last executing test programs: 9.584374308s ago: executing program 4 (id=97): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file4\x00', 0x100, 0x400) openat$cgroup_ro(r2, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect$uac3(0x1, 0xbc, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0xff, 0x30, 0xf9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x21, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3b, 0xb}, [@mixer_unit={0x7, 0x24, 0x5, 0x5, 0x1, "1952"}, @power_domain={0xf, 0x24, 0x10, 0x6, 0x2, 0x28a, 0xb, "8318b4e8f579"}, @extension_unit={0x15, 0x24, 0xa, 0x3, 0x5, [0x2, 0x1, 0x2, 0x1]}, @cluster_info_segment={0x6, 0x20, 0xff, 0xa0, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x63, 0x4, 0x10, 0x9, 'iO\b'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0x6, {0xa, 0x25, 0x25, 0x7fffffff, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x70, 0x0, {0xa, 0x25, 0x25, 0x28a, 0x9, 0xa883}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x3, 0x84, 0x1, 0x48, 0x3}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x2a, 0x0, 0x8, 0xf1}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1411}}, {0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "551d1a4e6f1784d324c01c8caaeba37c4f51c175d9b02b26b661c3e3e37fed5a00382f54c24ba3217a92ad52d54f3bcaf13119f3367f9320fad00ada8095b0410a2df3f5d037cf08d18e74bad8f353c8933eb1686055e633a5e08c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x876}}, {0xcb, &(0x7f00000003c0)=@string={0xcb, 0x3, "43ead6fe91cb0c365fab8a7b4785fcddc02d204ef344bebf80be8e3f14007cbe955bf9940a0d63dc173f7570dbed6d022b513214cdb861fe9a103bbc85476c792317c916ca35e0500569d47271b73cc08bc3ba6776684e9468674cfd80f754556f4ead3a6a474196da945ce3d28d1f32918ca65ff7ea025a96e56289e718a86928cc9c4acb96389190dce1a250a4eefee0c208bfdb240e8bb4133fb2f221e9013aa01147a880ec76dccb01e473b061aa4d396c614ba18fb224ab28e49491f0f4bc71e1456458096f0c"}}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 9.139755979s ago: executing program 3 (id=104): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = gettid() capget(&(0x7f0000000000)={0x20071026, r1}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) r3 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x8, "e589eb00e98c1a33"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}}) 9.135498759s ago: executing program 1 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="888e00"/14, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.789433673s ago: executing program 1 (id=108): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "0011223366778899eeffbbccdde9ff00112233445566778899aabbccddeeff00", 0x2e}, 0x48, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000300)=""/222, &(0x7f00000000c0)=0xde) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800b9ea", @ANYRES16=r4, @ANYRES8=r3, @ANYRESOCT=r4, @ANYRES32=r0], 0x28}, 0x1, 0x0, 0x0, 0x6000c800}, 0x4000000) 8.599444347s ago: executing program 1 (id=111): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x408800, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000700), &(0x7f0000000740)=0x8) socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00a5020000000000000004003e00000000002204caa5d693a7158b5aefd838a70c12d319fa11e8aa2b8f26c6c07e74dd"], 0x40}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_on}]}) 5.041090199s ago: executing program 4 (id=114): bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd, 0x7}, {0x6, 0x24, 0x1a, 0xea3, 0x2e}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd, 0x59}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0xfd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xfffa, 0x10, 0x10, 0x10, 0x3ff, 0x10, 0x10, 0x10, 0x11, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 4.986477107s ago: executing program 3 (id=115): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x39e7, &(0x7f0000000080)={0x0, 0x7c58, 0x1000, 0x0, 0x35b}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 4.784644628s ago: executing program 1 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) preadv2(r1, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/36, 0x24}], 0x1, 0x1, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000110900010073797a31000000002c0004802800018007000100637400001c0002800800024000000011080001400000000a05000300000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7], 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x1d0, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "51369a894c26685345d962f54402aebc4b84ec4253004ee1acf9bf7f05942b5d77a2004d6d55f847045e3c95440fcbfba5805abee51f8088e5d98bb679b5259427b2e1c6f9e35ef41f63d666ffafda6178e7659dfa0a7c163fa799f93f72b3ff4ca988efe18460a89edb20e4673aeabdb05c8da9783e0be60f4b7f588acadec0d040c963ec67afc1b99698917163d4e88344d1dccd55222229fe2e11b2a4db0dfd7cb3"}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000030000040800154000000003280002800c00028005000100060000000c00028005000100010000000c0002800500010001000000cf1bbb24026cfa995865cb871177e94db88e40a1f29aa078c7088b8a78131b97f4ba6604105ef516c895241211c7d06e4501dffe6716bbf32b0ea86e9396df7d26199819382c8fa64bdc87fb"], 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x4040) 4.596086648s ago: executing program 0 (id=120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x6761be433c7663a1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x4000084) 4.55260656s ago: executing program 3 (id=121): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x3, 0x10}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x33) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x1, 0x158}, &(0x7f0000000440), &(0x7f0000000280), &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x480240, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 4.474547899s ago: executing program 0 (id=123): read(0xffffffffffffffff, &(0x7f0000000340)=""/183, 0xb7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), &(0x7f0000000000)) io_uring_enter(r1, 0xe7f, 0xe400, 0x3, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x3, 0x10}, 0x50) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x1, 0x158}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x480240, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 4.338824724s ago: executing program 3 (id=124): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x4e, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x6, 0x0, "22258d146721"}}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}]) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r4, 0x0, &(0x7f0000002500)="c5", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) 3.982002461s ago: executing program 3 (id=125): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = gettid() capget(&(0x7f0000000000)={0x20071026, r1}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) r3 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x8, "e589eb00e98c1a33"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x80}}) 3.665012876s ago: executing program 1 (id=126): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file4\x00', 0x100, 0x400) openat$cgroup_ro(r2, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_connect$uac3(0x1, 0xbc, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0xff, 0x30, 0xf9, {0x8, 0xb, 0x1, 0x1, 0x1, 0x21, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3b, 0xb}, [@mixer_unit={0x7, 0x24, 0x5, 0x5, 0x1, "1952"}, @power_domain={0xf, 0x24, 0x10, 0x6, 0x2, 0x28a, 0xb, "8318b4e8f579"}, @extension_unit={0x15, 0x24, 0xa, 0x3, 0x5, [0x2, 0x1, 0x2, 0x1]}, @cluster_info_segment={0x6, 0x20, 0xff, 0xa0, 0xe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x63, 0x4, 0x10, 0x9, 'iO\b'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x5, 0x6, {0xa, 0x25, 0x25, 0x7fffffff, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x70, 0x0, {0xa, 0x25, 0x25, 0x28a, 0x9, 0xa883}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x3, 0x84, 0x1, 0x48, 0x3}, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x2a, 0x0, 0x8, 0xf1}]}, 0x4, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1411}}, {0x5d, &(0x7f0000000300)=@string={0x5d, 0x3, "551d1a4e6f1784d324c01c8caaeba37c4f51c175d9b02b26b661c3e3e37fed5a00382f54c24ba3217a92ad52d54f3bcaf13119f3367f9320fad00ada8095b0410a2df3f5d037cf08d18e74bad8f353c8933eb1686055e633a5e08c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x876}}, {0xcb, &(0x7f00000003c0)=@string={0xcb, 0x3, "43ead6fe91cb0c365fab8a7b4785fcddc02d204ef344bebf80be8e3f14007cbe955bf9940a0d63dc173f7570dbed6d022b513214cdb861fe9a103bbc85476c792317c916ca35e0500569d47271b73cc08bc3ba6776684e9468674cfd80f754556f4ead3a6a474196da945ce3d28d1f32918ca65ff7ea025a96e56289e718a86928cc9c4acb96389190dce1a250a4eefee0c208bfdb240e8bb4133fb2f221e9013aa01147a880ec76dccb01e473b061aa4d396c614ba18fb224ab28e49491f0f4bc71e1456458096f0c"}}]}) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 3.553816243s ago: executing program 0 (id=127): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x4c8a1, 0xc000, 0x1, 0x11e, 0x0, r2}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpid() read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r4 = fsopen(0x0, 0x0) r5 = timerfd_create(0x8, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.595705972s ago: executing program 4 (id=128): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ftruncate(r0, 0x40) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) 1.460656456s ago: executing program 4 (id=129): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x0, 0x499, 0xfff9, 0x7}) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000040)) 1.406533058s ago: executing program 0 (id=130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="888e00"/14, 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.101386637s ago: executing program 2 (id=132): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x39e7, &(0x7f0000000080)={0x0, 0x7c58, 0x1000, 0x0, 0x35b}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 1.101230817s ago: executing program 4 (id=133): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x2}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0xaf0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) (fail_nth: 2) 1.060632748s ago: executing program 0 (id=134): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f0000000500), &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x3, 0x10}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000280), 0x33) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000080)=[0xcf, 0x5], 0x2) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b8, 0x1, 0x1, 0x158}, &(0x7f0000000440), &(0x7f0000000280), &(0x7f0000000140)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x480240, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18}, './file0\x00'}) 