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.818609][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 225.729770][ C0] net_ratelimit: 24604 callbacks suppressed [ 225.729793][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 225.730216][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 225.736018][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 225.750317][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.764709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 225.779246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.791094][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 225.802985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 225.815148][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 225.826639][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:9b:f7:86:1a:be [ 230.739648][ C0] net_ratelimit: 23979 callbacks suppressed [ 230.739671][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 230.739880][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.745796][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 230.760295][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 230.772228][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 230.783961][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.798610][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 230.810382][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 230.822150][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 230.836501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 235.749715][ C0] net_ratelimit: 24041 callbacks suppressed [ 235.749737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.750389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:88:f6:bb:f8:5c, vlan:0) [ 235.756021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 235.767929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.780169][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 235.791974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 235.803749][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 235.818173][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 235.829894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.844078][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.759680][ C0] net_ratelimit: 23626 callbacks suppressed [ 240.759702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.760834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 240.766026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 240.778010][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 240.790067][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 240.801766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.816075][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 240.830235][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 240.842114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.857539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.769637][ C0] net_ratelimit: 23780 callbacks suppressed [ 245.769658][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.771767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:88:f6:bb:f8:5c, vlan:0) [ 245.776053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 245.787995][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.800203][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 245.811997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 245.823828][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 245.838157][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 245.849881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 245.864167][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.779657][ C0] net_ratelimit: 23459 callbacks suppressed [ 250.779680][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 250.779702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.785894][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 250.800337][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.812029][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.826493][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 250.838338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 250.850058][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 250.864746][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 250.876354][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 255.789644][ C0] net_ratelimit: 23675 callbacks suppressed [ 255.789665][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 255.789854][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 255.795759][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 255.810046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.824304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 255.838541][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 255.850563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 255.863289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 255.876910][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 255.888693][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.799609][ C0] net_ratelimit: 23194 callbacks suppressed [ 260.799629][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 260.800019][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 260.805771][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.820419][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 260.834487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 260.846098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.860645][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 260.872374][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 260.884310][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 260.898760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.809547][ C0] net_ratelimit: 23813 callbacks suppressed [ 265.809569][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 265.809867][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.815718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.830147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 265.842150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 265.853794][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:9b:f7:86:1a:be [ 265.866197][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 265.878317][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 265.892098][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 265.906659][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 270.819623][ C0] net_ratelimit: 23772 callbacks suppressed [ 270.819643][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 270.820775][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.825850][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 