last executing test programs: 1m19.67488096s ago: executing program 4 (id=152): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x2, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x84}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_batadv\x00', 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0xc0844123, &(0x7f0000000180)) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x433, 0x2000, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x881}, 0x20000080) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x4, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[{}, {}], r7, 0x0, '\x00', 0x2, 0x2}) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 1m19.233511409s ago: executing program 3 (id=155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x0, 0x2000}) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sendmsg$can_j1939(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x7d10, &(0x7f0000000340)={0x0, 0x6afe, 0x0, 0x1, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x16, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x58) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 1m18.615241561s ago: executing program 4 (id=157): bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote}}, 0x1e) r0 = syz_usb_connect(0x0, 0x31a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000155f4108d31340330bab000000010902080301000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000680)={0x40, 0x35, 0x3, "cdc6b6"}, 0x0, 0x0}) r1 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) r2 = io_uring_setup(0x34d, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000000, r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064ce, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[0x0]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000080)={0x5e, 0x2, 0x4, 0xf0, "2a00000000000014b1f12f000000f7000800"}) 1m18.448625214s ago: executing program 1 (id=158): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x1, r0, 0x2}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000008c0)=0x1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0xa1, 0x16, 0x0, 0x7f, 0x0, 0x0, 0x0}) socket(0x29, 0x2, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b70000001c0000006f000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f26019e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22e9bc162bcc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd80102fc9ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b639767c609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e989986dcbc900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb083fb0a7e607452d8d335fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f64949680000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000adbd474a8d316bbefea59d8186778c7cb106d7747d90ca283f884e0206d9106f69eeb7bbc32e2b8a280d3428e6334cabbe3a88ee6f3a4c42077b828c29afe4a9"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000766589f80000000000faffffffffff6019a200000000009500001f00000000ccca20c09a9f9503b971b0db3c9668320d8f40c81d2b187751754e39f52f0f48e1c328be5deac8d4f9d6b47fb394e0ce9e19b685717b712fe4107ea4964983c6aa88d86d"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xc2, 0xbc, 0x77, 0x10, 0xbfd, 0x106, 0xec89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x35, 0x7, 0x20, 0xce, [{{0x9, 0x4, 0xf0, 0x0, 0x2, 0xff, 0xff, 0xff, 0xd, [@generic={0x7, 0x5, "c2be1b820f"}], [{{0x9, 0x5, 0xf, 0xc, 0x20, 0xd, 0x1f, 0x6}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x9, 0x92, 0x7}}]}}]}}]}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) 1m18.317819515s ago: executing program 0 (id=159): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 1m18.213869154s ago: executing program 3 (id=160): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) (fail_nth: 5) 1m18.183703927s ago: executing program 0 (id=161): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x2400c891}, 0x4040041) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)={0x4}) r4 = dup(r3) ppoll(&(0x7f0000000340)=[{r4}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 1m17.818046243s ago: executing program 0 (id=162): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000018c0), &(0x7f0000001900)=0x4) 1m17.7130956s ago: executing program 3 (id=163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001f4c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @private1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r5}}, 0x48) 1m17.695200632s ago: executing program 0 (id=164): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x41) eventfd2(0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000600000000060015000400000014001680040008800c0001"], 0x38}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x20000000000005) syz_open_dev$evdev(&(0x7f0000000180), 0x2, 0x28180) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4600, 0x0) r7 = dup(r6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r9 = dup(r8) sendfile(r9, r7, 0x0, 0x89ffc) r10 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x401) 1m16.522925351s ago: executing program 3 (id=166): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="dbbe5c7f574c223f4fce8719ecbbed6d43c3a2c6f0e06fe6e570"}]}, 0x3c}}, 0x8084) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) unshare(0x2a020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x1, 0x0, 0x3, 0x5, 0x1, 0x6, 0x7, 0x7, 0xe1, 0x4, 0x0, 0x800, 0x4, 0x0, 0xfc, 0x9, 0x6, '\x00', 0x5, 0x8}) r6 = dup(r2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) 1m15.589209581s ago: executing program 0 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x11) r4 = userfaultfd(0x801) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000090) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000000006000600800a0000080002"], 0x1034}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000002400), 0x47) write$UHID_CREATE2(r6, &(0x7f0000000580)=ANY=[@ANYRES64=r6, @ANYRESOCT=0x0, @ANYRESOCT=r5, @ANYRESDEC=r3, @ANYBLOB="64d053258ecb483b8fc0ea3d958783c8c938d365aa3675d2a23c71ede0faaf49342b683f6e03690480618b54048b4fbcf3bbb942254eb8773d63f72d06d354409cfaf1947349733031a1009619e91cc1ef44b55cc494e2522e24120a2155fb8592c6177bab04f645e629871c35f56bc01792e0e69333541eac", @ANYBLOB="fb15e814f388e6587e7f62f04bdaffe6b9c1cefd05aadc8ce745aab763a93ff8fac8b6842df856fdee33772553528b09623c7d4a80f7aef5f4b82ccdedb29f5bf1c18a1d1ec3d0f1f597e99e3e7e3aa7968b9d15f366e6e819739f1dfdb6503e50ff2edf975e184073cafc29267433031754831532c5acf22e4bd5a9ea9f6f14c5268826f8a76b5c78398304c02a9aed8e7fdc7806d73ac976c9f95a003433cb39c5952f9f6316af0d34ed0eca7f19a27a7317176a4f7edf853399f0ac215b0f8d7550f6c337671ab360f623f7e2c5bfa953b42af22ef8ff61e2f6f4dc", @ANYRES8=r5, @ANYRESDEC=r1, @ANYRES32], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSTI(r3, 0x5423, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ed}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000003c0)=0x7fff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1m15.469919197s ago: executing program 4 (id=169): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x4, 0x0, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x2c, 0x44, 0x3, 0x0, [{@dev, 0x5}, {@broadcast}, {@empty}, {@private, 0x3}, {@private}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x4, 0x40000, 0x6, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0, 0xfffffffffffffd87}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) 1m15.065477121s ago: executing program 1 (id=171): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000018c0), &(0x7f0000001900)=0x4) 1m14.766910509s ago: executing program 3 (id=172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"]) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000103c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a380)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r5, 0x40485404, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, 0xbb2ab84}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 1m14.57139213s ago: executing program 4 (id=173): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000005080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e20, @remote}], 0x30) socket$inet_sctp(0x2, 0x5, 0x84) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000005080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e20, @remote}], 0x30) (async) 1m14.46809033s ago: executing program 1 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x1, 0x0, 0x3, 0x5, 0x1, 0x6, 0x7, 0x7, 0xe1, 0x4, 0x0, 0x800, 0x4, 0x0, 0xfc, 0x9, 0x6, '\x00', 0x5, 0x8}) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000070000040"]) (fail_nth: 2) 1m13.744354158s ago: executing program 4 (id=175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x5, 0xb0, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xcf, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x1, 0x1, 0x2, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "74a3"}, {0x5, 0x24, 0x0, 0xddb}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0xfffd, 0x1}, [@mdlm_detail={0x61, 0x24, 0x13, 0x49, "62dcb62b3c4296dbc148768a5654d8db6800cf46536a9f16766902fa81e38fafc8cfc8b9b77075b1538ee9b0529b738bb4fb0084aec4fc139aaf497b138df1a40987e9faea30f182c77869cd8ae2eb1d98452929d1df9a6378e3c34d30"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x3, 0xbf}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x1, 0xf}}}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x8f572f983eacf6ff, 0x9, 0x1d, 0x7, 0x50, 0x3}, 0x50, &(0x7f0000000ac0)={0x5, 0xf, 0x50, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0xa, 0x5, 0x7, 0xf, 0x101, [0xc000, 0x603f, 0x30, 0xff00, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x8, 0x90, 0x81, 0xff, 0x0, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x6, 0xf000}]}, 0x6, [{0xc8, &(0x7f0000000f00)=ANY=[@ANYRES16=r0]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x439}}, {0x22, &(0x7f0000000c80)=@string={0x22, 0x3, "c9daa953d701dc7dde3c8926b4bf98b57d18f76a00857b5b74f5bfadb58ef940"}}, {0xffffff24, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x457}}, {0x0, 0xfffffffffffffffe}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x415}}]}) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x58) r1 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r3, &(0x7f0000003100)={0x2020}, 0x2042) read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r7, 0x1, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f103"]) syz_usb_control_io$hid(r0, 0x0, 0x0) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xc2, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0xa, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x969, 0x74}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x2, 0x2, 0x81}, @mixer_unit={0x7, 0x24, 0x4, 0xa, 0x2, '^:'}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x7, 0x4, "3d18"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x1, "28f1d7cd"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x4, 0xfe, '-.