966.811277ms ago: executing program 2 (id=135): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x4e, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x6, 0x0, "22258d146721"}}) io_setup(0x6, &(0x7f0000000540)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x0, 0x300, 0x0, 0x5, 0x5, r1, 0x0}]) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r4, 0x0, &(0x7f0000002500)="c5", 0x1, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) 922.94319ms ago: executing program 3 (id=136): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r2]) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000300)={0x0, 0x200, 0x0, 0x0}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x2400c041) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x21b3, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) preadv2(r0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/126, 0x7e}], 0x1, 0xfffffffd, 0x558, 0x0) 661.33022ms ago: executing program 0 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) preadv2(r1, &(0x7f00000018c0)=[{&(0x7f0000000240)=""/36, 0x24}], 0x1, 0x1, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000110900010073797a31000000002c0004802800018007000100637400001c0002800800024000000011080001400000000a05000300000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x24000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7], 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)={0x128, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000030000040800154000000003280002800c00028005000100060000000c00028005000100010000000c0002800500010001000000cf1bbb24026cfa995865cb871177e94db88e40a1f29aa078c7088b8a78131b97f4ba6604105ef516c895241211c7d06e4501dffe6716bbf32b0ea86e9396df7d26199819382c8fa64bdc87fb"], 0x44}, 0x1, 0x0, 0x0, 0x8005}, 0x4040) 490.024545ms ago: executing program 2 (id=138): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/notes', 0x0, 0x15) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x8ac5, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x8000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 404.229998ms ago: executing program 2 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0x800, 0x1, 0xffffffffffffffff, 0xfffffff0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000001200)={0x60000010}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0x80002005}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000080)="630b008646dc3f0adf398151d900", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 345.908861ms ago: executing program 1 (id=140): bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x80, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfffd, 0x7}, {0x6, 0x24, 0x1a, 0xea3, 0x2e}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xd, 0x59}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0xfd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0xfffa, 0x10, 0x10, 0x10, 0x3ff, 0x10, 0x10, 0x10, 0x11, 0x10, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 345.380371ms ago: executing program 4 (id=141): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0xbc, 0xf1, &(0x7f0000000080)="d3238dd9e35307974080d73e1e2139923ca98144f6f277053f8e7e2c579bc29571627a82d9216f51e3bea782651dda5eeec7ff216b8bd07d62e8aa85e16ada42cd650cfbb549870017cd808f9f1778a55d7f79433d2299abf6224fcd03d3a48c2689d784bf56c697554addb935d4531ffe020f75057cf9593dec0d884e51e40f9a62e905eb96f05716333418609d82614961b42bc04c117272b49910d49d6394d9604569bd39c6a330db6e3a26d182a88496e233aeae62c3ea6705b9", &(0x7f00000001c0)=""/241, 0x2fe, 0x0, 0xc0, 0xa1, &(0x7f00000002c0)="1bfc3a9c297ff125880449c501684988b7280d14c1408f4a9fffcbb0634e8ef18e6c3761430e4372ae545d93b7ddf707620936737da92e314865b5660ecbfbc1ba50eeb4900a7179a14210d3e885946c9f5b0dafe6d1f6a488ba3e4200a17f9b0281e23f866e61b9ba60b61ca3cebdfd8e614e5727ee89507efc043f9eb46de9faeaa539f3bb7a939bcbb22bd8e0734a7cf160c63ded7d7df1e0a0e1f74b1336cbffe718211f0388d53b0f99be133331ed466f28a906f210f0881abd4aa0123d", &(0x7f0000000380)="4b988b98ff2fc74d3a57d9f16086d8a70b236e3a75e3bf2ac8c61cf0576cef9dff9769e38e8bb2fa228d900deaaacdf1d5fc045704dfd2e2aca6c6dcc9b0cfc392de152fd743f749bf002575f2993bcf7e1ba47f668e882c076541cf77bed2c08987ea38ec7cc61f6b4ce05134f6a3ad0a0726ed7b9be09eba23d4724e988e8d97c3ed7b5abdff317820058e19d14542c529e1df8334cffbb07f09fef6387f647f", 0x4, 0x0, 0xcba}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a010100000000000000000200000009000200737968310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) (async) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x30000, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000044) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000580), 0x10000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r3, 0x34, 0x1, 0x4, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x700, 0x9, 0x1ba9}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x4, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x40, 0x700, 0x9, 0x1ba9}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex=r5, r1, 0x13, 0x0, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex=r5, r1, 0x13, 0x0, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x82, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xcf}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x254, 0x5}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1b, 0x13, [{0x6c}, {0x36}, {0x30}, {0x4, 0x1}, {0x12}, {0x30, 0x1}, {0x18}, {0x48}, {0x18}, {0x6c, 0x1}, {0x1}, {0x6c}, {0x3}, {0x5}, {0x9, 0x1}, {0x1, 0x1}, {0x60}, {0x2}, {0x18, 0x1}, {0x4, 0x1}, {0x24, 0x1}, {0x6c}, {0xb, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) write$qrtrtun(r3, &(0x7f00000005c0)="199c9dff549ec892fdfde89e20c7cbbf4bdac2ce6ec4c13522ca2f2279b1d4663b5fe137cd579863205325ba1840d753ae0fcecbccf17307ad3716b65f26509fe06bab53f4850ac111670f4cbd1612dd7a6de3a2455bb4", 0x57) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x204102, 0x0) ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000540)={&(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0xa000, 0x3}) 212.516482ms ago: executing program 2 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 0s ago: executing program 2 (id=143): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2}, &(0x7f0000000340)=0x8) (fail_nth: 2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 74.246084][ T5570] cgroup: Unknown subsys name 'net' [ 74.487124][ T5570] cgroup: Unknown subsys name 'cpuset' [ 74.562047][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.210298][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.660666][ T5601] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.680644][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.713505][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.713673][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.737382][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.738819][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.739149][ T5603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.741673][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.743415][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.745812][ T5603] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.746329][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.746666][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.748080][ T5603] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.754108][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.755203][ T5603] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.764839][ T4900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.765942][ T4900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.766337][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.773555][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.776060][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.776297][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.820923][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.857438][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.858238][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.971740][ T4900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.802743][ T4900] Bluetooth: hci3: command tx timeout [ 80.882881][ T4900] Bluetooth: hci0: command tx timeout [ 80.961721][ T4900] Bluetooth: hci2: command tx timeout [ 81.041611][ T4900] Bluetooth: hci4: command tx timeout [ 81.041802][ T4900] Bluetooth: hci1: command tx timeout [ 81.181792][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.182933][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.183062][ T5584] bridge_slave_0: entered allmulticast mode [ 81.185603][ T5584] bridge_slave_0: entered promiscuous mode [ 81.245369][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.245436][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.245723][ T5584] bridge_slave_1: entered allmulticast mode [ 81.248549][ T5584] bridge_slave_1: entered promiscuous mode [ 81.269554][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.269669][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.269837][ T5585] bridge_slave_0: entered allmulticast mode [ 81.276519][ T5585] bridge_slave_0: entered promiscuous mode [ 81.280234][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.280343][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.280819][ T5586] bridge_slave_0: entered allmulticast mode [ 81.284481][ T5586] bridge_slave_0: entered promiscuous mode [ 81.340599][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.340689][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.340805][ T5585] bridge_slave_1: entered allmulticast mode [ 81.343255][ T5585] bridge_slave_1: entered promiscuous mode [ 81.344693][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.344857][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.344996][ T5586] bridge_slave_1: entered allmulticast mode [ 81.348733][ T5586] bridge_slave_1: entered promiscuous mode [ 81.350228][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.350337][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.350796][ T5583] bridge_slave_0: entered allmulticast mode [ 81.354676][ T5583] bridge_slave_0: entered promiscuous mode [ 81.434720][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.434820][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.434916][ T5583] bridge_slave_1: entered allmulticast mode [ 81.436326][ T5583] bridge_slave_1: entered promiscuous mode [ 81.440641][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.528756][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.529878][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.529996][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.530090][ T5581] bridge_slave_0: entered allmulticast mode [ 81.532132][ T5581] bridge_slave_0: entered promiscuous mode [ 81.545294][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.549854][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.704572][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.704716][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.705267][ T5581] bridge_slave_1: entered allmulticast mode [ 81.708248][ T5581] bridge_slave_1: entered promiscuous mode [ 81.718671][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.725009][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.729617][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.817209][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.820012][ T5584] team0: Port device team_slave_0 added [ 81.913865][ T5584] team0: Port device team_slave_1 added [ 81.919842][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.925567][ T5585] team0: Port device team_slave_0 added [ 81.929383][ T5586] team0: Port device team_slave_0 added [ 81.984348][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.987210][ T5585] team0: Port device team_slave_1 added [ 81.990983][ T5586] team0: Port device team_slave_1 added [ 81.994553][ T5583] team0: Port device team_slave_0 added [ 82.078789][ T5583] team0: Port device team_slave_1 added [ 82.080082][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.080095][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.080119][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.161058][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.161074][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.161087][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.165881][ T5581] team0: Port device team_slave_0 added [ 82.166808][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.166820][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.166843][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.169501][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.169513][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.169535][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.205459][ T5581] team0: Port device team_slave_1 added [ 82.206520][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.206532][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.206553][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.208611][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.208623][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.208646][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.214774][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.214787][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.214810][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.264047][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.264061][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.264085][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.310845][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.310861][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.310884][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.358790][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.358805][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.358829][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.450291][ T5585] hsr_slave_0: entered promiscuous mode [ 82.452506][ T5585] hsr_slave_1: entered promiscuous mode [ 82.467586][ T5586] hsr_slave_0: entered promiscuous mode [ 82.468862][ T5586] hsr_slave_1: entered promiscuous mode [ 82.473435][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 82.473543][ T5586] Cannot create hsr debugfs directory [ 82.526222][ T5583] hsr_slave_0: entered promiscuous mode [ 82.527760][ T5583] hsr_slave_1: entered promiscuous mode [ 82.528652][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 82.528673][ T5583] Cannot create hsr debugfs directory [ 82.883054][ T5600] Bluetooth: hci3: command tx timeout [ 82.961704][ T5600] Bluetooth: hci0: command tx timeout [ 83.023655][ T5581] hsr_slave_0: entered promiscuous mode [ 83.024463][ T5581] hsr_slave_1: entered promiscuous mode [ 83.024969][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 83.024991][ T5581] Cannot create hsr debugfs directory [ 83.041534][ T5600] Bluetooth: hci2: command tx timeout [ 83.132629][ T4900] Bluetooth: hci4: command tx timeout [ 83.132721][ T5600] Bluetooth: hci1: command tx timeout [ 83.154001][ T5584] hsr_slave_0: entered promiscuous mode [ 83.155368][ T5584] hsr_slave_1: entered promiscuous mode [ 83.156209][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 83.156232][ T5584] Cannot create hsr debugfs directory [ 83.818026][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.854675][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.862972][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.895862][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.900442][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.929202][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.952455][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.985118][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.090975][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.116329][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.129900][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.156607][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.159902][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.185248][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.209006][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.259585][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.389237][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.428030][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.433601][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.466717][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.470803][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.505288][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.535397][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.567704][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.690653][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.737256][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.749548][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.764448][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.777334][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.814497][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.844897][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.874621][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.926011][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.971836][ T5600] Bluetooth: hci3: command tx timeout [ 85.026560][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.042654][ T5600] Bluetooth: hci0: command tx timeout [ 85.060315][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.070918][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.095285][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.100579][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.117887][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.120929][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.124349][ T5600] Bluetooth: hci2: command tx timeout [ 85.164371][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.197240][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.201585][ T4900] Bluetooth: hci4: command tx timeout [ 85.201690][ T5600] Bluetooth: hci1: command tx timeout [ 85.239630][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.239783][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.325258][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.325390][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.369303][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.472984][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.499835][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.528396][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.529432][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.568889][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.569000][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.650809][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.699239][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.720147][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.720265][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.808912][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.808995][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.917185][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.979383][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.979564][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.025971][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.045600][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.045701][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.176173][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.266283][ T1843] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.266489][ T1843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.380660][ T1843] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.395311][ T1843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.665467][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.937274][ T10] cfg80211: failed to load regulatory.db [ 87.043189][ T5600] Bluetooth: hci3: command tx timeout [ 87.122795][ T5600] Bluetooth: hci0: command tx timeout [ 87.160477][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.201614][ T5600] Bluetooth: hci2: command tx timeout [ 87.210273][ T5585] veth0_vlan: entered promiscuous mode [ 87.291665][ T4900] Bluetooth: hci4: command tx timeout [ 87.291711][ T5600] Bluetooth: hci1: command tx timeout [ 87.347550][ T5585] veth1_vlan: entered promiscuous mode [ 87.598905][ T5583] veth0_vlan: entered promiscuous mode [ 87.685623][ T5585] veth0_macvtap: entered promiscuous mode [ 87.699193][ T5583] veth1_vlan: entered promiscuous mode [ 87.727021][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.749906][ T5585] veth1_macvtap: entered promiscuous mode [ 87.809068][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.877775][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.934288][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.996463][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.000882][ T5583] veth0_macvtap: entered promiscuous mode [ 88.050836][ T5583] veth1_macvtap: entered promiscuous mode [ 88.153801][ T5581] veth0_vlan: entered promiscuous mode [ 88.324045][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.418296][ T5581] veth1_vlan: entered promiscuous mode [ 88.444536][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.601296][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.601316][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.735159][ T5586] veth0_vlan: entered promiscuous mode [ 88.945717][ T5584] veth0_vlan: entered promiscuous mode [ 88.988263][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.988282][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.005837][ T5586] veth1_vlan: entered promiscuous mode [ 89.041236][ T5581] veth0_macvtap: entered promiscuous mode [ 89.130172][ T5581] veth1_macvtap: entered promiscuous mode [ 89.175358][ T5584] veth1_vlan: entered promiscuous mode [ 89.211048][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.211061][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.328548][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.381241][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.396568][ T5586] veth0_macvtap: entered promiscuous mode [ 89.399210][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.399228][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.477395][ T5586] veth1_macvtap: entered promiscuous mode [ 89.516544][ T5584] veth0_macvtap: entered promiscuous mode [ 89.672900][ T5584] veth1_macvtap: entered promiscuous mode [ 89.821719][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.934449][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.127285][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.306499][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.595199][ T3438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.595219][ T3438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.126930][ T5697] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.325025][ T5697] usb 4-1: Using ep0 maxpacket: 8 [ 91.329026][ T5697] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.434077][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.434105][ T5697] usb 4-1: Product: syz [ 91.434119][ T5697] usb 4-1: Manufacturer: syz [ 91.434132][ T5697] usb 4-1: SerialNumber: syz [ 91.471769][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.471783][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.321558][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.321579][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.481459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.501452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.511446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.521440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.531444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.541444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.551442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.561449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.571446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.581442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 93.097237][ T1843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.097257][ T1843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.166597][ T1013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.166771][ T1013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167316][ T1013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167484][ T1013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.167641][ T1013] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169135][ T1013] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169814][ T1013] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170328][ T1013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173683][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.176258][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180764][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.435289][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.435305][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.447024][ T5697] cdc_ncm 4-1:1.0: bind() failure [ 93.747410][ T5697] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 93.747457][ T5697] cdc_ncm 4-1:1.1: bind() failure [ 93.825233][ T5697] usb 4-1: USB disconnect, device number 2 [ 93.953519][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.953538][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.003709][ T5796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.073067][ T87] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.122906][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142185][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142386][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.194534][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276545][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277241][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.742590][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.802225][ T5800] Zero length message leads to an empty skb [ 94.934796][ T87] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.936401][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.487962][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 96.395613][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 96.511608][ T5596] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.717799][ T5596] usb 2-1: Using ep0 maxpacket: 8 [ 96.718634][ T5596] usb 2-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 96.756534][ T5596] usb 2-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 96.756589][ T5596] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.756631][ T5596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.981251][ T5596] usb 2-1: config 0 descriptor?? [ 97.210675][ T5817] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 97.776761][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.797434][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.925272][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.091660][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 98.094854][ T10] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 98.096793][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.096822][ T10] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 98.096847][ T10] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.096872][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.096910][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.240373][ T10] usb 3-1: config 0 descriptor?? [ 98.258140][ T5841] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 98.577228][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 99.404130][ T10] input: HID 1b96:000a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:000A.0001/input/input5 [ 99.529400][ T5854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.722284][ T5855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22'. [ 99.946726][ T5596] usb 2-1: string descriptor 0 read error: -71 [ 99.957460][ T5596] usb 2-1: USB disconnect, device number 2 [ 100.457903][ T10] ntrig 0003:1B96:000A.0001: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 100.840302][ T10] usb 3-1: USB disconnect, device number 2 [ 101.437484][ T5862] fido_id[5862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 101.503624][ T5711] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 101.696966][ T5711] usb 5-1: Using ep0 maxpacket: 8 [ 101.701799][ T5711] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.738695][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.738722][ T5711] usb 5-1: Product: syz [ 101.738735][ T5711] usb 5-1: Manufacturer: syz [ 101.738748][ T5711] usb 5-1: SerialNumber: syz [ 101.844906][ T5600] Bluetooth: hci3: command 0x2016 tx timeout [ 102.921071][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 103.153894][ T5711] cdc_ncm 5-1:1.0: bind() failure [ 103.169261][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.325158][ T5711] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 103.325204][ T5711] cdc_ncm 5-1:1.1: bind() failure [ 103.353702][ T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 103.373989][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.374020][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 103.374043][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.414320][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.414345][ T10] usb 3-1: Product: syz [ 103.414358][ T10] usb 3-1: Manufacturer: syz [ 103.414381][ T10] usb 3-1: SerialNumber: syz [ 103.419201][ T5711] usb 5-1: USB disconnect, device number 2 [ 103.527155][ T10] usb 3-1: config 0 descriptor?? [ 103.607145][ T10] streamzap 3-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 103.933145][ T4900] Bluetooth: hci3: command 0x2016 tx timeout [ 104.001112][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.204025][ T5902] comedi comedi3: mpc624: I/O base address not correctly aligned [ 104.231236][ T5714] usb 3-1: USB disconnect, device number 3 [ 104.516892][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 105.433948][ T5714] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.581867][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 105.582879][ T5714] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 105.584375][ T5714] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.584405][ T5714] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 105.584430][ T5714] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.584454][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.584482][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.710310][ T5714] usb 3-1: config 0 descriptor?? [ 105.711328][ T5916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.985121][ T5920] ======================================================= [ 105.985121][ T5920] WARNING: The mand mount option has been deprecated and [ 105.985121][ T5920] and is ignored by this kernel. Remove the mand [ 105.985121][ T5920] option from the mount to silence this warning. [ 105.985121][ T5920] ======================================================= [ 106.051280][ T5920] overlayfs: missing 'lowerdir' [ 106.369825][ T5714] input: HID 1b96:000a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B96:000A.0002/input/input6 [ 106.552563][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 106.607352][ T5714] ntrig 0003:1B96:000A.0002: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 106.639460][ T5714] ntrig 0003:1B96:000A.0002: Firmware version: 0.10.28.39.1 (eb00 e98c) [ 106.963961][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.081629][ T5697] usb 3-1: USB disconnect, device number 4 [ 