last executing test programs: 6.790272419s ago: executing program 2 (id=9105): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020300000000040000000008000000005650a8ee"], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.553538947s ago: executing program 2 (id=9107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="23b5c0c93b86ca050f4f00010afdf5"], 0x1, [{0x0, 0x0}]}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0}, 0x90) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb06"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 5.842837491s ago: executing program 1 (id=9110): r0 = socket$netlink(0x10, 0x3, 0x0) poll(&(0x7f0000000080)=[{r0, 0xc2}, {r0, 0x420}, {r0, 0x88}, {r0, 0x1}, {r0, 0xc212}], 0x5, 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x274}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) poll(&(0x7f0000000080)=[{r0, 0xc2}, {r0, 0x420}, {r0, 0x88}, {r0, 0x1}, {r0, 0xc212}], 0x5, 0x7) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x274}}, 0x0) (async) 5.604119075s ago: executing program 1 (id=9111): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190029000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r7 = inotify_init1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x19d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0xa) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x3, 0x300) 5.193781621s ago: executing program 1 (id=9112): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "6e9b"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010600ba9380d412000000000000002900000043000000", 0xfe60) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='timerslack_ns\x00') lseek(r3, 0x12c, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) syz_usb_control_io$printer(r1, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000001940)={0x1c, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"/318], &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xbb}, &(0x7f0000001800)={0x20, 0x0, 0x101, {0xff, "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"}}, &(0x7f00000016c0)={0x20, 0x1, 0x1, 0x20}, &(0x7f0000001700)={0x20, 0x0, 0x1, 0x29}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, 0x4000}) 4.771179634s ago: executing program 0 (id=9113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000880)=""/253, 0xfd}], 0x1, 0xfffffffe, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080140003000d34d8026a2c01f698880a6f7ded68"], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r2, &(0x7f0000000000)="9d", 0x1, 0x20000000, 0x0, 0x0) 4.57767959s ago: executing program 4 (id=9114): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) 4.337391519s ago: executing program 3 (id=9115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x20000400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000015c0)={0x9, 0x0, [{0x5000, 0x38, &(0x7f0000000000)=""/56}, {0x2, 0x17, &(0x7f0000000100)=""/23}, {0x1, 0x7b, &(0x7f0000000140)=""/123}, {0x5000, 0x1b, &(0x7f0000000240)=""/27}, {0xd000, 0xff9, &(0x7f00000003c0)=""/4089}, {0x4, 0xbe, &(0x7f00000013c0)=""/190}, {0x2000, 0x0, 0x0}, {0x3000, 0x44, &(0x7f0000001480)=""/68}, {0x1, 0xa0, &(0x7f00000017c0)=""/160}]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0) request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000001500)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:De', 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_open_dev$vim2m(&(0x7f0000000140), 0x80, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000009e000a68000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000003c00048038000180080001006e6174002c000280080002400000000208000540000000170800064000001203080001"], 0x90}}, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102380, 0x18fec}], 0xb, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000180)=ANY=[@ANYRES64=0xffffffffffffffff], 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000001700)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES64=r5, @ANYBLOB="515849c74336311206e187963f7ce89294aa4c6158ad63bd2fec1e1efdfcf5103260cdcad1410d0406cf23ab74dfc512455b7494db79b6c7e54fe065fc7ec0834f4409fea4be8de00da9fc8c2879ebaeb7c51004ae829977e007f687ebbc599f758868a142478f84c87a03eab298f2a84054bca3737b580d8f3be7d03fed97ca9ea9184706e1fffdd296eedd42d265936b9d", @ANYRESOCT=r2], 0x8) ioctl$SNDCTL_SEQ_SYNC(r7, 0x5101) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000001c0)) pipe2$9p(&(0x7f0000000200), 0x80) 4.132580697s ago: executing program 4 (id=9116): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x2a020400) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) poll(&(0x7f00000004c0)=[{}], 0x20000000000000f3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000fcdbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c28000050006"], 0x48}}, 0x0) 3.918983034s ago: executing program 4 (id=9117): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020300000000040000000008000000005650a8ee"], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.8840872s ago: executing program 2 (id=9118): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020300000000040000000008000000005650a8ee"], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190029000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r7 = inotify_init1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x19d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0xa) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x3, 0x300) 3.696485554s ago: executing program 3 (id=9119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0xe68, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xc98, 0x2, [@TCA_FW_POLICE={0xc70, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25ac594, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0xa3, 0x401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0x5, 0x0, 0x0, 0x5, 0x2, 0x401, 0x0, 0x1, 0x3, 0x20, 0x7, 0x4, 0x0, 0x9, 0x9, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffd93, 0x0, 0x0, 0x4, 0x3, 0xffff, 0xe73, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x2, 0x1000, 0xb, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x36, 0x1377, 0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x6, 0x8, 0xac7b, 0xfff, 0x1, 0x7, 0x6, 0x100, 0x3, 0xb, 0x0, 0x9a, 0x7b1, 0x3, 0x7, 0x3, 0x0, 0xffffff37, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e, 0x0, 0xffff1076, 0x0, 0x0, 0x0, 0x3, 0xd593, 0x4, 0x687a, 0x3, 0x0, 0x5ea4, 0x0, 0x1b51, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9708, 0x2, 0xc, 0x0, 0x7f, 0xf88, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x57]}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x723]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x15c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_nat={0x58, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ctinfo={0xc0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x91, 0x6, "007cbe9797ed2fc991bbda934119c50857fa14f72b7e9af7ec8d5705e06fd24455a0d1bc49ce2faa684e9a77ec7882a6f9be5a4ed10a4a816f5d68f97b85bcc59797b7734c4d6d50f76e631b8d60249a2cd5e613690c13b22fc13048c5422892d45bf78e6d18be5374c4487a3ebeac76dbf4fc6eadbfb42d070fc9584d35309e2582729e8547c1c86872b9bb88"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.567655386s ago: executing program 2 (id=9120): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r0, &(0x7f0000000100)='\x00', 0x89901) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004440)={0x2c, r4, 0x1, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) fchdir(r2) close(r2) stat(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f0000000300)) 3.54804901s ago: executing program 4 (id=9121): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x6, 0x1, 0x4, 0xffffffffffffffff, 0xe6, '\x00', r1, r2, 0x3, 0x1, 0x4, 0x9}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f5663d679760356f4a5810ae0e0ddce31f270ba5b65427113f515636e3a4ad4906130c453cf6476a03546b9eaa96b7e9841f0778f7239915dedfda4e6c5fe27e83d53eee98ba660e66c9c358c8370e444fc08ad972614dded8995ad16e88560507125cdca7cff3c919ff2a28786a952878cc5a2e42c6afc06bdcd7e005a200e81b191899b30d16ef419d7ed6d01d194586c72b7e24317188d008a975b817bfb63cf9b4f8123781324fa9dce7eec50e5840790350996a98eaf9edc6d118ce89e4492"], 0xfd12}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='blkio.bfq.time\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_overlay={0x2, 0x3, 0x4, 0x2, 0x6, {}, {0x2, 0x8, 0x1, 0x8, 0x80, 0xe, "635f1d3b"}, 0xfff, 0x3, {&(0x7f00000006c0)=[{0x5f82, 0x40, {0x62}, 0x10}, {0x0, 0x1000, {0x3}, 0xffffffff}]}, 0x2, 0x0, r3}) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000007050394fb0000000000000000000000000900010073797a3000000000"], 0x20}}, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000600)={0x1b72, 0x9, 0x1}) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="201000000003fd42facbc57d07010300000000000000000000000009000100fde5c122671b515e"], 0x20}}, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000180)={0x0, r8}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x632f, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x1d, r9, 0x3}, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "621105b0ae0282d478b6b01305946c17afcea96765fbac1cd8aabe71d5522a79da5a1d57b5fc633203000000ab6e543a04aa00"}, 0x48}}, 0x0) 3.533388312s ago: executing program 3 (id=9122): setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(0xffffffffffffffff, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r4, 0x0, 0x0, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190029000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r6 = inotify_init1(0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a941900000c0a01020000000000000000030000090900010073797a31000000005c190380100000800c00044000000000000000009c02008004000780940202802000028008000180fffffffe08000340000000400900020073797a31000000002f0001004868a8e3686ed8151bfa96eb6983c04550b3d77aeb12cf7f57082abfcd1ede796e5c53c3db6edfd2cd76e8001400028008000180ffffffff0800034000000c3dc10001000c5b9e8c2c369271531c8a98cf0a4e27c746f81f33c95e0ff9b9ec57aa37e3a574e670f62b0df8f5efe3a707f8a2184e92c77286b490c64f35de58f6fdd377f8efb5b8448fbf3fce6f41b0d4e32f5cfaf0d1a73b48549f34215db720adcbd4d78aa772376eb1801e2720e73becbd9d9e79c4e6399b90963c29af9938f94c7f8e7c5ee33f1a4745386a6cfa5e89d42c03475687cfaa0814e7d4700659f3243e63dfc5f62cc2186ce83721cce0c8b217f7c4fc03ab78a7a4c78f87fe767500000042000100c468146985b84a9fd09369561acb4111501f3a5cebba975d59ee03eb366062d074ef2019907d2f74125e5877bacac7a5abe1c122a44448129e4979d6ef5c0000fc00010039566d9b9b78ad0e94dbc6d779940e4432ced00205103ca944176b9bb0a11bb143bfe72de8c8ae7213754b204c3bf96c0fd81c0ae6bb0129a23b8c1d3369b553c5ca4055f41e91e6e132888a7fe3952b581aa896a8b6bc051d5efd410965b3438137f5642686c662e85a7aa3ff9b84ed2343a9511445a187ff5323ab7b7d34f681715fae2142b7352910d23f676d88cdc353e7706be8b2421c80db585f457d668e2b2ff92d63101916e89b10623564abd504d45c359225c15d2bea486aed578a0e7cf48c766234c8b2f37ab3b5d69351594585572a75092682210c710ec7afaff7ffa8cde021beb57699a5df5a8d7d5318b43287d94b205f280002800900020073797a30000000000900020073797a30000000000900020073797a31000000001c0000800800034000000000080003400000000108000340000000011c0000800800034000000001040007800c000540000000000000000174160080940101800b000100beff2b5ad9bc9a0030000280080003400000000408000340000000010900020073797a3100000000080003400000000508000340fffffffbcd0001000e66969f89856e6d0f21433977b47c1e251526edb9c95b9220ef94253cf3c4bff36ddc930e9d4ff15667f16d8159d5d5bc374dfb773a554c50fe413c0149af5e2c990637251adb7cdb34715f4355f1eb2897132969a25253e07717b8163c60efb1b2cce8a29ab7d25cd9e2a6de459261a150c9833c2ec7f66618dc237f378c5cd805b6f8ecd057c294fd667b07e2fb48d6ed9fabfd6dc8adcee1855527c70b4dbe7cb24b5aa78f6ebd363d4564d1c2bd4954a2e3d3fca6eb3c3cb7368223c44400015f58fbf869e8c000000014000280080003400000000608000180ffffffff2400028008000180fffffffe0800034000000007080003407fffffff08000180000000001d000100eb5770971b8d1842f6d332f1eadf292d8ea710315736bb79670000002c000280080003400000000808000180ffffffff0800034000001cbc080003400000000908000340000000010c0005400000000000000021ee000640c8184accd78ec9a80458c95797d6706925c8b7ca54247e59fd69aaeb8591bed0f81970e603e5e854c8af6b6204718b57aff1ed8b9d175030f21468a6e28c07713d539b1d57cd557f8eabb5762699547f98b7b5d69c010df2b2f2b3f52dbf4b15534ee2762f68e4555d5ae5485c3e37f9a929554ae9d439b9117dddba48c1b65ffcd7cbb54fc953cd296f891379a9aecba1201c0110add93eed3b0ec1d0d0ef40a303f125e60ee6cecf2cdc6702f5c273a9e342a11a18f88c9878c46ea3d19159319fea354ca63c8b30f356cb4e724a648ef12de8953dd563c6077c3bb777c58ecfc2cfc4792c90f1144d0000040007807e000640962611dc533a5ce6b489db90da5070d29eae299de05f8d09e6ffef0604953220ea98997e054a5b9563d6025cc668a416d5c0efd72b455b667b074515e7215931395209eb6dabb4cfb7f1b62813a678942b656374abfbd3783009517c05c0aa2135f6a663ccb286890532649f577054d36acb9599923bbf21ec6600000c000540000000000000000650130a80030101005f22421b4096cdb777f8e59c43098c4d9c82c923177722aeafc4b0db85f66c47546b76a8a01b96742a817292928d399445e6c4228dfa230b86635f8ac73ac374093c3d9a8401b80362698f4d9287fc9450bc10e0c6e8420e5d000dbe23140113f4229c4f18f64e19515011cbab64ab9b98deb57bebeef8350d52267c1ebcb8a7b6fd6930035008af6908b0862b46c6deb66937ea81c7085a27905f79559d5dea83e388f23b164bb0910731c2114e8d485d66a2bdd6958b3d988c54b9cd705d68f6442b5906386c9d8718ae8a52d713a942812a7835057a90ce0d8597bcbd4048541d53938a52268ec0fdfaa222f0afcee92ff47cefadd1d375801e23fa8f19002c0002800900020073797a30000000000900020073797a3200000000080003400000000608000340000004014000028008000180fffffffb080003400000000208000180fffffffb08000180000000000900020073797a300000000008000180fffffffd08000180fffffffdf600010083d35f060bda349412b1977079b66ceeb6222ff5334a2956e389271320e1bbeb07ae8dbdc4c462babd241175541b3f91669ce9581881288fe98073d7ab8218857865c8ebb6de260cf8fcb0f2dfd1c4b92c4f186b78c6c89fdc522cccbea987a01d501822dfce4ec7aad83252e6cf32020d6f7ab6b061d39c5f7e7adb530b710760ef391dd19b4ad3b4a42eae6d13a1a3bd2f4f58b386b474eabf0cc547563786c7b12baf979892c56ec0aba1c57a8a75965f1bbe242f36c69e30e5474737a5c3320129009138ee97d6ec56cb19aeead4be975cee7a84b8ad8dac3030d872d43636f4c3549a5d4b205e6422ba5c6d53cb0ffd00003c00028008000180fffffff80900020073797a3200000000080003400000000108000180fffffffc0900020073797a320000000008000180fffffffb50000280080001800000000008000340000000a70900020073797a3100000000080003400000080008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff280002800900020073797a320000000008000180fffffffe080003400000fac308000180fffffffd04100100175970075362532edc348d28c2b1fe8d4112d84bef9cff247bc63d8859a4c5ce2417cd6d6e2d1d02074c005b93eae8de8da447172a67a364264994d1990eb96c74825478c63d6928a5fadc62d66c2a1c12b5b08204d6de3c4ea92bd2fb6283051f23b7d18a0a1cf4d4e441de57fc6dd1e6ff309cee58b24c2a2e7f2c5be983d3ad2ece67dad8328414a809385da9a07028d930bfa2ba5723a7e661937c033dfd3435971e55663449f32fb9cc845c4f7cf709ab7fe6341603b612480fc1dd38f0d1c3ff39c7da951774689b5229308ce878d02eb30011d81bb3c676741df19de8fc16a6ffe4e8a1a0e042c31e535514e1c973f39200857a6b0e2c80740e96f287941b85650f439a5cbfa032ad7a04cb9dae030f4f2e5f5b4fdecf145fec7cdd4ea6ac8b9f138e7952504885e710f9c216e746f79cbb35d7f6355a33cf8d96f758594355a8eac7c621de019c9f42a16fa9a59254efc29af20d565467ef03792a5a6b6b68363778c19e4814f1810a81293430cfba50634f79dda075aabc69cd93cceca4245fd2b4f7e2317175b6d21e1b85fdadbf075672af1fdbdfc1b822316838cd1754b5784f480453d8bfd367b23a31c088cff46975c5986cae8c271f506b4cd78e6bb80b3884a9000c62f149939d7bffde3266e368cf20463a228facba70ac3ea1f9510556539991fb127522f628a876a3b47a65a5b3b0ab7be8778d48d562761b534551864abef3802c9cca119d6160bb0e22e8f1d6e646c1c670b68f1d94bf87cf8c16987bb14c9c801746b249fdc05c681c5c2947a8f58de0eff443357745b5e4c25801328f218e29385b7740bbc53c2a0959c6138fa70a631bf2798686021699a75215c8ce41e47d2aa002076b6d43b657d3379c3d64869c4a26cf504d4cfd3c297d80518129a0d03ea751ab217133bb4ec675181d2cc6420fc58c8b900751268644bf9a5519b74297254d4e7aed7d99588c578c97ae7eaaba36eab75a54785a59ff866a997dad8ce3238c21514c072a5911bd84afd77f39bddacd674ba9ce460c3f15ede4c850727f384d2b99866f609b0c5c79fb80f38e8f795ff35cdd0dc10ae099eea6e064476dd3ddc5cd6b229a3a79688a00d03b90ed7902016e255ff5d5fd7e094a4fe114f0a143779665ed3acf9eeeb32e77c2119d08e49b4613665b4d04fdc928eab8ac34450824feeb3848e448d36c41bca10237ce4dfed4d74aa23a4df423d230d9b7de1fbd1634891266c806ad65a79d564369a67e50ad18f9e2c9e64d89ed85e96dac43e8e537944399f75e557786db5d6f5ed49fa90464c7dba6158d97f71fc86585b0343531225b41e92137cdf1a981a746104fa7b9e656b4d1d14df5d4ab9f00b53c5f1fe8290fc8bda978630a0f286af6b096590ef57066fd0e09a0b6204d350cdcf55264f969d69d7fee34c8c48a0895b1a185f8b0da24d9eb5561cdd33fc6f642b391b4e5ad022b7fa6325b556c8b66bd3f299c5bd7dba672fe118a0d332dd981177e014c57c6d83ecc9e4f857170c1aa11f0b6375e3f3f26f28844298a383494318c11e9c8e0c1f2b8ae75a3d2303a7c1a6a9b1a3e7e996b929160c2e83dcc496baf5f90e66d8a2c24da6993f64a6e6d3d52d6bb599f7c60815eb1441d6d8a1cef7b110a80153ff32df57e7b65d961ef79602bed7806f2f991e598150495cbd6145a6f418fd1356d281d3e0183e458ff37ba3848bc0293feea050ed526ab474817bb15fd9cae88086e8b595a47e926848cad6be66638463efaf98cabe06611475cd8ca42b1bf2d732727cc7c635cfb98688659b61ff01a5c1a434e7f06222ee2ff1c73764a33b03077ec0f4b7efafde0f90de62c3f0701b1ea3fb008e250aff3df9076a48630ed63f7aee80947f107a6e86328d0936405ee2bb1669ff8f1a90ed5ab772698fa4c9ca0ed0937b81ab194888e691fabd2c15ae05f8edaea40031742e7d6bdb578f802f593629c52d6b7cf4bdad4bf85bc6a08356f2a4ba8e6ebb2e5d3b7c3f6293d6b13afd67455bb766eb7358f7765cd1a3dbd56e037289a1e6a14774b64355d4ec666d3a139173c6419d5e932bae3ca1e2990fb4e18b9610415166c444aae8509416492a265199052c699c5d30ee06694d6915b1043c7f32d0f6ac441af805e979cb581d4ea1b3e3ab0f1603d921e58d4bb0b1f4695e2e90d2fce9aa9b5f7081252290bedd0264c337d8ab902ca2b1b05fe254c97ae4c33365d00e237f5f4fdb07914f44ed972d801674ced86e70a843ff603aece353f53cefdf84d5c92a630e3f323f475f1a88da34a93ce5b524b71e6a1fd6dc049feae5c64253c731722d652688d3bb4fb6651fd4341df43ae995bebf6137fa195c92b58ce4e4c262b855efb36a685f59bbc6991fda39b0b1603364f2ff358d961ac8950a7fac91f585826bfd2eb32f9b367621739d5af918ae2cfc8e157c6958a77e485cfc9347918276ef64304f98f446228ce4167ec289de92ae58ba015d6c0d2a4ac4142aacf54241f59c2cc0fd7761d28e3a66f95b1bab6735729814e96d97fe6144f0a61a2cd6353c5fdd94921ca793ae844ea07e265b88b07fc5738e1137b6e954a39a0b79e78b32373897fa6df9872b8c30a6cc89d2e3b3bab73a1a02e3f83205d40173038a638f8661dd02b32923aec378452037b82c18dfd3771747c13d670a3670645a685fca25e8e0cb93f44fb8f56720b69b31e23883ca73e44964c1545dcd3b783cade86bee3a4fc88e887d0d14132761dba8f8b4c26e80d24ed8d667767a81ac2a3114fd2ef1dfd90917b5d1dd83564e9ca2a1a81a0317a0ce4f36b7a5921ab6d4702dad1bd75b963e7612eb4d0a99df3fed491762cb32e44372b4edbb3151fb01ec62795f93b778a2b7c48126477d12235213f5d1719ac46ff103b92f71ebbf9e7180539befd2387ae15e3ffe9383d1b8697827d55f92762db2b7d50feb12e5191ebc1cd6b8efa9dfba4cd352f100cae98050d8ab4cf9ac36dd3c68222884c1b48fcc6d7f12c488bbb6c7a3411be7da94e907bf3038664650d1b9f69bad12d07fb849513b60924419bc94654fb5c69d070c18afac8aa25bb05727b588f38aa015db0ce9d9c31f517b76e4d7d92ca5a9f8e4f1e7dc2927331c83b55ceca8e8e08c4ea737f6f1b5dffcd7a31b10b35046c0d15f7f0d05dde468e40d8c24314a97b0ba17d820fdce6767236f1aebc39655906a2eed1e43c174f2c13b9fd021dd0c9795ccfc81db1a8ca01a1bc4c7e4f2036b3541656895214d936b5ccf00d2e97297b5ce112484a125fad62277467a7b045dcb6e0e7908493adff929bb3c91eb15542f48ec5814f886bc503fabfb8ebd9cc3bbcd14c6e8165ba709f510f77d9e060d3b85fd056c4a611e096b66cf2b83a07d2bb53f0583fc3210ba181c93f72614a0da25679cc4da72ede4804e453c2b493bf878c926befeb38bd0a5e918d9b14084924e5fe8447500553782b3e63fb01482f99ec79103ed124573b8eabbda9fa9345c748859b93bda6c402278c521c920a8b857771b6e18fd912a4ead418117aabf209b7567fdc161d8a8acf2e354e7e5d992f29b92a4d217cc2887bcd8274bd2f388c61d176e1c5ffd6fde4fa2f793b8b5904a9f6b02bd69558671824f59911c3470227067486e2a65594d3a4257217625496de8243c357f75319dc81961314f748b6879e5c4ae87a0e2d476c5d6612b02ad36bbb79b094c09713dfaed4d79bf7926252cb88e50b9036b8b2b58749fc1682