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x2, 0xfc, 0x8}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x10, 0x8, {0x7, 0x25, 0x1, 0x0, 0x4, 0x71}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0xf, 0x2, "cac35b", "99e1f3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x8, 0xf7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x9, {0x7, 0x25, 0x1, 0x3, 0xff, 0x2}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0xf3, 0x91, 0x5, 0x40, 0x4}, 0xff, &(0x7f0000000b00)={0x5, 0xf, 0xff, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xfff, 0x0, 0x7, [0xc000, 0x1fe0000, 0xff0000, 0x0, 0xc1b0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x7f, 0x63, 0xc3d, 0x8}, @generic={0xb6, 0x10, 0xa, "b30b348bbe842f7fc886c677ef5051b3dcf524bc53dcd937b01094e29477334977f27c1020efaf853d594c075db9a90cd8e2a27a098a44ebb4abf2b45e3b2d62901bc51cd320934ea85a4718724a9d037a24ae3c9634f1aa41382f98b0c373fbe7754a3dfc7d28e3ec68c2ddaf2f566b1770cc6998c4cb1fc8b15f65a083ffc76f05a7def7517afda143d596d4dfb032ab297578023e4acaaa0984e299068bb46b70b12ff6fcc7654ec94c7002c085971efdbe"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x0, 0xa}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xff, 0x0, 0x72fc, 0x74}]}, 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}, {0x6f, &(0x7f0000000380)=@string={0x6f, 0x3, "b9f762226ba41029a97853f9f602bd610263dbcaebdd47e4a9d882416d83f1bdbe700f32c797310b09a891b7de89aad063adfa3972f180468c558e9f701ea83c1ae4af096236435a27c6bb0b8f04cd908f746f4ec37e1cd0988fa5cf70d7e6ac767f90868a937a374ba060721e"}}, {0xad, &(0x7f0000000440)=@string={0xad, 0x3, "0d0143af3538d1d00ed1efaa1fbb54a5946cc6f8dba02ad348263f3c28e0389f3586e133ac62a0712904eaca63b43995c606a25b995cb75c4ef8b74555febdd3baff194e2e436c61a14b9efc73717890ddbc44c4ae83bdd97c96d1c6d7a3e0c084614cefc0654de1d62d45d4d54ed4dd4a3de3ef553185aac173d1adefb8ae7879325d88f34699603d3b665e8b1807f3fb6192dd2892d52b99f08724db895173c4d7d5f660aa90d932c2c0"}}]}) 1m13.686902554s ago: executing program 2 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001f4c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @private1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r5}}, 0x48) 1m13.570046818s ago: executing program 3 (id=177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder1\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close(0xffffffffffffffff) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_GUEST_MODE(r7, 0x4068aea3, &(0x7f0000000580)) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x0) recvmmsg(r8, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000640)=""/38, 0x26}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5, 0x0, 0xfffffffffffffcd8}, 0x7ff}], 0x2, 0x10000, 0x0) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1e) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x700, @void, @value}, 0x94) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000600)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r10, 0x8004745a, &(0x7f00000002c0)) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x20, 0x0, &(0x7f0000000680)=[@request_death, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 1m12.172735991s ago: executing program 1 (id=179): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 1m12.172083278s ago: executing program 2 (id=180): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x20fe, &(0x7f0000001a80)={0x0, 0x0, 0x10100, 0x0, 0x2}, &(0x7f0000001b00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) close(r0) 1m11.86409733s ago: executing program 0 (id=181): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x1, r0, 0x2}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000008c0)=0x1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000140)={0xa1, 0x16, 0x0, 0x7f, 0x0, 0x0, 0x0}) socket(0x29, 0x2, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000adbd474a8d316bbefea59d8186778c7cb106d7747d90ca283f884e0206d9106f69eeb7bbc32e2b8a280d3428e6334cabbe3a88ee6f3a4c42077b828c29afe4a9"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xe) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000766589f80000000000faffffffffff6019a200000000009500001f00000000ccca20c09a9f9503b971b0db3c9668320d8f40c81d2b187751754e39f52f0f48e1c328be5deac8d4f9d6b47fb394e0ce9e19b685717b712fe4107ea4964983c6aa88d86d"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0xc2, 0xbc, 0x77, 0x10, 0xbfd, 0x106, 0xec89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x35, 0x7, 0x20, 0xce, [{{0x9, 0x4, 0xf0, 0x0, 0x2, 0xff, 0xff, 0xff, 0xd, [@generic={0x7, 0x5, "c2be1b820f"}], [{{0x9, 0x5, 0xf, 0xc, 0x20, 0xd, 0x1f, 0x6}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x9, 0x92, 0x7}}]}}]}}]}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$unlink(0x9, r3, 0xfffffffffffffffd) 1m11.662940264s ago: executing program 2 (id=182): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000240)={0x24, 0x4, 0x7}) 1m11.241744521s ago: executing program 2 (id=183): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x8000) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa5de08ff824376162000000"], 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f0000002800)=""/4114, 0x1012}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000001e00)=""/205, 0xcd}], 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1m10.123290917s ago: executing program 2 (id=184): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x183, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="a0bafb2cacbf2766106f442385efafb725"], 0x14) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60df1d00001406"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="0fa26667f046836b0876650fc71a66ba4100edb9800000c00f3235001000000f30420f017805450f0866b8af008ed86446d8e4b8010000000f01d9", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r6]) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r8 = fsopen(&(0x7f000001fac0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000540)='user\x00', &(0x7f0000000900)='\xc9 \xad;(U\xc3\x89\x81\x17\x98\xd5\xff\xd8\x9bO\x1dfQ\x02r\xd1\xb6\x16U\xb1\x97P\x9e\xb7D\x93.\xf3\x15\xd2\xb4\x11\x15\xa3^\x9eHm\x89\fU\xfc\xe8\x7f=\xf8j\xa5J\xb9\x87\x11\xdb\xa7\x94\xd3\xc7KZ\xc6z\xee\xd3+\xf8L\xf8>\x1f\x99FJ\x9a\x8b\xca\x0e\x9ah\xcf\x13\xa4;\xe0\x8d\x9e\x1bkR\x18+\xf7%(.\x13\xf07\x15_\x91\xa3\xeb\xd7\xef\x8bt\x93\xc1\x8b;\x15\\\xe2\xd6\xde\xf0\x9f\xf5\xaa\xf5\x14*\x1a\x14\x88p?\xa4u\xcb\xed\xf4P\xc3\x1d\x1f\xb3\xcc\xd6,\x8e%\x02\xb0\x8b\x9e\x90\xde\x17i\xbdMv\x8cW~4\x00[\xddD\x96\x96a\xd7\xa9\xad\xc7\x90Kp\x834\xaez\xd9\\#\x7f\x84_>\xde0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 1m9.459488319s ago: executing program 4 (id=186): socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r2 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x0, 0x2000}) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) sendmsg$can_j1939(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x7d10, &(0x7f0000000340)={0x0, 0x6afe, 0x0, 0x1, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x16, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x70}, 0x58) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) 58.978346302s ago: executing program 2 (id=187): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002280)={0x50, 0x0, r1, {0x7, 0x9, 0x7fffffff, 0x24080e0, 0x9, 0x0, 0x7}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="29000000040000000000000000000000010000000000000000000000000000000100000000000000002adbd46bea86596330f8a107bcb2624141d9ca38828ae92ae8fb1ab692bfac4f4edc63ee5166ffcac9029d31759c7b1e739842a9628cd8ad"], 0x29) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x10) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) dup3(r3, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4002, 0x1b) 0s ago: executing program 1 (id=189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f000001f4c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @private1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, r5}}, 0x48) kernel console output (not intermixed with test programs): [ 74.595516][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.644926][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.653910][ T5242] veth0_vlan: entered promiscuous mode [ 74.721667][ T5242] veth1_vlan: entered promiscuous mode [ 74.745598][ T5238] Bluetooth: hci1: command tx timeout [ 74.762537][ T5241] veth0_vlan: entered promiscuous mode [ 74.797606][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.813415][ T5241] veth1_vlan: entered promiscuous mode [ 74.825063][ T5235] Bluetooth: hci0: command tx timeout [ 74.827618][ T5230] Bluetooth: hci3: command tx timeout [ 74.830504][ T5235] Bluetooth: hci2: command tx timeout [ 74.841459][ T5238] Bluetooth: hci4: command tx timeout [ 74.872940][ T5242] veth0_macvtap: entered promiscuous mode [ 74.887388][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.898998][ T5242] veth1_macvtap: entered promiscuous mode [ 74.923274][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.961680][ T5241] veth0_macvtap: entered promiscuous mode [ 74.976759][ T5241] veth1_macvtap: entered promiscuous mode [ 74.986392][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.006642][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.017636][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.030633][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.051114][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.071967][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.082946][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.094537][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.110688][ T5244] veth0_vlan: entered promiscuous mode [ 75.119954][ T5242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.129298][ T5242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.139742][ T5242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.151185][ T5242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.168291][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.177643][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.186927][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.196392][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.233266][ T5245] veth0_vlan: entered promiscuous mode [ 75.257748][ T5244] veth1_vlan: entered promiscuous mode [ 75.309498][ T5245] veth1_vlan: entered promiscuous mode [ 75.354010][ T5246] veth0_vlan: entered promiscuous mode [ 75.407601][ T5246] veth1_vlan: entered promiscuous mode [ 75.433291][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.441931][ T5244] veth0_macvtap: entered promiscuous mode [ 75.456777][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.463945][ T5244] veth1_macvtap: entered promiscuous mode [ 75.492112][ T2905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.495747][ T5245] veth0_macvtap: entered promiscuous mode [ 75.512901][ T2905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.513430][ T5245] veth1_macvtap: entered promiscuous mode [ 75.552050][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.563854][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.574406][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.586559][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.598144][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.622805][ T3043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.649403][ T3043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.659382][ T5246] veth0_macvtap: entered promiscuous mode [ 75.673097][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.685245][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.695613][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.706839][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.718282][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.729542][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.746346][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.755605][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.771987][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.784295][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.789167][ T5242] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.806898][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.822441][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.840045][ T5244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.849018][ T5244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.857991][ T5244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.867503][ T5244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.892842][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.903670][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.904176][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.912160][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.927706][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.941763][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.959244][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.969883][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.981180][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.999577][ T5246] veth1_macvtap: entered promiscuous mode [ 76.013138][ T5245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028150][ T5245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.039692][ T5245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.053114][ T5245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.145909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.148507][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.154703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 76.205070][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.215764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.224673][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.235348][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.245380][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.256167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.265741][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.275766][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.286311][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.297772][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.307705][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.318376][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.328400][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.339168][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.349258][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.360392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.369069][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.379075][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.390020][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.401317][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.408921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.471382][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.480730][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.489689][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.514774][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.608026][ T3043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.629160][ T3043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.638896][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.639476][ T5287] syz.0.