last executing test programs: 12.61083053s ago: executing program 0 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000300)=[@in={0x2, 0x4, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0xffff, @local}, @in={0x2, 0x4e20, @multicast2}], 0x6c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x3c49cc454bd90d39, @time, 0x3}) tkill(0x0, 0x7) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000307000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000299000/0x4000)=nil) madvise(&(0x7f0000227000/0x1000)=nil, 0x1000, 0x19) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 12.609834556s ago: executing program 2 (id=2135): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x25, {0x25, 0x30, "59d8d875910f9e3fcc668de7fedc53ae92e4fda37156f01309214e73d49fd9eb6dcf26"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x2, 0x5d, "d52b82b40251e0aa669698841e439521ee523a19a1642f446029344ae596bd9a6653d428cf49c953c12c4e3f47ec6fdf96154ac4fbbab560bcb3d08c7abe6b79f624f29b0be050d30b312847a85d01fbfd32e634021124e0e000874604"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0xdd, 0x1e, 0x20, 0x5ef, 0x20a, 0x9136, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xea, 0x19, 0x98, 0x0, [], [{{0x9, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r1 = mq_open(&(0x7f0000000100)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x42, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000300), 0x0) 10.472424322s ago: executing program 0 (id=2144): syz_io_uring_setup(0x24fa, &(0x7f0000001980)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="1808000000010000000000000000029d67f6e946f121d1c98f98bdaece43ecf36bc136c4db4f5f3b8574d5d9dd219b8628a8b4bf83d67df6a9cc5df626fe85b8e4e6874125db1d6a949889ad058d46ca040f7700000000000000000000000000ecc3a72036859d4df21b3dc68613f99bb50000000000000008aa892c4e5f62ffe9d776319842a1c79e2f30f02851e0602da1bf5029252ee818551b00cd0f66bad9f60d86bc887d6239ef"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="b4effffdff8afaa73031c200000069105f000800e40000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@gettaction={0x20, 0x32, 0x909, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000740)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) 9.321286731s ago: executing program 0 (id=2147): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) fallocate(r0, 0x16, 0xff, 0x2) r1 = inotify_init1(0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1, 0x40, 0x0, 0x0, 0x800}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000023c0), &(0x7f0000000080)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)="98b0487a2d14b75e955e00000000bf508e0f3c357055bff83eaae6952bcf39bd206be138bbaf228b10a47a93fb564cd275fab9", 0xffffffffffffff7e, 0x20040880, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000001400)=0x40) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000001380), 0x4) sendto$unix(r6, &(0x7f0000000240)="bd2f80461a94f1c57db1ad0b32f62444433b185824a8", 0x16, 0x40000, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0xfffffffffffffcab) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000100)=ANY=[]) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r7 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000003100)=@id={0x1e, 0x3, 0x2}, 0x10) sendmmsg$inet(r7, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) bind$tipc(r7, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x7b16) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2, 0x80010, r3, 0x32208000) get_mempolicy(0x0, &(0x7f0000000080), 0x8001, &(0x7f0000ffc000/0x1000)=nil, 0x6) 8.357193957s ago: executing program 0 (id=2152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x201, 0xa, 0x500, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}]}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r3) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000240)=@generic={0x2}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) r6 = syz_io_uring_setup(0x4097, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) unshare(0x28020480) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00'}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) write$binfmt_script(r5, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/\xf4'}, {0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04\x00\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '\x9e\xc8\xb2\x17\xa1;\x85\x1e\xa3'}, {0x20, '+{[{#'}, {0x20, '\t\x00\x00\x00\x00\x00\x00\x00\xb2%}\x88\xd0\xfd\xa3\xf7i\x00!\x00J\xd1\xa7\xb1\xb1\xae\x1b\xb4\xf2\x985\xe6M5Px\xbe\x00'/47}, {0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8aZ@\xcd\xc9\xcbLJi8\x04q+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8['}]}, 0x24f) ioctl$BLKRRPART(r5, 0x125f, 0x0) 8.356388972s ago: executing program 3 (id=2153): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x81000, 0x0) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mkdirat(r1, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, [@map_val, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001340)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x10, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x4, 0xc}, {0x5, 0x2, 0xb, 0x7160b38ee218dcf1}, {0x4, 0x3, 0x8}]}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000980)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x7c}, @alu={0x7, 0x1, 0x5, 0x1, 0x1, 0xffffffffffffffe0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x3, 0xb, 0x8, 0xffffffffffffffc0, 0x1}, @call={0x85, 0x0, 0x0, 0x45}], &(0x7f0000000500)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2ba40, r0, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, r4, r1, r0], &(0x7f0000000ac0)=[{0x4, 0x4, 0x0, 0x7}, {0x2, 0x5, 0x0, 0x4}]}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) close(r6) syz_io_uring_setup(0x1e45, &(0x7f0000000780), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast2}}}, 0x48) 7.117335578s ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, 0xffffc0fe}, 0x1c, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000001200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000500e40000000000060014010000000006001200000001000a000600ffffffffffff00001c001180040004000400040004000600040001000400020004000500060014010000000006003600000000000500c20000000000"], 0x5dc}, 0x5}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0197039772bb2cd8c9b6020000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="10005080040006000800070001000000"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000748badaccd6bff9d6b4078060000010902ee0001000000000904800000914e31"], 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x100002, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r8, 0x0) pselect6(0x9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x42400) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0xa, 0x8001) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r10}, 0x10) 7.04282974s ago: executing program 0 (id=2157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000010f1000000000000000000000000000a780000000000ff17e05d000000000164000480080002400000000308000240000000010c00004000000000000000040c00044000000000000000020c00014000000000000001ff0800024000000002080002400000000108000240000000020c00014000000000000000de08e62518000240000000021400000011000100"/160], 0xa0}}, 0x40094) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080047000030000000000006905eac141400ac1e0001440400004404000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50b36aab5af6da3e4cdda8ce00000090780000", @ANYRESOCT, @ANYRES32=r1], 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpgid(0x0) syz_pidfd_open(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) 6.881146798s ago: executing program 4 (id=2158): syz_io_uring_setup(0x24fa, &(0x7f0000001980)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="1808000000010000000000000000029d67f6e946f121d1c98f98bdaece43ecf36bc136c4db4f5f3b8574d5d9dd219b8628a8b4bf83d67df6a9cc5df626fe85b8e4e6874125db1d6a949889ad058d46ca040f7700000000000000000000000000ecc3a72036859d4df21b3dc68613f99bb50000000000000008aa892c4e5f62ffe9d776319842a1c79e2f30f02851e0602da1bf5029252ee818551b00cd0f66bad9f60d86bc887d6239ef"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="b4effffdff8afaa73031c200000069105f000800e40000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@gettaction={0x20, 0x32, 0x909, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000740)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=ANY=[@ANYRESOCT=r5, @ANYRES16, @ANYRES8=r8, @ANYRESHEX=r7, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x40d4}, 0x814) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000780)={{}, r2, 0x12, @inherit={0x68, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000004000000000000000500000000002000060000000000000004000010000000000100000000b6000005005692e5d1978aedd030fe0000000000000300000000000000000000000a210000ffffffffffffffff0800"]}, @subvolid=0x8}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"338c9cd805af89504fd04983bb74c369", 0x0, r2, {0xdaa, 0xc1}, {0x9, 0x9}, 0x200, [0x69e5, 0x1, 0x9, 0x5, 0x1f, 0x100000000, 0x9, 0x4, 0x870, 0x7, 0x1200000000000, 0x8, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x1ff, 0xd20]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000001c0)={{}, r2, 0x14, @unused=[0x2, 0x8, 0xfffffffffffffff7, 0x8], @name="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"}) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x82) r10 = openat$cgroup_procs(r9, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 6.817510341s ago: executing program 2 (id=2159): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) 6.429595961s ago: executing program 2 (id=2160): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 6.174751829s ago: executing program 3 (id=2161): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x25, {0x25, 0x30, "59d8d875910f9e3fcc668de7fedc53ae92e4fda37156f01309214e73d49fd9eb6dcf26"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x2, 0x5d, "d52b82b40251e0aa669698841e439521ee523a19a1642f446029344ae596bd9a6653d428cf49c953c12c4e3f47ec6fdf96154ac4fbbab560bcb3d08c7abe6b79f624f29b0be050d30b312847a85d01fbfd32e634021124e0e000874604"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0xdd, 0x1e, 0x20, 0x5ef, 0x20a, 0x9136, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xea, 0x19, 0x98, 0x0, [], [{{0x9, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r1 = mq_open(&(0x7f0000000100)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x42, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000300), 0x0) 6.08948261s ago: executing program 0 (id=2162): r0 = socket$inet(0x2, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x3e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x86, 0x55, 0x21, 0x8, 0xccd, 0x69, 0x6e55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x89, 0x0, 0x0, 0xdd, 0xc8, 0xf1}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "2315feb06d09"}]}}]}}]}}]}}, 0x0) 6.005794811s ago: executing program 2 (id=2163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0, 0x1], 0x0, 0x0, 0x2}}, 0x40) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1}}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r7, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x58}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 5.580209642s ago: executing program 4 (id=2165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc5a, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.421669957s ago: executing program 1 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) (fail_nth: 5) 4.263113276s ago: executing program 4 (id=2168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) (fail_nth: 5) 4.219268738s ago: executing program 2 (id=2169): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x4, 0x25, {0x25, 0x30, "59d8d875910f9e3fcc668de7fedc53ae92e4fda37156f01309214e73d49fd9eb6dcf26"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x2, 0x5d, "d52b82b40251e0aa669698841e439521ee523a19a1642f446029344ae596bd9a6653d428cf49c953c12c4e3f47ec6fdf96154ac4fbbab560bcb3d08c7abe6b79f624f29b0be050d30b312847a85d01fbfd32e634021124e0e000874604"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2a, 0xdd, 0x1e, 0x20, 0x5ef, 0x20a, 0x9136, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xea, 0x19, 0x98, 0x0, [], [{{0x9, 0x5, 0x8, 0x3}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r1 = mq_open(&(0x7f0000000100)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x42, 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000300), 0x0) 4.106379941s ago: executing program 1 (id=2170): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000", @ANYRES16, @ANYBLOB="00032cbd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32, @ANYBLOB="0e0001006e6573696d0000000f0002006e657464657673696d3000000800", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800", @ANYRES32], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x0, 0x3ff, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0xe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x64, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x19f23}], 0x1, 0x0) socket$kcm(0x2, 0x0, 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000140), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="63813855a901faa76eedf02412f1d31807000000000000a600000071100000000000009500000000000000641778e3d74294002a58acf9af06f8bd8f51fe4a0f9919a5cb8da2c801d8a6d23a847bdacbdaf558cedb6566b36dfb26068b6a42924567e34cd633a7b4498594db0f9ee41116f1be00000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 3.785628724s ago: executing program 4 (id=2171): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x3, 0x0, @void}, 0x62) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @nop, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) 2.750665775s ago: executing program 1 (id=2172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1, 0x97d}}}}, 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) shutdown(0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x40448d2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41517f18f97c4463}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a400000000000000df250500000005003800010000000800064004489da43443a2d63468b4948413c390bbb2d030b4567f9d9aef72", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8080) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x60, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x60}}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000140)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="5c8f01595bef578eed5f5c7240c0c3f72fd0f76443660234ed6770d470536b6401a7bd9e2d3ad8f21b3d13d7b90efeecee5e233164de42eb8e31818f2de21f0b8d", @ANYRES16=r3, @ANYBLOB="00012bbd7000fbdbdf251000000005002f000100000005002f0009000000080031000000000008003a000400000005002900010000000a000900aaaaaaaaaabb00000a000900bbbb"], 0x5c}, 0x1, 0x0, 0x0, 0x4002}, 0x4c004) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffb}]}, 0x2c}}, 0x40) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1de}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd000}, 0x20000800) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x49c5}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000500040001000300050002000a000000"], 0x24}}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) 2.413833705s ago: executing program 3 (id=2173): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) unlink(&(0x7f0000000140)='./file1\x00') 2.061547414s ago: executing program 4 (id=2174): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000043c0)="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", 0x973}], 0x1, 0x0, 0x56}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r3, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 1.749657236s ago: executing program 3 (id=2175): socket(0x2a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) 1.542001076s ago: executing program 1 (id=2176): syz_io_uring_setup(0x24fa, &(0x7f0000001980)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="1808000000010000000000000000029d67f6e946f121d1c98f98bdaece43ecf36bc136c4db4f5f3b8574d5d9dd219b8628a8b4bf83d67df6a9cc5df626fe85b8e4e6874125db1d6a949889ad058d46ca040f7700000000000000000000000000ecc3a72036859d4df21b3dc68613f99bb50000000000000008aa892c4e5f62ffe9d776319842a1c79e2f30f02851e0602da1bf5029252ee818551b00cd0f66bad9f60d86bc887d6239ef"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="b4effffdff8afaa73031c200000069105f000800e40000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x4}]}, 0x18}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x6, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@gettaction={0x20, 0x32, 0x909, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000740)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000017c0)=ANY=[@ANYRESOCT=r5, @ANYRES16, @ANYRES8=r8, @ANYRESHEX=r7, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x40d4}, 0x814) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000780)={{}, r2, 0x12, @inherit={0x68, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000004000000000000000500000000002000060000000000000004000010000000000100000000b6000005005692e5d1978aedd030fe0000000000000300000000000000000000000a210000ffffffffffffffff0800"]}, @subvolid=0x8}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"338c9cd805af89504fd04983bb74c369", 0x0, r2, {0xdaa, 0xc1}, {0x9, 0x9}, 0x200, [0x69e5, 0x1, 0x9, 0x5, 0x1f, 0x100000000, 0x9, 0x4, 0x870, 0x7, 0x1200000000000, 0x8, 0xfffffffffffffff8, 0x7fffffffffffffff, 0x1ff, 0xd20]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000001c0)={{}, r2, 0x14, @unused=[0x2, 0x8, 0xfffffffffffffff7, 0x8], @name="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"}) r9 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x82) r10 = openat$cgroup_procs(r9, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@abs, 