121576e9020aa6211c29ae8badb2211fd7f511ed7bc77137efa16b027c8ee7e28f20ab72f4af825a5c9802958213467e8155f720658de7dd8b3f8da29a4aac0d57ae9acd1e0bbed819fa4ec7b0174944f670dea658ca8c91d26fa06a3a534923c0ba4b0bfff8cbc2636ce25e7f248e8f20992e7bdb232aa259f8e63181e2eb6d7d047f00a5981b9005e35e67df4fdc0e68ccc6eb2065d8ea10060d97dd134c7f570a2463ea138d3b2cccaf88be81ff75cd8319120d2aa31089182359fa051fd93ff3f76352cd71e72d5616b9cfee2303d119ed5e2a39ca2d44c798bbfb6d1a9a36886cdb739a158ec82b49892e308c0dfa9c896c227a956154605dfdf40d4e4ca9b9db1d9dbf424603a8c0e41e72777264245ec0fc62b808499190553bf38ed800be86968029c604d2a26a89b3d1d0db7154a1fbfb5f7586541b50ed6e4e4e024fcec379851ffd872e9ab66782fb1d646c27045e7430eb548e86ec0601b7e90598e6c91d6979d52e129bae13cb8560ec79398799b22ed713c648c0a41213e3151bb2041e6714e13401ea858145892c0f527b88c751aaeb94bb44475a68287f75fae2dc04bd44bd1379bbc3b792705813c7dca5b72190d78f62b81ecb1bc80d85ed3e3afba1e73d47fb5d3035d4a5f828919572d37a6f57fcb65c8b65372c88522d8b433b7fa6fc52a811490c782ba6a7fb08ff4da073701373c25bc2c4b98a90b6f04cb542b7d2fc797855f60fb8555173af2d62004314d61aa8ce32fb80c70e50e6682117f3b6d1e5cb27a469333c455f9f1bd07efb38f44b3e00d19c64fca4472cce528fbbf7896503f0288966e1b1541b56a9851656b639e422ff63997d2f79e31007691a52077e3c129ab923d7c0faa9d344e4dbb1c4d07d9e2ba1b268f00c25ac7b49358834acc9dd42b85891646a13d369ab4ef16c748f8c1fcbf29783beed49a7d21082058e0a0cf771b26c75e5d88835ce4ad58f831926fe0bdc9319ce13e7a4b0ec523bfc45179eefa9572e1e1bb9161ecc8a9640e18eb118c012752d1096176c96005ddf15c36bb4133af01ef37664a158910c58b5a92720c4aafdb21f6ce9602eae9ddf224b1944c42f5714d0025adfe6c85b159dd24ffc2f9194446a137f2f722b412c31619e201f8499273e44925be120fa997e86221284cd73cecc7a8f6a9489001f95c82f022871f640d098f0cc251c4be9c201e435d7b38a6a3038f368c75d5a5ffac84072db0be154d8a30c6a22239b980f924d8e48fbd87f8140546eabe083673b0752fd728ed945ae20a7dbbebbdd4ffcb74c91075be1332e8c5989a9d620072af60f1ae95603aac34cbdd7be65118c7b100eaf5bb8045baff6f2afa478e82b322df1836cc80d5356ad9ad387001983bcea2ab1d3bf72e1233a212a00008b80c562d33b44d065f1b5d8e8c1572abca127702b93348935d2fbf834a85e6b0ac81c6c3c9778d772da57d78e7a37be1156feee67e151491c954fcba4411d2ec3b845d3a7f4f557222ab73e8def876ee19db89699cba871b1246b79c4385734c80ce38bfe4db92cc87ccd191b02dba7fdc37a578ce88cb928e68d85dba89f2296c33eb9109d8b292739979339377c9d77022e2dc4c03aea5cc8bcf9bbff20f40867c0b3fb80cb8d5b779a51bf50a69f2bc2680da3b6f917d5051300b062d34720e03f2440b372b8b0fc89d71170e0600f04292a5aa99819d0e6bbcab5d829c6e34d9e16ca31871cb3ae2ff4dbce60694966c95dcfa4eb5cd433ffd2f6cf5bbbace261fea28243382a85b58de66f1c6c751a0de52ec5d2c88e533b5dabf9445db9c6ae1ee1de00a96f0e5b31c77e7eedef24ee1a77182b91a585c2fc877bcd72ba566d9cdd10397f68384f66e970cbb36ea447f7eb67076b8433c1cfab23efe54ef761234bad059990a59bcf1b1cc9638d7eb60aabc3f8b7dee8e9b67a49b078861f0f949b5017e4cef8e9e765c170fa3734968db63f2f1f6e924c17c3ab62bec9a964cc4de344d3129a0c4e549d201a8d86ede2c6804e3e2c00028008000340000000080900020073797a310000000008000180fffffffb0900020073797a32000000000900020073797a32000000000900010073797a31000000001c000000120a050300000000000000000000000a0800034000000007140000001100010000000000000000000000000a"], 0x19d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0xa) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x3, 0x300) 3.34121981s ago: executing program 2 (id=9123): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00154001", 0x21}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {0x33}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x3, 0x1) 3.340183466s ago: executing program 3 (id=9124): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a00154001", 0x21}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x1, 0x0, 0x0, {0x33}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x3, 0x1) 3.040743637s ago: executing program 0 (id=9125): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a2007"], 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xe9) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02035e04420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) 2.310017829s ago: executing program 1 (id=9126): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r3, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r3}}, 0x24}}, 0x0) 2.181402531s ago: executing program 0 (id=9127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0xd00, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xc98, 0x2, [@TCA_FW_POLICE={0xc70, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25ac594, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0xa3, 0x401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0x5, 0x0, 0x0, 0x5, 0x2, 0x401, 0x0, 0x1, 0x3, 0x20, 0x7, 0x4, 0x0, 0x9, 0x9, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffd93, 0x0, 0x0, 0x4, 0x3, 0xffff, 0xe73, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x2, 0x1000, 0xb, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x36, 0x1377, 0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x6, 0x8, 0xac7b, 0xfff, 0x1, 0x7, 0x6, 0x100, 0x3, 0xb, 0x0, 0x9a, 0x7b1, 0x3, 0x7, 0x3, 0x0, 0xffffff37, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e, 0x0, 0xffff1076, 0x0, 0x0, 0x0, 0x3, 0xd593, 0x4, 0x687a, 0x3, 0x0, 0x5ea4, 0x0, 0x1b51, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9708, 0x2, 0xc, 0x0, 0x7f, 0xf88, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0xb3e, 0xc, 0x9, 0x0, 0x0, 0x800, 0xff, 0x7, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0xda9d, 0x6, 0x95c, 0xfffffffc, 0x6, 0x0, 0x9f, 0xa6b2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x57]}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x723]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0xd00}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.764773025s ago: executing program 0 (id=9128): r0 = socket(0x1e, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000140)=@tipc=@name, 0x80, 0x0}}], 0x2, 0x0) (fail_nth: 2) 1.764232113s ago: executing program 2 (id=9129): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = dup2(r4, r3) landlock_create_ruleset(0x0, 0x0, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000160000005600000025000000190029000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r7 = inotify_init1(0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x19d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0xa) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.247942359s ago: executing program 0 (id=9131): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x50009401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020300000000040000000008000000005650a8ee"], 0x14}}, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x8}, 0x0, &(0x7f0000000200)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x0, 0x0, 0x0, 0x7fffffff}]}) socket$unix(0x1, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video4linux(&(0x7f0000000280), 0x972, 0x200840) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.247288875s ago: executing program 1 (id=9132): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0xe68, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xc98, 0x2, [@TCA_FW_POLICE={0xc70, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25ac594, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0xa3, 0x401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0x5, 0x0, 0x0, 0x5, 0x2, 0x401, 0x0, 0x1, 0x3, 0x20, 0x7, 0x4, 0x0, 0x9, 0x9, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffd93, 0x0, 0x0, 0x4, 0x3, 0xffff, 0xe73, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x2, 0x1000, 0xb, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x36, 0x1377, 0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x6, 0x8, 0xac7b, 0xfff, 0x1, 0x7, 0x6, 0x100, 0x3, 0xb, 0x0, 0x9a, 0x7b1, 0x3, 0x7, 0x3, 0x0, 0xffffff37, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e, 0x0, 0xffff1076, 0x0, 0x0, 0x0, 0x3, 0xd593, 0x4, 0x687a, 0x3, 0x0, 0x5ea4, 0x0, 0x1b51, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9708, 0x2, 0xc, 0x0, 0x7f, 0xf88, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x57]}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x723]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x15c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x148, 0x6, [@m_nat={0x58, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199"}, {0xc}, {0xc}}}, @m_ctinfo={0xc0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x91, 0x6, "007cbe9797ed2fc991bbda934119c50857fa14f72b7e9af7ec8d5705e06fd24455a0d1bc49ce2faa684e9a77ec7882a6f9be5a4ed10a4a816f5d68f97b85bcc59797b7734c4d6d50f76e631b8d60249a2cd5e613690c13b22fc13048c5422892d45bf78e6d18be5374c4487a3ebeac76dbf4fc6eadbfb42d070fc9584d35309e2582729e8547c1c86872b9bb88"}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe68}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.241719872s ago: executing program 4 (id=9133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x19ad, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdir(&(0x7f0000000080)='./file7\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfd14) mkdir(0x0, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0x158) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x9, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c01264bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000880000000000000000850000000e00000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x100b]}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r6, 0x0, 0x8000002b) 1.212861541s ago: executing program 3 (id=9134): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1.017375977s ago: executing program 1 (id=9135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x9}}}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000880)=""/253, 0xfd}], 0x1, 0xfffffffe, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080140003000d34d8026a2c01f698880a6f7ded68"], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r2, &(0x7f0000000000)="9d", 0x1, 0x20000000, 0x0, 0x0) 812.405848ms ago: executing program 0 (id=9136): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffeffff}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "6e9b"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa010600ba9380d412000000000000002900000043000000", 0xfe60) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000080"], 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='timerslack_ns\x00') lseek(r3, 0x12c, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) syz_usb_control_io$printer(r1, &(0x7f00000004c0)={0xc, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000001940)={0x1c, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"/318], &(0x7f00000015c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0xbb}, &(0x7f0000001800)={0x20, 0x0, 0x101, {0xff, "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"}}, &(0x7f00000016c0)={0x20, 0x1, 0x1, 0x20}, &(0x7f0000001700)={0x20, 0x0, 0x1, 0x29}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) socket$vsock_stream(0x28, 0x1, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, 0x4000}) 172.024079ms ago: executing program 3 (id=9137): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a2007"], 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0xe9) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02035e04420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket(0x2, 0x3, 0xff) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) 0s ago: executing program 4 (id=9138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005dc0)=@delchain={0xd00, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_fw={{0x7}, {0xc98, 0x2, [@TCA_FW_POLICE={0xc70, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x25ac594, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0xa3, 0x401, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x2, 0x5, 0x4, 0x5, 0x0, 0x0, 0x5, 0x2, 0x401, 0x0, 0x1, 0x3, 0x20, 0x7, 0x4, 0x0, 0x9, 0x9, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffd93, 0x0, 0x0, 0x4, 0x3, 0xffff, 0xe73, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x2, 0x1000, 0xb, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x36, 0x1377, 0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x6, 0x8, 0xac7b, 0xfff, 0x1, 0x7, 0x6, 0x100, 0x3, 0xb, 0x0, 0x9a, 0x7b1, 0x3, 0x7, 0x3, 0x0, 0xffffff37, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2e, 0x0, 0xffff1076, 0x0, 0x0, 0x0, 0x3, 0xd593, 0x4, 0x687a, 0x3, 0x0, 0x5ea4, 0x0, 0x1b51, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9708, 0x2, 0xc, 0x0, 0x7f, 0xf88, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0xb3e, 0xc, 0x9, 0x0, 0x0, 0x800, 0xff, 0x7, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0xda9d, 0x6, 0x95c, 0xfffffffc, 0x6, 0x0, 0x9f, 0xa6b2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x57]}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x723]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_MASK={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0xd00}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 4] Bluetooth: hci3: command tx timeout [ 1674.758366][ T5153] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1674.770538][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.784754][ T5153] usb 5-1: config 0 descriptor?? [ 1674.820462][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.852664][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.923081][ T5224] bridge_slave_0: entered allmulticast mode [ 1674.952160][ T5224] bridge_slave_0: entered promiscuous mode [ 1674.993994][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.022983][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.031598][ T5224] bridge_slave_1: entered allmulticast mode [ 1675.062006][ T5224] bridge_slave_1: entered promiscuous mode [ 1675.433514][ T5153] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1675.461702][ T5153] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1675.474902][ T5153] dib0700: firmware download failed at 7 with -22 [ 1675.492896][ T5153] usb 5-1: USB disconnect, device number 113 [ 1675.593819][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8766'. [ 1675.628503][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.657121][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1675.676762][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.701504][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.716885][ T5247] bridge_slave_0: entered allmulticast mode [ 1675.726216][ T5247] bridge_slave_0: entered promiscuous mode [ 1675.799771][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.810547][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.820494][ T5247] bridge_slave_1: entered allmulticast mode [ 1675.832334][ T5247] bridge_slave_1: entered promiscuous mode [ 1675.904440][ T5224] team0: Port device team_slave_0 added [ 1675.914476][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1675.951822][ T5224] team0: Port device team_slave_1 added [ 1676.010553][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1676.192392][ T5247] team0: Port device team_slave_0 added [ 1676.230551][ T5247] team0: Port device team_slave_1 added [ 1676.266368][T30674] Bluetooth: hci1: command tx timeout [ 1676.356734][ T2907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.390088][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1676.415315][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.472898][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.528785][ T5347] netlink: 'syz.1.8768': attribute type 4 has an invalid length. [ 1676.561724][ T5355] netlink: 'syz.1.8768': attribute type 4 has an invalid length. [ 1676.636477][ T8] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1676.656511][ T2907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.687885][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.699672][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.732237][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.825929][T30674] Bluetooth: hci3: command tx timeout [ 1676.835694][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1676.848030][ T8] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1676.859290][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.886808][ T8] usb 5-1: Product: syz [ 1676.891048][ T8] usb 5-1: Manufacturer: syz [ 1676.897606][ T8] usb 5-1: SerialNumber: syz [ 1676.931283][ T8] usb 5-1: config 0 descriptor?? [ 1677.013022][ T2907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.035759][T21063] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1677.076736][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.083838][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.128723][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.223290][ T2907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1677.236018][T21063] usb 2-1: Using ep0 maxpacket: 8 [ 1677.246670][T21063] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1677.276732][T21063] usb 2-1: string descriptor 0 read error: -22 [ 1677.292318][T21063] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1677.330506][T21063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.331288][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.360953][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.391540][T21063] usb 2-1: config 0 descriptor?? [ 1677.409524][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.663402][ T5224] hsr_slave_0: entered promiscuous mode [ 1677.687172][ T5224] hsr_slave_1: entered promiscuous mode [ 1677.715363][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1677.737868][ T5224] Cannot create hsr debugfs directory [ 1677.903455][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1677.948489][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1677.965086][ T8] dib0700: firmware download failed at 7 with -22 [ 1677.990709][ T8] usb 5-1: USB disconnect, device number 114 [ 1678.100924][ T5247] hsr_slave_0: entered promiscuous mode [ 1678.137415][ T5247] hsr_slave_1: entered promiscuous mode [ 1678.153598][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1678.161858][ T5247] Cannot create hsr debugfs directory [ 1678.198645][T21063] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1678.214813][T21063] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1678.225172][T21063] dib0700: firmware download failed at 7 with -22 [ 1678.275836][T21063] usb 2-1: USB disconnect, device number 106 [ 1678.345926][T30674] Bluetooth: hci1: command tx timeout [ 1678.926714][T31077] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1679.135637][T31077] usb 4-1: Using ep0 maxpacket: 8 [ 1679.143441][T31077] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1679.157681][T31077] usb 4-1: string descriptor 0 read error: -22 [ 1679.177256][T31077] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1679.191016][T31077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.204334][T31077] usb 4-1: config 0 descriptor?? [ 1679.474897][ T2907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.495128][ T2907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.509239][ T2907] bond0 (unregistering): Released all slaves [ 1679.529368][ T2907] bond1 (unregistering): Released all slaves [ 1679.578525][ T2907] bond2 (unregistering): Released all slaves [ 1679.614511][ T2907] bond3 (unregistering): Released all slaves [ 1679.889326][T31077] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1679.945349][T31077] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1679.966304][T31077] dib0700: firmware download failed at 7 with -22 [ 1679.997585][T31077] usb 4-1: USB disconnect, device number 101 [ 1681.128926][ T5419] netlink: 'syz.1.8783': attribute type 4 has an invalid length. [ 1681.226540][ T5424] netlink: 'syz.1.8783': attribute