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 76.685975][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.723261][ T5287] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 76.779578][ T2905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.835017][ T5235] Bluetooth: hci1: command tx timeout [ 76.845018][ T2905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.905237][ T5238] Bluetooth: hci0: command tx timeout [ 76.907055][ T5230] Bluetooth: hci2: command tx timeout [ 76.910684][ T5238] Bluetooth: hci4: command tx timeout [ 76.921927][ T5235] Bluetooth: hci3: command tx timeout [ 76.928971][ T3043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.947548][ T3043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.026087][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.075166][ T5277] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.084694][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.133372][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.141595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.174727][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.282817][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 77.314786][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.358303][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.358372][ T5277] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 77.358400][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.367687][ T5277] usb 1-1: config 0 descriptor?? [ 77.483131][ T5296] fuse: Bad value for 'group_id' [ 77.483157][ T5296] fuse: Bad value for 'group_id' [ 77.951648][ T5314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.998321][ T5287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.040664][ T5287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.074118][ T5287] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.185957][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.371398][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 78.385913][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 78.394414][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 78.413394][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 78.457426][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.485306][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.521607][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.543180][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.606744][ T5277] usbhid 1-1:0.0: can't add hid device: -71 [ 78.626782][ T5277] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 78.703049][ T5277] usb 1-1: USB disconnect, device number 2 [ 78.773200][ T5325] Zero length message leads to an empty skb [ 78.788571][ T8] usb 4-1: GET_CAPABILITIES returned 0 [ 78.808776][ T8] usbtmc 4-1:16.0: can't read capabilities [ 78.885032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.901700][ T8] usb 4-1: USB disconnect, device number 2 [ 78.907804][ T5238] Bluetooth: hci1: command tx timeout [ 78.984840][ T5235] Bluetooth: hci0: command tx timeout [ 78.990394][ T5238] Bluetooth: hci2: command tx timeout [ 78.998786][ T5235] Bluetooth: hci4: command tx timeout [ 79.000395][ T5230] Bluetooth: hci3: command tx timeout [ 79.250001][ T5333] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 79.256672][ T5329] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.309054][ T5333] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.323053][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 79.741943][ T5346] netlink: 160 bytes leftover after parsing attributes in process `syz.2.18'. [ 79.754244][ T5346] netlink: 160 bytes leftover after parsing attributes in process `syz.2.18'. [ 80.457252][ T5348] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.464971][ T5348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.478884][ T5348] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.486809][ T5348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.492818][ T5348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.501429][ T5348] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.508848][ T5348] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.515154][ T5348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.522637][ T5348] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.530070][ T5348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.537073][ T5348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.545925][ T5348] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.558891][ T5348] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.565526][ T5348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.572478][ T5348] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.834763][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.842452][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.854853][ T5299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.930470][ T5366] FAULT_INJECTION: forcing a failure. [ 80.930470][ T5366] name failslab, interval 1, probability 0, space 0, times 1 [ 80.949561][ T5366] CPU: 0 UID: 0 PID: 5366 Comm: syz.3.25 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 80.959814][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.969929][ T5366] Call Trace: [ 80.973243][ T5366] [ 80.976209][ T5366] dump_stack_lvl+0x241/0x360 [ 80.980962][ T5366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.986213][ T5366] ? __pfx__printk+0x10/0x10 [ 80.990852][ T5366] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 80.996444][ T5366] ? __pfx___might_resched+0x10/0x10 [ 81.001789][ T5366] should_fail_ex+0x3b0/0x4e0 [ 81.004959][ T5280] usb 2-1: device descriptor read/64, error -71 [ 81.006497][ T5366] ? __anon_vma_prepare+0x117/0x4a0 [ 81.017962][ T5366] should_failslab+0xac/0x100 [ 81.022653][ T5366] ? __anon_vma_prepare+0x117/0x4a0 [ 81.025531][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 81.027855][ T5366] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 81.038299][ T5366] __anon_vma_prepare+0x117/0x4a0 [ 81.043397][ T5366] uffd_lock_vma+0x1e3/0x2e0 [ 81.046136][ T5299] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 81.048022][ T5366] mfill_atomic_continue+0x16a/0x1880 [ 81.048070][ T5366] ? __pfx___might_resched+0x10/0x10 [ 81.058225][ T25] usb 1-1: config 0 has no interfaces? [ 81.062463][ T5366] ? __might_fault+0xaa/0x120 [ 81.062504][ T5366] ? __pfx_mfill_atomic_continue+0x10/0x10 [ 81.062536][ T5366] ? preempt_count_add+0x93/0x190 [ 81.062570][ T5366] ? __might_fault+0xc6/0x120 [ 81.062608][ T5366] userfaultfd_ioctl+0x2f36/0x66f0 [ 81.062637][ T5366] ? __kernel_text_address+0xd/0x40 [ 81.062680][ T5366] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 81.062707][ T5366] ? stack_trace_save+0x118/0x1d0 [ 81.062737][ T5366] ? __pfx_stack_trace_save+0x10/0x10 [ 81.062768][ T5366] ? stack_depot_save_flags+0x29/0x830 [ 81.062810][ T5366] ? kasan_save_track+0x51/0x80 [ 81.062834][ T5366] ? tomoyo_path_number_perm+0x68d/0x880 [ 81.062857][ T5366] ? security_file_ioctl+0xc6/0x2a0 [ 81.062877][ T5366] ? __se_sys_ioctl+0x47/0x170 [ 81.062909][ T5366] ? do_syscall_64+0xf3/0x230 [ 81.062938][ T5366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.062971][ T5366] ? do_vfs_ioctl+0xf08/0x2e40 [ 81.063010][ T5366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 81.063047][ T5366] ? mark_lock+0x9a/0x360 [ 81.063085][ T5366] ? tomoyo_path_number_perm+0x208/0x880 [ 81.063110][ T5366] ? __pfx_lock_release+0x10/0x10 [ 81.063141][ T5366] ? lockdep_hardirqs_on+0x99/0x150 [ 81.063183][ T5366] ? kfree+0x1a0/0x440 [ 81.063209][ T5366] ? tomoyo_path_number_perm+0x68d/0x880 [ 81.063235][ T5366] ? tomoyo_path_number_perm+0x71a/0x880 [ 81.063261][ T5366] ? tomoyo_path_number_perm+0x208/0x880 [ 81.063284][ T5366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.063344][ T5366] ? __fget_files+0x29/0x470 [ 81.063369][ T5366] ? __fget_files+0x3f3/0x470 [ 81.063399][ T5366] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 81.063430][ T5366] __se_sys_ioctl+0xf9/0x170 [ 81.063466][ T5366] do_syscall_64+0xf3/0x230 [ 81.063497][ T5366] ? clear_bhb_loop+0x35/0x90 [ 81.063529][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.063568][ T5366] RIP: 0033:0x7f302a17def9 [ 81.063597][ T5366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.063622][ T5366] RSP: 002b:00007f302af4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.063650][ T5366] RAX: ffffffffffffffda RBX: 00007f302a335f80 RCX: 00007f302a17def9 [ 81.063666][ T5366] RDX: 0000000020000100 RSI: 00000000c020aa07 RDI: 0000000000000006 [ 81.063679][ T5366] RBP: 00007f302af4a090 R08: 0000000000000000 R09: 0000000000000000 [ 81.063694][ T5366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.063709][ T5366] R13: 0000000000000000 R14: 00007f302a335f80 R15: 00007f302a45fa28 [ 81.063742][ T5366] [ 81.256321][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 81.262797][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.362929][ T5299] usb 5-1: config 0 descriptor?? [ 81.384133][ T25] usb 1-1: config 0 has no interfaces? [ 81.393758][ T25] usb 1-1: config 0 has no interfaces? [ 81.415352][ T25] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 81.424531][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.442786][ T25] usb 1-1: Product: syz [ 81.448243][ T25] usb 1-1: Manufacturer: syz [ 81.452985][ T25] usb 1-1: SerialNumber: syz [ 81.461281][ T25] usb 1-1: config 0 descriptor?? [ 81.484835][ T5280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.585050][ T5299] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 81.593196][ T5375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 81.594363][ T5299] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 81.618151][ T5280] usb 2-1: device descriptor read/64, error -71 [ 81.631517][ T5299] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 81.644865][ T5299] [drm] Initialized udl on minor 2 [ 81.694216][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.716966][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.746509][ T5280] usb usb2-port1: attempt power cycle [ 81.752941][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.797031][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 81.813953][ T5299] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 81.823366][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.824325][ T937] cfg80211: failed to load regulatory.db [ 81.834924][ T5299] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 81.906624][ T5283] usb 1-1: USB disconnect, device number 3 [ 82.026811][ T1846] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 82.049347][ T5299] usb 5-1: USB disconnect, device number 2 [ 82.057540][ T1846] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 82.082290][ T1846] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 82.114820][ T5280] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.148868][ T5280] usb 2-1: device descriptor read/8, error -71 [ 82.303770][ T5379] raw_sendmsg: syz.3.29 forgot to set AF_INET. Fix it! [ 82.404965][ T5280] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.425583][ T937] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.436315][ T5280] usb 2-1: device descriptor read/8, error -71 [ 82.506878][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.545623][ T5280] usb usb2-port1: unable to enumerate USB device [ 82.585510][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.591676][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.596521][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 82.599330][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.649571][ T937] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 82.683599][ T937] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 82.758339][ T937] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice= 1.08 [ 82.785275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.790114][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.810038][ T5394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 82.838001][ T937] usb 1-1: Product: syz [ 82.842253][ T937] usb 1-1: Manufacturer: syz [ 82.864711][ T937] usb 1-1: SerialNumber: syz [ 82.896390][ T937] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 82.954747][ T937] imon 1-1:1.0: unable to initialize intf0, err -19 [ 82.986709][ T937] imon:imon_probe: failed to initialize context! [ 82.993126][ T937] imon 1-1:1.0: unable to register, err -19 [ 83.267702][ T5278] usb 1-1: USB disconnect, device number 4 [ 83.618410][ T5421] binder: 5417:5421 ioctl c0306201 0 returned -14 [ 83.806203][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 83.864729][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.039699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.154689][ T5280] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.364983][ T1846] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.397013][ T5280] usb 3-1: unable to get BOS descriptor or descriptor too short [ 84.415562][ T5280] usb 3-1: not running at top speed; connect to a high speed hub [ 84.426371][ T5280] usb 3-1: config index 0 descriptor too short (expected 11923, got 45) [ 84.446925][ T5280] usb 3-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 84.457803][ T5280] usb 3-1: config 108 has an invalid interface descriptor of length 8, skipping [ 84.468138][ T5280] usb 3-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 84.479255][ T5280] usb 3-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 84.491815][ T5280] usb 3-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 84.501098][ T5299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.508902][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.517121][ T5280] usb 3-1: Product: syz [ 84.521354][ T5280] usb 3-1: Manufacturer: syz [ 84.526156][ T5280] usb 3-1: SerialNumber: syz [ 84.544712][ T1846] usb 4-1: Using ep0 maxpacket: 8 [ 84.553271][ T1846] usb 4-1: config index 0 descriptor too short (expected 4801, got 27) [ 84.562002][ T1846] usb 4-1: config 85 has too many interfaces: 102, using maximum allowed: 32 [ 84.573276][ T1846] usb 4-1: config 85 has an invalid descriptor of length 219, skipping remainder of the config [ 84.584492][ T1846] usb 4-1: config 85 has 0 interfaces, different from the descriptor's value: 102 [ 84.584662][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.612782][ T1846] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 84.629688][ T1846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.665575][ T5235] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.665600][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.665697][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.685398][ T5299] usb 2-1: Using ep0 maxpacket: 32 [ 84.694231][ T5299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.753533][ C1] hrtimer: interrupt took 61677 ns [ 84.783825][ T5428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.808051][ T5299] usb 2-1: config 1 interface 0 has no altsetting 0 [ 84.833044][ T5428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.858707][ T5299] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 84.876012][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.884195][ T5299] usb 2-1: Product: syz [ 84.889192][ T5299] usb 2-1: Manufacturer: syz [ 84.893891][ T5299] usb 2-1: SerialNumber: syz [ 84.939426][ T1846] usb 4-1: string descriptor 0 read error: -71 [ 84.948159][ T1846] usb 4-1: USB disconnect, device number 3 [ 85.035162][ T5280] usb 3-1: USB disconnect, device number 2 [ 85.335432][ T5441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.345869][ T5441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.832925][ T5487] netlink: 80 bytes leftover after parsing attributes in process `syz.2.57'. [ 85.954893][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.060232][ T5491] FAULT_INJECTION: forcing a failure. [ 86.060232][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 86.073794][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.0.59 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 86.083996][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.094223][ T5491] Call Trace: [ 86.097531][ T5491] [ 86.100481][ T5491] dump_stack_lvl+0x241/0x360 [ 86.105219][ T5491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.110465][ T5491] ? __pfx__printk+0x10/0x10 [ 86.115087][ T5491] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 86.121109][ T5491] ? __pfx___might_resched+0x10/0x10 [ 86.126429][ T5491] should_fail_ex+0x3b0/0x4e0 [ 86.131160][ T5491] should_failslab+0xac/0x100 [ 86.135861][ T5491] ? __alloc_skb+0x1c3/0x440 [ 86.140496][ T5491] kmem_cache_alloc_node_noprof+0x71/0x320 [ 86.146342][ T5491] __alloc_skb+0x1c3/0x440 [ 86.150804][ T5491] ? __pfx___alloc_skb+0x10/0x10 [ 86.155777][ T5491] ? netlink_autobind+0xd6/0x2f0 [ 86.161020][ T5491] ? netlink_autobind+0x2b0/0x2f0 [ 86.166097][ T5491] netlink_sendmsg+0x638/0xcb0 [ 86.170912][ T5491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.176249][ T5491] ? aa_sock_msg_perm+0x91/0x160 [ 86.181220][ T5491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.186548][ T5491] __sock_sendmsg+0x221/0x270 [ 86.191273][ T5491] ____sys_sendmsg+0x52a/0x7e0 [ 86.196074][ T5491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.201413][ T5491] __sys_sendmsg+0x2aa/0x390 [ 86.206046][ T5491] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.211200][ T5491] ? vfs_write+0x7bf/0xc90 [ 86.215687][ T5491] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.222065][ T5491] ? do_syscall_64+0x100/0x230 [ 86.226860][ T5491] ? do_syscall_64+0xb6/0x230 [ 86.231582][ T5491] do_syscall_64+0xf3/0x230 [ 86.236110][ T5491] ? clear_bhb_loop+0x35/0x90 [ 86.240829][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.246746][ T5491] RIP: 0033:0x7f7bd877def9 [ 86.251181][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.270816][ T5491] RSP: 002b:00007f7bd9618038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.279260][ T5491] RAX: ffffffffffffffda RBX: 00007f7bd8935f80 RCX: 00007f7bd877def9 [ 86.287262][ T5491] RDX: 0000000000000040 RSI: 00000000200000c0 RDI: 0000000000000003 [ 86.295274][ T5491] RBP: 00007f7bd9618090 R08: 0000000000000000 R09: 0000000000000000 [ 86.303263][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.311285][ T5491] R13: 0000000000000000 R14: 00007f7bd8935f80 R15: 00007f7bd8a5fa28 [ 86.319297][ T5491] [ 86.344841][ T5278] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.564816][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 86.574741][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.592665][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.646463][ T5278] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 86.664668][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.677489][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.717555][ T5278] usb 4-1: config 0 descriptor?? [ 86.744917][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.751043][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.757769][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.193070][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.248524][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.309121][ T5278] usbhid 4-1:0.0: can't add hid device: -71 [ 87.320063][ T5299] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 87.329693][ T5278] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 87.349484][ T4668] bcm5974 2-1:1.0: could not read from device [ 87.359574][ T5299] usb 2-1: USB disconnect, device number 6 [ 87.389322][ T5278] usb 4-1: USB disconnect, device number 4 [ 87.512956][ T5234] udevd[5234]: Error opening device "/dev/input/event4": No such file or directory [ 87.553891][ T5234] udevd[5234]: Unable to EVIOCGABS device "/dev/input/event4" [ 87.554789][ T5280] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.576328][ T5234] udevd[5234]: Unable to EVIOCGABS device "/dev/input/event4" [ 87.606890][ T5234] udevd[5234]: Unable to EVIOCGABS device "/dev/input/event4" [ 87.626038][ T5234] udevd[5234]: Unable to EVIOCGABS device "/dev/input/event4" [ 87.775481][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 87.786637][ T5280] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.800447][ T5280] usb 3-1: config 0 has no interface number 0 [ 87.813664][ T5280] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 87.832319][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.841977][ T5280] usb 3-1: Product: syz [ 87.854333][ T5280] usb 3-1: Manufacturer: syz [ 87.859718][ T5280] usb 3-1: SerialNumber: syz [ 87.879720][ T5280] usb 3-1: config 0 descriptor?? [ 87.899635][ T5280] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 87.907576][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.964821][ T5299] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 88.036548][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 88.074931][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 88.082465][ T25] usb 5-1: config index 0 descriptor too short (expected 4801, got 27) [ 88.094802][ T25] usb 5-1: config 85 has too many interfaces: 102, using maximum allowed: 32 [ 88.107477][ T25] usb 5-1: config 85 has an invalid descriptor of length 219, skipping remainder of the config [ 88.124670][ T25] usb 5-1: config 85 has 0 interfaces, different from the descriptor's value: 102 [ 88.141328][ T25] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 88.150942][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.165434][ T5299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 88.176045][ T5299] usb 2-1: not running at top speed; connect to a high speed hub [ 88.197121][ T5299] usb 2-1: config index 0 descriptor too short (expected 11923, got 45) [ 88.207024][ T5299] usb 2-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 88.216847][ T5299] usb 2-1: config 108 has an invalid interface descriptor of length 8, skipping [ 88.247936][ T5299] usb 2-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 88.278309][ T5299] usb 2-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 88.311099][ T29] audit: type=1326 audit(1727092267.485:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d37def9 code=0x7ffc0000 [ 88.358250][ T5299] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 88.370494][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.380044][ T5524] netlink: 52 bytes leftover after parsing attributes in process `syz.0.69'. [ 88.389745][ T29] audit: type=1326 audit(1727092267.485:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d37def9 code=0x7ffc0000 [ 88.412913][ T5299] usb 2-1: Product: syz [ 88.417498][ T5299] usb 2-1: Manufacturer: syz [ 88.422285][ T5299] usb 2-1: SerialNumber: syz [ 88.425945][ T5526] dccp_invalid_packet: invalid packet type [ 88.457882][ T25] usb 5-1: string descriptor 0 read error: -71 [ 88.474725][ T29] audit: type=1326 audit(1727092267.485:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7e2d37def9 code=0x7ffc0000 [ 88.475502][ T5526] FAULT_INJECTION: forcing a failure. [ 88.475502][ T5526] name failslab, interval 1, probability 0, space 0, times 0 [ 88.501036][ T25] usb 5-1: USB disconnect, device number 3 [ 88.548485][ T29] audit: type=1326 audit(1727092267.485:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d37def9 code=0x7ffc0000 [ 88.566875][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.3.70 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 88.571848][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.580656][ T5526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 88.596842][ T5526] Call Trace: [ 88.600150][ T5526] [ 88.603112][ T5526] dump_stack_lvl+0x241/0x360 [ 88.607848][ T5526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.608655][ T29] audit: type=1326 audit(1727092267.485:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e2d37dafb code=0x7ffc0000 [ 88.613084][ T5526] ? __pfx__printk+0x10/0x10 [ 88.613115][ T5526] ? __nla_validate_parse+0x26ce/0x3090 [ 88.613153][ T5526] should_fail_ex+0x3b0/0x4e0 [ 88.613191][ T5526] ? xfrm_state_alloc+0x22/0x2a0 [ 88.637272][ T29] audit: type=1326 audit(1727092267.