0x6e) 1.181514539s ago: executing program 3 (id=2177): socket$inet6(0xa, 0x80001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(0x0, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d031200000000000000130000004c0009800800010000000000080002"], 0x60}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="040027bd7000fbdbdf25160000004400098008000100f5ffffff080002006b980000080002008c0c0000080001000e00000008000200020000000800010063dd0000080001006e0b000008000100040000001c00098008000100ff0300000800010085000000080001000d0000001c0003800800020003000000080001000000000008000200080000001c000380080002000400000008000300080000000800020007000000a2a34058408ad3fcfc74094aaa10d93e900a66433216594bd643f71dfa1c99240589a08f9c03947210b640de00fc9759ad07ce7fbfc401e191f26f4c9153b3d892c00f75a5a7c847ee9635db6ed6ecaaf28ef412d00282a3e00b0e48328014e656853eb6de3adbdd521581a063858b0e5f07"], 0xac}}, 0x20008004) memfd_secret(0x0) ftruncate(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) open(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x100000}}, 0xfffffffffffffef6) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.06048945s ago: executing program 1 (id=2178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080102000002000000000000003800851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 459.137112ms ago: executing program 1 (id=2179): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x40286608, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) socket(0x40000000015, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0xfffffffffffffffe}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 41.356767ms ago: executing program 3 (id=2180): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1d, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0xfffffffffffffd69}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) getsockopt$bt_hci(r3, 0x84, 0x0, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x44, &(0x7f0000000140)={0x0, 0xdef3, 0x9efcc7fbd1377ada, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x7c, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)=@deltaction={0x27c, 0x31, 0xd9130413432fa39f, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7b96}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x95d7}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc19e}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x27c}}, 0x80) bind$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x8000097, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000980)={0x0, @private, @dev}, &(0x7f00000009c0)=0xc) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000fc0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f00000025c0)=ANY=[@ANYBLOB="4c050000", @ANYRES16=0x0, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB="f80002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="7801028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3ccfb80024000115656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575658cb4e74e5deb1d25d670335f6964000000000000000000000000000000000000000000000000050003000300000008000400dd07000008000600261600d0adfa2cbfbce8d18b39b149feb799b188ca58f733b00000000000", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="d000028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400ff039205ffffffff004009800100000000000c00f7ffffff0400b0080200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="3801028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010400003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008602000008000600", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000004000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x54c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) 0s ago: executing program 2 (id=2181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160012000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000840)=""/61, 0x3d, 0x40000140, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0xc0c0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000300)) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f00000000c0)={0xa, {0x0, 0x3, 0x11}}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8040) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x450}}, 0x4000041) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000980)=ANY=[@ANYBLOB="dfd679e8c27219ba00c0ad07c9502e28754f95c8680f7e1ba559eb1a82616c85b9574dbce2ddf5ba3fb39c0e28459f3d510dd55900c9cf5efe48d49b369fb9433158cb9548791f99e9acc5ab0e0c0e66cd6e4bc4ceedbd0e614afc86f04bef1789c0e0ccd80c24ef67252e61017181324ea55f67822ece0dbee465d6adb52984960edd10e2bd779e508be07b5fe9f420440c2f2c401190819c341b15adc320ebc937ed2a3dd037425035cf069c0dcf4da6d54da8d678915088bde7171b31e76bc4ad72fd24", @ANYRES8=r3], 0x17) msgsnd(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000000000091c8794d99fb229d30ea7a291f82bc2555fece91e2b831cda851b79a09ff3cb3cf495b485eb56e3c9ffa732aa519142cd79fbda9993d46807ece4522ed49edc3f776282a97fe319a762e0627cc3bff22e433e0d416da85f3719bf24e5fa331ce4407b5388bb7691b596b7ea8680a319d02f1efe6e4fddee1912abb385dfb7e82b579b6051af20e5f0950f88dabee50bfad234497f5f07845598931b72df1400df300f5f98b54cef089"], 0xb1, 0x800) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x4042081}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES8=r5], 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): c23 length: 249 > 4 [ 879.530384][ T4607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 879.537762][ T4607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 879.584938][T10950] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 879.624852][ T25] usb 4-1: device descriptor read/64, error -71 [ 879.638741][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.709316][ T5267] usb 1-1: config 0 descriptor?? [ 879.763524][ T25] usb usb4-port1: attempt power cycle [ 879.766388][ T5267] usb 1-1: selecting invalid altsetting 1 [ 879.804305][ T5267] dvb_ttusb_budget: ttusb_init_controller: error [ 879.804493][T10950] usb 5-1: Using ep0 maxpacket: 8 [ 879.835544][T10950] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 879.844495][ T5267] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 879.852926][T10950] usb 5-1: config 0 has no interface number 0 [ 879.859944][T10950] usb 5-1: config 0 interface 33 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 879.876287][T10950] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 879.886094][T10950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.907372][T10950] usb 5-1: Product: syz [ 879.921838][T10950] usb 5-1: Manufacturer: syz [ 879.931961][T10950] usb 5-1: SerialNumber: syz [ 879.942990][T10950] usb 5-1: config 0 descriptor?? [ 879.971191][T11574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.979952][T11574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.058856][T10950] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 880.165109][ T5267] DVB: Unable to find symbol cx22700_attach() [ 880.204531][ T25] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 880.256211][ T2039] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 880.272132][T10950] usb 5-1: USB disconnect, device number 32 [ 880.295646][ T25] usb 4-1: device descriptor read/8, error -71 [ 880.328456][ T2039] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 880.359258][T11581] chnl_net:caif_netlink_parms(): no params data found [ 880.405033][ T5267] DVB: Unable to find symbol tda10046_attach() [ 880.507286][ T5267] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 880.586661][ T25] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 880.798972][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.827223][T11581] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.842041][T11581] bridge_slave_0: entered allmulticast mode [ 880.850461][T11581] bridge_slave_0: entered promiscuous mode [ 880.872921][T11581] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.882184][T11581] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.894765][T11581] bridge_slave_1: entered allmulticast mode [ 880.904366][T11581] bridge_slave_1: entered promiscuous mode [ 880.907546][ T25] usb 4-1: device not accepting address 56, error -71 [ 880.954126][ T25] usb usb4-port1: unable to enumerate USB device [ 881.010667][T11581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.056026][T11581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.178515][T11581] team0: Port device team_slave_0 added [ 881.223378][T11581] team0: Port device team_slave_1 added [ 881.319641][T11581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.344561][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.443650][T11581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.457149][T11608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.587276][ T4607] Bluetooth: hci1: command tx timeout [ 881.739130][T11605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.745122][T11581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.034493][T11581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.125790][ T5305] usb 1-1: USB disconnect, device number 44 [ 882.164158][T11581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.450939][T11581] hsr_slave_0: entered promiscuous mode [ 882.465555][T11581] hsr_slave_1: entered promiscuous mode [ 882.472693][T11581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 882.480782][T11581] Cannot create hsr debugfs directory [ 883.554482][ T5305] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 883.675260][ T4607] Bluetooth: hci1: command tx timeout [ 883.834619][ T5305] usb 1-1: Using ep0 maxpacket: 16 [ 883.858237][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.893930][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.909137][ T5305] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.924368][ T5305] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 883.934373][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.947945][ T5305] usb 1-1: config 0 descriptor?? [ 883.965818][T11581] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.998994][T11629] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 884.298732][T11581] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.428484][ T5305] microsoft 0003:045E:07DA.0008: item fetching failed at offset 31/34 [ 884.453101][ T5305] microsoft 0003:045E:07DA.0008: parse failed [ 884.466823][ T5305] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 884.595550][T11581] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.807891][T11581] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.946154][T11615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.965375][T11615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.987371][ T965] team0: left allmulticast mode [ 884.998851][ T965] team_slave_0: left allmulticast mode [ 885.022367][ T965] team_slave_1: left allmulticast mode [ 885.040258][ T965] bridge0: port 3(team0) entered disabled state [ 885.086743][ T965] bridge_slave_1: left allmulticast mode [ 885.093006][ T965] bridge_slave_1: left promiscuous mode [ 885.122415][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.153570][ T965] bridge_slave_0: left allmulticast mode [ 885.172804][ T965] bridge_slave_0: left promiscuous mode [ 885.179238][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.507823][ T4607] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 885.751560][ T4607] Bluetooth: hci1: command tx timeout [ 886.866357][T11659] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 887.122905][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.147566][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.179229][ T965] bond0 (unregistering): Released all slaves [ 887.219748][ T9] usb 1-1: USB disconnect, device number 45 [ 887.772528][T11581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 887.829484][ T4607] Bluetooth: hci1: command tx timeout [ 887.831467][T11581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 887.964568][ T46] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 887.979822][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 888.008505][T11669] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1776'. [ 888.047577][T11669] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 888.108462][T11581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 888.169592][T11674] netlink: 'syz.0.1775': attribute type 12 has an invalid length. [ 888.184580][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 888.206512][ T46] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.223046][T11674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1775'. [ 888.232293][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.232324][ T46] usb 2-1: Product: syz [ 888.232341][ T46] usb 2-1: Manufacturer: syz [ 888.232356][ T46] usb 2-1: SerialNumber: syz [ 888.276250][ T46] usb 2-1: config 0 descriptor?? [ 888.515558][ T46] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 888.713380][T11581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 888.846055][ T965] hsr_slave_0: left promiscuous mode [ 888.858621][ T965] hsr_slave_1: left promiscuous mode [ 888.890880][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.912161][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.936655][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.953729][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.077710][ T965] veth1_macvtap: left promiscuous mode [ 889.096937][ T965] veth0_macvtap: left promiscuous mode [ 889.118152][ T965] veth1_vlan: left promiscuous mode [ 889.166304][ T965] veth0_vlan: left promiscuous mode [ 889.586267][ T4607] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 889.596526][ T4607] Bluetooth: hci0: Injecting HCI hardware error event [ 889.606169][ T5230] Bluetooth: hci0: hardware error 0x00 [ 890.284212][T11686] FAULT_INJECTION: forcing a failure. [ 890.284212][T11686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.312531][T11686] CPU: 0 UID: 0 PID: 11686 Comm: syz.0.1780 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 890.323342][T11686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 890.333391][T11686] Call Trace: [ 890.336678][T11686] [ 890.339608][T11686] dump_stack_lvl+0x241/0x360 [ 890.344308][T11686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.349539][T11686] ? __pfx__printk+0x10/0x10 [ 890.354142][T11686] ? tomoyo_path_number_perm+0x71a/0x880 [ 890.359778][T11686] ? __pfx_lock_release+0x10/0x10 [ 890.364810][T11686] should_fail_ex+0x3b0/0x4e0 [ 890.369487][T11686] _copy_from_user+0x2f/0xe0 [ 890.374078][T11686] copy_arg_from_user+0x59/0x90 [ 890.378931][T11686] media_device_ioctl+0x1c7/0x3c0 [ 890.383957][T11686] ? __pfx_media_device_ioctl+0x10/0x10 [ 890.389518][T11686] ? __pfx_media_device_ioctl+0x10/0x10 [ 890.395060][T11686] ? media_ioctl+0x100/0x120 [ 890.399643][T11686] ? __pfx_media_ioctl+0x10/0x10 [ 890.404587][T11686] __se_sys_ioctl+0xfc/0x170 [ 890.409224][T11686] do_syscall_64+0xf3/0x230 [ 890.413747][T11686] ? clear_bhb_loop+0x35/0x90 [ 890.418506][T11686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.424582][T11686] RIP: 0033:0x7f81ad9779f9 [ 890.428994][T11686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.448589][T11686] RSP: 002b:00007f81ae737048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 890.457006][T11686] RAX: ffffffffffffffda RBX: 00007f81adb05f80 RCX: 00007f81ad9779f9 [ 890.464975][T11686] RDX: 00000000200002c0 RSI: 00000000c1007c01 RDI: 0000000000000004 [ 890.472938][T11686] RBP: 00007f81ae7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 890.480899][T11686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.488863][T11686] R13: 000000000000000b R14: 00007f81adb05f80 R15: 00007ffdaa8c4858 [ 890.496838][T11686] [ 890.499943][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.512294][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.555272][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.592491][ T46] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 890.612999][ T46] usb 2-1: USB disconnect, device number 51 [ 890.919472][ T965] team_slave_1 (unregistering): left promiscuous mode [ 890.950200][ T965] team0 (unregistering): Port device team_slave_1 removed [ 891.055391][ T965] team_slave_0 (unregistering): left promiscuous mode [ 891.068255][ T965] team0 (unregistering): Port device team_slave_0 removed [ 891.749069][ T5276] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 891.757687][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 891.956316][ T5276] usb 2-1: config 0 has an invalid interface number: 70 but max is 0 [ 891.984290][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.021150][ T5276] usb 2-1: config 0 has no interface number 0 [ 892.044462][ T5276] usb 2-1: config 0 interface 70 has no altsetting 0 [ 892.071543][ T5276] usb 2-1: New USB device found, idVendor=152d, idProduct=2566, bcdDevice= 1.14 [ 892.090770][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.120675][ T5276] usb 2-1: config 0 descriptor?? [ 892.142225][ T5276] usb-storage 2-1:0.70: USB Mass Storage device detected [ 892.202820][ T5276] usb-storage 2-1:0.70: Quirks match for vid 152d pid 2566: 1000000 [ 893.211492][T11581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.291026][T11712] FAULT_INJECTION: forcing a failure. [ 893.291026][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 893.293544][T11581] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.334587][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.0.1785 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 893.345564][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 893.355894][T11712] Call Trace: [ 893.359188][T11712] [ 893.362129][T11712] dump_stack_lvl+0x241/0x360 [ 893.366841][T11712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.372059][T11712] ? __pfx__printk+0x10/0x10 [ 