type 4 has an invalid length. [ 1681.323937][ T2907] hsr_slave_0: left promiscuous mode [ 1681.331234][ T5433] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8785'. [ 1681.342320][ T2907] hsr_slave_1: left promiscuous mode [ 1681.375811][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1681.384444][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.407366][ T2907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1681.424741][ T2907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1681.482680][ T2907] veth1_macvtap: left promiscuous mode [ 1681.495365][ T2907] veth0_macvtap: left promiscuous mode [ 1681.504092][ T2907] veth1_vlan: left promiscuous mode [ 1681.521966][ T2907] veth0_vlan: left promiscuous mode [ 1682.464735][ T2907] team0 (unregistering): Port device team_slave_1 removed [ 1682.553787][ T2907] team0 (unregistering): Port device team_slave_0 removed [ 1683.711929][T31077] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1683.735598][ T5153] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1683.868788][ T5224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1683.935598][T31077] usb 4-1: Using ep0 maxpacket: 8 [ 1683.945630][ T5153] usb 2-1: Using ep0 maxpacket: 8 [ 1683.961332][T31077] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1683.982264][ T5224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1683.995617][ T5153] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1684.009646][ T5153] usb 2-1: string descriptor 0 read error: -22 [ 1684.026014][ T5153] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1684.029081][ T5224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1684.050267][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.060910][T31077] usb 4-1: string descriptor 0 read error: -22 [ 1684.075320][T31077] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1684.086991][ T5153] usb 2-1: config 0 descriptor?? [ 1684.087598][T31077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.104929][ T5224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1684.136599][T31077] usb 4-1: config 0 descriptor?? [ 1684.705080][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.734339][ T5470] netlink: 'syz.4.8795': attribute type 4 has an invalid length. [ 1685.064289][ T5471] netlink: 'syz.4.8795': attribute type 4 has an invalid length. [ 1685.250801][T31077] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1685.267811][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.278312][T31077] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1685.301398][T31077] dib0700: firmware download failed at 7 with -22 [ 1685.343790][T31077] usb 4-1: USB disconnect, device number 102 [ 1685.409288][ T5153] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1685.437235][T32068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.444478][T32068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1685.460402][ T5153] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1685.475397][ T5153] dib0700: firmware download failed at 7 with -22 [ 1685.477504][T32068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.491396][T32068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.517290][ T5153] usb 2-1: USB disconnect, device number 107 [ 1685.578284][ T5247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1685.596561][ T5247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1685.658503][ T5247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1685.693717][ T5247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1685.835108][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1686.006445][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.029633][ T5492] FAULT_INJECTION: forcing a failure. [ 1686.029633][ T5492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.087698][ T5492] CPU: 1 PID: 5492 Comm: syz.4.8797 Not tainted 6.10.0-rc7-syzkaller #0 [ 1686.096107][ T5492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1686.106313][ T5492] Call Trace: [ 1686.109597][ T5492] [ 1686.112547][ T5492] dump_stack_lvl+0x241/0x360 [ 1686.117249][ T5492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1686.122506][ T5492] ? __pfx__printk+0x10/0x10 [ 1686.127227][ T5492] ? __pfx_lock_release+0x10/0x10 [ 1686.132272][ T5492] should_fail_ex+0x3b0/0x4e0 [ 1686.136985][ T5492] _copy_from_user+0x2f/0xe0 [ 1686.141630][ T5492] get_compat_msghdr+0xae/0x730 [ 1686.146697][ T5492] ? __fget_files+0x29/0x470 [ 1686.151298][ T5492] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1686.157039][ T5492] ? __fget_files+0x3f6/0x470 [ 1686.161781][ T5492] __sys_sendmsg+0x273/0x3a0 [ 1686.166394][ T5492] ? __pfx___sys_sendmsg+0x10/0x10 [ 1686.171645][ T5492] ? vfs_write+0x7c4/0xc90 [ 1686.176148][ T5492] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1686.182756][ T5492] ? lockdep_hardirqs_on+0x99/0x150 [ 1686.188013][ T5492] __do_fast_syscall_32+0xb4/0x120 [ 1686.193178][ T5492] ? exc_page_fault+0x590/0x8c0 [ 1686.198163][ T5492] do_fast_syscall_32+0x34/0x80 [ 1686.203098][ T5492] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1686.209539][ T5492] RIP: 0023:0xf7413579 [ 1686.213626][ T5492] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1686.233695][ T5492] RSP: 002b:00000000f5d2c57c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1686.242229][ T5492] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200007c0 [ 1686.250253][ T5492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1686.258242][ T5492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1686.266266][ T5492] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1686.274270][ T5492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1686.282538][ T5492] [ 1686.490800][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.510529][ T5224] veth0_vlan: entered promiscuous mode [ 1686.594165][ T5224] veth1_vlan: entered promiscuous mode [ 1686.622494][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.698635][T32068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.705954][T32068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.802804][ T5224] veth0_macvtap: entered promiscuous mode [ 1686.841112][T32068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.848346][T32068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.926882][ T5224] veth1_macvtap: entered promiscuous mode [ 1686.953021][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.976179][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.999211][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.056871][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.099806][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.118701][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.130434][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1687.141572][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.154772][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.245311][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.276963][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.295962][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.324796][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.344388][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.362660][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.380778][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1687.411446][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1687.445323][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.508678][ T5224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.520889][ T5224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.552526][ T5224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.594545][ T5224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.735055][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.008407][ T5247] veth0_vlan: entered promiscuous mode [ 1688.014792][ T5532] netlink: 'syz.1.8805': attribute type 4 has an invalid length. [ 1688.139005][ T5536] netlink: 'syz.1.8805': attribute type 4 has an invalid length. [ 1688.212698][ T5247] veth1_vlan: entered promiscuous mode [ 1688.240059][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.278750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.457468][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.479121][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.488768][ T5247] veth0_macvtap: entered promiscuous mode [ 1688.521467][ T5247] veth1_macvtap: entered promiscuous mode [ 1688.627973][ T5549] FAULT_INJECTION: forcing a failure. [ 1688.627973][ T5549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.628012][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.647107][ T5549] CPU: 0 PID: 5549 Comm: syz.4.8808 Not tainted 6.10.0-rc7-syzkaller #0 [ 1688.660043][ T5549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1688.660939][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.670146][ T5549] Call Trace: [ 1688.670170][ T5549] [ 1688.670184][ T5549] dump_stack_lvl+0x241/0x360 [ 1688.670256][ T5549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.670291][ T5549] ? __pfx__printk+0x10/0x10 [ 1688.670325][ T5549] ? __pfx_lock_release+0x10/0x10 [ 1688.670363][ T5549] should_fail_ex+0x3b0/0x4e0 [ 1688.670405][ T5549] _copy_from_user+0x2f/0xe0 [ 1688.670435][ T5549] get_compat_msghdr+0xae/0x730 [ 1688.670475][ T5549] ? __fget_files+0x29/0x470 [ 1688.670509][ T5549] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1688.670544][ T5549] ? __fget_files+0x3f6/0x470 [ 1688.670588][ T5549] __sys_sendmmsg+0x46e/0x740 [ 1688.670642][ T5549] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1688.670687][ T5549] ? __pfx_lock_acquire+0x10/0x10 [ 1688.670712][ T5549] ? get_pid_task+0x23/0x1f0 [ 1688.670743][ T5549] ? __pfx_lock_release+0x10/0x10 [ 1688.670766][ T5549] ? kstrtouint_from_user+0x128/0x190 [ 1688.670842][ T5549] ? __pfx_lock_release+0x10/0x10 [ 1688.683652][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.683953][ T5549] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1688.687833][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.691568][ T5549] ? __fget_files+0x3f6/0x470 [ 1688.696916][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.701381][ T5549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1688.717251][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.720526][ T5549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1688.725149][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1688.730664][ T5549] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1688.730715][ T5549] __do_fast_syscall_32+0xb4/0x120 [ 1688.730750][ T5549] ? exc_page_fault+0x590/0x8c0 [ 1688.730784][ T5549] do_fast_syscall_32+0x34/0x80 [ 1688.730816][ T5549] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1688.730853][ T5549] RIP: 0023:0xf7413579 [ 1688.730875][ T5549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1688.730896][ T5549] RSP: 002b:00000000f5d2c57c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1688.730922][ T5549] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 1688.730940][ T5549] RDX: 0000000000000235 RSI: 0000000000000000 RDI: 0000000000000000 [ 1688.730955][ T5549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1688.730970][ T5549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1688.730985][ T5549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1688.731016][ T5549] [ 1688.915969][ T5165] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1688.927517][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1688.973288][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8745'. [ 1689.006419][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.055622][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.072760][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.080455][T32068] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1689.124138][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.139576][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.149691][ T5165] usb 2-1: Using ep0 maxpacket: 8 [ 1689.159835][ T5165] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1689.173077][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.190033][ T5165] usb 2-1: string descriptor 0 read error: -22 [ 1689.204238][ T5165] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1689.216733][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.228291][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.243317][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.257617][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.270991][ T5165] usb 2-1: config 0 descriptor?? [ 1689.275786][T32068] usb 4-1: Using ep0 maxpacket: 8 [ 1689.276399][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.295906][T32068] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1689.308749][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.312970][T32068] usb 4-1: string descriptor 0 read error: -22 [ 1689.319826][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.335750][T32068] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1689.336690][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.379707][T32068] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.381720][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.412141][T32068] usb 4-1: config 0 descriptor?? [ 1689.506939][ T5247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.525761][ T5247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.555674][ T5247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.574571][ T5247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.476797][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.540657][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.651505][ T5165] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1690.688586][ T5165] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1690.721089][ T5165] dib0700: firmware download failed at 7 with -22 [ 1690.777833][ T5165] usb 2-1: USB disconnect, device number 108 [ 1690.855558][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1690.896924][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.957581][T32068] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1690.995938][T32068] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1691.028084][T32068] dib0700: firmware download failed at 7 with -22 [ 1691.068741][T32068] usb 4-1: USB disconnect, device number 103 [ 1691.170636][ T5594] netlink: 'syz.0.8751': attribute type 29 has an invalid length. [ 1691.199773][ T5594] netlink: 'syz.0.8751': attribute type 29 has an invalid length. [ 1691.256223][ T5598] netlink: 'syz.0.8751': attribute type 29 has an invalid length. [ 1691.543738][ T5610] FAULT_INJECTION: forcing a failure. [ 1691.543738][ T5610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.565733][ T5152] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1691.626231][ T5610] CPU: 1 PID: 5610 Comm: syz.1.8820 Not tainted 6.10.0-rc7-syzkaller #0 [ 1691.634602][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1691.644700][ T5610] Call Trace: [ 1691.647988][ T5610] [ 1691.650920][ T5610] dump_stack_lvl+0x241/0x360 [ 1691.655624][ T5610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1691.660836][ T5610] ? __pfx__printk+0x10/0x10 [ 1691.665449][ T5610] ? __pfx_lock_release+0x10/0x10 [ 1691.670514][ T5610] should_fail_ex+0x3b0/0x4e0 [ 1691.675219][ T5610] _copy_from_user+0x2f/0xe0 [ 1691.680093][ T5610] get_compat_msghdr+0xae/0x730 [ 1691.685051][ T5610] ? __fget_files+0x29/0x470 [ 1691.689762][ T5610] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1691.695290][ T5610] ? __fget_files+0x3f6/0x470 [ 1691.700096][ T5610] __sys_sendmsg+0x273/0x3a0 [ 1691.704831][ T5610] ? __pfx___sys_sendmsg+0x10/0x10 [ 1691.709964][ T5610] ? vfs_write+0x7c4/0xc90 [ 1691.714434][ T5610] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1691.721047][ T5610] ? lockdep_hardirqs_on+0x99/0x150 [ 1691.726262][ T5610] __do_fast_syscall_32+0xb4/0x120 [ 1691.731432][ T5610] ? exc_page_fault+0x590/0x8c0 [ 1691.736394][ T5610] do_fast_syscall_32+0x34/0x80 [ 1691.741376][ T5610] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1691.747720][ T5610] RIP: 0023:0xf73fa579 [ 1691.751793][ T5610] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1691.771510][ T5610] RSP: 002b:00000000f5d1357c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1691.780000][ T5610] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 1691.788110][ T5610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1691.796108][ T5610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1691.804105][ T5610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1691.812109][ T5610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.820110][ T5610] [ 1691.946111][ T5152] usb 3-1: Using ep0 maxpacket: 8 [ 1691.961177][ T5152] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1691.992914][ T5152] usb 3-1: string descriptor 0 read error: -22 [ 1692.010689][ T5152] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1692.054836][ T5152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.085264][ T5152] usb 3-1: config 0 descriptor?? [ 1692.255012][ T5621] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1692.262114][ T5621] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1692.282771][ T5621] vhci_hcd vhci_hcd.0: Device attached [ 1692.300185][ T5625] vhci_hcd: connection closed [ 1692.384559][ T2907] vhci_hcd: stop threads [ 1692.432963][ T2907] vhci_hcd: release socket [ 1692.498871][ T2907] vhci_hcd: disconnect device [ 1692.849252][ T5608] ip6gretap1: entered promiscuous mode [ 1693.093469][ T5152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1693.129594][ T5152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1693.181932][ T5152] dib0700: firmware download failed at 7 with -22 [ 1693.238491][ T5152] usb 3-1: USB disconnect, device number 121 [ 1693.561241][ T5652] fuse: Unknown parameter 'äºuJœãÑÉMôÊ ·¶?