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e2d37dafb code=0x7ffc0000 [ 88.639556][ T5526] should_failslab+0xac/0x100 [ 88.639597][ T5526] ? xfrm_state_alloc+0x22/0x2a0 [ 88.639630][ T5526] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 88.639656][ T5526] ? aa_get_newest_label+0xff/0x6f0 [ 88.639684][ T5526] xfrm_state_alloc+0x22/0x2a0 [ 88.639719][ T5526] xfrm_add_sa+0x134a/0x3b60 [ 88.639754][ T5526] ? __pfx_xfrm_add_sa+0x10/0x10 [ 88.639786][ T5526] ? __nla_parse+0x40/0x60 [ 88.639815][ T5526] xfrm_user_rcv_msg+0x75b/0xa80 [ 88.639848][ T5526] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 88.639910][ T5526] ? __mutex_trylock_common+0x183/0x2e0 [ 88.639936][ T5526] ? __pfx___might_resched+0x10/0x10 [ 88.639976][ T5526] netlink_rcv_skb+0x1e3/0x430 [ 88.640007][ T5526] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 88.640036][ T5526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.640091][ T5526] xfrm_netlink_rcv+0x79/0x90 [ 88.640118][ T5526] netlink_unicast+0x7f6/0x990 [ 88.640152][ T5526] ? __pfx_netlink_unicast+0x10/0x10 [ 88.640176][ T5526] ? __virt_addr_valid+0x183/0x530 [ 88.640202][ T5526] ? __check_object_size+0x48e/0x900 [ 88.640233][ T5526] netlink_sendmsg+0x8e4/0xcb0 [ 88.640274][ T5526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.640308][ T5526] ? aa_sock_msg_perm+0x91/0x160 [ 88.640339][ T5526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.640366][ T5526] __sock_sendmsg+0x221/0x270 [ 88.640395][ T5526] ____sys_sendmsg+0x52a/0x7e0 [ 88.640436][ T5526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.640485][ T5526] __sys_sendmsg+0x2aa/0x390 [ 88.640519][ T5526] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.640550][ T5526] ? vfs_write+0x7bf/0xc90 [ 88.640631][ T5526] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.640666][ T5526] ? do_syscall_64+0x100/0x230 [ 88.640698][ T5526] ? do_syscall_64+0xb6/0x230 [ 88.640728][ T5526] do_syscall_64+0xf3/0x230 [ 88.640756][ T5526] ? clear_bhb_loop+0x35/0x90 [ 88.640786][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.640813][ T5526] RIP: 0033:0x7f302a17def9 [ 88.640834][ T5526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.640852][ T5526] RSP: 002b:00007f302af4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.640877][ T5526] RAX: ffffffffffffffda RBX: 00007f302a335f80 RCX: 00007f302a17def9 [ 88.640894][ T5526] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000008 [ 88.640909][ T5526] RBP: 00007f302af4a090 R08: 0000000000000000 R09: 0000000000000000 [ 88.640924][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.640938][ T5526] R13: 0000000000000000 R14: 00007f302a335f80 R15: 00007f302a45fa28 [ 88.640971][ T5526] [ 88.845811][ T5504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.967313][ T5530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 88.975523][ T29] audit: type=1326 audit(1727092267.515:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e2d3affe5 code=0x7ffc0000 [ 89.002518][ T5529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.004818][ T29] audit: type=1326 audit(1727092267.725:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d37def9 code=0x7ffc0000 [ 89.033279][ T29] audit: type=1326 audit(1727092267.725:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e2d37dafb code=0x7ffc0000 [ 89.056253][ T29] audit: type=1326 audit(1727092267.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e2d37dafb code=0x7ffc0000 [ 89.105785][ T5280] gspca_spca1528: reg_w err -110 [ 89.108196][ T5504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.112077][ T5529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.126786][ T5280] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 89.153179][ T5280] usb 3-1: USB disconnect, device number 3 [ 89.274134][ T5299] usb 2-1: USB disconnect, device number 7 [ 90.224790][ T5299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.408895][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.431866][ T5299] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 90.454252][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.473897][ T5299] usb 2-1: config 0 descriptor?? [ 90.491882][ T5299] cp210x 2-1:0.0: cp210x converter detected [ 90.599027][ T25] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 90.624981][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.642015][ T25] usb 4-1: config 0 descriptor?? [ 90.884801][ T5280] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.894256][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.905366][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.931453][ T5559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.979871][ T5559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.009806][ T5299] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 91.060804][ T25] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 91.067637][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 91.081427][ T5299] usb 2-1: cp210x converter now attached to ttyUSB0 [ 91.099490][ T5280] usb 3-1: config index 0 descriptor too short (expected 4801, got 27) [ 91.116176][ T5280] usb 3-1: config 85 has too many interfaces: 102, using maximum allowed: 32 [ 91.125377][ T5280] usb 3-1: config 85 has an invalid descriptor of length 219, skipping remainder of the config [ 91.135973][ T5280] usb 3-1: config 85 has 0 interfaces, different from the descriptor's value: 102 [ 91.145407][ T5280] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 91.154701][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.315085][ T5278] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 91.328450][ T5283] usb 2-1: USB disconnect, device number 8 [ 91.334345][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 91.382005][ T5280] usb 3-1: string descriptor 0 read error: -71 [ 91.387587][ T5283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 91.426414][ T5280] usb 3-1: USB disconnect, device number 4 [ 91.455353][ T5283] cp210x 2-1:0.0: device disconnected [ 91.534986][ T5278] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.549039][ T5278] usb 1-1: not running at top speed; connect to a high speed hub [ 91.588474][ T5278] usb 1-1: config index 0 descriptor too short (expected 11923, got 45) [ 91.598213][ T5278] usb 1-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 91.607784][ T5278] usb 1-1: config 108 has an invalid interface descriptor of length 8, skipping [ 91.618494][ T5278] usb 1-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 91.639595][ T5278] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 91.653378][ T5278] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 91.668439][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.680000][ T5278] usb 1-1: Product: syz [ 91.683475][ T5280] usb 4-1: USB disconnect, device number 5 [ 91.684199][ T5278] usb 1-1: Manufacturer: syz [ 91.695081][ T5278] usb 1-1: SerialNumber: syz [ 91.721672][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 91.945237][ T5283] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 92.002748][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.060911][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.118600][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.153242][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.169457][ T5283] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 92.183480][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.214913][ T5283] usb 2-1: config 0 descriptor?? [ 92.368321][ T5280] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.437640][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.480990][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.584907][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 92.626307][ T5280] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 92.643675][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.719748][ T5280] usb 3-1: config 0 descriptor?? [ 92.746826][ T5280] gspca_main: sunplus-2.14.0 probing 041e:400b [ 92.839304][ T5599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.915650][ T5634] dccp_invalid_packet: invalid packet type [ 93.077654][ T5599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.365495][ T5283] usbhid 2-1:0.0: can't add hid device: -71 [ 93.381800][ T5283] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 93.426712][ T5283] usb 2-1: USB disconnect, device number 9 [ 93.821347][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 93.821365][ T29] audit: type=1326 audit(1727092272.995:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3bd7def9 code=0x7ffc0000 [ 93.845095][ T5280] gspca_sunplus: reg_r err -110 [ 93.855646][ T5280] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 93.924397][ T29] audit: type=1326 audit(1727092272.995:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3bd7def9 code=0x7ffc0000 [ 93.952960][ T29] audit: type=1326 audit(1727092273.065:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f0f3bd7def9 code=0x7ffc0000 [ 93.974974][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.003230][ T5648] vivid-007: ================= START STATUS ================= [ 94.022941][ T29] audit: type=1326 audit(1727092273.065:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3bd7def9 code=0x7ffc0000 [ 94.062708][ T5648] vivid-007: Enable Output Cropping: true [ 94.080970][ T5648] vivid-007: Enable Output Composing: true [ 94.100921][ T5648] vivid-007: Enable Output Scaler: true [ 94.129684][ T5653] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 94.186798][ T5648] vivid-007: Tx RGB Quantization Range: Automatic [ 94.195820][ T29] audit: type=1326 audit(1727092273.065:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3bd7def9 code=0x7ffc0000 [ 94.247726][ T937] usb 3-1: USB disconnect, device number 5 [ 94.299249][ T5648] vivid-007: Transmit Mode: HDMI [ 94.325596][ T5648] vivid-007: Hotplug Present: 0x00000000 [ 94.355759][ T5648] vivid-007: RxSense Present: 0x00000000 [ 94.384688][ T5648] vivid-007: EDID Present: 0x00000000 [ 94.435603][ T5648] vivid-007: ================== END STATUS ================== [ 95.692744][ T5683] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 95.731342][ T5683] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 95.772298][ T5683] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 95.823013][ T5683] netlink: 'syz.2.106': attribute type 29 has an invalid length. [ 96.660382][ T5703] FAULT_INJECTION: forcing a failure. [ 96.660382][ T5703] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.694522][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: syz.1.115 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 96.704842][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 96.714990][ T5703] Call Trace: [ 96.718269][ T5703] [ 96.721197][ T5703] dump_stack_lvl+0x241/0x360 [ 96.725907][ T5703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.731120][ T5703] ? __pfx__printk+0x10/0x10 [ 96.735742][ T5703] ? __pfx_lock_release+0x10/0x10 [ 96.740785][ T5703] should_fail_ex+0x3b0/0x4e0 [ 96.745499][ T5703] _copy_from_user+0x2f/0xe0 [ 96.750117][ T5703] copy_msghdr_from_user+0xae/0x680 [ 96.755364][ T5703] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.761197][ T5703] __sys_sendmsg+0x237/0x390 [ 96.765809][ T5703] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.770933][ T5703] ? vfs_write+0x7bf/0xc90 [ 96.775380][ T5703] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.781714][ T5703] ? do_syscall_64+0x100/0x230 [ 96.786494][ T5703] ? do_syscall_64+0xb6/0x230 [ 96.791206][ T5703] do_syscall_64+0xf3/0x230 [ 96.795743][ T5703] ? clear_bhb_loop+0x35/0x90 [ 96.800422][ T5703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.806329][ T5703] RIP: 0033:0x7f185377def9 [ 96.810741][ T5703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.830363][ T5703] RSP: 002b:00007f18531de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.838814][ T5703] RAX: ffffffffffffffda RBX: 00007f1853936058 RCX: 00007f185377def9 [ 96.846795][ T5703] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 000000000000000b [ 96.854878][ T5703] RBP: 00007f18531de090 R08: 0000000000000000 R09: 