893.376677][T11712] ? __kmalloc_node_noprof+0xb7/0x440 [ 893.382066][T11712] ? __pfx___might_resched+0x10/0x10 [ 893.387377][T11712] should_fail_ex+0x3b0/0x4e0 [ 893.392075][T11712] should_failslab+0xac/0x100 [ 893.396775][T11712] __kmalloc_node_noprof+0xdf/0x440 [ 893.401993][T11712] ? __kvmalloc_node_noprof+0x72/0x190 [ 893.407582][T11712] __kvmalloc_node_noprof+0x72/0x190 [ 893.412886][T11712] __kvm_mmu_topup_memory_cache+0x4d9/0x6b0 [ 893.418790][T11712] ? __pfx_lock_release+0x10/0x10 [ 893.423848][T11712] ? rcu_is_watching+0x15/0xb0 [ 893.428632][T11712] kvm_mmu_load+0x115/0x26e0 [ 893.433252][T11712] ? __mutex_unlock_slowpath+0x21d/0x750 [ 893.438916][T11712] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 893.444919][T11712] ? __pfx_kvm_mmu_load+0x10/0x10 [ 893.449960][T11712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 893.455943][T11712] ? __asan_memset+0x23/0x50 [ 893.460531][T11712] ? vmx_flush_tlb_guest+0x1e5/0x310 [ 893.465983][T11712] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 893.471607][T11712] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 893.477585][T11712] ? kvm_apic_has_interrupt+0x9d4/0xa70 [ 893.483125][T11712] ? vmx_get_nmi_mask+0xdf/0x1a0 [ 893.488071][T11712] vcpu_run+0x6c3d/0x88b0 [ 893.492395][T11712] ? __lock_acquire+0x137a/0x2040 [ 893.497476][T11712] ? __pfx_vcpu_run+0x10/0x10 [ 893.502149][T11712] ? __local_bh_enable_ip+0x168/0x200 [ 893.507528][T11712] ? lockdep_hardirqs_on+0x99/0x150 [ 893.512724][T11712] ? __pfx_lock_acquire+0x10/0x10 [ 893.517736][T11712] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 893.523017][T11712] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 893.528745][T11712] ? xfd_validate_state+0x6e/0x150 [ 893.533880][T11712] ? rcu_is_watching+0x15/0xb0 [ 893.538644][T11712] ? rcu_is_watching+0x15/0xb0 [ 893.543404][T11712] kvm_arch_vcpu_ioctl_run+0xa73/0x19d0 [ 893.548952][T11712] ? mark_lock+0x9a/0x350 [ 893.553286][T11712] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0 [ 893.559002][T11712] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 893.565002][T11712] ? __pfx_lock_acquire+0x10/0x10 [ 893.570036][T11712] ? get_task_pid+0x23/0x310 [ 893.574650][T11712] ? __pfx_lock_release+0x10/0x10 [ 893.579675][T11712] ? kvm_vcpu_ioctl+0x1dd/0xea0 [ 893.584532][T11712] ? get_task_pid+0x23/0x310 [ 893.589125][T11712] kvm_vcpu_ioctl+0x91d/0xea0 [ 893.593813][T11712] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 893.599011][T11712] ? smack_file_ioctl+0x356/0x3a0 [ 893.604028][T11712] ? __pfx_smack_file_ioctl+0x10/0x10 [ 893.609396][T11712] ? __fget_files+0x29/0x470 [ 893.613999][T11712] ? __fget_files+0x3f6/0x470 [ 893.618662][T11712] ? __fget_files+0x29/0x470 [ 893.623254][T11712] ? bpf_lsm_file_ioctl+0x9/0x10 [ 893.628191][T11712] ? security_file_ioctl+0x87/0xb0 [ 893.633382][T11712] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 893.639321][T11712] __se_sys_ioctl+0xfc/0x170 [ 893.643919][T11712] do_syscall_64+0xf3/0x230 [ 893.648420][T11712] ? clear_bhb_loop+0x35/0x90 [ 893.653719][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.660391][T11712] RIP: 0033:0x7f81ad9779f9 [ 893.664888][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.685216][T11712] RSP: 002b:00007f81ae716048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.694319][T11712] RAX: ffffffffffffffda RBX: 00007f81adb06058 RCX: 00007f81ad9779f9 [ 893.702725][T11712] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 893.710948][T11712] RBP: 00007f81ae7160a0 R08: 0000000000000000 R09: 0000000000000000 [ 893.719350][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.727834][T11712] R13: 000000000000006e R14: 00007f81adb06058 R15: 00007ffdaa8c4858 [ 893.735811][T11712] [ 893.801577][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.808776][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.852321][ T5276] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.859651][ T5276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.015320][ T5305] usb 2-1: USB disconnect, device number 52 [ 895.524487][T11734] netlink: 'syz.1.1790': attribute type 10 has an invalid length. [ 895.532424][T11734] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1790'. [ 895.541499][T11734] team0: entered promiscuous mode [ 895.546746][T11734] team_slave_0: entered promiscuous mode [ 895.552751][T11734] team_slave_1: entered promiscuous mode [ 895.559328][T11734] bridge0: port 3(team0) entered blocking state [ 895.566193][T11734] bridge0: port 3(team0) entered disabled state [ 895.573788][T11734] team0: entered allmulticast mode [ 895.579125][T11734] team_slave_0: entered allmulticast mode [ 895.585158][T11734] team_slave_1: entered allmulticast mode [ 895.594328][T11734] bridge0: port 3(team0) entered blocking state [ 895.600830][T11734] bridge0: port 3(team0) entered forwarding state [ 896.403953][T11581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.446785][T11738] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 896.760479][T11581] veth0_vlan: entered promiscuous mode [ 896.821323][T11581] veth1_vlan: entered promiscuous mode [ 896.890975][T11581] veth0_macvtap: entered promiscuous mode [ 896.903599][T11581] veth1_macvtap: entered promiscuous mode [ 896.984963][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.055863][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.073867][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.084888][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.095714][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.111910][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.144461][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.175593][T11753] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 897.175593][T11753] program syz.1.1794 not setting count and/or reply_len properly [ 897.264238][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.384275][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.547618][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.707056][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.708113][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 897.728382][T11751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1797'. [ 897.746440][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.764995][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.775653][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.916530][T11581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.968467][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.030099][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.054678][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.077688][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.114559][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.146545][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.158104][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.169616][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.180220][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.193812][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.206589][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.217755][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.235020][T11581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.249387][T11581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.274767][ T46] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 898.276787][T11581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.359558][T11581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.408579][T11581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.462153][T11581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.483145][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.496761][T11581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.532296][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 898.589227][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 898.624082][ T46] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 898.640292][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.649510][ T46] usb 4-1: Product: syz [ 898.654692][ T46] usb 4-1: Manufacturer: syz [ 898.659369][ T46] usb 4-1: SerialNumber: syz [ 898.666622][T11773] ipt_REJECT: ECHOREPLY no longer supported. [ 898.674911][ T46] usb 4-1: config 0 descriptor?? [ 898.992934][T11752] CIFS: VFS: Malformed UNC in devname [ 899.011386][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.018177][T11776] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 899.047806][ T46] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 899.075778][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.128363][T11778] FAULT_INJECTION: forcing a failure. [ 899.128363][T11778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.151885][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.4.1806 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 899.162691][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 899.172773][T11778] Call Trace: [ 899.176076][T11778] [ 899.178108][ T8803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.179002][T11778] dump_stack_lvl+0x241/0x360 [ 899.179040][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.189416][ T8803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.191507][T11778] ? __pfx__printk+0x10/0x10 [ 899.191540][T11778] ? tomoyo_path_number_perm+0x71a/0x880 [ 899.214507][T11778] ? __pfx_lock_release+0x10/0x10 [ 899.219557][T11778] should_fail_ex+0x3b0/0x4e0 [ 899.224242][T11778] _copy_from_user+0x2f/0xe0 [ 899.228845][T11778] copy_arg_from_user+0x59/0x90 [ 899.233700][T11778] media_device_ioctl+0x1c7/0x3c0 [ 899.238776][T11778] ? __pfx_media_device_ioctl+0x10/0x10 [ 899.244331][T11778] ? __pfx_media_device_ioctl+0x10/0x10 [ 899.249867][T11778] ? media_ioctl+0x100/0x120 [ 899.254465][T11778] ? __pfx_media_ioctl+0x10/0x10 [ 899.259440][T11778] __se_sys_ioctl+0xfc/0x170 [ 899.264065][T11778] do_syscall_64+0xf3/0x230 [ 899.268773][T11778] ? clear_bhb_loop+0x35/0x90 [ 899.273466][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.279535][T11778] RIP: 0033:0x7f0c9ad779f9 [ 899.283943][T11778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.303547][T11778] RSP: 002b:00007f0c9bb95048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 899.311984][T11778] RAX: ffffffffffffffda RBX: 00007f0c9af05f80 RCX: 00007f0c9ad779f9 [ 899.319944][T11778] RDX: 00000000200002c0 RSI: 00000000c1007c01 RDI: 0000000000000003 [ 899.327910][T11778] RBP: 00007f0c9bb950a0 R08: 0000000000000000 R09: 0000000000000000 [ 899.335889][T11778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.343892][T11778] R13: 000000000000000b R14: 00007f0c9af05f80 R15: 00007ffc11559438 [ 899.351880][T11778] [ 899.496628][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 899.512064][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.557243][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 900.570449][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 900.580986][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.592683][ T46] usb 2-1: config 0 descriptor?? [ 900.641812][ T46] hub 2-1:0.0: bad descriptor, ignoring hub [ 900.685682][ T46] hub 2-1:0.0: probe with driver hub failed with error -5 [ 900.729546][ T46] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 900.882640][ T5276] usb 4-1: USB disconnect, device number 57 [ 902.484455][T11791] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 902.484455][T11791] program syz.0.1808 not setting count and/or reply_len properly [ 902.504862][ T46] usb 2-1: USB disconnect, device number 53 [ 903.216416][T11800] FAULT_INJECTION: forcing a failure. [ 903.216416][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 903.411314][T11800] CPU: 1 UID: 0 PID: 11800 Comm: syz.1.1811 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 903.422133][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 903.432221][T11800] Call Trace: [ 903.435529][T11800] [ 903.438472][T11800] dump_stack_lvl+0x241/0x360 [ 903.443172][T11800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.448400][T11800] ? __pfx__printk+0x10/0x10 [ 903.453013][T11800] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 903.458580][T11800] ? __pfx___might_resched+0x10/0x10 [ 903.463886][T11800] should_fail_ex+0x3b0/0x4e0 [ 903.468673][T11800] should_failslab+0xac/0x100 [ 903.473370][T11800] ? getname_flags+0x2aa/0x540 [ 903.478153][T11800] __kmalloc_cache_noprof+0x6c/0x2c0 [ 903.483464][T11800] getname_flags+0x2aa/0x540 [ 903.488080][T11800] do_sys_openat2+0xd2/0x1d0 [ 903.492682][T11800] ? __pfx_do_sys_openat2+0x10/0x10 [ 903.497891][T11800] __x64_sys_creat+0x123/0x170 [ 903.502659][T11800] ? __pfx___x64_sys_creat+0x10/0x10 [ 903.507944][T11800] ? do_syscall_64+0x100/0x230 [ 903.512725][T11800] ? do_syscall_64+0xb6/0x230 [ 903.517412][T11800] do_syscall_64+0xf3/0x230 [ 903.521931][T11800] ? clear_bhb_loop+0x35/0x90 [ 903.526600][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.532486][T11800] RIP: 0033:0x7ff7549779f9 [ 903.536892][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.556491][T11800] RSP: 002b:00007ff75576b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 903.565002][T11800] RAX: ffffffffffffffda RBX: 00007ff754b05f80 RCX: 00007ff7549779f9 [ 903.572982][T11800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000dc0 [ 903.581727][T11800] RBP: 00007ff75576b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 903.589699][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.597659][T11800] R13: 000000000000000b R14: 00007ff754b05f80 R15: 00007ffe1498e458 [ 903.605633][T11800] [ 904.096147][T11817] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 904.281555][T11812] netlink: 1212 bytes leftover after parsing attributes in process `syz.0.1815'. [ 904.395173][T11824] netlink: 1212 bytes leftover after parsing attributes in process `syz.3.1816'. [ 905.224010][T11833] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 905.224010][T11833] program syz.4.1822 not setting count and/or reply_len properly [ 906.097069][T11842] FAULT_INJECTION: forcing a failure. [ 906.097069][T11842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.148638][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.0.1824 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 906.159636][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 906.169722][T11842] Call Trace: [ 906.173036][T11842] [ 906.175990][T11842] dump_stack_lvl+0x241/0x360 [ 906.180701][T11842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.185938][T11842] ? __pfx__printk+0x10/0x10 [ 906.190546][T11842] ? snprintf+0xda/0x120 [ 906.194784][T11842] should_fail_ex+0x3b0/0x4e0 [ 906.199456][T11842] _copy_to_user+0x2f/0xb0 [ 906.203867][T11842] simple_read_from_buffer+0xca/0x150 [ 906.209335][T11842] proc_fail_nth_read+0x1e9/0x250 [ 906.214379][T11842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.219954][T11842] ? rw_verify_area+0x520/0x6b0 [ 906.224825][T11842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 906.230398][T11842] vfs_read+0x204/0xbc0 [ 906.234559][T11842] ? __pfx_lock_release+0x10/0x10 [ 906.239670][T11842] ? __pfx_vfs_read+0x10/0x10 [ 906.244366][T11842] ? __fget_files+0x29/0x470 [ 906.248968][T11842] ? __fget_files+0x3f6/0x470 [ 906.253653][T11842] ksys_read+0x1a0/0x2c0 [ 906.257900][T11842] ? __pfx_ksys_read+0x10/0x10 [ 906.262665][T11842] ? do_syscall_64+0x100/0x230 [ 906.267437][T11842] ? do_syscall_64+0xb6/0x230 [ 906.272119][T11842] do_syscall_64+0xf3/0x230 [ 906.276619][T11842] ? clear_bhb_loop+0x35/0x90 [ 906.281286][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.287175][T11842] RIP: 0033:0x7f81ad97643c [ 906.291586][T11842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 906.311194][T11842] RSP: 002b:00007f81ae737040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.319692][T11842] RAX: ffffffffffffffda RBX: 00007f81adb05f80 RCX: 00007f81ad97643c [ 906.327667][T11842] RDX: 000000000000000f RSI: 00007f81ae7370b0 RDI: 0000000000000004 [ 906.335630][T11842] RBP: 00007f81ae7370a0 R08: 0000000000000000 R09: 0000000000000000 [ 906.343609][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.351588][T11842] R13: 000000000000000b R14: 00007f81adb05f80 R15: 00007ffdaa8c4858 [ 906.359569][T11842] [ 907.013399][ T5276] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 907.337004][T11845] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 907.518065][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.530442][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.674809][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 907.683184][ T5276] usb 4-1: config 0 has an invalid interface number: 33 but max is 1 [ 907.698950][ T5276] usb 4-1: config 0 has no interface number 1 [ 907.713714][ T5276] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 909.689805][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.698543][ T5276] usb 4-1: Product: syz [ 909.703312][ T5276] usb 4-1: Manufacturer: syz [ 909.708665][ T5276] usb 4-1: SerialNumber: syz [ 909.736030][ T5276] usb 4-1: config 0 descriptor?? [ 909.741717][ T5276] usb 4-1: can't set config #0, error -71 [ 909.757756][ T5276] usb 4-1: USB disconnect, device number 58 [ 910.214608][ T5276] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 910.473496][ T5276] usb 4-1: New USB device found, idVendor=0af0, idProduct=7201, bcdDevice=ad.9d [ 910.529100][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.643258][ T5276] usb 4-1: config 0 descriptor?? [ 911.662791][ T46] usb 4-1: USB disconnect, device number 59 [ 912.362451][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 912.381705][T10116] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 912.564687][T10116] usb 2-1: device descriptor read/64, error -71 [ 912.759608][T11890] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1840'. [ 