î—±µùÙVm#–<Ðt)Á…­w02µw *h&FB$2"/Æ-$®'p0x0000000000000004' [ 1693.736695][T32046] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1693.947364][T32046] usb 4-1: Using ep0 maxpacket: 8 [ 1693.970011][T32046] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1694.000814][T32046] usb 4-1: string descriptor 0 read error: -22 [ 1694.011494][T32046] usb 4-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1694.026183][T32046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.052486][T32046] usb 4-1: config 0 descriptor?? [ 1694.095853][ T5165] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1694.346395][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 1694.356868][ T5165] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1694.386579][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.424025][ T5165] usb 5-1: Product: syz [ 1694.460624][ T5165] usb 5-1: Manufacturer: syz [ 1694.490145][ T5165] usb 5-1: SerialNumber: syz [ 1694.496999][ T5678] netlink: 'syz.1.8837': attribute type 41 has an invalid length. [ 1694.531382][ T5165] usb 5-1: config 0 descriptor?? [ 1694.658620][T32046] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1694.690739][T32046] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1694.711088][T32046] dib0700: firmware download failed at 7 with -22 [ 1694.725768][ T5152] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1694.743492][T32046] usb 4-1: USB disconnect, device number 104 [ 1694.816941][ T5693] FAULT_INJECTION: forcing a failure. [ 1694.816941][ T5693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.841737][ T5694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8840'. [ 1694.851175][ T5693] CPU: 0 PID: 5693 Comm: syz.0.8841 Not tainted 6.10.0-rc7-syzkaller #0 [ 1694.851212][ T5693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1694.851229][ T5693] Call Trace: [ 1694.851240][ T5693] [ 1694.851252][ T5693] dump_stack_lvl+0x241/0x360 [ 1694.851302][ T5693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1694.851339][ T5693] ? __pfx__printk+0x10/0x10 [ 1694.851375][ T5693] ? __pfx_lock_release+0x10/0x10 [ 1694.872913][ T5694] tc_dump_action: action bad kind [ 1694.876115][ T5693] should_fail_ex+0x3b0/0x4e0 [ 1694.876168][ T5693] _copy_from_user+0x2f/0xe0 [ 1694.876198][ T5693] get_compat_msghdr+0xae/0x730 [ 1694.876237][ T5693] ? __fget_files+0x29/0x470 [ 1694.876270][ T5693] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1694.876305][ T5693] ? __fget_files+0x3f6/0x470 [ 1694.930067][ T5693] __sys_sendmsg+0x273/0x3a0 [ 1694.934816][ T5693] ? __pfx___sys_sendmsg+0x10/0x10 [ 1694.935582][ T5152] usb 3-1: Using ep0 maxpacket: 8 [ 1694.940047][ T5693] ? vfs_write+0x7c4/0xc90 [ 1694.949673][ T5693] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1694.956332][ T5693] ? lockdep_hardirqs_on+0x99/0x150 [ 1694.957877][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1694.961610][ T5693] __do_fast_syscall_32+0xb4/0x120 [ 1694.977630][ T5693] ? exc_page_fault+0x590/0x8c0 [ 1694.982538][ T5693] do_fast_syscall_32+0x34/0x80 [ 1694.987452][ T5693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1694.990546][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1694.993806][ T5693] RIP: 0023:0xf7459579 [ 1694.993835][ T5693] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1694.993857][ T5693] RSP: 002b:00000000f5d7257c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1695.021212][ T5152] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1695.027286][ T5693] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 1695.027310][ T5693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1695.027325][ T5693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1695.027339][ T5693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1695.027353][ T5693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1695.027385][ T5693] [ 1695.246785][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.251757][ T5165] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1695.276687][ T5152] usb 3-1: config 0 descriptor?? [ 1695.286168][ T5165] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1695.327632][ T5165] dib0700: firmware download failed at 7 with -22 [ 1695.361393][ T5165] usb 5-1: USB disconnect, device number 115 [ 1695.446596][T31077] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 1695.526394][ T5152] hid-led 0003:04D8:F372.000E: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 1695.656005][T31077] usb 2-1: Invalid ep0 maxpacket: 64 [ 1695.702443][ T5152] hid-led 0003:04D8:F372.000E: Greynut Luxafor initialized [ 1695.774085][ T5715] netlink: 'syz.2.8845': attribute type 29 has an invalid length. [ 1695.795662][ T5152] usb 3-1: USB disconnect, device number 122 [ 1695.817970][T32046] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1695.837253][T31077] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1695.837418][T32046] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1695.895627][T32046] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1695.936323][T32046] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1695.965177][T21068] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1695.975035][T32046] IPVS: starting estimator thread 0... [ 1696.007014][T21068] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1696.037042][T32046] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1696.059424][T32046] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1696.068305][T31077] usb 2-1: Invalid ep0 maxpacket: 64 [ 1696.078899][T31077] usb usb2-port1: attempt power cycle [ 1696.085978][ T5720] IPVS: using max 16 ests per chain, 38400 per kthread [ 1696.094482][T32046] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1696.145807][T32046] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1696.164698][T32046] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1696.202778][T32046] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1696.234200][T32046] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1696.259144][T32046] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1696.325333][T32046] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1696.382502][T32068] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1696.413662][T32068] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1696.465253][T32068] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1696.526557][T31077] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1696.600717][T31077] usb 2-1: Invalid ep0 maxpacket: 64 [ 1696.743369][ T5704] netlink: 'syz.0.8843': attribute type 28 has an invalid length. [ 1696.766970][T31077] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1696.836320][T31077] usb 2-1: Invalid ep0 maxpacket: 64 [ 1696.878842][T31077] usb usb2-port1: unable to enumerate USB device [ 1697.086476][ T5745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8850'. [ 1697.454164][ T5772] net_ratelimit: 2 callbacks suppressed [ 1697.454188][ T5772] dccp_v6_rcv: dropped packet with invalid checksum [ 1697.509406][ T8] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1697.635840][T32046] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1697.717981][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1697.730766][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1697.749928][ T8] usb 3-1: string descriptor 0 read error: -22 [ 1697.758764][ T8] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1697.773479][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.790028][ T8] usb 3-1: config 0 descriptor?? [ 1697.832199][T32046] usb 1-1: not running at top speed; connect to a high speed hub [ 1697.866436][T32046] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1697.879169][T32046] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1697.902699][T32046] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1697.937252][T32046] usb 1-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1697.975650][T32046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.001249][T32046] usb 1-1: Product: syz [ 1698.009195][T32046] usb 1-1: Manufacturer: syz [ 1698.014144][T32046] usb 1-1: SerialNumber: syz [ 1698.020037][ T1057] syz_tun (unregistering): left allmulticast mode [ 1698.031077][ T5769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1698.039153][ T5769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1698.689064][T32046] usbhid 1-1:1.0: can't add hid device: -71 [ 1698.714771][T32046] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1698.768219][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1698.788376][T32046] usb 1-1: USB disconnect, device number 116 [ 1698.807227][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1698.833914][ T8] dib0700: firmware download failed at 7 with -22 [ 1698.888219][ T8] usb 3-1: USB disconnect, device number 123 [ 1699.591812][ T5825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8868'. [ 1699.635227][T21488] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1699.649076][T21488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1699.658653][T21488] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1699.667086][T21488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1699.674886][T21488] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1699.685687][T21488] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 1699.692260][T21488] Bluetooth: Wrong link type (-22) [ 1699.698292][T21488] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 1699.704854][T21488] Bluetooth: Wrong link type (-22) [ 1699.710837][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1700.447528][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 1700.511006][T32046] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1700.600441][ T5858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1700.668939][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.689349][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.705571][T32046] usb 3-1: Using ep0 maxpacket: 8 [ 1700.730720][ T5829] bridge_slave_0: entered allmulticast mode [ 1700.757145][T32046] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1700.777548][ T5829] bridge_slave_0: entered promiscuous mode [ 1700.819439][T32046] usb 3-1: string descriptor 0 read error: -22 [ 1700.830401][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.845968][T32046] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1700.879033][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.886875][T32046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.896505][ T5829] bridge_slave_1: entered allmulticast mode [ 1700.917495][T32046] usb 3-1: config 0 descriptor?? [ 1700.924456][ T5829] bridge_slave_1: entered promiscuous mode [ 1701.030099][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.052879][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1701.152053][ T5829] team0: Port device team_slave_0 added [ 1701.167281][ T5829] team0: Port device team_slave_1 added [ 1701.305987][T21488] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1701.315255][T21488] Bluetooth: hci1: Injecting HCI hardware error event [ 1701.325951][T21488] Bluetooth: hci1: hardware error 0x00 [ 1701.340248][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1701.371468][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.407857][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1701.522581][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1701.557824][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1701.649351][T32046] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1701.672533][T32046] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1701.685784][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.708735][T32046] dib0700: firmware download failed at 7 with -22 [ 1701.739284][T32046] usb 3-1: USB disconnect, device number 124 [ 1701.785727][ T5828] Bluetooth: hci2: command tx timeout [ 1701.920635][ T5829] hsr_slave_0: entered promiscuous mode [ 1701.930476][ T5829] hsr_slave_1: entered promiscuous mode [ 1701.944645][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1701.957799][ T5829] Cannot create hsr debugfs directory [ 1702.065624][T31077] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1702.227852][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.268479][T31077] usb 5-1: config 0 has no interfaces? [ 1702.276413][T31077] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1702.316656][T31077] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1702.325148][T31077] usb 5-1: Manufacturer: syz [ 1702.333360][T31077] usb 5-1: SerialNumber: syz [ 1702.367588][T31077] usb 5-1: config 0 descriptor?? [ 1702.479345][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.663657][T31077] usb 5-1: USB disconnect, device number 116 [ 1702.744714][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.835282][ T5894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8889'. [ 1702.954033][T30674] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1702.966579][T30674] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.984669][T30674] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1703.005813][T30674] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1703.014905][T30674] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1703.029168][T30674] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1703.030880][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.285689][T32068] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1703.311393][ T5829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.476243][T21488] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1703.486795][T32068] usb 3-1: Using ep0 maxpacket: 8 [ 1703.492576][ T5829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.508056][T32068] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1703.521534][T32068] usb 3-1: string descriptor 0 read error: -22 [ 1703.532803][T32068] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1703.565658][T32068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.620507][T32068] usb 3-1: config 0 descriptor?? [ 1703.719505][ T5829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.866673][T21488] Bluetooth: hci2: command tx timeout [ 1703.990476][ T5829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.105904][ T12] bridge_slave_1: left allmulticast mode [ 1704.118851][ T12] bridge_slave_1: left promiscuous mode [ 1704.142614][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.209635][ T12] bridge_slave_0: left allmulticast mode [ 1704.224689][ T12] bridge_slave_0: left promiscuous mode [ 1704.238987][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.807941][ T5014] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1705.015829][ T5014] usb 1-1: Using ep0 maxpacket: 8 [ 1705.031379][ T5014] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1705.044566][ T5014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.056199][ T5014] usb 1-1: Product: syz [ 1705.069858][ T5014] usb 1-1: Manufacturer: syz [ 1705.074689][ T5014] usb 1-1: SerialNumber: syz [ 1705.085885][ T5014] usb 1-1: config 0 descriptor?? [ 1705.147840][T21488] Bluetooth: hci4: command tx timeout [ 1705.282781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.299227][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.331140][ T12] bond0 (unregistering): Released all slaves [ 1705.502378][T32068] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1705.513995][T32068] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1705.523614][T32068] dib0700: firmware download failed at 7 with -22 [ 1705.537083][T32068] usb 3-1: USB disconnect, device number 125 [ 1705.763392][ T5014] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1705.802137][ T5014] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1705.844777][ T5014] dib0700: firmware download failed at 7 with -22 [ 1705.867605][ T5014] usb 1-1: USB disconnect, device number 117 [ 1705.950400][T21488] Bluetooth: hci2: command tx timeout [ 1705.996805][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8900'. [ 1706.275039][ T12] hsr_slave_0: left promiscuous mode [ 1706.283881][ T12] hsr_slave_1: left promiscuous mode [ 1706.292410][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.304515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.317032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.327323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.388434][ T12] veth1_macvtap: left promiscuous mode [ 1706.410181][ T12] veth0_macvtap: left promiscuous mode [ 1706.422889][ T12] veth1_vlan: left promiscuous mode [ 1706.434013][ T12] veth0_vlan: left promiscuous mode [ 1707.225715][T21488] Bluetooth: hci4: command tx timeout [ 1707.623314][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1707.683324][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1708.025642][T21488] Bluetooth: hci2: command tx timeout [ 1708.030426][ T5972] trusted_key: encrypted_key: insufficient parameters specified [ 1708.470834][ T5944] team0: entered promiscuous mode [ 1708.476153][ T5944] team_slave_0: entered promiscuous mode [ 1708.482280][ T5944] team_slave_1: entered promiscuous mode [ 1708.533241][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1708.556801][ T5950] team0: left promiscuous mode [ 1708.562094][ T5950] team_slave_0: left promiscuous mode [ 1708.576529][ T5950] team_slave_1: left promiscuous mode [ 1708.610468][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 1708.657074][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1708.674773][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1708.713506][ T5976] netlink: 'syz.4.8909': attribute type 41 has an invalid length. [ 1708.722726][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1708.832522][ T5980] FAULT_INJECTION: forcing a failure. [ 1708.832522][ T5980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1708.897265][ T5980] CPU: 0 PID: 5980 Comm: syz.2.8910 Not tainted 6.10.0-rc7-syzkaller #0 [ 1708.905679][ T5980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1708.915775][ T5980] Call Trace: [ 1708.919068][ T5980] [ 1708.922008][ T5980] dump_stack_lvl+0x241/0x360 [ 1708.926734][ T5980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1708.932010][ T5980] ? __pfx__printk+0x10/0x10 [ 1708.936626][ T5980] ? __pfx_lock_release+0x10/0x10 [ 1708.941676][ T5980] should_fail_ex+0x3b0/0x4e0 [ 1708.946465][ T5980] _copy_from_user+0x2f/0xe0 [ 1708.951112][ T5980] get_old_timespec32+0x113/0x280 [ 1708.956174][ T5980] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1708.962260][ T5980] ? __pfx_get_old_timespec32+0x10/0x10 [ 1708.967823][ T5980] ? __fget_files+0x3f6/0x470 [ 1708.972528][ T5980] __sys_recvmmsg+0xfc/0x270 [ 1708.977133][ T5980] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1708.983122][ T5980] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1708.988334][ T5980] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1708.994698][ T5980] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 1709.000881][ T5980] __do_fast_syscall_32+0xb4/0x120 [ 1709.006014][ T5980] ? exc_page_fault+0x590/0x8c0 [ 1709.010882][ T5980] do_fast_syscall_32+0x34/0x80 [ 1709.015754][ T5980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1709.022272][ T5980] RIP: 0023:0xf73d9579 [ 1709.026350][ T5980] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1709.046168][ T5980] RSP: 002b:00000000f5cf257c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1709.054592][ T5980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200037c0 [ 1709.062663][ T5980] RDX: 00000000000003b4 RSI: 0000000000000000 RDI: 0000000020003700 [ 1709.070657][ T5980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1709.078646][ T5980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1709.086646][ T5980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1709.094641][ T5980] [ 1709.223668][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.241376][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.256690][ T5904] bridge_slave_0: entered allmulticast mode [ 1709.271446][ T5904] bridge_slave_0: entered promiscuous mode [ 1709.306609][T21488] Bluetooth: hci4: command tx timeout [ 1709.323138][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.369826][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.394061][ T5904] bridge_slave_1: entered allmulticast mode [ 1709.405994][T32068] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1709.428951][ T5904] bridge_slave_1: entered promiscuous mode [ 1709.563109][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.586021][T32068] usb 1-1: Using ep0 maxpacket: 8 [ 1709.595076][T32068] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1709.629041][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.650342][T32068] usb 1-1: string descriptor 0 read error: -22 [ 1709.657612][T32068] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1709.685795][T32068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.717123][T32068] usb 1-1: config 0 descriptor?? [ 1709.817126][ T5904] team0: Port device team_slave_0 added [ 1709.854269][ T5904] team0: Port device team_slave_1 added [ 1709.990885][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.999151][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.026405][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.046932][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.069085][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.113434][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.413574][ T5904] hsr_slave_0: entered promiscuous mode [ 1710.453571][ T5904] hsr_slave_1: entered promiscuous mode [ 1710.468994][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1710.480177][ T5904] Cannot create hsr debugfs directory [ 1710.538590][T32068] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1710.570983][T32068] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1710.580129][T32068] dib0700: firmware download failed at 7 with -22 [ 1710.599908][T32068] usb 1-1: USB disconnect, device number 118 [ 1710.613644][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.782245][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.814507][T32046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.821816][T32046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.873877][T32046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.881166][T32046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.127043][ T5014] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1711.259531][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1711.335584][ T5014] usb 5-1: Using ep0 maxpacket: 16 [ 1711.349057][ T6027] netlink: 'syz.2.8920': attribute type 41 has an invalid length. [ 1711.362456][ T5014] usb 5-1: config 0 has no interfaces? [ 1711.385950][T21488] Bluetooth: hci4: command tx timeout [ 1711.750622][ T5014] usb 5-1: string descriptor 0 read error: -71 [ 1711.763041][ T5014] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1711.791089][ T6041] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1711.800679][ T5014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.839361][ T5014] usb 5-1: config 0 descriptor?? [ 1711.852484][ T6041] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1711.865741][ T5014] usb 5-1: can't set config #0, error -71 [ 1711.881761][ T5014] usb 5-1: USB disconnect, device number 117 [ 1711.974753][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8921'. [ 1712.135778][T32068] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1712.152694][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.346284][T32068] usb 1-1: Using ep0 maxpacket: 8 [ 1712.358453][T32068] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1712.392195][T32068] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1712.414387][T32068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.451315][ T5829] veth0_vlan: entered promiscuous mode [ 1712.460910][T32068] usb 1-1: Product: syz [ 1712.465157][T32068] usb 1-1: Manufacturer: syz [ 1712.475851][T32068] usb 1-1: SerialNumber: syz [ 1712.513082][T32068] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input23 [ 1712.537289][ T5904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1712.607597][ T5829] veth1_vlan: entered promiscuous mode [ 1712.622939][ T5904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1712.650871][ T5904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1712.678405][ T5904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1712.778724][ T4532] bcm5974 1-1:1.0: could not read from device [ 1712.802273][ T4532] bcm5974 1-1:1.0: could not read from device [ 1712.827258][ T4532] bcm5974 1-1:1.0: could not read from device [ 1712.833130][T32068] usb 1-1: USB disconnect, device number 119 [ 1712.862636][ T4532] bcm5974 1-1:1.0: could not read from device [ 1712.921010][ T5829] veth0_macvtap: entered promiscuous mode [ 1713.001414][ T5829] veth1_macvtap: entered promiscuous mode [ 1713.108384][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.121480][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.132592][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.147495][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.162679][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.183539][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.205209][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.241845][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.268662][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1713.290468][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.309219][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1713.357382][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.383293][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.410224][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.444548][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.470078][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.499079][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.520921][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.548219][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.584739][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1713.605622][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1713.627122][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1713.641683][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.660984][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.688878][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.715759][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.842123][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1713.894594][ T6080] netlink: 'syz.2.8930': attribute type 41 has an invalid length. [ 1714.000216][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1714.099585][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1714.106868][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1714.149563][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1714.156829][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1714.304785][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.342047][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.378452][ T6092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8934'. [ 1714.438474][ T6092] bond1: entered promiscuous mode [ 1714.471591][ T6097] ip6gretap1: entered promiscuous mode [ 1714.476672][ T5153] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1714.484857][ T6097] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1714.533865][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1714.569988][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1714.677571][ T5153] usb 5-1: Using ep0 maxpacket: 16 [ 1714.713460][ T5153] usb 5-1: config 0 has no interfaces? [ 1714.773862][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1714.952582][ T6106] program syz.0.8936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1715.051338][ T5904] veth0_vlan: entered promiscuous mode [ 1715.087391][ T5904] veth1_vlan: entered promiscuous mode [ 1715.168112][ T5153] usb 5-1: string descriptor 0 read error: -71 [ 1715.194947][ T5153] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1715.215674][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.258370][ T5153] usb 5-1: config 0 descriptor?? [ 1715.272918][ T5153] usb 5-1: can't set config #0, error -71 [ 1715.285240][ T5904] veth0_macvtap: entered promiscuous mode [ 1715.296286][ T5153] usb 5-1: USB disconnect, device number 118 [ 1715.329525][ T5904] veth1_macvtap: entered promiscuous mode [ 1715.418774][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.448275][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.475390][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.491552][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.501952][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.515036][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.527803][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.539268][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.551703][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.573696][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.591094][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.609549][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.635104][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1715.670660][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.693107][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.711330][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.738514][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.749930][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.761377][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.790049][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.814434][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.843199][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.864814][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.894828][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1715.913798][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.941579][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.998048][ T5904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.043428][ T5904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.058241][ T5904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.074385][ T5904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.283487][ T6142] netlink: 'syz.4.8941': attribute type 41 has an invalid length. [ 1716.400086][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.439236][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.527996][ T3825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.558376][ T3825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.605695][ T6148] netlink: 'syz.2.8942': attribute type 41 has an invalid length. [ 1716.744346][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8944'. [ 1716.849319][ T6162] FAULT_INJECTION: forcing a failure. [ 1716.849319][ T6162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.849360][ T6162] CPU: 0 PID: 6162 Comm: syz.2.8946 Not tainted 6.10.0-rc7-syzkaller #0 [ 1716.849385][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1716.849400][ T6162] Call Trace: [ 1716.849411][ T6162] [ 1716.849422][ T6162] dump_stack_lvl+0x241/0x360 [ 1716.849468][ T6162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1716.849504][ T6162] ? __pfx__printk+0x10/0x10 [ 1716.849539][ T6162] ? __pfx_lock_release+0x10/0x10 [ 1716.849575][ T6162] should_fail_ex+0x3b0/0x4e0 [ 1716.849615][ T6162] _copy_from_user+0x2f/0xe0 [ 1716.849643][ T6162] get_compat_msghdr+0xae/0x730 [ 1716.849683][ T6162] ? __fget_files+0x29/0x470 [ 1716.849726][ T6162] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1716.849760][ T6162] ? __fget_files+0x3f6/0x470 [ 1716.849804][ T6162] __sys_recvmsg+0x28e/0x3e0 [ 1716.849841][ T6162] ? __pfx___sys_recvmsg+0x10/0x10 [ 1716.849917][ T6162] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1716.849950][ T6162] ? lockdep_hardirqs_on+0x99/0x150 [ 1716.849986][ T6162] __do_fast_syscall_32+0xb4/0x120 [ 1716.850021][ T6162] ? exc_page_fault+0x590/0x8c0 [ 1716.850057][ T6162] do_fast_syscall_32+0x34/0x80 [ 1716.850090][ T6162] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1716.850117][ T6162] RIP: 0023:0xf73d9579 [ 1716.850137][ T6162] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1716.850158][ T6162] RSP: 002b:00000000f5cf257c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1716.850184][ T6162] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001400 [ 1716.850202][ T6162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1716.850216][ T6162] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1716.850229][ T6162] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1716.850242][ T6162] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1716.850272][ T6162] [ 1716.906306][ T6155] bond1: entered promiscuous mode [ 1717.038739][ T6164] ip6gretap1: entered promiscuous mode [ 1717.040333][ T6161] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1717.073057][ T6164] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1717.204831][ T6168] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1717.475753][ T5152] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1717.666035][ T5152] usb 3-1: Using ep0 maxpacket: 8 [ 1717.677718][ T5152] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1717.692132][ T5152] usb 3-1: string descriptor 0 read error: -22 [ 1717.695781][T21063] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1717.713997][ T5152] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1717.732888][ T5152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.760457][ T5152] usb 3-1: config 0 descriptor?? [ 1717.896113][ T5165] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1717.905760][T21063] usb 1-1: Using ep0 maxpacket: 16 [ 1717.920132][T21063] usb 1-1: config 0 has an invalid interface number: 222 but max is 1 [ 1717.951620][T21063] usb 1-1: config 0 has no interface number 1 [ 1717.964214][ T6193] netlink: 'syz.1.8952': attribute type 41 has an invalid length. [ 1717.992212][T21063] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice=fa.29 [ 1718.019522][T21063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.055863][T21063] usb 1-1: Product: syz [ 1718.066478][T21063] usb 1-1: Manufacturer: syz [ 1718.090510][T21063] usb 1-1: SerialNumber: syz [ 1718.096571][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 1718.118931][ T5165] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1718.150205][T21063] usb 1-1: config 0 descriptor?? [ 1718.159146][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.226815][ T5165] usb 5-1: config 0 descriptor?? [ 1718.664241][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1718.740523][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1718.951240][ T5152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1718.990293][ T5152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1719.025844][ T5152] dib0700: firmware download failed at 7 with -22 [ 1719.087591][ T5152] usb 3-1: USB disconnect, device number 126 [ 1719.217543][T21063] usb 1-1: USB disconnect, device number 120 [ 1719.503758][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1719.746802][ T5152] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1719.995825][ T5152] usb 2-1: Using ep0 maxpacket: 8 [ 1720.007553][ T6231] input: syz1 as /devices/virtual/input/input24 [ 1720.028884][ T5152] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1720.084154][ T5152] usb 2-1: string descriptor 0 read error: -22 [ 1720.098529][ T5152] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1720.148043][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.169656][ T5152] usb 2-1: config 0 descriptor?? [ 1720.258014][ T5165] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1720.315581][ T5165] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1720.339809][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1720.362130][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1720.378266][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1720.399878][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1720.405851][ T5165] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1720.435002][ T5828] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1720.445383][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1720.478354][ T5165] usb 5-1: USB disconnect, device number 119 [ 1720.599893][ T6243] IPVS: length: 191 != 24 [ 1720.798636][ T6246] netlink: 'syz.4.8964': attribute type 41 has an invalid length. [ 1720.993750][ T5152] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1721.042818][ T5152] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1721.078260][ T5152] dib0700: firmware download failed at 7 with -22 [ 1721.088643][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.119475][ T5152] usb 2-1: USB disconnect, device number 113 [ 1721.273763][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.472448][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.596378][ T5153] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1721.630437][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.796409][ T6240] chnl_net:caif_netlink_parms(): no params data found [ 1721.805683][ T5153] usb 5-1: Using ep0 maxpacket: 16 [ 1721.822264][ T5153] usb 5-1: config 0 has no interfaces? [ 1721.849217][ T5153] usb 5-1: string descriptor 0 read error: -71 [ 1721.876962][ T5153] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1721.905077][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.933673][ T5153] usb 5-1: config 0 descriptor?? [ 1721.952963][ T5153] usb 5-1: can't set config #0, error -71 [ 1721.978420][ T5153] usb 5-1: USB disconnect, device number 120 [ 1722.165621][ T5152] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1722.190750][ T12] bridge_slave_1: left allmulticast mode [ 1722.204255][ T12] bridge_slave_1: left promiscuous mode [ 1722.215841][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.227076][ T12] bridge_slave_0: left allmulticast mode [ 1722.236408][ T12] bridge_slave_0: left promiscuous mode [ 1722.242293][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.265098][ T6275] IPVS: length: 191 != 24 [ 1722.357916][ T5152] usb 1-1: Using ep0 maxpacket: 8 [ 1722.370376][ T5152] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1722.391886][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.429356][ T5152] usb 1-1: config 0 descriptor?? [ 1722.506888][ T5828] Bluetooth: hci2: command tx timeout [ 1723.062417][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1723.083696][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1723.108500][ T12] bond0 (unregistering): Released all slaves [ 1723.467084][ T6286] netlink: 'syz.2.8976': attribute type 41 has an invalid length. [ 1723.617193][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.635868][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.656554][ T6240] bridge_slave_0: entered allmulticast mode [ 1723.680074][ T6240] bridge_slave_0: entered promiscuous mode [ 1723.715529][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.729640][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.746997][ T6240] bridge_slave_1: entered allmulticast mode [ 1723.761382][ T6240] bridge_slave_1: entered promiscuous mode [ 1723.950050][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.987637][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1724.006226][T21063] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1724.034821][ T12] hsr_slave_0: left promiscuous mode [ 1724.075818][ T12] hsr_slave_1: left promiscuous mode [ 1724.082651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1724.100389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.128812][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1724.146911][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.179568][ T12] veth1_macvtap: left promiscuous mode [ 1724.185211][ T12] veth0_macvtap: left promiscuous mode [ 1724.192128][ T12] veth1_vlan: left promiscuous mode [ 1724.197941][ T12] veth0_vlan: left promiscuous mode [ 1724.217603][T21063] usb 3-1: Using ep0 maxpacket: 8 [ 1724.225940][T21063] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1724.241669][ T5152] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1724.249556][T21063] usb 3-1: string descriptor 0 read error: -22 [ 1724.264975][ T5152] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1724.279306][T21063] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1724.295184][ T5152] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1724.318779][ T5152] usb 1-1: USB disconnect, device number 121 [ 1724.325053][T21063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.356417][ T5165] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1724.386207][T21063] usb 3-1: config 0 descriptor?? [ 1724.565948][ T5165] usb 5-1: Using ep0 maxpacket: 8 [ 1724.578487][ T5165] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1724.590123][ T5828] Bluetooth: hci2: command tx timeout [ 1724.603620][ T5165] usb 5-1: string descriptor 0 read error: -22 [ 1724.610979][ T5165] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1724.639661][ T5165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.683037][ T5165] usb 5-1: config 0 descriptor?? [ 1725.687327][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1725.765230][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1726.670860][ T5828] Bluetooth: hci2: command tx timeout [ 1726.999723][T21063] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1727.057347][T21063] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1727.091237][T21063] dib0700: firmware download failed at 7 with -22 [ 1727.114257][T21063] usb 3-1: USB disconnect, device number 127 [ 1727.141096][ T5165] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1727.180093][ T5165] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1727.220690][ T6240] team0: Port device team_slave_0 added [ 1727.227073][ T5165] dib0700: firmware download failed at 7 with -22 [ 1727.257443][ T5165] usb 5-1: USB disconnect, device number 121 [ 1727.290424][ T6240] team0: Port device team_slave_1 added [ 1727.441118][ T6326] IPVS: length: 191 != 24 [ 1727.487630][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1727.546615][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.629085][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1727.640124][T21068] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1727.667060][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1727.674171][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1727.746933][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1727.825576][T21068] usb 1-1: Using ep0 maxpacket: 16 [ 1727.854821][T21068] usb 1-1: config 0 has no interfaces? [ 1727.900831][T21068] usb 1-1: string descriptor 0 read error: -71 [ 1727.946041][T21068] usb 1-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1727.985629][T21068] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.045594][T21068] usb 1-1: config 0 descriptor?? [ 1728.058552][T21068] usb 1-1: can't set config #0, error -71 [ 1728.082937][T21068] usb 1-1: USB disconnect, device number 122 [ 1728.124678][ T6240] hsr_slave_0: entered promiscuous mode [ 1728.186002][ T6240] hsr_slave_1: entered promiscuous mode [ 1728.220217][ T6240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1728.255686][ T6240] Cannot create hsr debugfs directory [ 1728.261681][ T6333] netlink: 'syz.4.8988': attribute type 41 has an invalid length. [ 1728.403342][T32068] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1728.615810][T32068] usb 3-1: Using ep0 maxpacket: 8 [ 1728.624183][ T6354] sctp: [Deprecated]: syz.1.8992 (pid 6354) Use of int in max_burst socket option deprecated. [ 1728.624183][ T6354] Use struct sctp_assoc_value instead [ 1728.651108][T32068] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1728.673211][T32068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.702843][T32068] usb 3-1: config 0 descriptor?? [ 1728.728016][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1728.745697][ T5828] Bluetooth: hci2: command tx timeout [ 1728.777113][ T6354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1728.786641][ T6354] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1728.835722][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8991'. [ 1729.216179][ T5165] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1729.251342][ T6370] IPVS: length: 191 != 24 [ 1729.415750][ T5165] usb 1-1: Using ep0 maxpacket: 8 [ 1729.425869][ T5165] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1729.465230][ T5165] usb 1-1: string descriptor 0 read error: -22 [ 1729.492036][ T5165] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1729.519221][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.559795][ T5165] usb 1-1: config 0 descriptor?? [ 1730.033264][ T6240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1730.160031][ T6240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1730.221094][ T6240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1730.292926][ T6240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1730.616576][T32068] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1730.654449][T32068] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1730.677791][ T5165] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1730.708268][ T5165] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1730.713370][T32068] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1730.749505][ T5165] dib0700: firmware download failed at 7 with -22 [ 1730.781804][T32068] usb 3-1: USB disconnect, device number 2 [ 1730.821181][ T5165] usb 1-1: USB disconnect, device number 123 [ 1730.830491][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.830561][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.017446][ T6240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1731.098625][ T6240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.140133][T32068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.147729][T32068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.401289][ T6398] netlink: 'syz.2.9000': attribute type 41 has an invalid length. [ 1731.425765][ T6402] netlink: 'syz.1.9001': attribute type 41 has an invalid length. [ 1731.480806][T32068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.488217][T32068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.648167][ T5165] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1731.868257][ T5165] usb 1-1: Using ep0 maxpacket: 16 [ 1731.881997][ T5165] usb 1-1: config 0 has no interfaces? [ 1731.889235][ T6240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1731.889259][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1731.930576][ T5165] usb 1-1: string descriptor 0 read error: -71 [ 1731.939347][ T5165] usb 1-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1731.969822][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.010932][ T5165] usb 1-1: config 0 descriptor?? [ 1732.042637][ T5165] usb 1-1: can't set config #0, error -71 [ 1732.049249][ T6425] IPVS: length: 191 != 24 [ 1732.064325][ T5165] usb 1-1: USB disconnect, device number 124 [ 1732.153571][ T6240] veth0_vlan: entered promiscuous mode [ 1732.229008][ T6240] veth1_vlan: entered promiscuous mode [ 1732.357657][ T6240] veth0_macvtap: entered promiscuous mode [ 1732.388864][ T6240] veth1_macvtap: entered promiscuous mode [ 1732.463829][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.485347][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.507004][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.537902][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.561174][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.597939][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.634433][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.669946][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.702223][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.739070][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.771007][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1732.804571][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.815678][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1732.844026][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1732.930701][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1732.962852][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1732.993835][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.017127][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.043967][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.055579][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1733.086695][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.114999][ T8] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1733.118536][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.151211][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.196627][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.212490][ T8] usb 3-1: config 0 descriptor?? [ 1733.218056][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.265571][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.300748][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1733.300771][ T29] audit: type=1400 audit(1720448767.845:306): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6448 comm="syz.1.9011" [ 1733.342471][ T6240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1733.368308][ T6240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1733.408838][ T6240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1733.567483][ T6240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.600384][ T6240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.615065][ T6240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.651341][ T6240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1733.917111][ T6463] netlink: 'syz.0.9013': attribute type 41 has an invalid length. [ 1734.341479][ T6470] netlink: 'syz.1.9014': attribute type 41 has an invalid length. [ 1734.391743][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.421507][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.583151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1734.628398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1734.856187][ T6480] IPVS: length: 191 != 24 [ 1735.175195][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1735.202175][ T8] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1735.275776][ T8] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1735.317032][ T8] usb 3-1: USB disconnect, device number 3 [ 1735.618775][ T6503] netlink: 'syz.0.9024': attribute type 41 has an invalid length. [ 1735.700955][ T6505] netlink: 'syz.3.9025': attribute type 41 has an invalid length. [ 1736.036151][ T5165] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1736.047273][ T6517] IPVS: length: 191 != 24 [ 1736.235857][ T5165] usb 2-1: Using ep0 maxpacket: 8 [ 1736.248222][ T5165] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1736.309140][ T5165] usb 2-1: string descriptor 0 read error: -22 [ 1736.325809][ T5165] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1736.346575][T32068] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1736.355978][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.393861][ T5165] usb 2-1: config 0 descriptor?? [ 1736.426837][ T6528] FAULT_INJECTION: forcing a failure. [ 1736.426837][ T6528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.462558][ T6528] CPU: 1 PID: 6528 Comm: syz.3.9032 Not tainted 6.10.0-rc7-syzkaller #0 [ 1736.471071][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1736.481180][ T6528] Call Trace: [ 1736.484548][ T6528] [ 1736.487526][ T6528] dump_stack_lvl+0x241/0x360 [ 1736.492280][ T6528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1736.497755][ T6528] ? __pfx__printk+0x10/0x10 [ 1736.502504][ T6528] ? __pfx_lock_release+0x10/0x10 [ 1736.507581][ T6528] ? __lock_acquire+0x1346/0x1fd0 [ 1736.512678][ T6528] should_fail_ex+0x3b0/0x4e0 [ 1736.517522][ T6528] _copy_from_user+0x2f/0xe0 [ 1736.522255][ T6528] kstrtouint_from_user+0xc6/0x190 [ 1736.527452][ T6528] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1736.533233][ T6528] ? __pfx_lock_acquire+0x10/0x10 [ 1736.538319][ T6528] proc_fail_nth_write+0xaa/0x2d0 [ 1736.543419][ T6528] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1736.549371][ T6528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1736.555069][ T6528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1736.560778][ T6528] vfs_write+0x2a2/0xc90 [ 1736.565101][ T6528] ? __pfx_vfs_write+0x10/0x10 [ 1736.570257][ T6528] ? __fget_files+0x29/0x470 [ 1736.574979][ T6528] ? __fget_files+0x3f6/0x470 [ 1736.579749][ T6528] ksys_write+0x1a0/0x2c0 [ 1736.584200][ T6528] ? __pfx_ksys_write+0x10/0x10 [ 1736.589215][ T6528] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1736.596061][ T6528] ? lockdep_hardirqs_on+0x99/0x150 [ 1736.601346][ T6528] __do_fast_syscall_32+0xb4/0x120 [ 1736.606556][ T6528] ? exc_page_fault+0x590/0x8c0 [ 1736.611599][ T6528] do_fast_syscall_32+0x34/0x80 [ 1736.616523][ T6528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1736.622913][ T6528] RIP: 0023:0xf7402579 [ 1736.627034][ T6528] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1736.646841][ T6528] RSP: 002b:00000000f5cfa5b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1736.655420][ T6528] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5cfa630 [ 1736.663449][ T6528] RDX: 0000000000000001 RSI: 00000000f73edff4 RDI: 0000000000000000 [ 1736.671475][ T6528] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1736.679597][ T6528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1736.687620][ T6528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.695670][ T6528] [ 1736.698991][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.785510][T32068] usb 5-1: Using ep0 maxpacket: 8 [ 1736.795953][T32068] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1736.806604][T32068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.816956][T32068] usb 5-1: Product: syz [ 1736.823119][T32068] usb 5-1: Manufacturer: syz [ 1736.830391][T32068] usb 5-1: SerialNumber: syz [ 1736.842162][T32068] usb 5-1: config 0 descriptor?? [ 1737.113560][ T5165] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1737.146663][ T5165] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1737.146812][T32068] msi2500 5-1:0.0: Registered as swradio16 [ 1737.171602][ T5165] dib0700: firmware download failed at 7 with -22 [ 1737.207832][ T5165] usb 2-1: USB disconnect, device number 114 [ 1737.214925][T32068] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1737.281370][T32068] usb 5-1: USB disconnect, device number 122 [ 1737.575582][ T5152] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1737.765602][ T5152] usb 4-1: Using ep0 maxpacket: 8 [ 1737.817013][ T5152] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1737.827267][ T5152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.892829][ T5152] usb 4-1: config 0 descriptor?? [ 1738.016881][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9036'. [ 1738.150446][ T6552] bond1: entered promiscuous mode [ 1738.263527][ T6556] ip6gretap1: entered promiscuous mode [ 1738.293976][ T6556] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1738.382633][ T6558] netlink: 'syz.2.9038': attribute type 41 has an invalid length. [ 1738.502541][ T6565] netlink: 'syz.4.9039': attribute type 41 has an invalid length. [ 1738.597242][ T6567] IPVS: length: 191 != 24 [ 1738.995580][ T5165] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1739.205674][ T5165] usb 2-1: Using ep0 maxpacket: 16 [ 1739.215809][ T5165] usb 2-1: config 0 has no interfaces? [ 1739.231636][ T5165] usb 2-1: string descriptor 0 read error: -71 [ 1739.245951][ T5165] usb 2-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1739.256689][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.272637][ T5165] usb 2-1: config 0 descriptor?? [ 1739.280385][ T5165] usb 2-1: can't set config #0, error -71 [ 1739.297461][ T5165] usb 2-1: USB disconnect, device number 115 [ 1739.851981][ T5152] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1739.880738][ T5152] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1739.927356][ T5152] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1739.936010][T32068] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1739.974363][ T5152] usb 4-1: USB disconnect, device number 105 [ 1740.146758][ T5218] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1740.154859][T32068] usb 5-1: Using ep0 maxpacket: 8 [ 1740.184120][T32068] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1740.211727][T32068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.224950][T32068] usb 5-1: Product: syz [ 1740.229409][T32068] usb 5-1: Manufacturer: syz [ 1740.234540][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9051'. [ 1740.246392][T32068] usb 5-1: SerialNumber: syz [ 1740.254930][T32068] usb 5-1: config 0 descriptor?? [ 1740.305609][ T6596] bond2: entered promiscuous mode [ 1740.363841][ T6598] ip6gretap2: entered promiscuous mode [ 1740.370292][ T6598] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1740.433100][T32068] msi2500 5-1:0.0: Registered as swradio16 [ 1740.449750][T32068] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1740.683198][ T5165] usb 5-1: USB disconnect, device number 123 [ 1740.800342][ T6619] netlink: 'syz.0.9056': attribute type 41 has an invalid length. [ 1740.950216][ T6626] netlink: 'syz.1.9058': attribute type 41 has an invalid length. [ 1740.960458][ T6623] netlink: 'syz.3.9057': attribute type 41 has an invalid length. [ 1741.038272][ T29] audit: type=1400 audit(1720448775.595:307): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=6627 comm="syz.2.9059" [ 1741.406989][T32068] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1741.615522][T32068] usb 4-1: Using ep0 maxpacket: 8 [ 1741.639948][T32068] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1741.665793][T32068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1741.689719][T32068] usb 4-1: config 0 descriptor?? [ 1741.726949][ T5218] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1741.767368][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9063'. [ 1741.870302][ T6639] bond1: entered promiscuous mode [ 1741.965829][ T5218] usb 5-1: Using ep0 maxpacket: 16 [ 1741.984498][ T5218] usb 5-1: config 0 has no interfaces? [ 1742.002512][ T5218] usb 5-1: string descriptor 0 read error: -71 [ 1742.012071][ T5218] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1742.028418][ T5218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.029443][ T6643] ip6gretap1: entered promiscuous mode [ 1742.043712][ T5218] usb 5-1: config 0 descriptor?? [ 1742.070318][ T5218] usb 5-1: can't set config #0, error -71 [ 1742.089750][ T5218] usb 5-1: USB disconnect, device number 124 [ 1742.096230][ T6643] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1742.865573][T21063] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1742.987744][ T6664] netlink: 'syz.0.9070': attribute type 41 has an invalid length. [ 1743.081173][T21063] usb 3-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 1743.103405][T21063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.114649][T21063] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 1743.141080][T21063] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1743.150527][T21063] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1743.195234][T21063] usb 3-1: Product: syz [ 1743.205284][T21063] usb 3-1: Manufacturer: syz [ 1743.248007][T21063] usb 3-1: config 0 descriptor?? [ 1743.256643][ T6672] FAULT_INJECTION: forcing a failure. [ 1743.256643][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.316883][ T6672] CPU: 0 PID: 6672 Comm: syz.0.9073 Not tainted 6.10.0-rc7-syzkaller #0 [ 1743.325302][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1743.335409][ T6672] Call Trace: [ 1743.338728][ T6672] [ 1743.341692][ T6672] dump_stack_lvl+0x241/0x360 [ 1743.346437][ T6672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.350860][ T6671] netlink: 'syz.1.9072': attribute type 41 has an invalid length. [ 1743.351668][ T6672] ? __pfx__printk+0x10/0x10 [ 1743.364153][ T6672] ? netlink_insert+0x10b7/0x14b0 [ 1743.369426][ T6672] should_fail_ex+0x3b0/0x4e0 [ 1743.374266][ T6672] ? __alloc_skb+0x1c3/0x440 [ 1743.378950][ T6672] should_failslab+0x9/0x20 [ 1743.383605][ T6672] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1743.389611][ T6672] __alloc_skb+0x1c3/0x440 [ 1743.394117][ T6672] ? __pfx___alloc_skb+0x10/0x10 [ 1743.399210][ T6672] ? netlink_autobind+0xd6/0x2f0 [ 1743.404223][ T6672] ? netlink_autobind+0x2b0/0x2f0 [ 1743.409333][ T6672] netlink_sendmsg+0x631/0xcb0 [ 1743.414281][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.419646][ T6672] ? aa_sock_msg_perm+0x91/0x160 [ 1743.424698][ T6672] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1743.430143][ T6672] ? security_socket_sendmsg+0x87/0xb0 [ 1743.435827][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1743.441183][ T6672] __sock_sendmsg+0x221/0x270 [ 1743.446035][ T6672] ____sys_sendmsg+0x525/0x7d0 [ 1743.450889][ T6672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1743.456533][ T6672] __sys_sendmsg+0x2b0/0x3a0 [ 1743.461207][ T6672] ? __pfx___sys_sendmsg+0x10/0x10 [ 1743.466663][ T6672] ? vfs_write+0x7c4/0xc90 [ 1743.471221][ T6672] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1743.478059][ T6672] ? lockdep_hardirqs_on+0x99/0x150 [ 1743.483331][ T6672] __do_fast_syscall_32+0xb4/0x120 [ 1743.488599][ T6672] ? exc_page_fault+0x590/0x8c0 [ 1743.493550][ T6672] do_fast_syscall_32+0x34/0x80 [ 1743.498484][ T6672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1743.504871][ T6672] RIP: 0023:0xf7459579 [ 1743.509008][ T6672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1743.528770][ T6672] RSP: 002b:00000000f5d7257c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1743.537346][ T6672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 1743.545460][ T6672] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.553489][ T6672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1743.561517][ T6672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1743.569715][ T6672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.577906][ T6672] [ 1743.581230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1743.633217][T32068] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1743.677315][T32068] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1743.713593][ T6678] netlink: 'syz.1.9074': attribute type 41 has an invalid length. [ 1743.737030][T32068] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1743.756651][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1743.765886][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1743.809272][T32068] usb 4-1: USB disconnect, device number 106 [ 1743.857415][ T6686] FAULT_INJECTION: forcing a failure. [ 1743.857415][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.933282][ T6686] CPU: 1 PID: 6686 Comm: syz.4.9077 Not tainted 6.10.0-rc7-syzkaller #0 [ 1743.941698][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1743.951817][ T6686] Call Trace: [ 1743.955150][ T6686] [ 1743.958123][ T6686] dump_stack_lvl+0x241/0x360 [ 1743.962872][ T6686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.968145][ T6686] ? __pfx__printk+0x10/0x10 [ 1743.972813][ T6686] ? netlink_insert+0x10b7/0x14b0 [ 1743.977988][ T6686] should_fail_ex+0x3b0/0x4e0 [ 1743.982732][ T6686] ? __alloc_skb+0x1c3/0x440 [ 1743.987381][ T6686] should_failslab+0x9/0x20 [ 1743.991954][ T6686] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1743.997193][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9076'. [ 1743.997890][ T6686] __alloc_skb+0x1c3/0x440 [ 1744.011782][ T6686] ? __pfx___alloc_skb+0x10/0x10 [ 1744.016795][ T6686] ? netlink_autobind+0xd6/0x2f0 [ 1744.021814][ T6686] ? netlink_autobind+0x2b0/0x2f0 [ 1744.026909][ T6686] netlink_sendmsg+0x631/0xcb0 [ 1744.031866][ T6686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1744.037227][ T6686] ? aa_sock_msg_perm+0x91/0x160 [ 1744.042329][ T6686] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1744.047667][ T6686] ? security_socket_sendmsg+0x87/0xb0 [ 1744.053182][ T6686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1744.058522][ T6686] __sock_sendmsg+0x221/0x270 [ 1744.063265][ T6686] ____sys_sendmsg+0x525/0x7d0 [ 1744.068089][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1744.073439][ T6686] __sys_sendmsg+0x2b0/0x3a0 [ 1744.078078][ T6686] ? __pfx___sys_sendmsg+0x10/0x10 [ 1744.083271][ T6686] ? vfs_write+0x7c4/0xc90 [ 1744.087818][ T6686] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1744.094489][ T6686] ? lockdep_hardirqs_on+0x99/0x150 [ 1744.099919][ T6686] __do_fast_syscall_32+0xb4/0x120 [ 1744.105109][ T6686] ? exc_page_fault+0x590/0x8c0 [ 1744.110088][ T6686] do_fast_syscall_32+0x34/0x80 [ 1744.114984][ T6686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1744.121363][ T6686] RIP: 0023:0xf7413579 [ 1744.125496][ T6686] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1744.145584][ T6686] RSP: 002b:00000000f5d2c57c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1744.154127][ T6686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000540 [ 1744.162130][ T6686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.170125][ T6686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.178143][ T6686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1744.186153][ T6686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.194237][ T6686] [ 1744.231332][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9076'. [ 1744.255938][ T5165] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1744.355674][ T5153] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1744.455926][ T5165] usb 2-1: Using ep0 maxpacket: 16 [ 1744.464150][ T5165] usb 2-1: config 0 has no interfaces? [ 1744.479280][ T5165] usb 2-1: string descriptor 0 read error: -71 [ 1744.488879][ T5165] usb 2-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1744.504034][ T5165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.519252][ T5165] usb 2-1: config 0 descriptor?? [ 1744.526989][ T5165] usb 2-1: can't set config #0, error -71 [ 1744.545147][ T5165] usb 2-1: USB disconnect, device number 116 [ 1744.547110][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 1744.575579][ T5153] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1744.586492][T21063] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1744.603730][ T5153] usb 1-1: string descriptor 0 read error: -22 [ 1744.619101][ T5153] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1744.634611][ T5153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.656371][ T5153] usb 1-1: config 0 descriptor?? [ 1744.795649][T21063] usb 5-1: Using ep0 maxpacket: 8 [ 1744.810832][T21063] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 1744.820878][T21063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.829697][T21063] usb 5-1: Product: syz [ 1744.834698][T21063] usb 5-1: Manufacturer: syz [ 1744.843014][T21063] usb 5-1: SerialNumber: syz [ 1744.851486][T21063] usb 5-1: config 0 descriptor?? [ 1745.025163][T21063] msi2500 5-1:0.0: Registered as swradio16 [ 1745.043883][T21063] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1745.321625][ T5153] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1745.359153][ T5153] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1745.388044][ T5153] dib0700: firmware download failed at 7 with -22 [ 1745.416349][ T5153] usb 1-1: USB disconnect, device number 126 [ 1745.486066][ T6708] netlink: 'syz.1.9083': attribute type 41 has an invalid length. [ 1745.502624][ T5218] usb 3-1: USB disconnect, device number 4 [ 1745.902461][T21063] usb 5-1: USB disconnect, device number 125 [ 1746.030370][ T5218] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1746.209348][ T6711] netlink: 'syz.2.9084': attribute type 41 has an invalid length. [ 1746.235804][ T5218] usb 2-1: Using ep0 maxpacket: 32 [ 1746.247415][ T5218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.265899][ T5218] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1746.292367][ T5218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.316363][ T5218] usb 2-1: config 0 descriptor?? [ 1746.326621][ T5218] usb 2-1: bad CDC descriptors [ 1746.343762][ T6720] netlink: 'syz.3.9088': attribute type 41 has an invalid length. [ 1746.438348][ T8] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1746.486105][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1746.575998][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9090'. [ 1746.645546][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1746.659383][ T8] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1746.679620][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.703858][ T8] usb 1-1: config 0 descriptor?? [ 1746.810594][ T6730] FAULT_INJECTION: forcing a failure. [ 1746.810594][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.837703][ T6730] CPU: 0 PID: 6730 Comm: syz.3.9091 Not tainted 6.10.0-rc7-syzkaller #0 [ 1746.846244][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1746.856620][ T6730] Call Trace: [ 1746.859927][ T6730] [ 1746.862872][ T6730] dump_stack_lvl+0x241/0x360 [ 1746.867615][ T6730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1746.872847][ T6730] ? __pfx__printk+0x10/0x10 [ 1746.877562][ T6730] ? netlink_insert+0x10b7/0x14b0 [ 1746.882613][ T6730] should_fail_ex+0x3b0/0x4e0 [ 1746.887323][ T6730] ? __alloc_skb+0x1c3/0x440 [ 1746.891941][ T6730] should_failslab+0x9/0x20 [ 1746.896580][ T6730] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1746.902439][ T6730] __alloc_skb+0x1c3/0x440 [ 1746.907132][ T6730] ? __pfx___alloc_skb+0x10/0x10 [ 1746.912227][ T6730] ? netlink_autobind+0xd6/0x2f0 [ 1746.917219][ T6730] ? netlink_autobind+0x2b0/0x2f0 [ 1746.922364][ T6730] netlink_sendmsg+0x631/0xcb0 [ 1746.927164][ T6730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.932583][ T6730] ? aa_sock_msg_perm+0x91/0x160 [ 1746.937601][ T6730] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1746.942969][ T6730] ? security_socket_sendmsg+0x87/0xb0 [ 1746.948482][ T6730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1746.953822][ T6730] __sock_sendmsg+0x221/0x270 [ 1746.958545][ T6730] ____sys_sendmsg+0x525/0x7d0 [ 1746.963353][ T6730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1746.968762][ T6730] __sys_sendmsg+0x2b0/0x3a0 [ 1746.973372][ T6730] ? __pfx___sys_sendmsg+0x10/0x10 [ 1746.978508][ T6730] ? vfs_write+0x7c4/0xc90 [ 1746.983066][ T6730] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1746.989872][ T6730] ? lockdep_hardirqs_on+0x99/0x150 [ 1746.995239][ T6730] __do_fast_syscall_32+0xb4/0x120 [ 1747.000841][ T6730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1747.007043][ T6730] ? lockdep_hardirqs_on+0x99/0x150 [ 1747.012573][ T6730] do_fast_syscall_32+0x34/0x80 [ 1747.017495][ T6730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1747.023857][ T6730] RIP: 0023:0xf7402579 [ 1747.027970][ T6730] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1747.047900][ T6730] RSP: 002b:00000000f5d1b57c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1747.056377][ T6730] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 1747.064414][ T6730] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1747.072436][ T6730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1747.080451][ T6730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1747.088460][ T6730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1747.096724][ T6730] [ 1747.396931][ T5165] usb 2-1: USB disconnect, device number 117 [ 1747.592732][ T6746] netlink: 'syz.2.9095': attribute type 41 has an invalid length. [ 1747.596044][T31077] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1747.715580][ T5218] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1747.785824][T31077] usb 5-1: Using ep0 maxpacket: 16 [ 1747.794143][T31077] usb 5-1: config 0 has no interfaces? [ 1747.821699][T31077] usb 5-1: string descriptor 0 read error: -71 [ 1747.830500][T31077] usb 5-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1747.840233][T31077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.857031][T31077] usb 5-1: config 0 descriptor?? [ 1747.866246][T31077] usb 5-1: can't set config #0, error -71 [ 1747.879474][T31077] usb 5-1: USB disconnect, device number 126 [ 1747.901436][ T5218] usb 4-1: config 0 has too many interfaces: 66, using maximum allowed: 32 [ 1747.911412][ T5218] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.963653][ T5218] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 66 [ 1747.991455][ T5218] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1748.010886][ T5218] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1748.023931][ T5218] usb 4-1: Product: syz [ 1748.054583][ T5218] usb 4-1: Manufacturer: syz [ 1748.066587][ T5218] usb 4-1: config 0 descriptor?? [ 1748.336653][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1748.354882][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1748.457558][ T5155] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1748.675810][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 1748.683803][ T5155] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1748.704384][ T5155] usb 2-1: string descriptor 0 read error: -22 [ 1748.715891][ T5155] usb 2-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1748.746035][ T5155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.781576][ T5155] usb 2-1: config 0 descriptor?? [ 1748.854569][ T6761] netlink: 'syz.4.9100': attribute type 41 has an invalid length. [ 1748.938647][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1748.968585][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1748.992049][ T8] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1749.045893][ T8] usb 1-1: USB disconnect, device number 127 [ 1749.116269][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9101'. [ 1749.159707][ T6763] bond2: entered promiscuous mode [ 1749.165118][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9102'. [ 1749.276823][ T6763] ip6gretap2: entered promiscuous mode [ 1749.283136][ T6763] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1749.348486][ T6756] xt_NFQUEUE: number of total queues is 0 [ 1749.361662][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9101'. [ 1749.616417][ T5155] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1749.651477][ T5155] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1749.673832][ T5155] dib0700: firmware download failed at 7 with -22 [ 1749.693785][ T5155] usb 2-1: USB disconnect, device number 118 [ 1749.847390][ T6779] netlink: 'syz.0.9106': attribute type 41 has an invalid length. [ 1749.895909][ T5153] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1750.095642][ T5153] usb 5-1: Using ep0 maxpacket: 8 [ 1750.108494][ T5153] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1750.125759][ T5153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.144581][ T5153] usb 5-1: Product: syz [ 1750.149302][ T5153] usb 5-1: Manufacturer: syz [ 1750.154631][ T5153] usb 5-1: SerialNumber: syz [ 1750.177427][ T5153] usb 5-1: config 0 descriptor?? [ 1750.186430][T31077] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1750.349764][ T5155] usb 4-1: USB disconnect, device number 107 [ 1750.395531][T31077] usb 3-1: Using ep0 maxpacket: 8 [ 1750.437515][T31077] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1750.475057][T31077] usb 3-1: string descriptor 0 read error: -22 [ 1750.495906][T31077] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 1750.505116][T31077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.569628][T31077] usb 3-1: config 0 descriptor?? [ 1750.960991][ T6795] netlink: 'syz.1.9111': attribute type 41 has an invalid length. [ 1751.025910][ T5155] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1751.060514][ T5153] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1751.093337][ T5153] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1751.123313][ T5153] dib0700: firmware download failed at 7 with -22 [ 1751.177984][ T5153] usb 5-1: USB disconnect, device number 127 [ 1751.266182][ T5155] usb 4-1: Using ep0 maxpacket: 16 [ 1751.292634][ T5155] usb 4-1: config 0 has no interfaces? [ 1751.341177][ T5155] usb 4-1: string descriptor 0 read error: -71 [ 1751.392300][ T5155] usb 4-1: New USB device found, idVendor=f76d, idProduct=c71d, bcdDevice= 0.40 [ 1751.460646][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.517577][ T5155] usb 4-1: config 0 descriptor?? [ 1751.560343][ T5155] usb 4-1: can't set config #0, error -71 [ 1751.583399][ T5155] usb 4-1: USB disconnect, device number 108 [ 1751.620140][T31077] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 1751.633141][T31077] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1751.648235][T31077] dib0700: firmware download failed at 7 with -22 [ 1751.697726][T31077] usb 3-1: USB disconnect, device number 5 [ 1751.775577][T21068] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1751.898191][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9114'. [ 1751.967519][T21068] usb 2-1: Using ep0 maxpacket: 8 [ 1751.979175][T21068] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1751.984552][ T6803] bond3: entered promiscuous mode [ 1751.989710][T21068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.997076][T21068] usb 2-1: config 0 descriptor?? [ 1752.122015][ T6805] ip6gretap3: entered promiscuous mode [ 1752.129989][ T6805] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1752.140977][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9114'. [ 1752.204912][ T6807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1752.706425][ T6814] netlink: 'syz.2.9118': attribute type 41 has an invalid length. [ 1752.953755][ T6824] netlink: 'syz.3.9122': attribute type 41 has an invalid length. [ 1753.135829][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1753.948333][ T5925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.993247][T21068] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1754.028240][T21068] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1754.070950][T21068] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1754.125741][T21068] usb 2-1: USB disconnect, device number 119 [ 1754.342980][ T5925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.361040][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9126'. [ 1754.398387][ T6837] bond3: entered promiscuous mode [ 1754.429912][ T6839] ip6gretap3: entered promiscuous mode [ 1754.476258][ T6839] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1754.545858][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9126'. [ 1754.745301][ T6847] FAULT_INJECTION: forcing a failure. [ 1754.745301][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1754.778508][ T5925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.789580][ T6847] CPU: 0 PID: 6847 Comm: syz.0.9128 Not tainted 6.10.0-rc7-syzkaller #0 [ 1754.797981][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1754.808183][ T6847] Call Trace: [ 1754.811503][ T6847] [ 1754.814568][ T6847] dump_stack_lvl+0x241/0x360 [ 1754.819452][ T6847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1754.824984][ T6847] ? __pfx__printk+0x10/0x10 [ 1754.829658][ T6847] should_fail_ex+0x3b0/0x4e0 [ 1754.834412][ T6847] _copy_from_user+0x2f/0xe0 [ 1754.839070][ T6847] move_addr_to_kernel+0x82/0x150 [ 1754.844165][ T6847] get_compat_msghdr+0x425/0x730 [ 1754.849167][ T6847] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1754.854772][ T6847] ? __fget_files+0x3f6/0x470 [ 1754.859517][ T6847] __sys_sendmmsg+0x46e/0x740 [ 1754.864338][ T6847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1754.869589][ T6847] ? __pfx_lock_acquire+0x10/0x10 [ 1754.874635][ T6847] ? get_pid_task+0x23/0x1f0 [ 1754.879249][ T6847] ? __pfx_lock_release+0x10/0x10 [ 1754.884310][ T6847] ? kstrtouint_from_user+0x128/0x190 [ 1754.889726][ T6847] ? __pfx_lock_release+0x10/0x10 [ 1754.894885][ T6847] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1754.900601][ T6847] ? __fget_files+0x3f6/0x470 [ 1754.905340][ T6847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1754.911352][ T6847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1754.917716][ T6847] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1754.923412][ T6847] __do_fast_syscall_32+0xb4/0x120 [ 1754.928565][ T6847] ? exc_page_fault+0x590/0x8c0 [ 1754.933443][ T6847] do_fast_syscall_32+0x34/0x80 [ 1754.938515][ T6847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1754.944882][ T6847] RIP: 0023:0xf7459579 [ 1754.949058][ T6847] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1754.969153][ T6847] RSP: 002b:00000000f5d7257c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1754.978048][ T6847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200016c0 [ 1754.986217][ T6847] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.994205][ T6847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1755.002205][ T6847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1755.010204][ T6847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.018376][ T6847] [ 1755.021510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1755.251105][ T5925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.426238][ T6852] netlink: 'syz.4.9133': attribute type 2 has an invalid length. [ 1755.434050][ T6852] netlink: 'syz.4.9133': attribute type 1 has an invalid length. [ 1755.688979][ T5925] bridge_slave_1: left allmulticast mode [ 1755.735767][ T5925] bridge_slave_1: left promiscuous mode [ 1755.760501][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.908868][ T5925] bridge_slave_0: left allmulticast mode [ 1755.926524][ T5925] bridge_slave_0: left promiscuous mode [ 1755.945286][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.954823][T21488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1755.968721][T21488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1755.992111][T21488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1756.025677][T21488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1756.037139][T21488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1756.046504][T21488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1756.055525][ T5153] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1756.245556][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 1756.254524][ T5153] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1756.274875][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.315880][ T5153] usb 1-1: config 0 descriptor?? [ 1756.842576][ C1] ------------[ cut here ]------------ [ 1756.848866][ C1] WARNING: CPU: 1 PID: 6869 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 1756.857892][ C1] Modules linked in: [ 1756.861858][ C1] CPU: 1 PID: 6869 Comm: syz.3.9137 Not tainted 6.10.0-rc7-syzkaller #0 [ 1756.870238][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1756.880437][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 1756.886375][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 1756.906478][ C1] RSP: 0018:ffffc90000a17d70 EFLAGS: 00010002 [ 1756.912628][ C1] RAX: 0000000000010102 RBX: ffff8880612e3c00 RCX: 0000000000000002 [ 1756.920654][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacca0 RDI: ffffffff8c1fe940 [ 1756.928697][ C1] RBP: 0100000000000001 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 1756.936838][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 1756.945029][ C1] R13: ffff88807d581d00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 1756.953055][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0063) knlGS:00000000f5d1bb40 [ 1756.962641][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1756.969256][ C1] CR2: 0000000020010000 CR3: 00000000654b4000 CR4: 00000000003506f0 [ 1756.977367][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1756.985549][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1756.993758][ C1] Call Trace: [ 1756.997183][ C1] [ 1757.000148][ C1] ? __warn+0x163/0x4e0 [ 1757.004377][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1757.009569][ C1] ? report_bug+0x2b3/0x500 [ 1757.014728][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1757.019927][ C1] ? handle_bug+0x3e/0x70 [ 1757.024300][ C1] ? exc_invalid_op+0x1a/0x50 [ 1757.029004][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 1757.034070][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 1757.039120][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1757.044247][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 1757.049261][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 1757.055122][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 1757.060545][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1757.067425][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1757.072689][ C1] dummy_timer+0x830/0x45d0 [ 1757.077354][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1757.082313][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1757.087279][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1757.092861][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1757.098884][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1757.104664][ C1] hrtimer_interrupt+0x396/0x990 [ 1757.109650][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1757.115658][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1757.121501][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.127513][ C1] RIP: 0010:unwind_next_frame+0x4fb/0x2a00 [ 1757.133350][ C1] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 5c 45 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 34 48 63 2b 48 01 dd 48 89 ef 4c 89 f6 e8 10 35 55 00 48 [ 1757.153154][ C1] RSP: 0018:ffffc90000a18508 EFLAGS: 00000a06 [ 1757.159259][ C1] RAX: 0000000000000000 RBX: ffffffff8fc04270 RCX: dffffc0000000000 [ 1757.167246][ C1] RDX: ffff8880612e3c00 RSI: 00000000000184e6 RDI: 00000000000184e7 [ 1757.175337][ C1] RBP: 00000000000081dc R08: ffffffff8140f2ce R09: ffffc90000a186d0 [ 1757.183325][ C1] R10: 0000000000000003 R11: ffffffff8181dd90 R12: ffffffff8fc04270 [ 1757.191312][ C1] R13: ffffffff8fc04270 R14: ffffffff8181dcc7 R15: ffffffff8fc04270 [ 1757.199397][ C1] ? stack_trace_save+0x117/0x1d0 [ 1757.204456][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.210830][ C1] ? unwind_next_frame+0x2de/0x2a00 [ 1757.216062][ C1] ? unwind_next_frame+0x2de/0x2a00 [ 1757.221369][ C1] ? stack_trace_save+0x117/0x1d0 [ 1757.226502][ C1] ? __unwind_start+0x6af/0x7c0 [ 1757.231373][ C1] ? stack_trace_save+0x118/0x1d0 [ 1757.236433][ C1] ? stack_trace_save+0x118/0x1d0 [ 1757.241486][ C1] ? __kernel_text_address+0xd/0x40 [ 1757.246737][ C1] ? stack_trace_save+0x118/0x1d0 [ 1757.251796][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1757.258062][ C1] arch_stack_walk+0x151/0x1b0 [ 1757.262857][ C1] ? stack_trace_save+0x118/0x1d0 [ 1757.268026][ C1] stack_trace_save+0x118/0x1d0 [ 1757.272923][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1757.278350][ C1] kasan_save_track+0x3f/0x80 [ 1757.283088][ C1] ? ieee80211_rx_list+0x2d18/0x3780 [ 1757.288495][ C1] kasan_save_free_info+0x40/0x50 [ 1757.293551][ C1] poison_slab_object+0xe0/0x150 [ 1757.298522][ C1] ? ieee80211_rx_list+0x2d18/0x3780 [ 1757.303935][ C1] __kasan_slab_free+0x37/0x60 [ 1757.308902][ C1] kmem_cache_free+0x145/0x350 [ 1757.313797][ C1] ieee80211_rx_list+0x2d18/0x3780 [ 1757.319539][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1757.324613][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1757.330104][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1757.335147][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1757.341148][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1757.347508][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1757.352556][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 1757.357522][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1757.363896][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1757.369382][ C1] ? skb_dequeue+0x113/0x150 [ 1757.374132][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1757.380205][ C1] tasklet_action_common+0x321/0x4d0 [ 1757.385526][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1757.391462][ C1] ? workqueue_softirq_action+0xca/0x140 [ 1757.397144][ C1] handle_softirqs+0x2c4/0x970 [ 1757.401952][ C1] ? do_softirq+0x11b/0x1e0 [ 1757.406666][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1757.411971][ C1] do_softirq+0x11b/0x1e0 [ 1757.416401][ C1] [ 1757.419621][ C1] [ 1757.422571][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1757.427480][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1757.433174][ C1] ? rcu_is_watching+0x15/0xb0 [ 1757.437986][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1757.443353][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 1757.448810][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1757.453966][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1757.459910][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1757.465230][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1757.470525][ C1] __dev_queue_xmit+0x16c9/0x3d30 [ 1757.475938][ C1] ? rep_movs_alternative+0x4a/0x70 [ 1757.481281][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1757.486456][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1757.491858][ C1] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 1757.497537][ C1] ? packet_parse_headers+0x7bd/0xad0 [ 1757.502962][ C1] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 1757.508812][ C1] ? packet_xmit+0x68/0x330 [ 1757.513451][ C1] packet_sendmsg+0x46c2/0x6150 [ 1757.518464][ C1] ? __pfx___might_resched+0x10/0x10 [ 1757.523889][ C1] ? aa_sk_perm+0x967/0xab0 [ 1757.528628][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1757.533869][ C1] ? __fget_files+0x29/0x470 [ 1757.539282][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1757.544433][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1757.549855][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1757.555667][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1757.561049][ C1] __sock_sendmsg+0x221/0x270 [ 1757.565809][ C1] __sys_sendto+0x3a4/0x4f0 [ 1757.570352][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1757.575417][ C1] ? do_futex+0x33b/0x560 [ 1757.579807][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1757.586208][ C1] __ia32_sys_sendto+0xdd/0x100 [ 1757.591108][ C1] __do_fast_syscall_32+0xb4/0x120 [ 1757.596264][ C1] ? exc_page_fault+0x590/0x8c0 [ 1757.601342][ C1] do_fast_syscall_32+0x34/0x80 [ 1757.606232][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1757.612580][ C1] RIP: 0023:0xf7402579 [ 1757.616714][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1757.636717][ C1] RSP: 002b:00000000f5d1b57c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1757.645288][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1757.653517][ C1] RDX: 000000000000ff88 RSI: 0000000000000000 RDI: 0000000020000140 [ 1757.661530][ C1] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1757.669723][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1757.677736][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1757.685742][ C1] [ 1757.688966][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1757.696435][ C1] CPU: 1 PID: 6869 Comm: syz.3.9137 Not tainted 6.10.0-rc7-syzkaller #0 [ 1757.704970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1757.715454][ C1] Call Trace: [ 1757.718764][ C1] [ 1757.721887][ C1] dump_stack_lvl+0x241/0x360 [ 1757.726722][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.731983][ C1] ? __pfx__printk+0x10/0x10 [ 1757.736613][ C1] ? _printk+0xd5/0x120 [ 1757.740807][ C1] ? vscnprintf+0x5d/0x90 [ 1757.745246][ C1] panic+0x349/0x860 [ 1757.749181][ C1] ? __warn+0x172/0x4e0 [ 1757.753371][ C1] ? __pfx_panic+0x10/0x10 [ 1757.757956][ C1] ? show_trace_log_lvl+0x4e6/0x520 [ 1757.763228][ C1] __warn+0x346/0x4e0 [ 1757.767245][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1757.772472][ C1] report_bug+0x2b3/0x500 [ 1757.776885][ C1] ? kcov_remote_start+0x5a2/0x7e0 [ 1757.782138][ C1] handle_bug+0x3e/0x70 [ 1757.786603][ C1] exc_invalid_op+0x1a/0x50 [ 1757.791234][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1757.796245][ C1] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 1757.802174][ C1] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 1757.822270][ C1] RSP: 0018:ffffc90000a17d70 EFLAGS: 00010002 [ 1757.828382][ C1] RAX: 0000000000010102 RBX: ffff8880612e3c00 RCX: 0000000000000002 [ 1757.836480][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacca0 RDI: ffffffff8c1fe940 [ 1757.844652][ C1] RBP: 0100000000000001 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 1757.852768][ C1] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 1757.860821][ C1] R13: ffff88807d581d00 R14: 0000000000000006 R15: ffff8880b952d4c8 [ 1757.868985][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 1757.874214][ C1] ? usb_unanchor_urb+0xa3/0xc0 [ 1757.879236][ C1] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 1757.885120][ C1] __usb_hcd_giveback_urb+0x405/0x6e0 [ 1757.890803][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1757.896982][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1757.902361][ C1] dummy_timer+0x830/0x45d0 [ 1757.907134][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1757.912120][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1757.917091][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 1757.922453][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1757.928529][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1757.934378][ C1] hrtimer_interrupt+0x396/0x990 [ 1757.939379][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1757.945391][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1757.951791][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.958150][ C1] RIP: 0010:unwind_next_frame+0x4fb/0x2a00 [ 1757.964664][ C1] Code: c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 5c 45 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 34 48 63 2b 48 01 dd 48 89 ef 4c 89 f6 e8 10 35 55 00 48 [ 1757.984731][ C1] RSP: 0018:ffffc90000a18508 EFLAGS: 00000a06 [ 1757.990837][ C1] RAX: 0000000000000000 RBX: ffffffff8fc04270 RCX: dffffc0000000000 [ 1757.998959][ C1] RDX: ffff8880612e3c00 RSI: 00000000000184e6 RDI: 00000000000184e7 [ 1758.007003][ C1] RBP: 00000000000081dc R08: ffffffff8140f2ce R09: ffffc90000a186d0 [ 1758.015220][ C1] R10: 0000000000000003 R11: ffffffff8181dd90 R12: ffffffff8fc04270 [ 1758.023235][ C1] R13: ffffffff8fc04270 R14: ffffffff8181dcc7 R15: ffffffff8fc04270 [ 1758.031269][ C1] ? stack_trace_save+0x117/0x1d0 [ 1758.036392][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1758.042637][ C1] ? unwind_next_frame+0x2de/0x2a00 [ 1758.047983][ C1] ? unwind_next_frame+0x2de/0x2a00 [ 1758.053232][ C1] ? stack_trace_save+0x117/0x1d0 [ 1758.058335][ C1] ? __unwind_start+0x6af/0x7c0 [ 1758.063326][ C1] ? stack_trace_save+0x118/0x1d0 [ 1758.068417][ C1] ? stack_trace_save+0x118/0x1d0 [ 1758.073471][ C1] ? __kernel_text_address+0xd/0x40 [ 1758.078695][ C1] ? stack_trace_save+0x118/0x1d0 [ 1758.083770][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1758.090125][ C1] arch_stack_walk+0x151/0x1b0 [ 1758.095016][ C1] ? stack_trace_save+0x118/0x1d0 [ 1758.100337][ C1] stack_trace_save+0x118/0x1d0 [ 1758.105220][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1758.110642][ C1] kasan_save_track+0x3f/0x80 [ 1758.115490][ C1] ? ieee80211_rx_list+0x2d18/0x3780 [ 1758.120827][ C1] kasan_save_free_info+0x40/0x50 [ 1758.125967][ C1] poison_slab_object+0xe0/0x150 [ 1758.131095][ C1] ? ieee80211_rx_list+0x2d18/0x3780 [ 1758.136816][ C1] __kasan_slab_free+0x37/0x60 [ 1758.141648][ C1] kmem_cache_free+0x145/0x350 [ 1758.146459][ C1] ieee80211_rx_list+0x2d18/0x3780 [ 1758.151634][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 1758.156800][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1758.162436][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1758.167627][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1758.173812][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1758.180196][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 1758.185254][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 1758.190241][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1758.196682][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1758.202195][ C1] ? skb_dequeue+0x113/0x150 [ 1758.206849][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 1758.212890][ C1] tasklet_action_common+0x321/0x4d0 [ 1758.218240][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 1758.224186][ C1] ? workqueue_softirq_action+0xca/0x140 [ 1758.229844][ C1] handle_softirqs+0x2c4/0x970 [ 1758.234747][ C1] ? do_softirq+0x11b/0x1e0 [ 1758.239376][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1758.244681][ C1] do_softirq+0x11b/0x1e0 [ 1758.249031][ C1] [ 1758.251972][ C1] [ 1758.254919][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1758.259841][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1758.265516][ C1] ? rcu_is_watching+0x15/0xb0 [ 1758.270311][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1758.275527][ C1] ? dev_hard_start_xmit+0x773/0x7e0 [ 1758.280831][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1758.285958][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1758.291692][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1758.297011][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1758.302415][ C1] __dev_queue_xmit+0x16c9/0x3d30 [ 1758.307574][ C1] ? rep_movs_alternative+0x4a/0x70 [ 1758.312797][ C1] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1758.318037][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1758.323448][ C1] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 1758.329017][ C1] ? packet_parse_headers+0x7bd/0xad0 [ 1758.334506][ C1] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 1758.340333][ C1] ? packet_xmit+0x68/0x330 [ 1758.344854][ C1] packet_sendmsg+0x46c2/0x6150 [ 1758.349838][ C1] ? __pfx___might_resched+0x10/0x10 [ 1758.355172][ C1] ? aa_sk_perm+0x967/0xab0 [ 1758.359698][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1758.365047][ C1] ? __fget_files+0x29/0x470 [ 1758.369753][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 1758.374887][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1758.380617][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1758.386093][ C1] ? __pfx_packet_sendmsg+0x10/0x10 [ 1758.391312][ C1] __sock_sendmsg+0x221/0x270 [ 1758.396016][ C1] __sys_sendto+0x3a4/0x4f0 [ 1758.400625][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 1758.405718][ C1] ? do_futex+0x33b/0x560 [ 1758.410113][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1758.416616][ C1] __ia32_sys_sendto+0xdd/0x100 [ 1758.421974][ C1] __do_fast_syscall_32+0xb4/0x120 [ 1758.427246][ C1] ? exc_page_fault+0x590/0x8c0 [ 1758.432131][ C1] do_fast_syscall_32+0x34/0x80 [ 1758.437009][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1758.443645][ C1] RIP: 0023:0xf7402579 [ 1758.447838][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1758.467649][ C1] RSP: 002b:00000000f5d1b57c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1758.476106][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 1758.484305][ C1] RDX: 000000000000ff88 RSI: 0000000000000000 RDI: 0000000020000140 [ 1758.492299][ C1] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1758.500292][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1758.508322][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1758.516347][ C1] [ 1758.519725][ C1] Kernel Offset: disabled [ 1758.524200][ C1] Rebooting in 86400 seconds..