0000000000000000 [ 96.862869][ T5703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.870860][ T5703] R13: 0000000000000000 R14: 00007f1853936058 R15: 00007f1853a5fa28 [ 96.878844][ T5703] [ 97.025446][ T25] usb 1-1: USB disconnect, device number 5 [ 97.374834][ T5712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 97.515288][ T5719] input: syz0 as /devices/virtual/input/input7 [ 97.616809][ T5725] mmap: syz.3.122 (5725) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.817882][ T5278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.968521][ T5739] Invalid logical block size (32) [ 97.985055][ T5277] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.000136][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.032095][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.061485][ T5278] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 98.091340][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.123255][ T5278] usb 3-1: config 0 descriptor?? [ 98.157089][ T5277] usb 4-1: Using ep0 maxpacket: 16 [ 98.170725][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 98.191412][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 98.204850][ T51] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.219802][ T5277] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 98.243570][ T5277] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 98.257040][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.268338][ T5277] usb 4-1: Product: syz [ 98.272592][ T5277] usb 4-1: Manufacturer: syz [ 98.278282][ T5277] usb 4-1: SerialNumber: syz [ 98.302073][ T5277] usb 4-1: config 0 descriptor?? [ 98.331564][ T5277] hub 4-1:0.0: bad descriptor, ignoring hub [ 98.338485][ T5277] hub 4-1:0.0: probe with driver hub failed with error -5 [ 98.350672][ T5277] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.379570][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.412054][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.446652][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.455026][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.508653][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.574797][ T51] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 98.614760][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.672665][ T51] usb 5-1: config 0 descriptor?? [ 98.698242][ T5277] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 98.717378][ T5234] udevd[5234]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.764966][ T5278] asus 0003:048D:CE50.0001: unknown main item tag 0xd [ 98.831269][ T5278] asus 0003:048D:CE50.0001: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.2-1/input0 [ 98.845906][ T5278] asus 0003:048D:CE50.0001: Asus input not registered [ 98.871338][ T5278] asus 0003:048D:CE50.0001: probe with driver asus failed with error -12 [ 99.020007][ T5723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.028938][ T5277] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 99.081267][ T5723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.151736][ T51] waltop 0003:172F:0038.0002: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0 [ 99.208102][ T5277] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.208612][ T51] usb 3-1: USB disconnect, device number 6 [ 99.228049][ T5277] usb 1-1: not running at top speed; connect to a high speed hub [ 99.244129][ T5277] usb 1-1: config index 0 descriptor too short (expected 11923, got 45) [ 99.254229][ T5277] usb 1-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 99.272355][ T5277] usb 1-1: config 108 has an invalid interface descriptor of length 8, skipping [ 99.282515][ T5277] usb 1-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 99.364477][ T5277] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 99.381868][ T5277] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 99.394215][ T5716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.417257][ T5716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.434798][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.443161][ T5277] usb 1-1: Product: syz [ 99.460145][ T5277] usb 1-1: Manufacturer: syz [ 99.476664][ T5278] usb 5-1: USB disconnect, device number 4 [ 99.497016][ T5277] usb 1-1: SerialNumber: syz [ 99.808344][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.829299][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.072295][ T5786] bridge_slave_1: left allmulticast mode [ 100.094301][ T5786] bridge_slave_1: left promiscuous mode [ 100.139021][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.183835][ T5786] bridge_slave_0: left allmulticast mode [ 100.239582][ T5786] bridge_slave_0: left promiscuous mode [ 100.255768][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.861526][ T5278] usb 4-1: USB disconnect, device number 6 [ 100.872930][ T5806] FAULT_INJECTION: forcing a failure. [ 100.872930][ T5806] name failslab, interval 1, probability 0, space 0, times 0 [ 100.903779][ T5806] CPU: 1 UID: 0 PID: 5806 Comm: syz.3.135 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 100.914102][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 100.924209][ T5806] Call Trace: [ 100.927522][ T5806] [ 100.930487][ T5806] dump_stack_lvl+0x241/0x360 [ 100.935219][ T5806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.940461][ T5806] ? __pfx__printk+0x10/0x10 [ 100.945100][ T5806] ? __kmalloc_node_noprof+0xb7/0x440 [ 100.950528][ T5806] ? __pfx___might_resched+0x10/0x10 [ 100.955866][ T5806] should_fail_ex+0x3b0/0x4e0 [ 100.960603][ T5806] should_failslab+0xac/0x100 [ 100.965580][ T5806] __kmalloc_node_noprof+0xdf/0x440 [ 100.970826][ T5806] ? __kvmalloc_node_noprof+0x72/0x190 [ 100.976324][ T5806] ? __pfx_hsr_dev_setup+0x10/0x10 [ 100.981513][ T5806] __kvmalloc_node_noprof+0x72/0x190 [ 100.986851][ T5806] alloc_netdev_mqs+0x9b/0x1000 [ 100.991756][ T5806] ? __pfx_hsr_dev_setup+0x10/0x10 [ 100.996925][ T5806] ? bpf_lsm_capable+0x9/0x10 [ 101.001649][ T5806] rtnl_create_link+0x2f9/0xc20 [ 101.006556][ T5806] rtnl_newlink+0x1423/0x20a0 [ 101.011274][ T5806] ? rtnl_newlink+0xab1/0x20a0 [ 101.016097][ T5806] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.021171][ T5806] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.026410][ T5806] ? __mutex_lock+0x9ab/0xd70 [ 101.031122][ T5806] ? __mutex_lock+0x52a/0xd70 [ 101.035844][ T5806] ? __pfx_rtnl_newlink+0x10/0x10 [ 101.040895][ T5806] rtnetlink_rcv_msg+0x73f/0xcf0 [ 101.045857][ T5806] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 101.051082][ T5806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.056563][ T5806] ? ref_tracker_free+0x643/0x7e0 [ 101.061607][ T5806] netlink_rcv_skb+0x1e3/0x430 [ 101.066398][ T5806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 101.071870][ T5806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.077195][ T5806] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.082419][ T5806] netlink_unicast+0x7f6/0x990 [ 101.087207][ T5806] ? __pfx_netlink_unicast+0x10/0x10 [ 101.092512][ T5806] ? __virt_addr_valid+0x183/0x530 [ 101.097640][ T5806] ? __check_object_size+0x48e/0x900 [ 101.102943][ T5806] netlink_sendmsg+0x8e4/0xcb0 [ 101.107732][ T5806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.113125][ T5806] ? aa_sock_msg_perm+0x91/0x160 [ 101.118084][ T5806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.123557][ T5806] __sock_sendmsg+0x221/0x270 [ 101.128249][ T5806] ____sys_sendmsg+0x52a/0x7e0 [ 101.133054][ T5806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.138370][ T5806] __sys_sendmsg+0x2aa/0x390 [ 101.142981][ T5806] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.148112][ T5806] ? vfs_write+0x7bf/0xc90 [ 101.152591][ T5806] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.158945][ T5806] ? do_syscall_64+0x100/0x230 [ 101.163734][ T5806] ? do_syscall_64+0xb6/0x230 [ 101.168437][ T5806] do_syscall_64+0xf3/0x230 [ 101.172970][ T5806] ? clear_bhb_loop+0x35/0x90 [ 101.177667][ T5806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.183574][ T5806] RIP: 0033:0x7f302a17def9 [ 101.187998][ T5806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.207620][ T5806] RSP: 002b:00007f302af4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.216053][ T5806] RAX: ffffffffffffffda RBX: 00007f302a335f80 RCX: 00007f302a17def9 [ 101.224041][ T5806] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 101.232029][ T5806] RBP: 00007f302af4a090 R08: 0000000000000000 R09: 0000000000000000 [ 101.240015][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.248004][ T5806] R13: 0000000000000000 R14: 00007f302a335f80 R15: 00007f302a45fa28 [ 101.256002][ T5806] [ 101.419633][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 101.717282][ T5278] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.906560][ T5278] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 101.929156][ T5828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 101.944409][ T5278] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 101.964812][ T5278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.987911][ T5278] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 102.002638][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.053713][ T5278] usb 3-1: Product: syz [ 102.060928][ T5278] usb 3-1: Manufacturer: syz [ 102.073160][ T5278] usb 3-1: SerialNumber: syz [ 102.085472][ T5278] usb 3-1: config 0 descriptor?? [ 102.756390][ T5280] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.926560][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.940083][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.954332][ T5280] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.966243][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.979672][ T5280] usb 2-1: config 0 descriptor?? [ 103.024730][ T5281] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 103.204164][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.204799][ T937] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 103.215843][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.240379][ T5281] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 103.249687][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.274737][ T5281] usb 5-1: config 0 descriptor?? [ 103.364756][ T937] usb 4-1: device descriptor read/64, error -71 [ 103.485496][ T5280] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 103.512808][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.529543][ T5280] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 103.534815][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.625061][ T937] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 103.754834][ T937] usb 4-1: device descriptor read/64, error -71 [ 103.819720][ T5846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.829266][ T5846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.865713][ T937] usb usb4-port1: attempt power cycle [ 103.908832][ T5281] usbhid 5-1:0.0: can't add hid device: -71 [ 103.918134][ T5281] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 103.929990][ T5281] usb 5-1: USB disconnect, device number 5 [ 104.120094][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.133058][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.148322][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.158929][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.208152][ T937] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.241048][ T937] usb 4-1: device descriptor read/8, error -71 [ 104.442223][ T5278] ch341 3-1:0.0: ch341-uart converter detected [ 104.477449][ T5278] usb 3-1: failed to receive control message: -71 [ 104.500508][ T937] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.513844][ T5278] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 104.546937][ T937] usb 4-1: device descriptor read/8, error -71 [ 104.565811][ T5278] usb 3-1: USB disconnect, device number 7 [ 104.573073][ T5278] ch341 3-1:0.0: device disconnected [ 104.627864][ T5854] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:00ff:0000:0000 with DS=0xd [ 104.657387][ T937] usb usb4-port1: unable to enumerate USB device [ 104.674302][ T937] usb 1-1: USB disconnect, device number 6 [ 104.863556][ T5281] usb 2-1: USB disconnect, device number 10 [ 105.064208][ T5866] FAULT_INJECTION: forcing a failure. [ 105.064208][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.080416][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.1.150 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 105.090705][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 