913.089369][T10116] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 913.464742][T10116] usb 2-1: device descriptor read/64, error -71 [ 913.626187][T10116] usb usb2-port1: attempt power cycle [ 914.168193][T10116] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 914.635666][T10116] usb 2-1: device descriptor read/8, error -71 [ 914.663170][T11914] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1848'. [ 914.755563][T11918] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 914.778423][T11918] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1847'. [ 914.924937][T10116] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 914.965198][T10116] usb 2-1: device descriptor read/8, error -71 [ 915.092165][T10116] usb usb2-port1: unable to enumerate USB device [ 915.574749][T10116] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 915.794505][T10116] usb 2-1: Using ep0 maxpacket: 32 [ 915.826748][T10116] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=55.33 [ 915.854804][T10116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.890416][T10116] usb 2-1: Product: syz [ 915.914483][T10116] usb 2-1: Manufacturer: syz [ 915.925006][T10116] usb 2-1: SerialNumber: syz [ 915.952028][T10116] usb 2-1: config 0 descriptor?? [ 915.993987][T10116] ttusb_dec_send_command: command bulk message failed: error -22 [ 916.035031][T10116] ttusb-dec 2-1:0.0: probe with driver ttusb-dec failed with error -22 [ 916.536855][T11943] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1855'. [ 916.710832][ T9] usb 2-1: USB disconnect, device number 58 [ 925.404754][ T5276] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 925.445994][T11972] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1862'. [ 925.944857][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.966962][T11982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 926.354723][ T5276] usb 2-1: device descriptor read/64, error -71 [ 926.708510][ T5276] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 927.034996][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 927.251393][ T5276] usb 2-1: New USB device found, idVendor=337d, idProduct=503c, bcdDevice=22.8c [ 927.331538][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.408913][ T5276] usb 2-1: Product: syz [ 927.444521][ T5276] usb 2-1: Manufacturer: syz [ 927.467034][ T5276] usb 2-1: SerialNumber: syz [ 927.488248][ T5276] usb 2-1: config 0 descriptor?? [ 930.053140][ T5276] usb 2-1: USB disconnect, device number 60 [ 930.094605][ T5267] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 930.502848][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 931.283672][ T5267] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 931.291822][ T5267] usb 1-1: can't read configurations, error -71 [ 931.752960][T12030] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 931.778557][T12030] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1880'. [ 931.913861][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.920493][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.314926][ T5270] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 932.586613][ T5270] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 932.597574][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.613672][ T5270] usb 2-1: config 0 descriptor?? [ 932.850502][T12037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.895242][T12037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.649561][ T5270] kaweth 2-1:0.0: Firmware present in device. [ 936.684600][ T5270] kaweth 2-1:0.0: Error reading configuration (-71), no net device created [ 936.693387][ T5270] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 936.710736][ T5270] usb 2-1: USB disconnect, device number 61 [ 937.036507][T10336] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 937.108495][T12058] nftables ruleset with unbound chain [ 937.258006][T10336] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 937.292417][T10336] usb 1-1: config 0 has no interface number 0 [ 937.314575][T10336] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 937.353357][T10336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.411040][T10336] usb 1-1: config 0 descriptor?? [ 937.447013][T10336] usb 1-1: selecting invalid altsetting 1 [ 937.495350][T10336] dvb_ttusb_budget: ttusb_init_controller: error [ 937.536341][T10336] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 937.635839][T12048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.644972][T12048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.221044][ T4607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 940.229013][T10336] DVB: Unable to find symbol cx22700_attach() [ 940.241413][ T4607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 940.264812][ T4607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 940.274120][ T4607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 940.284334][ T4607] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 940.300719][ T4607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 940.320220][T12069] FAULT_INJECTION: forcing a failure. [ 940.320220][T12069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.334952][T12069] CPU: 1 UID: 0 PID: 12069 Comm: syz.1.1891 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 940.345858][T12069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 940.355937][T12069] Call Trace: [ 940.359307][T12069] [ 940.362229][T12069] dump_stack_lvl+0x241/0x360 [ 940.367077][T12069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 940.372436][T12069] ? __pfx__printk+0x10/0x10 [ 940.378232][T12069] ? snprintf+0xda/0x120 [ 940.382486][T12069] should_fail_ex+0x3b0/0x4e0 [ 940.387252][T12069] _copy_to_user+0x2f/0xb0 [ 940.391663][T12069] simple_read_from_buffer+0xca/0x150 [ 940.397130][T12069] proc_fail_nth_read+0x1e9/0x250 [ 940.402166][T12069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.407801][T12069] ? rw_verify_area+0x520/0x6b0 [ 940.412648][T12069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 940.418201][T12069] vfs_read+0x204/0xbc0 [ 940.422365][T12069] ? __pfx_lock_release+0x10/0x10 [ 940.427409][T12069] ? __pfx_vfs_read+0x10/0x10 [ 940.432087][T12069] ? __fget_files+0x29/0x470 [ 940.436669][T12069] ? __fget_files+0x3f6/0x470 [ 940.441352][T12069] ksys_read+0x1a0/0x2c0 [ 940.445592][T12069] ? __pfx_ksys_read+0x10/0x10 [ 940.450346][T12069] ? do_syscall_64+0x100/0x230 [ 940.455105][T12069] ? do_syscall_64+0xb6/0x230 [ 940.459776][T12069] do_syscall_64+0xf3/0x230 [ 940.464271][T12069] ? clear_bhb_loop+0x35/0x90 [ 940.468938][T12069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.474829][T12069] RIP: 0033:0x7ff75497643c [ 940.479243][T12069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 940.498837][T12069] RSP: 002b:00007ff75574a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 940.507243][T12069] RAX: ffffffffffffffda RBX: 00007ff754b06058 RCX: 00007ff75497643c [ 940.515214][T12069] RDX: 000000000000000f RSI: 00007ff75574a0b0 RDI: 0000000000000006 [ 940.523260][T12069] RBP: 00007ff75574a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 940.531220][T12069] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 940.539185][T12069] R13: 000000000000006e R14: 00007ff754b06058 R15: 00007ffe1498e458 [ 940.547162][T12069] [ 940.610338][T10336] DVB: Unable to find symbol tda10046_attach() [ 940.638032][T10336] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 940.912758][T10454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.628015][T10454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.848425][T10454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.954106][ T4607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.966536][ T4607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.975158][ T4607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.988834][ T4607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.996739][ T4607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 942.004056][ T4607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 942.094112][T10454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.154668][ T2039] pvrusb2: request_firmware fatal error with code=-110 [ 942.186964][ T2039] pvrusb2: Failure uploading firmware1 [ 942.218424][ T2039] pvrusb2: Device initialization was not successful. [ 942.272468][ T2039] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 942.346127][ T2039] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 942.392823][T10950] pvrusb2: Device being rendered inoperable [ 942.635647][ T5230] Bluetooth: hci1: command tx timeout [ 942.837928][T10454] bridge_slave_1: left allmulticast mode [ 942.843622][T10454] bridge_slave_1: left promiscuous mode [ 942.874982][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.915432][T10454] bridge_slave_0: left allmulticast mode [ 942.921130][T10454] bridge_slave_0: left promiscuous mode [ 942.960436][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.663074][T10454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.685043][T10454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.697344][T10454] bond0 (unregistering): Released all slaves [ 943.743741][T12073] chnl_net:caif_netlink_parms(): no params data found [ 943.804568][T12103] FAULT_INJECTION: forcing a failure. [ 943.804568][T12103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.856986][T12103] CPU: 0 UID: 0 PID: 12103 Comm: syz.3.1898 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 943.867809][T12103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 943.877886][T12103] Call Trace: [ 943.881190][T12103] [ 943.884144][T12103] dump_stack_lvl+0x241/0x360 [ 943.888858][T12103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 943.894094][T12103] ? __pfx__printk+0x10/0x10 [ 943.898724][T12103] ? snprintf+0xda/0x120 [ 943.902990][T12103] should_fail_ex+0x3b0/0x4e0 [ 943.907695][T12103] _copy_to_user+0x2f/0xb0 [ 943.912149][T12103] simple_read_from_buffer+0xca/0x150 [ 943.917564][T12103] proc_fail_nth_read+0x1e9/0x250 [ 943.922619][T12103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.928196][T12103] ? rw_verify_area+0x520/0x6b0 [ 943.933071][T12103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 943.938649][T12103] vfs_read+0x204/0xbc0 [ 943.942831][T12103] ? __pfx_lock_release+0x10/0x10 [ 943.947888][T12103] ? __pfx_vfs_read+0x10/0x10 [ 943.952680][T12103] ? __fget_files+0x29/0x470 [ 943.957297][T12103] ? __fget_files+0x3f6/0x470 [ 943.962007][T12103] ksys_read+0x1a0/0x2c0 [ 943.966278][T12103] ? __pfx_ksys_read+0x10/0x10 [ 943.971056][T12103] ? do_syscall_64+0x100/0x230 [ 943.975844][T12103] ? do_syscall_64+0xb6/0x230 [ 943.980545][T12103] do_syscall_64+0xf3/0x230 [ 943.985069][T12103] ? clear_bhb_loop+0x35/0x90 [ 943.989771][T12103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.995775][T12103] RIP: 0033:0x7fafaf77643c [ 944.000205][T12103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 944.019831][T12103] RSP: 002b:00007fafb04d3040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 944.028292][T12103] RAX: ffffffffffffffda RBX: 00007fafaf906058 RCX: 00007fafaf77643c [ 944.036288][T12103] RDX: 000000000000000f RSI: 00007fafb04d30b0 RDI: 0000000000000004 [ 944.044542][T12103] RBP: 00007fafb04d30a0 R08: 0000000000000000 R09: 0000000000000000 [ 944.052526][T12103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.060599][T12103] R13: 000000000000006e R14: 00007fafaf906058 R15: 00007fffc1ebc068 [ 944.065574][ T5230] Bluetooth: hci4: command tx timeout [ 944.068587][T12103] [ 944.166636][T10950] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 944.247906][T12087] chnl_net:caif_netlink_parms(): no params data found [ 944.376826][T10950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 944.390077][T10950] usb 2-1: can't read configurations, error -61 [ 944.585458][T10950] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 944.713189][ T5230] Bluetooth: hci1: command tx timeout [ 944.811470][T10950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 944.819407][T10950] usb 2-1: can't read configurations, error -61 [ 944.827633][T10950] usb usb2-port1: attempt power cycle [ 945.027010][T10454] hsr_slave_0: left promiscuous mode [ 945.040453][T10454] hsr_slave_1: left promiscuous mode [ 945.048593][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.061968][T10454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.074098][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.093181][T10454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.174637][T10454] veth1_macvtap: left promiscuous mode [ 945.180426][T10454] veth0_macvtap: left promiscuous mode [ 945.188250][T10454] veth1_vlan: left promiscuous mode [ 945.193604][T10454] veth0_vlan: left promiscuous mode [ 945.234980][T10950] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 945.292061][T10950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 945.314534][T10950] usb 2-1: can't read configurations, error -61 [ 945.496122][T10950] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 945.551947][T10950] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 945.594717][T10950] usb 2-1: can't read configurations, error -61 [ 945.605063][T10950] usb usb2-port1: unable to enumerate USB device [ 946.150937][ T5230] Bluetooth: hci4: command tx timeout [ 946.419480][T10454] team0 (unregistering): Port device team_slave_1 removed [ 946.473326][T10454] team0 (unregistering): Port device team_slave_0 removed [ 946.784630][ T5230] Bluetooth: hci1: command tx timeout [ 947.633460][ T4607] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 947.677804][ T4607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 947.707142][ T4607] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 947.732087][ T4607] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 947.741902][ T4607] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 947.750332][ T4607] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.050395][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 948.071427][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1902'. [ 948.080668][T12121] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 948.104705][T12073] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.154695][T12073] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.161981][T12073] bridge_slave_0: entered allmulticast mode [ 948.204092][T12073] bridge_slave_0: entered promiscuous mode [ 948.216122][T12073] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.223347][T12073] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.224714][ T5230] Bluetooth: hci4: command tx timeout [ 948.253338][T12073] bridge_slave_1: entered allmulticast mode [ 948.264344][T12073] bridge_slave_1: entered promiscuous mode [ 948.393566][T12137] overlayfs: failed to resolve './file0': -2 [ 948.864579][ T5230] Bluetooth: hci1: command tx timeout [ 949.068631][T12087] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.095801][T12087] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.103088][T12087] bridge_slave_0: entered allmulticast mode [ 949.127437][T12087] bridge_slave_0: entered promiscuous mode [ 949.140000][T12087] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.148679][T12087] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.156063][T12087] bridge_slave_1: entered allmulticast mode [ 949.163635][T12087] bridge_slave_1: entered promiscuous mode [ 949.279799][T12073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.826842][ T5230] Bluetooth: hci5: command tx timeout [ 950.144791][T12073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.307628][ T5230] Bluetooth: hci4: command tx timeout [ 951.210874][T12087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.276880][T12087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.371419][T12073] team0: Port device team_slave_0 added [ 951.490456][T10336] kernel write not supported for file /dsp (pid: 10336 comm: kworker/0:5) [ 951.539775][T12073] team0: Port device team_slave_1 added [ 951.554552][ T5267] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 951.668100][T12087] team0: Port device team_slave_0 added [ 951.677422][T12087] team0: Port device team_slave_1 added [ 951.683886][T12073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.708032][T12073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.745510][T12073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.746974][ T5267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 951.768551][T12073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.784586][ T5267] usb 4-1: config 0 has no interface number 0 [ 951.787115][T12073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.792817][ T5267] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 951.826462][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.835692][T12073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.847500][ T5267] usb 4-1: config 0 descriptor?? [ 951.854749][ T5276] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 951.855554][ T5267] usb 4-1: selecting invalid altsetting 1 [ 951.886102][ T5267] dvb_ttusb_budget: ttusb_init_controller: error [ 951.902841][ T5267] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 951.911360][ T5230] Bluetooth: hci5: command tx timeout [ 951.979145][T12087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.994556][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.030921][T12087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.061165][T12158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.069938][T12158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.080096][ T5276] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 952.081031][ T5267] DVB: Unable to find symbol cx22700_attach() [ 