107.151585][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 107.152480][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.173837][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.173862][ T10] usb 1-1: Product: syz [ 107.173875][ T10] usb 1-1: Manufacturer: syz [ 107.173888][ T10] usb 1-1: SerialNumber: syz [ 107.604132][ T5944] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 108.748427][ T10] cdc_ncm 1-1:1.0: bind() failure [ 108.917039][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 108.917085][ T10] cdc_ncm 1-1:1.1: bind() failure [ 108.958008][ T5946] netlink: 32 bytes leftover after parsing attributes in process `syz.3.44'. [ 109.039339][ T5946] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 109.039369][ T5946] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 109.039380][ T5946] overlayfs: missing 'lowerdir' [ 109.266917][ T10] usb 1-1: USB disconnect, device number 2 [ 110.010443][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.362707][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 110.365112][ T10] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 110.368249][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.368278][ T10] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 110.368317][ T10] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.368343][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 110.368374][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.391513][ T5589] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.554307][ T10] usb 5-1: config 0 descriptor?? [ 110.586435][ T5960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.683775][ T5589] usb 1-1: Using ep0 maxpacket: 32 [ 110.689157][ T5589] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 110.692134][ T5589] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 110.692158][ T5589] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 110.692177][ T5589] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 110.692196][ T5589] usb 1-1: config 1 has no interface number 0 [ 110.692239][ T5589] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.692263][ T5589] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 110.692300][ T5589] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.910817][ T5976] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 111.137461][ T5589] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 111.228168][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.248556][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.576787][ T10] input: HID 1b96:000a as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:1B96:000A.0003/input/input7 [ 111.770286][ T5979] netlink: 'syz.1.54': attribute type 29 has an invalid length. [ 111.915596][ T5984] FAULT_INJECTION: forcing a failure. [ 111.915596][ T5984] name failslab, interval 1, probability 0, space 0, times 1 [ 111.915645][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 111.915664][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.915680][ T5984] Call Trace: [ 111.915687][ T5984] [ 111.915695][ T5984] dump_stack_lvl+0xe8/0x150 [ 111.915730][ T5984] should_fail_ex+0x46b/0x600 [ 111.915754][ T5984] should_failslab+0xa8/0x100 [ 111.915776][ T5984] __kmalloc_cache_node_noprof+0xa9/0x6b0 [ 111.915796][ T5984] ? __get_vm_area_node+0x155/0x2f0 [ 111.915819][ T5984] ? __get_vm_area_node+0x155/0x2f0 [ 111.915842][ T5984] ? __kasan_check_byte+0x12/0x40 [ 111.915865][ T5984] __get_vm_area_node+0x155/0x2f0 [ 111.915888][ T5984] ? is_bpf_text_address+0x26/0x2b0 [ 111.915912][ T5984] __vmalloc_node_range_noprof+0x34e/0x1560 [ 111.915938][ T5984] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 111.915970][ T5984] ? __lock_acquire+0x13e8/0x2ce0 [ 111.915990][ T5984] ? __fget_files+0x2a/0x420 [ 111.916031][ T5984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.916060][ T5984] ? __fget_files+0x2a/0x420 [ 111.916082][ T5984] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 111.916100][ T5984] __vmalloc_noprof+0xd2/0x120 [ 111.916125][ T5984] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 111.916147][ T5984] bpf_prog_alloc_no_stats+0x47/0x560 [ 111.916166][ T5984] ? bpf_prog_alloc+0x2a/0x1a0 [ 111.916188][ T5984] bpf_prog_alloc+0x3c/0x1a0 [ 111.916211][ T5984] bpf_prog_load+0x7f8/0x1c20 [ 111.916242][ T5984] ? __pfx_bpf_prog_load+0x10/0x10 [ 111.916288][ T5984] __sys_bpf+0xd0d/0xd90 [ 111.916315][ T5984] ? __pfx___sys_bpf+0x10/0x10 [ 111.916336][ T5984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 111.916369][ T5984] ? rt_mutex_slowunlock+0x219/0x460 [ 111.916402][ T5984] ? ksys_write+0x248/0x270 [ 111.916428][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 111.916453][ T5984] __x64_sys_bpf+0xba/0xd0 [ 111.916474][ T5984] do_syscall_64+0x166/0x520 [ 111.916494][ T5984] ? trace_irq_disable+0x3b/0x140 [ 111.916511][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.916529][ T5984] ? clear_bhb_loop+0x70/0xc0 [ 111.916549][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.916566][ T5984] RIP: 0033:0x7f1bff5fe0d9 [ 111.916591][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.916604][ T5984] RSP: 002b:00007f1bfd856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.916630][ T5984] RAX: ffffffffffffffda RBX: 00007f1bff885fa0 RCX: 00007f1bff5fe0d9 [ 111.916642][ T5984] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 111.916652][ T5984] RBP: 00007f1bfd856090 R08: 0000000000000000 R09: 0000000000000000 [ 111.916661][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.916671][ T5984] R13: 00007f1bff886038 R14: 00007f1bff885fa0 R15: 00007ffdd4c0e358 [ 111.916698][ T5984] [ 111.981349][ T5589] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 112.008463][ T5984] syz.3.59: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.042784][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.042807][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.042817][ T5984] Call Trace: [ 112.042823][ T5984] [ 112.042838][ T5984] dump_stack_lvl+0xe8/0x150 [ 112.042868][ T5984] warn_alloc+0x24d/0x270 [ 112.042886][ T5984] ? __kasan_kmalloc+0x22/0xb0 [ 112.042906][ T5984] ? __pfx_warn_alloc+0x10/0x10 [ 112.042922][ T5984] ? __get_vm_area_node+0x155/0x2f0 [ 112.042947][ T5984] ? __kasan_check_byte+0x12/0x40 [ 112.042968][ T5984] ? __get_vm_area_node+0x2a9/0x2f0 [ 112.042998][ T5984] __vmalloc_node_range_noprof+0x376/0x1560 [ 112.043033][ T5984] ? __lock_acquire+0x13e8/0x2ce0 [ 112.043054][ T5984] ? __fget_files+0x2a/0x420 [ 112.043078][ T5984] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.043108][ T5984] ? __fget_files+0x2a/0x420 [ 112.043129][ T5984] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.043148][ T5984] __vmalloc_noprof+0xd2/0x120 [ 112.043172][ T5984] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.043191][ T5984] bpf_prog_alloc_no_stats+0x47/0x560 [ 112.043209][ T5984] ? bpf_prog_alloc+0x2a/0x1a0 [ 112.043230][ T5984] bpf_prog_alloc+0x3c/0x1a0 [ 112.043249][ T5984] bpf_prog_load+0x7f8/0x1c20 [ 112.043279][ T5984] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.043320][ T5984] __sys_bpf+0xd0d/0xd90 [ 112.043343][ T5984] ? __pfx___sys_bpf+0x10/0x10 [ 112.043363][ T5984] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.043387][ T5984] ? rt_mutex_slowunlock+0x219/0x460 [ 112.043420][ T5984] ? ksys_write+0x248/0x270 [ 112.043443][ T5984] ? __pfx_ksys_write+0x10/0x10 [ 112.043469][ T5984] __x64_sys_bpf+0xba/0xd0 [ 112.043490][ T5984] do_syscall_64+0x166/0x520 [ 112.043511][ T5984] ? trace_irq_disable+0x3b/0x140 [ 112.043529][ T5984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.043547][ T5984] ? clear_bhb_loop+0x70/0xc0 [ 112.043569][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.043587][ T5984] RIP: 0033:0x7f1bff5fe0d9 [ 112.043604][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.043619][ T5984] RSP: 002b:00007f1bfd856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.043637][ T5984] RAX: ffffffffffffffda RBX: 00007f1bff885fa0 RCX: 00007f1bff5fe0d9 [ 112.043650][ T5984] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 112.043661][ T5984] RBP: 00007f1bfd856090 R08: 0000000000000000 R09: 0000000000000000 [ 112.043672][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.043683][ T5984] R13: 00007f1bff886038 R14: 00007f1bff885fa0 R15: 00007ffdd4c0e358 [ 112.043712][ T5984] [ 112.049212][ T5984] Mem-Info: [ 112.049227][ T5984] active_anon:175 inactive_anon:6090 isolated_anon:0 [ 112.049227][ T5984] active_file:13367 inactive_file:41344 isolated_file:0 [ 112.049227][ T5984] unevictable:0 dirty:100 writeback:28 [ 112.049227][ T5984] slab_reclaimable:11302 slab_unreclaimable:99839 [ 112.049227][ T5984] mapped:32865 shmem:524 pagetables:1232 [ 112.049227][ T5984] sec_pagetables:0 bounce:0 [ 112.049227][ T5984] kernel_misc_reclaimable:0 [ 112.049227][ T5984] free:1316826 free_pcp:7745 free_cma:0 [ 112.049335][ T5984] Node 0 active_anon:700kB inactive_anon:24360kB active_file:53268kB inactive_file:165376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131460kB dirty:400kB writeback:112kB shmem:2096kB kernel_stack:13376kB pagetables:4812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.049393][ T5984] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.057261][ T5984] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.057381][ T5984] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 112.057411][ T5984] Node 0 DMA32 free:1311952kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:700kB inactive_anon:24360kB active_file:53268kB inactive_file:165376kB unevictable:0kB writepending:512kB zspages:0kB present:3129332kB managed:2559548kB mlocked:0kB bounce:0kB free_pcp:30972kB local_pcp:26900kB free_cma:0kB [ 112.057521][ T5984] lowmem_reserve[]: 0 0 1 1 1 [ 112.057551][ T5984] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1840kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 112.057601][ T5984] lowmem_reserve[]: 0 0 0 0 0 [ 112.057720][ T5984] Node 1 Normal free:3939992kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.057773][ T5984] lowmem_reserve[]: 0 0 0 0 0 [ 112.057864][ T5984] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.058031][ T5984] Node 0 DMA32: 324*4kB (UME) 1075*8kB (UME) 354*16kB (UM) 172*32kB (UME) 152*64kB (UME) 113*128kB (ME) 62*256kB (UM) 11*512kB (M) 4*1024kB (UM) 4*2048kB (UME) 301*4096kB (M) = 1311944kB [ 112.058220][ T5984] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.058352][ T5984] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 10*16kB (UM) 13*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3939992kB [ 112.058531][ T5984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.058546][ T5984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.058560][ T5984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.058574][ T5984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.058588][ T5984] 55231 total pagecache pages [ 112.058653][ T5984] 0 pages in swap cache [ 112.058660][ T5984] Free swap = 124996kB [ 112.058667][ T5984] Total swap = 124996kB [ 112.058673][ T5984] 2097051 pages RAM [ 112.058679][ T5984] 0 pages HighMem/MovableOnly [ 112.058685][ T5984] 425089 pages reserved [ 112.058691][ T5984] 0 pages cma reserved [ 112.312770][ T5697] usb 1-1: USB disconnect, device number 3 [ 112.363990][ T10] ntrig 0003:1B96:000A.0003: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 112.369521][ T10] ntrig 0003:1B96:000A.0003: Firmware version: 0.10.28.39.1 (eb00 e98c) [ 112.641022][ T5697] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 112.813155][ T5987] FAULT_INJECTION: forcing a failure. [ 112.813155][ T5987] name failslab, interval 1, probability 0, space 0, times 0 [ 112.813188][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.3.60 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.813208][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.813218][ T5987] Call Trace: [ 112.813225][ T5987] [ 112.813232][ T5987] dump_stack_lvl+0xe8/0x150 [ 112.813262][ T5987] should_fail_ex+0x46b/0x600 [ 112.813283][ T5987] should_failslab+0xa8/0x100 [ 112.813307][ T5987] __kmalloc_cache_node_noprof+0xa9/0x6b0 [ 112.813326][ T5987] ? __get_vm_area_node+0x155/0x2f0 [ 112.813348][ T5987] ? __get_vm_area_node+0x155/0x2f0 [ 112.813376][ T5987] __get_vm_area_node+0x155/0x2f0 [ 112.813399][ T5987] ? __lock_acquire+0x683/0x2ce0 [ 112.813422][ T5987] __vmalloc_node_range_noprof+0x34e/0x1560 [ 112.813448][ T5987] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.813482][ T5987] ? __lock_acquire+0x683/0x2ce0 [ 112.813508][ T5987] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.813534][ T5987] ? kernel_text_address+0xa5/0xe0 [ 112.813556][ T5987] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.813574][ T5987] __vmalloc_noprof+0xd2/0x120 [ 112.813599][ T5987] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 112.813621][ T5987] bpf_prog_alloc_no_stats+0x47/0x560 [ 112.813640][ T5987] ? bpf_prog_alloc+0x2a/0x1a0 [ 112.813661][ T5987] bpf_prog_alloc+0x3c/0x1a0 [ 112.813682][ T5987] bpf_prog_load+0x7f8/0x1c20 [ 112.813713][ T5987] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.813780][ T5987] __sys_bpf+0xd0d/0xd90 [ 112.813808][ T5987] ? __pfx___sys_bpf+0x10/0x10 [ 112.813829][ T5987] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 112.813856][ T5987] ? rt_mutex_slowunlock+0x219/0x460 [ 112.813889][ T5987] ? ksys_write+0x248/0x270 [ 112.813914][ T5987] ? __pfx_ksys_write+0x10/0x10 [ 112.813941][ T5987] __x64_sys_bpf+0xba/0xd0 [ 112.813962][ T5987] do_syscall_64+0x166/0x520 [ 112.813982][ T5987] ? trace_irq_disable+0x3b/0x140 [ 112.814000][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.814018][ T5987] ? clear_bhb_loop+0x70/0xc0 [ 112.814038][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.814056][ T5987] RIP: 0033:0x7f1bff5fe0d9 [ 112.814073][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.814086][ T5987] RSP: 002b:00007f1bfd856028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.814106][ T5987] RAX: ffffffffffffffda RBX: 00007f1bff885fa0 RCX: 00007f1bff5fe0d9 [ 112.814118][ T5987] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 112.814129][ T5987] RBP: 00007f1bfd856090 R08: 0000000000000000 R09: 0000000000000000 [ 112.814139][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.814149][ T5987] R13: 00007f1bff886038 R14: 00007f1bff885fa0 R15: 00007ffdd4c0e358 [ 112.814177][ T5987] [ 112.888573][ T4900] Bluetooth: hci0: command 0x0401 tx timeout [ 112.911806][ T5975] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 113.207528][ T200] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 113.439040][ T5995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.61'. [ 113.459318][ T5995] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 113.459346][ T5995] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 113.459357][ T5995] overlayfs: missing 'lowerdir' [ 116.775519][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 117.075786][ T6007] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 117.075969][ T6007] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 117.076025][ T6007] overlayfs: missing 'lowerdir' [ 119.126579][ T5589] usb 5-1: USB disconnect, device number 3 [ 119.346957][ T6016] netlink: 'syz.3.67': attribute type 16 has an invalid length. [ 119.346979][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 119.557172][ T6022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'. [ 119.602652][ T6022] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 119.602761][ T6022] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 119.602826][ T6022] overlayfs: missing 'lowerdir' [ 122.306126][ T6049] binder: 6041:6049 ioctl c0306201 200000000080 returned -14 [ 122.335641][ T6049] binder: BINDER_SET_CONTEXT_MGR already set [ 122.335685][ T6049] binder: 6041:6049 ioctl 4018620d 200000000040 returned -16 [ 123.077705][ T5590] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 123.231510][ T5590] usb 4-1: Using ep0 maxpacket: 32 [ 123.232315][ T5590] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 123.233479][ T5590] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 123.233500][ T5590] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 123.233517][ T5590] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 123.233535][ T5590] usb 4-1: config 1 has no interface number 0 [ 123.233574][ T5590] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.233596][ T5590] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 123.233636][ T5590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.338363][ T5590] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 123.737775][ T6064] CIFS mount error: No usable UNC path provided in device string! [ 123.737775][ T6064] [ 123.738062][ T6064] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.410137][ T37] audit: type=1326 audit(1787364830.849:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e10c3e0d9 code=0x7ffc0000 [ 124.415093][ T37] audit: type=1326 audit(1787364830.859:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415157][ T37] audit: type=1326 audit(1787364830.859:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e10c3e0d9 code=0x7ffc0000 [ 124.415194][ T37] audit: type=1326 audit(1787364830.859:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415231][ T37] audit: type=1326 audit(1787364830.859:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415267][ T37] audit: type=1326 audit(1787364830.859:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415305][ T37] audit: type=1326 audit(1787364830.859:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415341][ T37] audit: type=1326 audit(1787364830.859:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415378][ T37] audit: type=1326 audit(1787364830.859:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.415415][ T37] audit: type=1326 audit(1787364830.869:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6053 comm="syz.1.79" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6e10bfe90e code=0x7ffc0000 [ 124.846034][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.83'. [ 125.080944][ T6065] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 125.081178][ T6065] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 125.081273][ T6065] overlayfs: missing 'lowerdir' [ 126.645633][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.646327][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.677837][ T5590] snd_usb_pod 4-1:1.1: set_interface failed [ 126.678101][ T5590] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 126.722829][ T5590] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 126.756183][ T5590] usb 4-1: USB disconnect, device number 3 [ 127.190553][ T5706] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.231915][ T6082] netlink: 32 bytes leftover after parsing attributes in process `syz.3.90'. [ 127.252182][ T6082] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 127.252299][ T6082] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 127.252358][ T6082] overlayfs: missing 'lowerdir' [ 130.023132][ T6089] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 130.234398][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 130.235396][ T5706] usb 2-1: device descriptor read/all, error -71 [ 130.526550][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 130.550797][ T6106] ./file0: Can't lookup blockdev [ 130.705222][ T6112] FAULT_INJECTION: forcing a failure. [ 130.705222][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 130.705267][ T6112] CPU: 0 UID: 0 PID: 6112 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 130.705291][ T6112] Tainted: [L]=SOFTLOCKUP [ 130.705297][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.705306][ T6112] Call Trace: [ 130.705313][ T6112] [ 130.705319][ T6112] dump_stack_lvl+0xe8/0x150 [ 130.705353][ T6112] should_fail_ex+0x46b/0x600 [ 130.705378][ T6112] should_failslab+0xa8/0x100 [ 130.705398][ T6112] __kmalloc_noprof+0xfe/0x780 [ 130.705413][ T6112] ? rcu_is_watching+0x16/0xb0 [ 130.705444][ T6112] ? tomoyo_realpath_from_path+0xef/0x640 [ 130.705462][ T6112] ? tomoyo_realpath_from_path+0xef/0x640 [ 130.705487][ T6112] tomoyo_realpath_from_path+0xef/0x640 [ 130.705514][ T6112] ? tomoyo_path_number_perm+0x219/0x5f0 [ 130.705537][ T6112] tomoyo_path_number_perm+0x246/0x5f0 [ 130.705564][ T6112] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.705584][ T6112] ? __lock_acquire+0x683/0x2ce0 [ 130.705614][ T6112] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 130.705636][ T6112] ? hook_file_ioctl+0x1f3/0x600 [ 130.705675][ T6112] ? __fget_files+0x2a/0x420 [ 130.705700][ T6112] ? __fget_files+0x2a/0x420 [ 130.705741][ T6112] ? __fget_files+0x3a8/0x420 [ 130.705758][ T6112] ? __fget_files+0x2a/0x420 [ 130.705781][ T6112] security_file_ioctl+0xc3/0x2a0 [ 130.705807][ T6112] __se_sys_ioctl+0x47/0x170 [ 130.705835][ T6112] do_syscall_64+0x166/0x520 [ 130.705856][ T6112] ? trace_irq_disable+0x3b/0x140 [ 130.705873][ T6112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.705891][ T6112] ? clear_bhb_loop+0x70/0xc0 [ 130.705913][ T6112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.705930][ T6112] RIP: 0033:0x7fc2b6dce0d9 [ 130.705954][ T6112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.705968][ T6112] RSP: 002b:00007fc2b5026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.705994][ T6112] RAX: ffffffffffffffda RBX: 00007fc2b7055fa0 RCX: 00007fc2b6dce0d9 [ 130.706007][ T6112] RDX: 0000200000000400 RSI: 0000000000003b85 RDI: 0000000000000003 [ 130.706018][ T6112] RBP: 00007fc2b5026090 R08: 0000000000000000 R09: 0000000000000000 [ 130.706029][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.706039][ T6112] R13: 00007fc2b7056038 R14: 00007fc2b7055fa0 R15: 00007ffc6f79a048 [ 130.706068][ T6112] [ 130.712842][ T6112] ERROR: Out of memory at tomoyo_realpath_from_path. [ 130.754515][ T5714] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.911481][ T5714] usb 5-1: Using ep0 maxpacket: 32 [ 130.918895][ T5714] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 130.972451][ T5714] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 130.972479][ T5714] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 130.972496][ T5714] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 130.972514][ T5714] usb 5-1: config 1 has no interface number 0 [ 130.972554][ T5714] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.972578][ T5714] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 130.972616][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.109824][ T5714] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 131.214770][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.316641][ T6101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.317493][ T6101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.355745][ T6128] FAULT_INJECTION: forcing a failure. [ 131.355745][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 131.355780][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.2.109 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 131.355805][ T6128] Tainted: [L]=SOFTLOCKUP [ 131.355811][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.355820][ T6128] Call Trace: [ 131.355827][ T6128] [ 131.355835][ T6128] dump_stack_lvl+0xe8/0x150 [ 131.355863][ T6128] should_fail_ex+0x46b/0x600 [ 131.355877][ T6128] should_failslab+0xa8/0x100 [ 131.355890][ T6128] kmem_cache_alloc_node_noprof+0xae/0x670 [ 131.355915][ T6128] ? __alloc_skb+0x1db/0x7a0 [ 131.355937][ T6128] ? __alloc_skb+0x1db/0x7a0 [ 131.355965][ T6128] __alloc_skb+0x1db/0x7a0 [ 131.355989][ T6128] netlink_sendmsg+0x5d4/0xb40 [ 131.356016][ T6128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.356037][ T6128] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 131.356060][ T6128] ? __kernel_text_address+0xd/0x30 [ 131.356085][ T6128] ? unwind_get_return_address+0x4d/0x90 [ 131.356107][ T6128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.356125][ T6128] sock_sendmsg_nosec+0x13a/0x180 [ 131.356151][ T6128] ____sys_sendmsg+0x565/0x870 [ 131.356169][ T6128] ? __might_fault+0xaf/0x130 [ 131.356192][ T6128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.356210][ T6128] ? import_iovec+0x73/0xa0 [ 131.356224][ T6128] ___sys_sendmsg+0x2a5/0x360 [ 131.356233][ T6128] ? __lock_acquire+0x683/0x2ce0 [ 131.356245][ T6128] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.356294][ T6128] ? __fget_files+0x2a/0x420 [ 131.356315][ T6128] ? __fget_files+0x3a8/0x420 [ 131.356345][ T6128] __x64_sys_sendmsg+0x1b7/0x290 [ 131.356365][ T6128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.356385][ T6128] do_syscall_64+0x166/0x520 [ 131.356397][ T6128] ? trace_irq_disable+0x3b/0x140 [ 131.356406][ T6128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.356419][ T6128] ? clear_bhb_loop+0x70/0xc0 [ 131.356440][ T6128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.356458][ T6128] RIP: 0033:0x7fca6331e0d9 [ 131.356475][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.356489][ T6128] RSP: 002b:00007fca61576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.356507][ T6128] RAX: ffffffffffffffda RBX: 00007fca635a5fa0 RCX: 00007fca6331e0d9 [ 131.356520][ T6128] RDX: 0000000020008000 RSI: 0000200000000980 RDI: 0000000000000003 [ 131.356530][ T6128] RBP: 00007fca61576090 R08: 0000000000000000 R09: 0000000000000000 [ 131.356536][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.356541][ T6128] R13: 00007fca635a6038 R14: 00007fca635a5fa0 R15: 00007ffcdf6e0a88 [ 131.356556][ T6128] [ 131.403520][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 131.404412][ T10] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 131.405833][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.405860][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 131.405884][ T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.405917][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 131.405948][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.560007][ T10] usb 4-1: config 0 descriptor?? [ 131.561352][ T6117] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.917579][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 132.006737][ T6133] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 132.006864][ T6133] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 132.006915][ T6133] overlayfs: missing 'lowerdir' [ 133.167552][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.194949][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.987746][ T6129] ipvlan2: entered allmulticast mode [ 133.987944][ T6129] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 134.697799][ T5714] snd_usb_pod 5-1:1.1: set_interface failed [ 134.698096][ T5714] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 134.698294][ T5714] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 134.755042][ T5714] usb 5-1: USB disconnect, device number 4 [ 134.840943][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 134.841022][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 134.923153][ T10] usb 4-1: USB disconnect, device number 4 [ 134.943741][ T6129] batman_adv: batadv0: Adding interface: ipvlan2 [ 134.943759][ T6129] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.943796][ T6129] batman_adv: batadv0: Interface activated: ipvlan2 [ 135.176418][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 135.291833][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.452741][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 135.453544][ T5714] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.484732][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.484759][ T5714] usb 5-1: Product: syz [ 135.484772][ T5714] usb 5-1: Manufacturer: syz [ 135.484785][ T5714] usb 5-1: SerialNumber: syz [ 135.741499][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 135.882843][ T10] usb 3-1: device descriptor read/64, error -71 [ 136.181817][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 136.261565][ T5596] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.351518][ T10] usb 3-1: device descriptor read/64, error -71 [ 136.390792][ T6174] overlayfs: missing 'lowerdir' [ 136.431622][ T5596] usb 4-1: Using ep0 maxpacket: 8 [ 136.432648][ T5596] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 136.434436][ T5596] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.434453][ T5596] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 136.434467][ T5596] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.434523][ T5596] usb 4-1: config 0 interface 0 has no altsetting 0 [ 136.434542][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.476046][ T5596] usb 4-1: config 0 descriptor?? [ 136.505997][ T10] usb usb3-port1: attempt power cycle [ 136.517355][ T6170] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 136.674936][ T5721] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.134655][ T5714] cdc_ncm 5-1:1.0: bind() failure [ 137.508897][ T5714] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 137.508926][ T5714] cdc_ncm 5-1:1.1: bind() failure [ 137.532269][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 137.533311][ T5721] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 137.534778][ T5721] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.534800][ T5721] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.534826][ T5721] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 137.534848][ T5721] usb 2-1: config 1 has no interface number 0 [ 137.534889][ T5721] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.534914][ T5721] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.534953][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.706217][ T5714] usb 5-1: USB disconnect, device number 5 [ 137.725975][ T5721] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 137.731687][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 137.754107][ T5596] input: HID 1b96:000a as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B96:000A.0004/input/input8 [ 137.759640][ T10] usb 3-1: device descriptor read/8, error -71 [ 137.824751][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.859349][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.892069][ T5596] ntrig 0003:1B96:000A.0004: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 138.071595][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 138.073703][ T5596] ntrig 0003:1B96:000A.0004: Firmware version: 0.10.28.39.1 (eb00 e98c) [ 138.093870][ T10] usb 3-1: device descriptor read/8, error -71 [ 138.223360][ T10] usb usb3-port1: unable to enumerate USB device [ 138.343860][ T10] usb 4-1: USB disconnect, device number 5 [ 139.007694][ T6193] FAULT_INJECTION: forcing a failure. [ 139.007694][ T6193] name failslab, interval 1, probability 0, space 0, times 0 [ 139.007730][ T6193] CPU: 1 UID: 0 PID: 6193 Comm: syz.4.133 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 139.007754][ T6193] Tainted: [L]=SOFTLOCKUP [ 139.007760][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.007769][ T6193] Call Trace: [ 139.007777][ T6193] [ 139.007784][ T6193] dump_stack_lvl+0xe8/0x150 [ 139.007816][ T6193] should_fail_ex+0x46b/0x600 [ 139.007842][ T6193] should_failslab+0xa8/0x100 [ 139.007864][ T6193] kmem_cache_alloc_noprof+0xa4/0x660 [ 139.007891][ T6193] ? sctp_get_port_local+0x749/0x17a0 [ 139.007920][ T6193] ? sctp_get_port_local+0x749/0x17a0 [ 139.007948][ T6193] sctp_get_port_local+0x749/0x17a0 [ 139.007979][ T6193] ? sctp_get_port_local+0x50c/0x17a0 [ 139.008000][ T6193] ? __pfx_sctp_get_port_local+0x10/0x10 [ 139.008023][ T6193] ? sctp_bind_addr_match+0x30/0x2b0 [ 139.008037][ T6193] ? sctp_bind_addr_match+0x28b/0x2b0 [ 139.008057][ T6193] sctp_do_bind+0x4d9/0x9a0 [ 139.008088][ T6193] sctp_connect_new_asoc+0x270/0x6b0 [ 139.008112][ T6193] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.008138][ T6193] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 139.008159][ T6193] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.008180][ T6193] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 139.008203][ T6193] ? security_sctp_bind_connect+0x7e/0x2c0 [ 139.008232][ T6193] sctp_sendmsg+0x1506/0x2a50 [ 139.008269][ T6193] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.008286][ T6193] ? smack_socket_sendmsg+0x490/0x5a0 [ 139.008302][ T6193] ? get_pid_task+0x20/0x1f0 [ 139.008329][ T6193] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 139.008358][ T6193] ? __might_fault+0xaf/0x130 [ 139.008380][ T6193] ? sock_rps_record_flow+0x19/0x350 [ 139.008402][ T6193] ? inet_sendmsg+0x298/0x320 [ 139.008421][ T6193] ? __pfx_inet_sendmsg+0x10/0x10 [ 139.008438][ T6193] sock_sendmsg_nosec+0x10e/0x180 [ 139.008464][ T6193] __sys_sendto+0x41e/0x5d0 [ 139.008496][ T6193] ? __pfx___sys_sendto+0x10/0x10 [ 139.008551][ T6193] ? __pfx_ksys_write+0x10/0x10 [ 139.008582][ T6193] __x64_sys_sendto+0xde/0x100 [ 139.008611][ T6193] do_syscall_64+0x166/0x520 [ 139.008631][ T6193] ? trace_irq_disable+0x3b/0x140 [ 139.008649][ T6193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.008667][ T6193] ? clear_bhb_loop+0x70/0xc0 [ 139.008689][ T6193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.008706][ T6193] RIP: 0033:0x7f6c8fc7e0d9 [ 139.008724][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.008737][ T6193] RSP: 002b:00007f6c8ded6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.008755][ T6193] RAX: ffffffffffffffda RBX: 00007f6c8ff05fa0 RCX: 00007f6c8fc7e0d9 [ 139.008767][ T6193] RDX: 000000000000fffd RSI: 00002000000000c0 RDI: 0000000000000004 [ 139.008778][ T6193] RBP: 00007f6c8ded6090 R08: 0000200000000280 R09: 0000000000000010 [ 139.008789][ T6193] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000001 [ 139.008798][ T6193] R13: 00007f6c8ff06038 R14: 00007f6c8ff05fa0 R15: 00007fffaee6f4a8 [ 139.008825][ T6193] [ 139.438186][ T5721] snd_usb_pod 2-1:1.1: set_interface failed [ 139.439566][ T5721] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 139.454204][ T5721] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 139.485191][ T5721] usb 2-1: USB disconnect, device number 5 [ 139.555999][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.641850][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.141'. [ 139.721472][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 139.722300][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 139.723640][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.723689][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.723714][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.723734][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.723754][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.731148][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 139.731172][ T10] usb 4-1: Manufacturer: syz [ 139.788231][ T10] usb 4-1: config 0 descriptor?? [ 139.924695][ T6220] FAULT_INJECTION: forcing a failure. [ 139.924695][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.924730][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz.2.143 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 139.924754][ T6220] Tainted: [L]=SOFTLOCKUP [ 139.924760][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.924770][ T6220] Call Trace: [ 139.924777][ T6220] [ 139.924785][ T6220] dump_stack_lvl+0xe8/0x150 [ 139.924822][ T6220] should_fail_ex+0x46b/0x600 [ 139.924848][ T6220] _copy_from_user+0x2d/0xb0 [ 139.924871][ T6220] sctp_getsockopt_peer_addrs+0xef/0x450 [ 139.924904][ T6220] ? __pfx_sctp_getsockopt_peer_addrs+0x10/0x10 [ 139.924937][ T6220] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 139.924958][ T6220] ? lockdep_hardirqs_on+0x7b/0x110 [ 139.924985][ T6220] sctp_getsockopt+0x9be/0xb90 [ 139.925006][ T6220] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 139.925028][ T6220] do_sock_getsockopt+0x51d/0x7e0 [ 139.925050][ T6220] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 139.925083][ T6220] ? __fget_files+0x3a8/0x420 [ 139.925104][ T6220] ? __fget_files+0x2a/0x420 [ 139.925131][ T6220] __x64_sys_getsockopt+0x1aa/0x250 [ 139.925155][ T6220] do_syscall_64+0x166/0x520 [ 139.925176][ T6220] ? trace_irq_disable+0x3b/0x140 [ 139.925192][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.925211][ T6220] ? clear_bhb_loop+0x70/0xc0 [ 139.925232][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f[ 139.925232][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.925249][ T6220] RIP: 0033:0x7fca6331e0d9 [ 139.925266][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.925280][ T6220] RSP: 002b:00007fca61576028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 139.925299][ T6220] RAX: ffffffffffffffda RBX: 00007fca635a5fa0 RCX: 00007fca6331e0d9 [ 139.925311][ T6220] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 139.925321][ T6220] RBP: 00007fca61576090 R08: 0000200000000340 R09: 0000000000000000 [ 139.925333][ T6220] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 139.925346][ T6220] R13: 00007fca635a6038 R14: 00007fca635a5fa0 R15: 00007ffcdf6e0a88 [ 139.925375][ T6220] [ 140.074756][ T43] ------------[ cut here ]------------ [ 140.074769][ T43] in_task() && kcov_mode_enabled(mode) [ 140.074787][ T43] WARNING: kernel/kcov.c:894 at kcov_remote_start+0x5d6/0x710, CPU#0: kworker/u8:2/43 [ 140.074823][ T43] Modules linked in: [ 140.074847][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.074874][ T43] Tainted: [L]=SOFTLOCKUP [ 140.074880][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.074892][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 140.074913][ T43] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 140.074933][ T43] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 91 c9 01 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc cd 88 09 89 c0 48 c7 c7 c0 32 a2 [ 140.074949][ T43] RSP: 0018:ffffc90000b479d8 EFLAGS: 00010202 [ 140.074964][ T43] RAX: 0000000000000000 RBX: ffff88801fa9be00 RCX: 8000000000000001 [ 140.074978][ T43] RDX: 0000000000000000 RSI: ffffffff8bcb9e60 RDI: ffffffff8bcb9e20 [ 140.074991][ T43] RBP: ffff88805d068500 R08: ffffffff8b510e52 R09: 0000000000000000 [ 140.075003][ T43] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 140.075017][ T43] R13: ffff888060ac1ef8 R14: 0000000000000000 R15: ffff888060c41180 [ 140.075030][ T43] FS: 0000000000000000(0000) GS:ffff888125c06000(0000) knlGS:0000000000000000 [ 140.075045][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.075058][ T43] CR2: 0000001b31d1cff8 CR3: 000000002b6b0000 CR4: 00000000003526f0 [ 140.075075][ T43] Call Trace: [ 140.075082][ T43] [ 140.075095][ T43] ieee80211_iface_work+0x20c/0x1010 [ 140.075140][ T43] cfg80211_wiphy_work+0x29e/0x420 [ 140.075162][ T43] ? process_scheduled_works+0x97a/0x1630 [ 140.075187][ T43] process_scheduled_works+0xc3d/0x1630 [ 140.075242][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.075270][ T43] ? assign_work+0x3cf/0x5d0 [ 140.075298][ T43] worker_thread+0xa47/0xfb0 [ 140.075344][ T43] ? __kthread_parkme+0x71/0x1f0 [ 140.075380][ T43] kthread+0x38b/0x470 [ 140.075408][ T43] ? __pfx_worker_thread+0x10/0x10 [ 140.075429][ T43] ? __pfx_kthread+0x10/0x10 [ 140.075458][ T43] ret_from_fork+0x514/0xb70 [ 140.075489][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 140.075517][ T43] ? __switch_to+0xc89/0x1420 [ 140.075544][ T43] ? __pfx_kthread+0x10/0x10 [ 140.075573][ T43] ret_from_fork_asm+0x1a/0x30 [ 140.075620][ T43] [ 140.075636][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 140.075652][ T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 140.075678][ T43] Tainted: [L]=SOFTLOCKUP [ 140.075685][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.075696][ T43] Workqueue: events_unbound cfg80211_wiphy_work [ 140.075715][ T43] Call Trace: [ 140.075721][ T43] [ 140.075729][ T43] vpanic+0x56d/0xa60 [ 140.075759][ T43] ? __pfx__printk+0x10/0x10 [ 140.075782][ T43] ? __pfx_vpanic+0x10/0x10 [ 140.075808][ T43] ? is_bpf_text_address+0x292/0x2b0 [ 140.075832][ T43] ? is_bpf_text_address+0x26/0x2b0 [ 140.075864][ T43] panic+0xc5/0xd0 [ 140.075891][ T43] ? __pfx_panic+0x10/0x10 [ 140.075929][ T43] ? ret_from_fork_asm+0x1a/0x30 [ 140.075963][ T43] __warn+0x315/0x4c0 [ 140.075989][ T43] ? kcov_remote_start+0x5d6/0x710 [ 140.076010][ T43] ? kcov_remote_start+0x5d6/0x710 [ 140.076028][ T43] __report_bug+0x276/0x570 [ 140.076055][ T43] ? kcov_remote_start+0x5d6/0x710 [ 140.076079][ T43] ? __pfx___report_bug+0x10/0x10 [ 140.076107][ T43] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 140.076132][ T43] ? rt_spin_lock+0x1e2/0x400 [ 140.076152][ T43] ? rt_spin_lock+0x1e2/0x400 [ 140.076171][ T43] ? kcov_remote_start+0x5d6/0x710 [ 140.076189][ T43] report_bug+0x16b/0x220 [ 140.076214][ T43] ? kcov_remote_start+0x5d6/0x710 [ 140.076230][ T43] ? kcov_remote_start+0x5d8/0x710 [ 140.076247][ T43] handle_bug+0x9c/0x200 [ 140.076276][ T43] exc_invalid_op+0x1a/0x50 [ 140.076309][ T43] asm_exc_invalid_op+0x1a/0x20 [ 140.076328][ T43] RIP: 0010:kcov_remote_start+0x5d6/0x710 [ 140.076348][ T43] Code: 03 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 91 c9 01 03 90 0f 0b 90 eb d1 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 ab fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 dc cd 88 09 89 c0 48 c7 c7 c0 32 a2 [ 140.076364][ T43] RSP: 0018:ffffc90000b479d8 EFLAGS: 00010202 [ 140.076380][ T43] RAX: 0000000000000000 RBX: ffff88801fa9be00 RCX: 8000000000000001 [ 140.076394][ T43] RDX: 0000000000000000 RSI: ffffffff8bcb9e60 RDI: ffffffff8bcb9e20 [ 140.076407][ T43] RBP: ffff88805d068500 R08: ffffffff8b510e52 R09: 0000000000000000 [ 140.076420][ T43] R10: 0000000000000000 R11: ffffffff8e1c3740 R12: dffffc0000000000 [ 140.076433][ T43] R13: ffff888060ac1ef8 R14: 0000000000000000 R15: ffff888060c41180 [ 140.076453][ T43] ? rt_spin_lock+0x1e2/0x400 [ 140.076479][ T43] ? kcov_remote_start+0xeb/0x710 [ 140.076500][ T43] ieee80211_iface_work+0x20c/0x1010 [ 140.076537][ T43] cfg80211_wiphy_work+0x29e/0x420 [ 140.076559][ T43] ? process_scheduled_works+0x97a/0x1630 [ 140.076582][ T43] process_scheduled_works+0xc3d/0x1630 [ 140.076637][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 140.076666][ T43] ? assign_work+0x3cf/0x5d0 [ 140.076693][ T43] worker_thread+0xa47/0xfb0 [ 140.076731][ T43] ? __kthread_parkme+0x71/0x1f0 [ 140.076765][ T43] kthread+0x38b/0x470 [ 140.076793][ T43] ? __pfx_worker_thread+0x10/0x10 [ 140.076814][ T43] ? __pfx_kthread+0x10/0x10 [ 140.076843][ T43] ret_from_fork+0x514/0xb70 [ 140.076873][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 140.076900][ T43] ? __switch_to+0xc89/0x1420 [ 140.076928][ T43] ? __pfx_kthread+0x10/0x10 [ 140.076957][ T43] ret_from_fork_asm+0x1a/0x30 [ 140.077004][ T43] [ 140.077150][ T43] Kernel Offset: disabled