105.100776][ T5866] Call Trace: [ 105.104066][ T5866] [ 105.107006][ T5866] dump_stack_lvl+0x241/0x360 [ 105.111704][ T5866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.116912][ T5866] ? __pfx__printk+0x10/0x10 [ 105.121510][ T5866] ? __pfx_lock_release+0x10/0x10 [ 105.126557][ T5866] should_fail_ex+0x3b0/0x4e0 [ 105.131269][ T5866] _copy_from_user+0x2f/0xe0 [ 105.135888][ T5866] csum_and_copy_from_iter_full+0x533/0x23b0 [ 105.141909][ T5866] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 105.148359][ T5866] ? trace_kmalloc+0x1f/0xd0 [ 105.152965][ T5866] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 105.159581][ T5866] ? __build_skb_around+0x245/0x3d0 [ 105.164846][ T5866] ip_generic_getfrag+0x158/0x310 [ 105.169908][ T5866] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 105.175509][ T5866] ? raw6_getfrag+0x104/0x350 [ 105.180206][ T5866] ? skb_put+0x114/0x1f0 [ 105.184456][ T5866] __ip6_append_data+0x3075/0x40a0 [ 105.189589][ T5866] ? __pfx_raw6_getfrag+0x10/0x10 [ 105.194640][ T5866] ? __pfx___ip6_append_data+0x10/0x10 [ 105.200111][ T5866] ? ip6_setup_cork+0x9fd/0xfb0 [ 105.204973][ T5866] ip6_append_data+0x264/0x3a0 [ 105.209922][ T5866] ? __pfx_raw6_getfrag+0x10/0x10 [ 105.214980][ T5866] rawv6_sendmsg+0x18f1/0x23c0 [ 105.219792][ T5866] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 105.224935][ T5866] ? aa_sk_perm+0x96d/0xab0 [ 105.229457][ T5866] ? __pfx_aa_sk_perm+0x10/0x10 [ 105.234325][ T5866] ? inet_sendmsg+0x330/0x390 [ 105.239029][ T5866] __sock_sendmsg+0x1a6/0x270 [ 105.243719][ T5866] sock_write_iter+0x2d7/0x3f0 [ 105.248484][ T5866] ? __pfx_sock_write_iter+0x10/0x10 [ 105.253785][ T5866] do_iter_readv_writev+0x600/0x880 [ 105.258999][ T5866] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 105.264744][ T5866] ? bpf_lsm_file_permission+0x9/0x10 [ 105.270125][ T5866] ? security_file_permission+0x74/0x280 [ 105.275774][ T5866] ? rw_verify_area+0x1c3/0x6f0 [ 105.280650][ T5866] vfs_writev+0x376/0xba0 [ 105.284993][ T5866] ? __pfx_vfs_writev+0x10/0x10 [ 105.289843][ T5866] ? vfs_write+0x7bf/0xc90 [ 105.294285][ T5866] ? __fdget_pos+0x19a/0x320 [ 105.298880][ T5866] do_writev+0x1b1/0x350 [ 105.303128][ T5866] ? __pfx_do_writev+0x10/0x10 [ 105.307898][ T5866] ? do_syscall_64+0x100/0x230 [ 105.312688][ T5866] ? do_syscall_64+0xb6/0x230 [ 105.317374][ T5866] do_syscall_64+0xf3/0x230 [ 105.321896][ T5866] ? clear_bhb_loop+0x35/0x90 [ 105.326576][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.332475][ T5866] RIP: 0033:0x7f185377def9 [ 105.336894][ T5866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.356503][ T5866] RSP: 002b:00007f18531ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 105.365009][ T5866] RAX: ffffffffffffffda RBX: 00007f1853935f80 RCX: 00007f185377def9 [ 105.372981][ T5866] RDX: 0000000000000003 RSI: 0000000020000340 RDI: 0000000000000003 [ 105.381063][ T5866] RBP: 00007f18531ff090 R08: 0000000000000000 R09: 0000000000000000 [ 105.389075][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.397049][ T5866] R13: 0000000000000000 R14: 00007f1853935f80 R15: 00007f1853a5fa28 [ 105.405037][ T5866] [ 105.430395][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 105.658607][ T5873] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 106.258153][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 106.384692][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.624012][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.644488][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.654567][ T51] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 106.682114][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.739294][ T51] usb 3-1: config 0 descriptor?? [ 106.966890][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.014719][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.015914][ T5278] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.044755][ T937] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 107.055091][ T5897] FAULT_INJECTION: forcing a failure. [ 107.055091][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 107.090315][ T5897] CPU: 1 UID: 0 PID: 5897 Comm: syz.3.160 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 107.100724][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.110824][ T5897] Call Trace: [ 107.114130][ T5897] [ 107.117083][ T5897] dump_stack_lvl+0x241/0x360 [ 107.121806][ T5897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.127051][ T5897] ? __pfx__printk+0x10/0x10 [ 107.131695][ T5897] ? ref_tracker_alloc+0x332/0x490 [ 107.136847][ T5897] should_fail_ex+0x3b0/0x4e0 [ 107.141670][ T5897] ? skb_clone+0x20c/0x390 [ 107.146134][ T5897] should_failslab+0xac/0x100 [ 107.150859][ T5897] ? skb_clone+0x20c/0x390 [ 107.155317][ T5897] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 107.160733][ T5897] skb_clone+0x20c/0x390 [ 107.165001][ T5897] __netlink_deliver_tap+0x3cc/0x7c0 [ 107.170343][ T5897] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.175646][ T5897] netlink_deliver_tap+0x19d/0x1b0 [ 107.180775][ T5897] netlink_unicast+0x7c4/0x990 [ 107.185559][ T5897] ? __pfx_netlink_unicast+0x10/0x10 [ 107.190861][ T5897] ? __virt_addr_valid+0x183/0x530 [ 107.195988][ T5897] ? __check_object_size+0x48e/0x900 [ 107.201289][ T5897] netlink_sendmsg+0x8e4/0xcb0 [ 107.206079][ T5897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.211382][ T5897] ? aa_sock_msg_perm+0x91/0x160 [ 107.216357][ T5897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.221654][ T5897] __sock_sendmsg+0x221/0x270 [ 107.226347][ T5897] ____sys_sendmsg+0x52a/0x7e0 [ 107.231222][ T5897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.236541][ T5897] __sys_sendmsg+0x2aa/0x390 [ 107.241236][ T5897] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.246373][ T5897] ? vfs_write+0x7bf/0xc90 [ 107.250850][ T5897] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.257200][ T5897] ? do_syscall_64+0x100/0x230 [ 107.261983][ T5897] ? do_syscall_64+0xb6/0x230 [ 107.266678][ T5897] do_syscall_64+0xf3/0x230 [ 107.271199][ T5897] ? clear_bhb_loop+0x35/0x90 [ 107.275897][ T5897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.281803][ T5897] RIP: 0033:0x7f302a17def9 [ 107.286231][ T5897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.305852][ T5897] RSP: 002b:00007f302af4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.314296][ T5897] RAX: ffffffffffffffda RBX: 00007f302a335f80 RCX: 00007f302a17def9 [ 107.322276][ T5897] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 107.330341][ T5897] RBP: 00007f302af4a090 R08: 0000000000000000 R09: 0000000000000000 [ 107.338318][ T5897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.346338][ T5897] R13: 0000000000000000 R14: 00007f302a335f80 R15: 00007f302a45fa28 [ 107.354331][ T5897] [ 107.363861][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 107.374836][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 107.382901][ T937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.399974][ T5278] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.418831][ T937] usb 2-1: not running at top speed; connect to a high speed hub [ 107.438057][ T5278] usb 5-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 107.454714][ T937] usb 2-1: config index 0 descriptor too short (expected 11923, got 45) [ 107.482685][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.494810][ T937] usb 2-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 107.525771][ T937] usb 2-1: config 108 has an invalid interface descriptor of length 8, skipping [ 107.539311][ T5278] usb 5-1: config 0 descriptor?? [ 107.558337][ T5278] r8712u: register rtl8712_netdev_ops to netdev_ops [ 107.566945][ T937] usb 2-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 107.583350][ T5278] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 107.590183][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.593624][ T937] usb 2-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 107.613933][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.615415][ T937] usb 2-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 107.632998][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.649912][ T937] usb 2-1: Product: syz [ 107.655742][ T937] usb 2-1: Manufacturer: syz [ 107.666225][ T937] usb 2-1: SerialNumber: syz [ 107.955674][ T5278] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 107.963700][ T5278] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 108.014970][ T5278] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 108.042517][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.161407][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.486958][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.643854][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.872463][ T5277] usb 5-1: USB disconnect, device number 6 [ 109.193841][ T937] usb 2-1: USB disconnect, device number 11 [ 110.446340][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.950552][ T5949] FAULT_INJECTION: forcing a failure. [ 110.950552][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.105105][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz.1.174 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 111.115432][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.125703][ T5949] Call Trace: [ 111.129015][ T5949] [ 111.131975][ T5949] dump_stack_lvl+0x241/0x360 [ 111.136705][ T5949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.141971][ T5949] ? __pfx__printk+0x10/0x10 [ 111.146604][ T5949] ? __pfx_lock_release+0x10/0x10 [ 111.151675][ T5949] ? __lock_acquire+0x1384/0x2050 [ 111.156758][ T5949] should_fail_ex+0x3b0/0x4e0 [ 111.161498][ T5949] _copy_from_user+0x2f/0xe0 [ 111.166137][ T5949] kstrtouint_from_user+0xc6/0x190 [ 111.171296][ T5949] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 111.177158][ T5949] ? __pfx_lock_acquire+0x10/0x10 [ 111.182244][ T5949] proc_fail_nth_write+0xaa/0x2d0 [ 111.187319][ T5949] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 111.193261][ T5949] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.199039][ T5949] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.204722][ T5949] vfs_write+0x29c/0xc90 [ 111.209025][ T5949] ? __pfx_vfs_write+0x10/0x10 [ 111.213844][ T5949] ? __fget_files+0x3f3/0x470 [ 111.218574][ T5949] ? __fdget_pos+0x24e/0x320 [ 111.223211][ T5949] ksys_write+0x1a0/0x2c0 [ 111.227601][ T5949] ? __pfx_ksys_write+0x10/0x10 [ 111.232497][ T5949] ? do_syscall_64+0x100/0x230 [ 111.237308][ T5949] ? do_syscall_64+0xb6/0x230 [ 111.242031][ T5949] do_syscall_64+0xf3/0x230 [ 111.246580][ T5949] ? clear_bhb_loop+0x35/0x90 [ 111.251302][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.257322][ T5949] RIP: 0033:0x7f185377c9df [ 111.261773][ T5949] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 111.281512][ T5949] RSP: 002b:00007f18531de030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.289981][ T5949] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f185377c9df [ 111.297994][ T5949] RDX: 0000000000000001 RSI: 00007f18531de0a0 RDI: 0000000000000005 [ 111.306015][ T5949] RBP: 00007f18531de090 R08: 0000000000000000 R09: 0000000000000000 [ 111.314024][ T5949] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 111.322125][ T5949] R13: 0000000000000000 R14: 00007f1853936058 R15: 00007f1853a5fa28 [ 111.330154][ T5949] [ 111.333328][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.638548][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 111.645080][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 111.655064][ T51] usb 3-1: USB disconnect, device number 8 [ 111.726106][ T5925] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.168'. [ 111.736708][ T5925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.780007][ T5278] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 112.393649][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.445559][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.780759][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.291689][ T5278] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 113.365913][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.457076][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.489398][ T5278] usb 5-1: config 0 descriptor?? [ 113.733130][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.837962][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.859149][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.966104][ T51] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 