952.089295][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.091635][ T5276] usb 2-1: config 0 descriptor?? [ 953.985113][ T5230] Bluetooth: hci5: command tx timeout [ 956.790021][ T5230] Bluetooth: hci5: command tx timeout [ 956.840795][ T5276] usb 2-1: can't set config #0, error -71 [ 956.873671][T12087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.897302][ T5276] usb 2-1: USB disconnect, device number 66 [ 956.937587][ T5267] DVB: Unable to find symbol tda10046_attach() [ 956.964773][T12087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.993248][ T5267] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 957.034674][T12087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.191841][T12073] hsr_slave_0: entered promiscuous mode [ 957.198193][T12073] hsr_slave_1: entered promiscuous mode [ 957.302994][ T9] usb 4-1: USB disconnect, device number 60 [ 957.340295][T12087] hsr_slave_0: entered promiscuous mode [ 957.388050][T12087] hsr_slave_1: entered promiscuous mode [ 957.429577][T12087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 957.439241][T12087] Cannot create hsr debugfs directory [ 957.861299][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 957.886056][T12126] chnl_net:caif_netlink_parms(): no params data found [ 958.066958][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 958.077357][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 958.100135][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 958.139262][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 958.160517][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.174423][ T9] usb 4-1: Product: syz [ 958.178637][ T9] usb 4-1: Manufacturer: syz [ 958.193983][ T9] usb 4-1: SerialNumber: syz [ 958.837755][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 958.865921][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.882286][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.959013][T12126] bridge_slave_0: entered allmulticast mode [ 959.005652][T12126] bridge_slave_0: entered promiscuous mode [ 959.040537][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.080756][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.104819][T12126] bridge_slave_1: entered allmulticast mode [ 959.148735][T12126] bridge_slave_1: entered promiscuous mode [ 959.556234][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.587656][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.761974][T12126] team0: Port device team_slave_0 added [ 959.855441][T12126] team0: Port device team_slave_1 added [ 959.987736][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.014121][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.053304][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.077968][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.087038][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.113147][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.326907][T12087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.391291][T12126] hsr_slave_0: entered promiscuous mode [ 960.420927][T12126] hsr_slave_1: entered promiscuous mode [ 960.438384][T12126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.466254][T12126] Cannot create hsr debugfs directory [ 960.550286][T12087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.924454][T12087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.585436][T10950] usb 4-1: USB disconnect, device number 61 [ 961.596033][T10950] usblp0: removed [ 961.745332][T12087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.135839][T12199] netlink: 'syz.3.1920': attribute type 4 has an invalid length. [ 962.302800][T12087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 962.345839][T12087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 962.392864][T12087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 962.433690][T12087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 962.661854][T12073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.765493][T12073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.830021][T12073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.990920][T12126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.078615][T12073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 963.271766][T12126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.440019][T12126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.754360][T12126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.064351][T12073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.123103][T12087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.358788][T12073] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.400528][T12087] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.436485][T12126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 964.465864][T12126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 964.490025][T12126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 964.518934][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.526085][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.560657][ T5276] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.567846][ T5276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.604664][T10116] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 964.658387][T12126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 964.682945][T10553] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.690225][T10553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.758407][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.765592][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.806022][T10116] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.847035][T10116] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 964.926840][T10116] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 964.955872][T10116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.990381][T10116] usb 4-1: config 0 descriptor?? [ 965.249306][T12126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.328764][T12126] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.367641][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.375003][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.469109][T10116] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 965.508727][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.515094][T10116] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 965.515933][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.726684][T12087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.938685][T12073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.098128][T12073] veth0_vlan: entered promiscuous mode [ 966.286886][T12073] veth1_vlan: entered promiscuous mode [ 967.027812][T12073] veth0_macvtap: entered promiscuous mode [ 967.102393][T12073] veth1_macvtap: entered promiscuous mode [ 967.160506][T12126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.272853][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.293712][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.314852][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.344681][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.364439][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.384705][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.404957][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.428182][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.450171][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.476096][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.496400][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.520054][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.540083][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 967.564502][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.592465][T12073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.645625][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.674576][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.694712][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.716900][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.737138][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.771190][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.789748][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.837882][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.864092][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.883170][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.893676][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.905763][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.916834][T12073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.927973][T12073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.940691][T12073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.026736][T12073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.065282][T12073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.097019][T12073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.114610][T12073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.174172][T10116] usb 4-1: USB disconnect, device number 62 [ 968.196478][T12087] veth0_vlan: entered promiscuous mode [ 968.752793][T12126] veth0_vlan: entered promiscuous mode [ 968.955093][T12087] veth1_vlan: entered promiscuous mode [ 969.272171][T12126] veth1_vlan: entered promiscuous mode [ 969.618329][T12087] veth0_macvtap: entered promiscuous mode [ 969.659783][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.665173][T12087] veth1_macvtap: entered promiscuous mode [ 969.679631][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.749721][T12126] veth0_macvtap: entered promiscuous mode [ 970.807618][T12126] veth1_macvtap: entered promiscuous mode [ 970.877173][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.902713][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.930500][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.954154][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.974541][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.989039][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.999398][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.010413][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.020776][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.060473][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.071866][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.084666][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.094961][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.105911][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.116233][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.127452][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.144870][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.162105][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.176575][T12087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.219483][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.245986][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.260774][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.276155][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.289405][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.303311][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.313839][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.328534][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.338792][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.350785][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.361183][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.372187][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.382450][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.404811][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.427789][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.451032][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.471866][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.492417][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.508881][T12126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.596287][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.649338][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.694618][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.724873][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.744642][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.760349][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.782634][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.806513][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.834625][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.855757][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.882806][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.905322][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.924510][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.951385][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.972629][T12087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.983342][T10116] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 972.005827][T12087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.029041][T12087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.049489][T12274] netlink: 'syz.1.1936': attribute type 4 has an invalid length. [ 972.061028][T12087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.075692][ T5267] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 972.095282][T12087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.114243][T12087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.133805][T12087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.157434][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.179843][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.194704][T10116] usb 3-1: Using ep0 maxpacket: 8 [ 972.200225][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.223559][T10116] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 972.225127][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.244169][T10116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.263550][T10116] usb 3-1: Product: syz [ 972.263569][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.271763][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.289285][ T5267] usb 4-1: Using ep0 maxpacket: 32 [ 972.296489][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.303911][T10116] usb 3-1: Manufacturer: syz [ 972.307959][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.323464][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.330345][T10116] usb 3-1: SerialNumber: syz [ 972.338759][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.352854][T10116] usb 3-1: config 0 descriptor?? [ 972.354432][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 972.383214][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.403742][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 56324, setting to 1024 [ 972.416439][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.424430][ T5267] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 972.441439][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.448434][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.463913][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.472842][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.491113][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.498537][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.513194][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.522097][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 972.536244][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.545696][ T5267] usb 4-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 972.561361][T12126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.572117][T12126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.587203][ T5267] usb 4-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe [ 972.596694][ T5267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.599204][T10116] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 972.616747][T12126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 972.624580][ T5267] usb 4-1: Product: syz [ 972.628826][ T5267] usb 4-1: Manufacturer: syz [ 972.633443][ T5267] usb 4-1: SerialNumber: syz [ 972.643115][T12126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.654366][T12126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.664828][ T5267] usb 4-1: config 0 descriptor?? [ 972.670697][T12273] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 972.672154][T12126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 972.740618][T12126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.076694][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.093693][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.246596][T10457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.272616][T10457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.369497][ T1061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.384646][ T1061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.472054][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.492730][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.428154][T10116] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 974.471292][T10116] usb 3-1: USB disconnect, device number 40 [ 975.058455][T12293] netlink: 640 bytes leftover after parsing attributes in process `syz.1.1938'. [ 976.942102][T12310] FAULT_INJECTION: forcing a failure. [ 976.942102][T12310] name failslab, interval 1, probability 0, space 0, times 0 [ 977.054835][T12310] CPU: 1 UID: 0 PID: 12310 Comm: syz.3.1941 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 977.065647][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 