270.841318][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ce:88:f6:bb:f8:5c, vlan:0) [ 270.851967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.866444][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.878378][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 270.890265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.902376][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 270.914258][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 275.829599][ C0] net_ratelimit: 23350 callbacks suppressed [ 275.829624][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 275.831007][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 275.835818][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 275.850382][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 275.864216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.878433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 275.892934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 275.904621][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 275.916802][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 275.928611][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.839710][ C0] net_ratelimit: 23870 callbacks suppressed [ 280.839730][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 280.839765][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 280.845848][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 280.860485][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 280.874588][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 280.886667][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 280.900760][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 280.912549][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.926842][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 280.941078][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 285.849639][ C0] net_ratelimit: 24001 callbacks suppressed [ 285.849661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 285.849733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.856139][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 285.867978][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.879790][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 285.894154][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6e:9b:f7:86:1a:be, vlan:0) [ 285.905896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 285.920109][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: 6e:9b:f7:86:1a:be [ 285.932362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 285.944540][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 290.859633][ C0] net_ratelimit: 23251 callbacks suppressed [ 290.859655][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 290.860142][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 290.865768][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 290.880040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.894291][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.908558][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 290.920677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 290.933583][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.946913][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 290.958702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 295.349559][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 295.356560][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5849/1:b..l [ 295.364844][ C1] rcu: (detected by 1, t=10502 jiffies, g=21297, q=497 ncpus=2) [ 295.372619][ C1] task:syz-executor state:R running task stack:20920 pid:5849 tgid:5849 ppid:5826 task_flags:0x400140 flags:0x20000002 [ 295.387100][ C1] Call Trace: [ 295.390418][ C1] [ 295.393378][ C1] __schedule+0x16e2/0x4cd0 [ 295.397947][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 295.403279][ C1] ? __pfx___schedule+0x10/0x10 [ 295.408167][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.414458][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 295.419820][ C1] preempt_schedule_irq+0xb5/0x150 [ 295.424985][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 295.430765][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 295.436653][ C1] irqentry_exit+0x6f/0x90 [ 295.441102][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.447115][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x8/0x90 [ 295.453401][ C1] Code: 48 89 44 11 20 c3 cc cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 40 75 92 65 8b 15 e8 7e b5 10 81 e2 00 01 ff 00 [ 295.473048][ C1] RSP: 0018:ffffc9000409f4d0 EFLAGS: 00000293 [ 295.479152][ C1] RAX: ffffffff822c9aa6 RBX: 0000000000000000 RCX: ffff888064275a00 [ 295.487143][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 295.495140][ C1] RBP: 0000000000000008 R08: ffff88801bc6580f R09: 1ffff1100378cb01 [ 295.503134][ C1] R10: dffffc0000000000 R11: ffffed100378cb02 R12: ffff88801bc65810 [ 295.511125][ C1] R13: 0000000000000005 R14: 0000000000031449 R15: 000000000003144d [ 295.519137][ C1] ? __page_table_check_zero+0x1d6/0x510 [ 295.524820][ C1] __page_table_check_zero+0x1d6/0x510 [ 295.530319][ C1] ? __page_table_check_zero+0xba/0x510 [ 295.535908][ C1] __free_frozen_pages+0xb22/0xcd0 [ 295.541077][ C1] __put_partials+0x161/0x1c0 [ 295.545804][ C1] put_cpu_partial+0x17c/0x250 [ 295.550617][ C1] ? put_cpu_partial+0x6d/0x250 [ 295.555520][ C1] __slab_free+0x2f7/0x400 [ 295.559976][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.566361][ C1] ? __phys_addr+0xba/0x170 [ 295.570904][ C1] qlist_free_all+0x9a/0x140 [ 295.575533][ C1] kasan_quarantine_reduce+0x148/0x160 [ 295.581024][ C1] __kasan_slab_alloc+0x22/0x80 [ 295.585912][ C1] kmem_cache_alloc_lru_noprof+0x1c6/0x3d0 [ 295.591750][ C1] ? __d_alloc+0x31/0x6f0 [ 295.596123][ C1] __d_alloc+0x31/0x6f0 [ 295.600326][ C1] d_alloc_cursor+0x44/0xd0 [ 295.604867][ C1] ? __pfx_dcache_dir_open+0x10/0x10 [ 295.610183][ C1] dcache_dir_open+0x41/0x80 [ 295.614796][ C1] ? __pfx_dcache_dir_open+0x10/0x10 [ 295.620105][ C1] do_dentry_open+0xdf0/0x1970 [ 295.624923][ C1] vfs_open+0x3b/0x340 [ 295.629025][ C1] ? path_openat+0x2ecd/0x3830 [ 295.633834][ C1] path_openat+0x2ee5/0x3830 [ 295.638442][ C1] ? arch_stack_walk+0xfc/0x150 [ 295.643353][ C1] ? __pfx_path_openat+0x10/0x10 [ 295.648313][ C1] ? do_fast_syscall_32+0x34/0x80 [ 295.653361][ C1] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.659914][ C1] do_filp_open+0x1fa/0x410 [ 295.664447][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 295.669516][ C1] ? _raw_spin_unlock+0x28/0x50 [ 295.674400][ C1] ? alloc_fd+0x64c/0x6c0 [ 295.678770][ C1] do_sys_openat2+0x121/0x1c0 [ 295.683482][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 295.688720][ C1] ? __se_sys_clock_nanosleep_time32+0x2f0/0x380 [ 295.695096][ C1] __ia32_compat_sys_openat+0x131/0x160 [ 295.700687][ C1] __do_fast_syscall_32+0xb4/0x110 [ 295.705827][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.711060][ C1] do_fast_syscall_32+0x34/0x80 [ 295.715947][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.722315][ C1] RIP: 0023:0xf70ee539 [ 295.726410][ C1] RSP: 002b:00000000f75afd50 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 295.735289][ C1] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72d6b66 [ 295.743294][ C1] RDX: 0000000000098800 RSI: 0000000000000000 RDI: 00000000f7452ff4 [ 295.751305][ C1] RBP: 00000000000000df R08: 0000000000000000 R09: 0000000000000000 [ 295.759302][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 295.767300][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.775313][ C1] [ 295.778348][ C1] rcu: rcu_preempt kthread starved for 9516 jiffies! g21297 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 295.789646][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 295.799633][ C1] rcu: RCU grace-period kthread stack dump: [ 295.805538][ C1] task:rcu_preempt state:I stack:27032 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 295.817493][ C1] Call Trace: [ 295.820794][ C1] [ 295.823754][ C1] __schedule+0x16e2/0x4cd0 [ 295.828335][ C1] ? preempt_schedule_common+0x83/0xd0 [ 295.833842][ C1] ? __pfx___schedule+0x10/0x10 [ 295.838734][ C1] ? __free_object+0x4d4/0x6c0 [ 295.843545][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 295.849477][ C1] ? preempt_schedule+0xae/0xc0 [ 295.854364][ C1] preempt_schedule_common+0x83/0xd0 [ 295.859687][ C1] preempt_schedule+0xae/0xc0 [ 295.864422][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 295.869837][ C1] preempt_schedule_thunk+0x16/0x30 [ 295.875077][ C1] _raw_spin_unlock_irqrestore+0xfd/0x110 [ 295.880835][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.887198][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 295.893129][ C1] ? __pfx_process_timeout+0x10/0x10 [ 295.898446][ C1] prepare_to_swait_event+0x341/0x380 [ 295.903853][ C1] rcu_gp_fqs_loop+0x2cc/0x1540 [ 295.908738][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.909948][ C0] net_ratelimit: 22366 callbacks suppressed [ 295.909965][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 295.913952][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 295.920129][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 295.934040][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 295.934075][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 295.940419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.954420][ C1] ? finish_swait+0xcd/0x1f0 [ 295.954450][ C1] rcu_gp_kthread+0x99/0x390 [ 295.960194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 295.964897][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 295.977422][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 295.981337][ C1] ? __kthread_parkme+0x7b/0x200 [ 295.981363][ C1] ? __kthread_parkme+0x1a1/0x200 [ 295.986206][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 295.997894][ C1] kthread+0x70e/0x8a0 [ 295.997924][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 296.003319][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 296.017306][ C1] ? __pfx_kthread+0x10/0x10 [ 296.017335][ C1] ? __pfx_kthread+0x10/0x10 [ 296.022764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 296.027273][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.042200][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 296.045544][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.052943][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 296.062617][ C1] ? __pfx_kthread+0x10/0x10 [ 296.062643][ C1] ret_from_fork+0x4b/0x80 [ 296.131843][ C1] ? __pfx_kthread+0x10/0x10 [ 296.136480][ C1] ret_from_fork_asm+0x1a/0x30 [ 296.141289][ C1] [ 296.144328][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 296.150672][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc4-syzkaller-00040-g8bac8898fe39 #0 PREEMPT(full) [ 296.162326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.172410][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 296.178157][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 6b 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 296.197782][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 296.203879][ C1] RAX: 7124dca036b32000 RBX: ffffffff81973da8 RCX: 7124dca036b32000 [ 296.211877][ C1] RDX: 0000000000000001 RSI: ffffffff8d748ffc RDI: ffffffff8bc1cde0 [ 296.219877][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 296.227874][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7ec970 [ 296.235873][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d9b40 [ 296.243879][ C1] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 296.252843][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.259473][ C1] CR2: 0000000080152018 CR3: 00000000311ba000 CR4: 00000000003526f0 [ 296.267476][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.275482][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.283484][ C1] Call Trace: [ 296.286787][ C1] [ 296.289737][ C1] default_idle+0x13/0x20 [ 296.294098][ C1] default_idle_call+0x74/0xb0 [ 296.298894][ C1] do_idle+0x1e8/0x510 [ 296.302997][ C1] ? __pfx_do_idle+0x10/0x10 [ 296.307630][ C1] ? do_idle+0xa/0x510 [ 296.311726][ C1] cpu_startup_entry+0x44/0x60 [ 296.316517][ C1] start_secondary+0x101/0x110 [ 296.321306][ C1] common_startup_64+0x13e/0x147 [ 296.326290][ C1] [ 300.919674][ C0] net_ratelimit: 21707 callbacks suppressed [ 300.919704][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 300.920190][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 300.925984][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 300.940568][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 300.954436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.968641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.983213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:96:75:bc:87:c4:32, vlan:0) [ 300.994869][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 301.007040][ C0] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:3e [ 301.018863][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.707356][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 301.726886][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 301.765947][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 301.785512][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 301.805457][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 301.911220][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.929587][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 304.567289][ T120] usb 3-1: device descriptor read/64, error -110