977.075715][T12310] Call Trace: [ 977.079002][T12310] [ 977.081948][T12310] dump_stack_lvl+0x241/0x360 [ 977.086671][T12310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.091894][T12310] ? __pfx__printk+0x10/0x10 [ 977.096511][T12310] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 977.103038][T12310] ? __pfx___might_resched+0x10/0x10 [ 977.108348][T12310] should_fail_ex+0x3b0/0x4e0 [ 977.113065][T12310] should_failslab+0xac/0x100 [ 977.117773][T12310] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 977.124133][T12310] ? smk_set_cipso+0x28f/0xbb0 [ 977.128927][T12310] memdup_user_nul+0x2f/0x100 [ 977.133630][T12310] smk_set_cipso+0x28f/0xbb0 [ 977.138257][T12310] ? __pfx_lock_acquire+0x10/0x10 [ 977.143298][T12310] ? __pfx_smk_set_cipso+0x10/0x10 [ 977.148441][T12310] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 977.154452][T12310] ? __pfx_smk_write_cipso+0x10/0x10 [ 977.155462][T12312] ipt_REJECT: ECHOREPLY no longer supported. [ 977.159740][T12310] vfs_write+0x2a2/0xc90 [ 977.170065][T12310] ? __pfx_vfs_write+0x10/0x10 [ 977.174845][T12310] ? __fget_files+0x29/0x470 [ 977.179450][T12310] ? __fget_files+0x3f6/0x470 [ 977.184255][T12310] ksys_write+0x1a0/0x2c0 [ 977.188623][T12310] ? __pfx_ksys_write+0x10/0x10 [ 977.193499][T12310] ? do_syscall_64+0x100/0x230 [ 977.196715][T12312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.198703][T12310] ? do_syscall_64+0xb6/0x230 [ 977.198741][T12310] do_syscall_64+0xf3/0x230 [ 977.216252][T12310] ? clear_bhb_loop+0x35/0x90 [ 977.220956][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.226870][T12310] RIP: 0033:0x7fafaf7779f9 [ 977.231298][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.244820][T12312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.250903][T12310] RSP: 002b:00007fafb04f4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 977.267040][T12310] RAX: ffffffffffffffda RBX: 00007fafaf905f80 RCX: 00007fafaf7779f9 [ 977.275032][T12310] RDX: 0000000000000096 RSI: 0000000020000380 RDI: 0000000000000006 [ 977.283113][T12310] RBP: 00007fafb04f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 977.291194][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.299190][T12310] R13: 000000000000000b R14: 00007fafaf905f80 R15: 00007fffc1ebc068 [ 977.307207][T12310] [ 978.639618][T12332] FAULT_INJECTION: forcing a failure. [ 978.639618][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 978.693156][T12332] CPU: 1 UID: 0 PID: 12332 Comm: syz.3.1947 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 978.704064][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 978.714142][T12332] Call Trace: [ 978.717430][T12332] [ 978.720370][T12332] dump_stack_lvl+0x241/0x360 [ 978.725078][T12332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 978.730298][T12332] ? __pfx__printk+0x10/0x10 [ 978.734906][T12332] ? fs_reclaim_acquire+0x93/0x140 [ 978.740037][T12332] ? __pfx___might_resched+0x10/0x10 [ 978.745438][T12332] should_fail_ex+0x3b0/0x4e0 [ 978.750132][T12332] ? security_inode_alloc+0x28/0x120 [ 978.755432][T12332] should_failslab+0xac/0x100 [ 978.760126][T12332] ? security_inode_alloc+0x28/0x120 [ 978.765421][T12332] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 978.770825][T12332] security_inode_alloc+0x28/0x120 [ 978.775954][T12332] inode_init_always+0x966/0xc90 [ 978.780908][T12332] ? __pfx_proc_alloc_inode+0x10/0x10 [ 978.786295][T12332] new_inode+0xa7/0x310 [ 978.790471][T12332] proc_pid_make_inode+0x1f/0x130 [ 978.795515][T12332] proc_map_files_instantiate+0x95/0x150 [ 978.801163][T12332] proc_fill_cache+0x316/0x420 [ 978.805943][T12332] ? __pfx_proc_map_files_instantiate+0x10/0x10 [ 978.812191][T12332] ? __pfx_proc_fill_cache+0x10/0x10 [ 978.817484][T12332] ? snprintf+0xda/0x120 [ 978.821733][T12332] ? __pfx___might_resched+0x10/0x10 [ 978.827045][T12332] ? mas_find+0x950/0xbb0 [ 978.831401][T12332] proc_map_files_readdir+0x829/0xa60 [ 978.836804][T12332] ? __pfx_proc_map_files_readdir+0x10/0x10 [ 978.842709][T12332] ? __mutex_lock+0x2ef/0xd70 [ 978.847413][T12332] ? __fdget_pos+0x24e/0x310 [ 978.852019][T12332] ? __fget_files+0x29/0x470 [ 978.856619][T12332] ? __fget_files+0x3f6/0x470 [ 978.861304][T12332] ? bpf_lsm_file_permission+0x9/0x10 [ 978.866707][T12332] iterate_dir+0x57a/0x810 [ 978.871153][T12332] __se_sys_getdents64+0x20d/0x4f0 [ 978.876303][T12332] ? __pfx___se_sys_getdents64+0x10/0x10 [ 978.882045][T12332] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 978.888049][T12332] ? __pfx_filldir64+0x10/0x10 [ 978.892917][T12332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 978.899263][T12332] ? do_syscall_64+0x100/0x230 [ 978.904051][T12332] ? do_syscall_64+0xb6/0x230 [ 978.908750][T12332] do_syscall_64+0xf3/0x230 [ 978.913272][T12332] ? clear_bhb_loop+0x35/0x90 [ 978.917966][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.923881][T12332] RIP: 0033:0x7fafaf7779f9 [ 978.928309][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.947937][T12332] RSP: 002b:00007fafb04f4048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 978.956372][T12332] RAX: ffffffffffffffda RBX: 00007fafaf905f80 RCX: 00007fafaf7779f9 [ 978.964352][T12332] RDX: 0000000000001002 RSI: 0000000020003f80 RDI: 0000000000000003 [ 978.972340][T12332] RBP: 00007fafb04f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 978.980325][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.988313][T12332] R13: 000000000000000b R14: 00007fafaf905f80 R15: 00007fffc1ebc068 [ 978.996320][T12332] [ 979.478281][T12337] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 979.514517][ T5276] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 979.744550][ T5276] usb 2-1: Using ep0 maxpacket: 8 [ 979.798307][ T5276] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 979.814501][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.822530][ T5276] usb 2-1: Product: syz [ 979.874480][ T5276] usb 2-1: Manufacturer: syz [ 979.879127][ T5276] usb 2-1: SerialNumber: syz [ 979.918189][ T5276] usb 2-1: config 0 descriptor?? [ 979.936614][ T5276] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 980.638160][T12348] syz.0.1952[12348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.638317][T12348] syz.0.1952[12348] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 980.652929][T12348] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 981.362873][ T5276] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 981.498556][ T5276] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 982.916115][T10336] usb 2-1: USB disconnect, device number 67 [ 986.495757][T12380] ipt_REJECT: ECHOREPLY no longer supported. [ 986.524832][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.676620][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.581122][ T29] audit: type=1800 audit(1722705487.490:64): pid=12385 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1962" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 987.745237][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 987.781813][ T29] audit: type=1400 audit(1722705487.710:65): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12392 comm="syz.1.1963" dest=20002 netif=wpan0 [ 987.904711][T12395] ip6_vti0: entered promiscuous mode [ 987.931735][T12395] vlan2: entered promiscuous mode [ 987.993470][T12395] ip6_vti0: left promiscuous mode [ 988.108056][T12375] tmpfs: Unknown parameter 'mpol'Mocaz' [ 993.352580][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.359133][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.566590][ T5230] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 994.579126][T12471] ipt_REJECT: ECHOREPLY no longer supported. [ 995.784845][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'. [ 997.946364][T12521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 998.289836][ T29] audit: type=1326 audit(1722705498.220:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12525 comm="syz.2.1997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc1b1779f9 code=0x0 [ 998.628387][ T29] audit: type=1804 audit(1722705498.550:67): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2001" name="/newroot/142/file0/bus" dev="hugetlbfs" ino=50850 res=1 errno=0 [ 998.759249][ T29] audit: type=1804 audit(1722705498.580:68): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2001" name="/newroot/142/file0/bus" dev="hugetlbfs" ino=50850 res=1 errno=0 [ 998.852454][ T29] audit: type=1804 audit(1722705498.580:69): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2001" name="/newroot/142/file0/bus" dev="hugetlbfs" ino=50850 res=1 errno=0 [ 999.655228][T12547] ipt_REJECT: ECHOREPLY no longer supported. [ 1002.315445][ T5230] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1002.325831][ T5230] Bluetooth: hci1: Injecting HCI hardware error event [ 1002.335400][ T5230] Bluetooth: hci1: hardware error 0x00 [ 1002.752413][T10457] tipc: Subscription rejected, illegal request [ 1002.776537][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2015'. [ 1002.878044][T12590] mmap: syz.3.2016 (12590) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1003.086838][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 1003.201952][ T29] audit: type=1326 audit(1722705503.130:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12592 comm="syz.1.2017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7549779f9 code=0x0 [ 1003.693627][T12585] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1004.468080][ T5230] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1005.351926][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.380194][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.423704][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.463718][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.537663][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.573028][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.105638][T12631] ipt_REJECT: ECHOREPLY no longer supported. [ 1006.378865][ T940] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1006.434528][T10950] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1010.204577][T10950] usb 3-1: Using ep0 maxpacket: 32 [ 1011.228233][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 1011.278170][T10950] usb 3-1: device descriptor read/all, error -61 [ 1011.289863][ T940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1011.300265][ T940] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1011.377034][ T940] usb 5-1: string descriptor 0 read error: -71 [ 1011.419001][ T940] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 1011.482331][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.539664][ T940] usb 5-1: config 0 descriptor?? [ 1011.595602][ T940] usb 5-1: can't set config #0, error -71 [ 1011.645380][ T940] usb 5-1: USB disconnect, device number 33 [ 1011.994540][T10950] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1012.264977][T10950] usb 3-1: Using ep0 maxpacket: 16 [ 1012.306180][T10950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.368486][T10950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.382524][T10950] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 1012.455633][T10950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.520698][T10950] usb 3-1: config 0 descriptor?? [ 1012.730697][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2029'. [ 1012.927451][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2029'. [ 1013.431414][T10950] usbhid 3-1:0.0: can't add hid device: -32 [ 1013.452181][T10950] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1014.433831][T12675] ipt_REJECT: ECHOREPLY no longer supported. [ 1014.486190][ T965] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.496097][T12675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.545050][T12675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.597932][T10336] usb 3-1: USB disconnect, device number 42 [ 1015.479628][ T4607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1015.507296][ T4607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1015.517038][ T4607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1015.529034][ T4607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1015.536940][ T4607] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1015.544460][ T4607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1015.607061][ T965] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.794534][T10336] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1015.953306][ T965] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.032093][T10336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.084586][T10336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1016.136792][T10336] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.186740][T10336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.207622][ T965] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.237586][T10336] usb 3-1: config 0 descriptor?? [ 1016.716735][T10336] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 1016.776300][T10336] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1017.044567][ T965] team0: left allmulticast mode [ 1017.049484][ T965] team_slave_0: left allmulticast mode [ 1017.084483][ T965] team_slave_1: left allmulticast mode [ 1017.090240][ T965] bridge0: port 3(team0) entered disabled state [ 1017.155513][ T965] bridge_slave_1: left allmulticast mode [ 1017.161207][ T965] bridge_slave_1: left promiscuous mode [ 1017.176586][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.191859][ T965] bridge_slave_0: left allmulticast mode [ 1017.204513][ T965] bridge_slave_0: left promiscuous mode [ 1017.210286][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.535932][T12696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.576382][T12696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.594727][ T5230] Bluetooth: hci2: command tx timeout [ 1019.574408][ T5305] usb 3-1: USB disconnect, device number 43 [ 1019.665214][ T5230] Bluetooth: hci2: command tx timeout [ 1020.310453][T12725] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 1021.711498][ T965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.749633][ T5230] Bluetooth: hci2: command tx timeout [ 1022.062099][ T965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1022.293987][ T965] bond0 (unregistering): Released all slaves [ 1022.544879][T12733] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 1022.750312][T12678] chnl_net:caif_netlink_parms(): no params data found [ 1024.791274][ T5230] Bluetooth: hci2: command tx timeout [ 1025.597506][T12678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.660235][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.906867][T12678] bridge_slave_0: entered allmulticast mode [ 1025.960442][T12678] bridge_slave_0: entered promiscuous mode [ 1026.583646][T12771] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 1026.717018][T12678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.724175][T12678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.798554][T12678] bridge_slave_1: entered allmulticast mode [ 1026.836786][T12678] bridge_slave_1: entered promiscuous mode [ 1026.998681][T12766] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1027.027818][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1027.117127][T12770] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1027.147378][T12770] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1027.455918][ T965] hsr_slave_0: left promiscuous mode [ 1027.488651][ T965] hsr_slave_1: left promiscuous mode [ 1027.604823][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.613342][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.669989][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.720309][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.897355][ T965] veth0_macvtap: left promiscuous mode [ 1027.903026][ T965] veth1_vlan: left promiscuous mode [ 1028.002154][ T965] veth0_vlan: left promiscuous mode [ 1032.517825][ T965] team_slave_1 (unregistering): left promiscuous mode [ 1032.561704][T12823] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 1032.596990][ T965] team0 (unregistering): Port device team_slave_1 removed [ 1032.777647][ T965] team_slave_0 (unregistering): left promiscuous mode [ 1032.865607][ T965] team0 (unregistering): Port device team_slave_0 removed [ 1033.513122][T12829] netlink: 'syz.4.2073': attribute type 2 has an invalid length. [ 1033.521105][T12829] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2073'. [ 1035.904156][T12678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1036.020603][T12678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.385369][T12678] team0: Port device team_slave_0 added [ 1036.432030][T12678] team0: Port device team_slave_1 added [ 1041.384636][ T4669] udevd[4669]: worker [10474] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 1041.915873][T12678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.922859][T12678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.038551][T12678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.084695][T12860] program syz.0.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1042.112325][T12678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.138559][T12678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.302236][T12678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.754308][T12678] hsr_slave_0: entered promiscuous mode [ 1042.882276][T12678] hsr_slave_1: entered promiscuous mode [ 1042.949887][T12678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.024161][T12678] Cannot create hsr debugfs directory [ 1043.365924][T12875] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262144 (only 8 groups) [ 1045.520086][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.574920][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.850306][T12678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1045.984773][ T5305] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1045.994002][T12678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1046.054780][T12678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1046.103020][T12678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1046.224589][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 1046.248888][ T5305] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=de.43 [ 1046.284533][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.343791][ T5305] usb 3-1: Product: syz [ 1046.385753][ T5305] usb 3-1: Manufacturer: syz [ 1046.390401][ T5305] usb 3-1: SerialNumber: syz [ 1046.416852][ T29] audit: type=1326 audit(1722705546.340:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12897 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfcd779f9 code=0x7ffc0000 [ 1047.145596][ T29] audit: type=1326 audit(1722705546.340:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12897 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2dfcd779f9 code=0x7ffc0000 [ 1048.527280][ T5305] usb 3-1: config 0 descriptor?? [ 1048.554083][T12903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.584504][ T29] audit: type=1326 audit(1722705548.510:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12897 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfcd779f9 code=0x7ffc0000 [ 1048.620869][ T5305] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1048.651961][ T5305] usb 3-1: selecting invalid altsetting 1 [ 1048.755759][ T5305] gspca_stk014: reg_r err -71 [ 1048.760585][ T5305] stk014 3-1:0.0: probe with driver stk014 failed with error -71 [ 1048.772000][ T29] audit: type=1326 audit(1722705548.510:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12897 comm="syz.4.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dfcd779f9 code=0x7ffc0000 [ 1048.819536][ T5305] usb 3-1: USB disconnect, device number 44 [ 1048.957724][T12678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.087442][T12678] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.174701][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2095'. [ 1049.209454][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.216701][T10950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.262528][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.269816][T10950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.342643][T12919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 1049.366006][T12919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2095'. [ 1049.400105][T12919] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1049.573564][T10553] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1049.588391][T12678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1049.655737][T12678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.784851][T10553] usb 5-1: Using ep0 maxpacket: 16 [ 1049.856247][T10553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.888332][T10553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.957215][T10553] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1049.983329][T10553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.036418][T10553] usb 5-1: config 0 descriptor?? [ 1050.324052][T12678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.554254][T12678] veth0_vlan: entered promiscuous mode [ 1050.612512][T10553] elan 0003:04F3:0755.000B: failed to start in urb: -90 [ 1050.634577][T12678] veth1_vlan: entered promiscuous mode [ 1050.667063][T10553] elan 0003:04F3:0755.000B: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1050.771419][T12678] veth0_macvtap: entered promiscuous mode [ 1050.827367][T12678] veth1_macvtap: entered promiscuous mode [ 1050.920941][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1050.982445][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.000684][T10553] usb 5-1: USB disconnect, device number 34 [ 1051.034427][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.092337][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.163398][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.178900][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.207748][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.223738][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.256282][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.279395][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.309271][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.329905][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.352298][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.479041][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.589996][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.647100][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.669393][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.818018][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.826367][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.015055][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.127056][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.560630][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.634670][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.674498][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.720981][T12678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.777991][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.834508][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.872690][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.905162][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.939455][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1055.970311][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.008995][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.050117][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.081109][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.116115][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.167041][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.208050][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.248608][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.282080][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.308995][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.329877][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.361337][T12678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.412551][T12678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.454941][T12678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.551659][T12678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.591723][T12678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.627983][T12678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.658127][T12678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.117697][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.237044][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.679186][ T3769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.709351][ T3769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.886978][T12966] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2108'. [ 1058.484070][T12979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.546828][T12979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.606620][T12979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.647136][T12979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.354040][T13002] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1063.364463][T13002] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1063.660153][T13006] bond_slave_0: entered promiscuous mode [ 1063.666487][T13006] bond_slave_1: entered promiscuous mode [ 1063.778396][T13013] bond_slave_0: left promiscuous mode [ 1063.827141][T13013] bond_slave_1: left promiscuous mode [ 1065.933850][T13013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.211004][T13013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.341463][T13038] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2126'. [ 1066.928929][T13013] bond0 (unregistering): Released all slaves [ 1067.232781][ T4607] Bluetooth: hci4: command 0x0406 tx timeout [ 1067.569951][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.626225][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.163142][T13048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.208608][T13048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.175065][ T940] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1072.385058][ T5230] Bluetooth: hci5: command 0x0406 tx timeout [ 1072.614581][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 1072.708282][T13081] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2138'. [ 1073.296131][ T940] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1073.314614][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.322659][ T940] usb 3-1: Product: syz [ 1073.364540][ T940] usb 3-1: Manufacturer: syz [ 1073.369281][ T940] usb 3-1: SerialNumber: syz [ 1073.423722][ T940] usb 3-1: config 0 descriptor?? [ 1073.944028][ T940] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.816099][T13097] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 1074.984790][T13097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2142'. [ 1075.168132][ T940] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1075.297232][T13105] hugetlbfs: Unknown parameter 'hugetlbfs' [ 1075.608630][T13108] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20001 [ 1075.995506][T13112] Bluetooth: hci3: invalid length 0, exp 2 for type 25 [ 1076.422334][T13122] FAULT_INJECTION: forcing a failure. [ 1076.422334][T13122] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.435215][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.1.2154 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1076.446003][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1076.456086][T13122] Call Trace: [ 1076.459374][T13122] [ 1076.462322][T13122] dump_stack_lvl+0x241/0x360 [ 1076.467037][T13122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1076.472257][T13122] ? __pfx__printk+0x10/0x10 [ 1076.476879][T13122] ? ref_tracker_alloc+0x332/0x490 [ 1076.478060][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.481994][T13122] should_fail_ex+0x3b0/0x4e0 [ 1076.482029][T13122] ? skb_clone+0x20c/0x390 [ 1076.499421][T13122] should_failslab+0xac/0x100 [ 1076.504113][T13122] ? skb_clone+0x20c/0x390 [ 1076.508548][T13122] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1076.513941][T13122] skb_clone+0x20c/0x390 [ 1076.518191][T13122] __netlink_deliver_tap+0x3cc/0x7c0 [ 1076.523479][T13122] ? netlink_deliver_tap+0x2e/0x1b0 [ 1076.528671][T13122] netlink_deliver_tap+0x19d/0x1b0 [ 1076.533778][T13122] netlink_unicast+0x7be/0x990 [ 1076.538543][T13122] ? __pfx_netlink_unicast+0x10/0x10 [ 1076.543817][T13122] ? __virt_addr_valid+0x183/0x530 [ 1076.548925][T13122] ? __check_object_size+0x49c/0x900 [ 1076.554203][T13122] ? bpf_lsm_netlink_send+0x9/0x10 [ 1076.559309][T13122] netlink_sendmsg+0x8e4/0xcb0 [ 1076.564077][T13122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.569357][T13122] ? __import_iovec+0x536/0x820 [ 1076.574212][T13122] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1076.579512][T13122] ? security_socket_sendmsg+0x87/0xb0 [ 1076.584973][T13122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.590253][T13122] __sock_sendmsg+0x221/0x270 [ 1076.594928][T13122] ____sys_sendmsg+0x525/0x7d0 [ 1076.599683][T13122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1076.604961][T13122] __sys_sendmsg+0x2b0/0x3a0 [ 1076.609545][T13122] ? __pfx___sys_sendmsg+0x10/0x10 [ 1076.614651][T13122] ? vfs_write+0x7c4/0xc90 [ 1076.619116][T13122] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1076.625438][T13122] ? do_syscall_64+0x100/0x230 [ 1076.630196][T13122] ? do_syscall_64+0xb6/0x230 [ 1076.634868][T13122] do_syscall_64+0xf3/0x230 [ 1076.639368][T13122] ? clear_bhb_loop+0x35/0x90 [ 1076.644031][T13122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.649917][T13122] RIP: 0033:0x7f0df7d779f9 [ 1076.654319][T13122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.673915][T13122] RSP: 002b:00007f0df8a95048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.682319][T13122] RAX: ffffffffffffffda RBX: 00007f0df7f05f80 RCX: 00007f0df7d779f9 [ 1076.690280][T13122] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1076.698246][T13122] RBP: 00007f0df8a950a0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.706203][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.714156][T13122] R13: 000000000000000b R14: 00007f0df7f05f80 R15: 00007ffefe19e3b8 [ 1076.722140][T13122] [ 1076.869758][T13126] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2151'. [ 1076.911541][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.186074][ T3769] wlan1: Trigger new scan to find an IBSS to join [ 1077.431739][T10116] usb 3-1: USB disconnect, device number 45 [ 1077.516544][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.576939][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.840332][T13141] netlink: 1212 bytes leftover after parsing attributes in process `syz.1.2155'. [ 1078.591210][T13154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.591512][T13154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.286215][T13163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2166'. [ 1080.089301][T13166] FAULT_INJECTION: forcing a failure. [ 1080.089301][T13166] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.089324][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.1.2167 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1080.089338][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1080.089345][T13166] Call Trace: [ 1080.089350][T13166] [ 1080.089356][T13166] dump_stack_lvl+0x241/0x360 [ 1080.089379][T13166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.089404][T13166] ? __pfx__printk+0x10/0x10 [ 1080.089423][T13166] ? ref_tracker_alloc+0x332/0x490 [ 1080.089438][T13166] should_fail_ex+0x3b0/0x4e0 [ 1080.089451][T13166] ? skb_clone+0x20c/0x390 [ 1080.089464][T13166] should_failslab+0xac/0x100 [ 1080.089479][T13166] ? skb_clone+0x20c/0x390 [ 1080.089491][T13166] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1080.089508][T13166] skb_clone+0x20c/0x390 [ 1080.089523][T13166] __netlink_deliver_tap+0x3cc/0x7c0 [ 1080.089546][T13166] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.089560][T13166] netlink_deliver_tap+0x19d/0x1b0 [ 1080.089576][T13166] netlink_unicast+0x7be/0x990 [ 1080.089595][T13166] ? __pfx_netlink_unicast+0x10/0x10 [ 1080.089609][T13166] ? __virt_addr_valid+0x183/0x530 [ 1080.089622][T13166] ? __check_object_size+0x49c/0x900 [ 1080.089635][T13166] ? bpf_lsm_netlink_send+0x9/0x10 [ 1080.089651][T13166] netlink_sendmsg+0x8e4/0xcb0 [ 1080.089673][T13166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.089690][T13166] ? __import_iovec+0x536/0x820 [ 1080.089707][T13166] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1080.089720][T13166] ? security_socket_sendmsg+0x87/0xb0 [ 1080.089734][T13166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.089749][T13166] __sock_sendmsg+0x221/0x270 [ 1080.089766][T13166] ____sys_sendmsg+0x525/0x7d0 [ 1080.089783][T13166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.089805][T13166] __sys_sendmsg+0x2b0/0x3a0 [ 1080.089819][T13166] ? __pfx___sys_sendmsg+0x10/0x10 [ 1080.089830][T13166] ? vfs_write+0x7c4/0xc90 [ 1080.089864][T13166] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1080.089881][T13166] ? do_syscall_64+0x100/0x230 [ 1080.089897][T13166] ? do_syscall_64+0xb6/0x230 [ 1080.089914][T13166] do_syscall_64+0xf3/0x230 [ 1080.089929][T13166] ? clear_bhb_loop+0x35/0x90 [ 1080.089943][T13166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.089959][T13166] RIP: 0033:0x7f0df7d779f9 [ 1080.089970][T13166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.089980][T13166] RSP: 002b:00007f0df8a95048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.089993][T13166] RAX: ffffffffffffffda RBX: 00007f0df7f05f80 RCX: 00007f0df7d779f9 [ 1080.090002][T13166] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1080.090010][T13166] RBP: 00007f0df8a950a0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.090017][T13166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.090025][T13166] R13: 000000000000000b R14: 00007f0df7f05f80 R15: 00007ffefe19e3b8 [ 1080.090042][T13166] [ 1080.228276][ T3769] wlan1: Trigger new scan to find an IBSS to join [ 1080.416580][T13172] FAULT_INJECTION: forcing a failure. [ 1080.416580][T13172] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.416619][T13172] CPU: 0 UID: 0 PID: 13172 Comm: syz.4.2168 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1080.416642][T13172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1080.416655][T13172] Call Trace: [ 1080.416664][T13172] [ 1080.416673][T13172] dump_stack_lvl+0x241/0x360 [ 1080.416707][T13172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.416733][T13172] ? __pfx__printk+0x10/0x10 [ 1080.416765][T13172] ? ref_tracker_alloc+0x332/0x490 [ 1080.416790][T13172] should_fail_ex+0x3b0/0x4e0 [ 1080.416814][T13172] ? skb_clone+0x20c/0x390 [ 1080.416835][T13172] should_failslab+0xac/0x100 [ 1080.416859][T13172] ? skb_clone+0x20c/0x390 [ 1080.416879][T13172] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1080.416910][T13172] skb_clone+0x20c/0x390 [ 1080.416936][T13172] __netlink_deliver_tap+0x3cc/0x7c0 [ 1080.416974][T13172] ? netlink_deliver_tap+0x2e/0x1b0 [ 1080.416998][T13172] netlink_deliver_tap+0x19d/0x1b0 [ 1080.417025][T13172] netlink_unicast+0x7be/0x990 [ 1080.417059][T13172] ? __pfx_netlink_unicast+0x10/0x10 [ 1080.417080][T13172] ? __virt_addr_valid+0x183/0x530 [ 1080.417104][T13172] ? __check_object_size+0x49c/0x900 [ 1080.417127][T13172] ? bpf_lsm_netlink_send+0x9/0x10 [ 1080.417154][T13172] netlink_sendmsg+0x8e4/0xcb0 [ 1080.417193][T13172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.417220][T13172] ? __import_iovec+0x536/0x820 [ 1080.417247][T13172] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1080.417268][T13172] ? security_socket_sendmsg+0x87/0xb0 [ 1080.417293][T13172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1080.417316][T13172] __sock_sendmsg+0x221/0x270 [ 1080.417344][T13172] ____sys_sendmsg+0x525/0x7d0 [ 1080.417376][T13172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1080.417415][T13172] __sys_sendmsg+0x2b0/0x3a0 [ 1080.417440][T13172] ? __pfx___sys_sendmsg+0x10/0x10 [ 1080.417460][T13172] ? vfs_write+0x7c4/0xc90 [ 1080.417525][T13172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1080.417552][T13172] ? do_syscall_64+0x100/0x230 [ 1080.417580][T13172] ? do_syscall_64+0xb6/0x230 [ 1080.417612][T13172] do_syscall_64+0xf3/0x230 [ 1080.417636][T13172] ? clear_bhb_loop+0x35/0x90 [ 1080.417659][T13172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.417685][T13172] RIP: 0033:0x7f2dfcd779f9 [ 1080.417703][T13172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1080.417720][T13172] RSP: 002b:00007f2dfdb88048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1080.417743][T13172] RAX: ffffffffffffffda RBX: 00007f2dfcf05f80 RCX: 00007f2dfcd779f9 [ 1080.417759][T13172] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1080.417772][T13172] RBP: 00007f2dfdb880a0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.417786][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.417799][T13172] R13: 000000000000000b R14: 00007f2dfcf05f80 R15: 00007ffc49b91fe8 [ 1080.417831][T13172] [ 1080.564578][ T1171] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1080.744466][ T1171] usb 3-1: Using ep0 maxpacket: 8 [ 1080.749264][ T1171] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1080.749297][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.749318][ T1171] usb 3-1: Product: syz [ 1080.749335][ T1171] usb 3-1: Manufacturer: syz [ 1080.749351][ T1171] usb 3-1: SerialNumber: syz [ 1081.425560][ T1171] usb 3-1: config 0 descriptor?? [ 1081.665343][ T1171] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1081.970638][T13181] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1082.136634][ T3769] wlan1: Creating new IBSS network, BSSID a2:e9:bb:a2:c5:b6 [ 1082.716964][ T1171] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1083.626926][T13199] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2177'. [ 1084.267115][ T1171] usb 3-1: USB disconnect, device number 46 [ 1084.348379][T13203] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2180'. [ 1088.024977][ T30] INFO: task syz.0.1886:12070 blocked for more than 146 seconds. [ 1088.025007][ T30] Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1088.025021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1088.025032][ T30] task:syz.0.1886 state:D stack:26224 pid:12070 tgid:12047 ppid:10470 flags:0x00004004 [ 1088.025075][ T30] Call Trace: [ 1088.025085][ T30] [ 1088.025101][ T30] __schedule+0x17ae/0x4a10 [ 1088.025155][ T30] ? __pfx___schedule+0x10/0x10 [ 1088.025183][ T30] ? __pfx_lock_release+0x10/0x10 [ 1088.025211][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1088.025244][ T30] ? schedule+0x90/0x320 [ 1088.025266][ T30] schedule+0x14b/0x320 [ 1088.025292][ T30] schedule_preempt_disabled+0x13/0x30 [ 1088.025315][ T30] __ww_mutex_lock+0xec2/0x2790 [ 1088.025343][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 1088.025376][ T30] ? modeset_lock+0x2bf/0x650 [ 1088.025403][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 1088.025435][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1088.025458][ T30] ? __asan_memset+0x23/0x50 [ 1088.025479][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 1088.025509][ T30] ww_mutex_lock+0x40/0x1f0 [ 1088.025532][ T30] ? modeset_lock+0x2b0/0x650 [ 1088.025561][ T30] modeset_lock+0x2bf/0x650 [ 1088.025598][ T30] drm_modeset_lock_all_ctx+0x12e/0x350 [ 1088.025630][ T30] drm_mode_obj_get_properties_ioctl+0x22d/0x610 [ 1088.025669][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 1088.025712][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 1088.025737][ T30] ? drm_ioctl_kernel+0x2fe/0x440 [ 1088.025762][ T30] ? drm_ioctl_kernel+0x327/0x440 [ 1088.025795][ T30] drm_ioctl_kernel+0x33a/0x440 [ 1088.025823][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 1088.025849][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1088.025876][ T30] ? __might_fault+0xc6/0x120 [ 1088.025907][ T30] drm_ioctl+0x611/0xad0 [ 1088.025934][ T30] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 1088.025967][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1088.026012][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1088.026037][ T30] ? security_file_ioctl+0x87/0xb0 [ 1088.026059][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 1088.026087][ T30] __se_sys_ioctl+0xfc/0x170 [ 1088.026118][ T30] do_syscall_64+0xf3/0x230 [ 1088.026146][ T30] ? clear_bhb_loop+0x35/0x90 [ 1088.026169][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.026197][ T30] RIP: 0033:0x7f81ad9779f9 [ 1088.026216][ T30] RSP: 002b:00007f81ae716048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1088.026239][ T30] RAX: ffffffffffffffda RBX: 00007f81adb06058 RCX: 00007f81ad9779f9 [ 1088.026255][ T30] RDX: 00000000200002c0 RSI: 00000000c02064b9 RDI: 000000000000000a [ 1088.026270][ T30] RBP: 00007f81ad9e58ee R08: 0000000000000000 R09: 0000000000000000 [ 1088.026285][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1088.026299][ T30] R13: 000000000000006e R14: 00007f81adb06058 R15: 00007ffdaa8c4858 [ 1088.026332][ T30] [ 1088.026353][ T30] [ 1088.026353][ T30] Showing all locks held in the system: [ 1088.026366][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 1088.026381][ T30] 1 lock held by khungtaskd/30: [ 1088.026394][ T30] #0: ffffffff8e7377e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1088.026459][ T30] 1 lock held by kswapd0/89: [ 1088.026477][ T30] 3 locks held by kworker/u8:5/965: [ 1088.026505][ T30] 4 locks held by kworker/u8:9/3769: [ 1088.026520][ T30] 2 locks held by getty/4968: [ 1088.026532][ T30] #0: ffff88802acb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1088.026603][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1088.026659][ T30] 8 locks held by kworker/0:3/5267: [ 1088.026675][ T30] 3 locks held by kworker/u8:0/8803: [ 1088.026687][ T30] 2 locks held by kworker/0:5/10336: [ 1088.026701][ T30] 4 locks held by udevd/10474: [ 1088.026714][ T30] #0: ffff88809dd51540 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 1088.026771][ T30] #1: ffff88802017c088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 1088.026833][ T30] #2: ffff88803c6ebd28 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1088.026893][ T30] #3: ffff88802e60d190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 1088.026952][ T30] 3 locks held by syz.4.1873/12004: [ 1088.026965][ T30] 2 locks held by syz.0.1886/12070: [ 1088.026977][ T30] #0: ffffc9000953fb30 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_mode_obj_get_properties_ioctl+0x1d3/0x610 [ 1088.027035][ T30] #1: ffff88801ff24518 (crtc_ww_class_mutex){+.+.}-{3:3}, at: modeset_lock+0x2bf/0x650 [ 1088.027094][ T30] 4 locks held by syz-executor/12073: [ 1088.027109][ T30] 6 locks held by syz.0.2162/13149: [ 1088.027122][ T30] 1 lock held by syz.4.2174/13186: [ 1088.027135][ T30] 1 lock held by syz.1.2179/13201: [ 1088.027147][ T30] #0: ffff88807bf18198 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 1088.027203][ T30] 1 lock held by syz.1.2179/13205: [ 1088.027217][ T30] [ 1088.027223][ T30] ============================================= [ 1088.027223][ T30] [ 1088.027239][ T30] NMI backtrace for cpu 1 [ 1088.027250][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1088.027272][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1088.027284][ T30] Call Trace: [ 1088.027293][ T30] [ 1088.027302][ T30] dump_stack_lvl+0x241/0x360 [ 1088.027330][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.027356][ T30] ? __pfx__printk+0x10/0x10 [ 1088.027378][ T30] ? vprintk_emit+0x631/0x770 [ 1088.027401][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1088.027427][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1088.027455][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1088.027474][ T30] ? _printk+0xd5/0x120 [ 1088.027496][ T30] ? __pfx__printk+0x10/0x10 [ 1088.027520][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1088.027542][ T30] ? __pfx__printk+0x10/0x10 [ 1088.027580][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.027604][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1088.027629][ T30] watchdog+0xfee/0x1030 [ 1088.027655][ T30] ? watchdog+0x1ea/0x1030 [ 1088.027686][ T30] ? __pfx_watchdog+0x10/0x10 [ 1088.027710][ T30] kthread+0x2f0/0x390 [ 1088.027736][ T30] ? __pfx_watchdog+0x10/0x10 [ 1088.027758][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.027784][ T30] ret_from_fork+0x4b/0x80 [ 1088.027807][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.027833][ T30] ret_from_fork_asm+0x1a/0x30 [ 1088.027871][ T30] [ 1088.027880][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1088.027911][ C0] NMI backtrace for cpu 0 [ 1088.027923][ C0] CPU: 0 UID: 0 PID: 3769 Comm: kworker/u8:9 Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1088.027941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1088.027951][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1088.027970][ C0] RIP: 0010:deref_stack_reg+0xb1/0x260 [ 1088.027992][ C0] Code: ee 03 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 77 01 00 00 8b 2b 31 ff 89 ee e8 c5 34 52 00 85 ed 48 8b 2c 24 <48> 8b 4c 24 20 74 22 48 39 e9 77 1d 49 39 ef 76 18 48 8d 45 08 48 [ 1088.028006][ C0] RSP: 0018:ffffc9000bb76808 EFLAGS: 00000202 [ 1088.028019][ C0] RAX: 0000000000000000 RBX: ffffc9000bb76940 RCX: ffff88802d64bc00 [ 1088.028031][ C0] RDX: ffff88802d64bc00 RSI: 0000000000000001 RDI: 0000000000000000 [ 1088.028042][ C0] RBP: ffffc9000bb77830 R08: ffffffff8141454b R09: ffffffff814130bf [ 1088.028054][ C0] R10: 0000000000000003 R11: ffff88802d64bc00 R12: 1ffff9200176ed29 [ 1088.028066][ C0] R13: 1ffff9200176ed2a R14: 1ffff9200176ed28 R15: ffffc9000bb78000 [ 1088.028078][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 1088.028092][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.028104][ C0] CR2: 00007fdc1be356c0 CR3: 0000000162888000 CR4: 00000000003506f0 [ 1088.028118][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1088.028128][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1088.028138][ C0] Call Trace: [ 1088.028145][ C0] [ 1088.028151][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1088.028168][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1088.028188][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1088.028204][ C0] ? nmi_handle+0x2a/0x5a0 [ 1088.028228][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1088.028245][ C0] ? nmi_handle+0x14f/0x5a0 [ 1088.028259][ C0] ? nmi_handle+0x2a/0x5a0 [ 1088.028276][ C0] ? deref_stack_reg+0xb1/0x260 [ 1088.028295][ C0] ? default_do_nmi+0x63/0x160 [ 1088.028312][ C0] ? exc_nmi+0x123/0x1f0 [ 1088.028328][ C0] ? end_repeat_nmi+0xf/0x53 [ 1088.028345][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 1088.028364][ C0] ? deref_stack_reg+0xab/0x260 [ 1088.028385][ C0] ? deref_stack_reg+0xb1/0x260 [ 1088.028404][ C0] ? deref_stack_reg+0xb1/0x260 [ 1088.028425][ C0] ? deref_stack_reg+0xb1/0x260 [ 1088.028444][ C0] [ 1088.028450][ C0] [ 1088.028460][ C0] unwind_next_frame+0x1ab8/0x2a00 [ 1088.028485][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1088.028506][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1088.028523][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1088.028543][ C0] arch_stack_walk+0x151/0x1b0 [ 1088.028561][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 1088.028583][ C0] stack_trace_save+0x118/0x1d0 [ 1088.028602][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1088.028620][ C0] ? __lock_acquire+0x137a/0x2040 [ 1088.028643][ C0] kasan_save_stack+0x3f/0x60 [ 1088.028659][ C0] ? kasan_save_stack+0x3f/0x60 [ 1088.028673][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 1088.028692][ C0] ? kvfree_call_rcu+0xfc/0x790 [ 1088.028711][ C0] ? cfg80211_update_known_bss+0xb39/0x1500 [ 1088.028731][ C0] ? __cfg80211_bss_update+0x153/0x2170 [ 1088.028749][ C0] ? cfg80211_inform_single_bss_data+0xd51/0x2030 [ 1088.028769][ C0] ? cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1088.028787][ C0] ? cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1088.028806][ C0] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 1088.028851][ C0] ? __phys_addr+0xba/0x170 [ 1088.028867][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 1088.028887][ C0] kvfree_call_rcu+0xfc/0x790 [ 1088.028906][ C0] ? __lock_acquire+0x137a/0x2040 [ 1088.028926][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 1088.028952][ C0] cfg80211_update_known_bss+0xb39/0x1500 [ 1088.028977][ C0] ? cmp_bss+0x8c7/0xea0 [ 1088.028996][ C0] __cfg80211_bss_update+0x153/0x2170 [ 1088.029017][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1088.029034][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1088.029054][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1088.029070][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1088.029091][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1088.029111][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 1088.029130][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 1088.029154][ C0] cfg80211_inform_single_bss_data+0xd51/0x2030 [ 1088.029174][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 1088.029198][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 1088.029218][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1088.029249][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1088.029267][ C0] ? __kernel_text_address+0xd/0x40 [ 1088.029281][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1088.029300][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 1088.029323][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 1088.029357][ C0] ? __pfx_validate_chain+0x10/0x10 [ 1088.029388][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1088.029413][ C0] ? mark_lock+0x9a/0x350 [ 1088.029433][ C0] ? __lock_acquire+0x137a/0x2040 [ 1088.029468][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1088.029486][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1088.029507][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 1088.029533][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 1088.029551][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 1088.029573][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1088.029598][ C0] ? ieee80211_get_channel_khz+0x173/0x920 [ 1088.029620][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 1088.029649][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1088.029672][ C0] ? mark_lock+0x9a/0x350 [ 1088.029692][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1088.029713][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1088.029733][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1088.029758][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 1088.029782][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 1088.029801][ C0] ? process_scheduled_works+0x945/0x1830 [ 1088.029823][ C0] process_scheduled_works+0xa2c/0x1830 [ 1088.029857][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1088.029880][ C0] ? assign_work+0x364/0x3d0 [ 1088.029901][ C0] worker_thread+0x86d/0xd40 [ 1088.029924][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1088.029944][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1088.029965][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1088.029984][ C0] kthread+0x2f0/0x390 [ 1088.030003][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1088.030020][ C0] ? __pfx_kthread+0x10/0x10 [ 1088.030040][ C0] ret_from_fork+0x4b/0x80 [ 1088.030058][ C0] ? __pfx_kthread+0x10/0x10 [ 1088.030077][ C0] ret_from_fork_asm+0x1a/0x30 [ 1088.030104][ C0] [ 1088.030907][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.030919][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc1-syzkaller-00272-g17712b7ea075 #0 [ 1088.030941][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1088.030953][ T30] Call Trace: [ 1088.030961][ T30] [ 1088.030970][ T30] dump_stack_lvl+0x241/0x360 [ 1088.031000][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.031025][ T30] ? __pfx__printk+0x10/0x10 [ 1088.031046][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1088.031077][ T30] ? vscnprintf+0x5d/0x90 [ 1088.031099][ T30] panic+0x349/0x860 [ 1088.031124][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1088.031146][ T30] ? __pfx_panic+0x10/0x10 [ 1088.031174][ T30] ? irq_work_queue+0xd1/0x150 [ 1088.031197][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.031221][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.031243][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1088.031265][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 1088.031289][ T30] watchdog+0x102d/0x1030 [ 1088.031314][ T30] ? watchdog+0x1ea/0x1030 [ 1088.031344][ T30] ? __pfx_watchdog+0x10/0x10 [ 1088.031367][ T30] kthread+0x2f0/0x390 [ 1088.031392][ T30] ? __pfx_watchdog+0x10/0x10 [ 1088.031414][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.031440][ T30] ret_from_fork+0x4b/0x80 [ 1088.031463][ T30] ? __pfx_kthread+0x10/0x10 [ 1088.031488][ T30] ret_from_fork_asm+0x1a/0x30 [ 1088.031526][ T30] [ 1088.031773][ T30] Kernel Offset: disabled