114.174760][ T5986] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 114.222234][ T51] usb 1-1: unable to get BOS descriptor or descriptor too short [ 114.266911][ T51] usb 1-1: not running at top speed; connect to a high speed hub [ 114.277282][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.325578][ T51] usb 1-1: config index 0 descriptor too short (expected 11923, got 45) [ 114.362884][ T51] usb 1-1: config 108 has too many interfaces: 38, using maximum allowed: 32 [ 114.372469][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.396724][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.411575][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.420204][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.434159][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.457158][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.465450][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 114.473109][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.517238][ T51] usb 1-1: config 108 has an invalid interface descriptor of length 8, skipping [ 114.559985][ T51] usb 1-1: config 108 has an invalid descriptor of length 165, skipping remainder of the config [ 114.597154][ T5986] netlink: 'syz.2.183': attribute type 29 has an invalid length. [ 114.625157][ T51] usb 1-1: config 108 has 0 interfaces, different from the descriptor's value: 38 [ 114.642876][ T5987] netlink: 'syz.2.183': attribute type 29 has an invalid length. [ 114.695138][ T51] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 114.716448][ T5989] netlink: 'syz.2.183': attribute type 29 has an invalid length. [ 114.730601][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.774839][ T5993] netlink: 'syz.2.183': attribute type 29 has an invalid length. [ 114.793068][ T51] usb 1-1: Product: syz [ 114.801600][ T51] usb 1-1: Manufacturer: syz [ 114.823461][ T51] usb 1-1: SerialNumber: syz [ 115.021020][ T5278] usbhid 5-1:0.0: can't add hid device: -71 [ 115.035417][ T5278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.160776][ T5278] usb 5-1: USB disconnect, device number 7 [ 115.551359][ T6003] netlink: 100 bytes leftover after parsing attributes in process `syz.1.185'. [ 115.610171][ T35] bridge_slave_1: left allmulticast mode [ 115.651027][ T35] bridge_slave_1: left promiscuous mode [ 115.674172][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.795707][ T35] bridge_slave_0: left allmulticast mode [ 115.849868][ T35] bridge_slave_0: left promiscuous mode [ 115.874879][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.589761][ T5230] Bluetooth: hci3: command tx timeout [ 117.470000][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.682494][ T5230] Bluetooth: hci3: command tx timeout [ 120.914755][ T5230] Bluetooth: hci3: command tx timeout [ 126.067447][ T5230] sched: DL replenish lagged too much [ 126.067505][ T5230] Bluetooth: hci3: command tx timeout [ 134.655541][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.666565][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.716098][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.765259][ T29] audit: type=1800 audit(1727092315.875:45): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.187" name="/" dev="fuse" ino=1 res=0 errno=0 [ 137.952171][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.974341][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.983093][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.999827][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.018152][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.027857][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.303168][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.312951][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.331438][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.341441][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.350998][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.359002][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 138.366826][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.376436][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.386280][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.394280][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.402478][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.410370][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.567517][ T5230] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 138.581910][ T5230] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 138.591847][ T5230] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 138.600731][ T5230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 138.612269][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 138.622348][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.467769][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.523425][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.555424][ T35] bond0 (unregistering): Released all slaves [ 140.104726][ T5230] Bluetooth: hci0: command tx timeout [ 140.127950][ T8] usb 1-1: USB disconnect, device number 7 [ 140.506248][ T5238] Bluetooth: hci1: command tx timeout [ 140.512283][ T5230] Bluetooth: hci5: command tx timeout [ 140.670216][ T5230] Bluetooth: hci6: command tx timeout [ 140.960841][ T35] hsr_slave_0: left promiscuous mode [ 141.084181][ T35] hsr_slave_1: left promiscuous mode [ 141.130734][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.153559][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.186188][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.193666][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.234348][ T35] veth1_macvtap: left promiscuous mode [ 141.243285][ T35] veth0_macvtap: left promiscuous mode [ 141.257427][ T35] veth1_vlan: left promiscuous mode [ 141.263035][ T35] veth0_vlan: left promiscuous mode [ 142.188204][ T5230] Bluetooth: hci0: command tx timeout [ 142.589065][ T5230] Bluetooth: hci5: command tx timeout [ 142.594665][ T5238] Bluetooth: hci1: command tx timeout [ 142.744807][ T5230] Bluetooth: hci6: command tx timeout [ 142.779764][ T35] team0 (unregistering): Port device team_slave_1 removed [ 142.933097][ T35] team0 (unregistering): Port device team_slave_0 removed [ 144.264737][ T5230] Bluetooth: hci0: command tx timeout [ 144.664754][ T5230] Bluetooth: hci5: command tx timeout [ 144.670407][ T5230] Bluetooth: hci1: command tx timeout [ 144.830181][ T5230] Bluetooth: hci6: command tx timeout [ 144.846676][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 145.998415][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 146.031057][ T6042] chnl_net:caif_netlink_parms(): no params data found [ 146.042926][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.051828][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.061146][ T5994] bridge_slave_0: entered allmulticast mode [ 146.070034][ T5994] bridge_slave_0: entered promiscuous mode [ 146.230696][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.242475][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.254865][ T5994] bridge_slave_1: entered allmulticast mode [ 146.262034][ T5994] bridge_slave_1: entered promiscuous mode [ 146.344673][ T5230] Bluetooth: hci0: command tx timeout [ 146.381683][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 146.543886][ T6040] chnl_net:caif_netlink_parms(): no params data found [ 146.744789][ T5230] Bluetooth: hci1: command tx timeout [ 146.750269][ T5230] Bluetooth: hci5: command tx timeout [ 146.763890][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.777832][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.904909][ T5230] Bluetooth: hci6: command tx timeout [ 146.982459][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.227894][ T5994] team0: Port device team_slave_0 added [ 147.428588][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.646035][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.653287][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.694357][ T6042] bridge_slave_0: entered allmulticast mode [ 147.711408][ T6042] bridge_slave_0: entered promiscuous mode [ 147.737255][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.765729][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.773127][ T6042] bridge_slave_1: entered allmulticast mode [ 147.826335][ T6042] bridge_slave_1: entered promiscuous mode [ 147.838016][ T5994] team0: Port device team_slave_1 added [ 147.898007][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.905956][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.913219][ T6035] bridge_slave_0: entered allmulticast mode [ 148.021358][ T6035] bridge_slave_0: entered promiscuous mode [ 148.083835][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.259514][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.293580][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.304919][ T6035] bridge_slave_1: entered allmulticast mode [ 148.322621][ T6035] bridge_slave_1: entered promiscuous mode [ 148.468458][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.710143][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.745954][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.753771][ T6039] bridge_slave_0: entered allmulticast mode [ 148.798529][ T6039] bridge_slave_0: entered promiscuous mode [ 148.817458][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.833878][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.850531][ T6039] bridge_slave_1: entered allmulticast mode [ 148.863339][ T6039] bridge_slave_1: entered promiscuous mode [ 148.930656][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.945621][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.983943][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.008120][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.026701][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.069068][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.096779][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.121913][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.253984][ T6039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.385323][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.392561][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.420366][ T6040] bridge_slave_0: entered allmulticast mode [ 149.433048][ T6040] bridge_slave_0: entered promiscuous mode [ 149.453976][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.474326][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.494963][ T6040] bridge_slave_1: entered allmulticast mode [ 149.502460][ T6040] bridge_slave_1: entered promiscuous mode [ 149.587096][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.612440][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.670304][ T6039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.793474][ T5994] hsr_slave_0: entered promiscuous mode [ 149.819097][ T5994] hsr_slave_1: entered promiscuous mode [ 149.838732][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.857702][ T5994] Cannot create hsr debugfs directory [ 149.877656][ T6042] team0: Port device team_slave_0 added [ 149.966298][ T6040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.200804][ T6042] team0: Port device team_slave_1 added [ 150.315875][ T6040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.370426][ T6035] team0: Port device team_slave_0 added [ 150.447002][ T6039] team0: Port device team_slave_0 added [ 150.518068][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.544958][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.612314][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.776884][ T6040] team0: Port device team_slave_0 added [ 150.797800][ T6035] team0: Port device team_slave_1 added [ 150.808065][ T6040] team0: Port device team_slave_1 added [ 150.940767][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.116966][ T6039] team0: Port device team_slave_1 added [ 151.158454][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.178407][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.216286][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.409306][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.425101][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.574779][ T6040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.686445][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.782353][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.789740][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.841872][ T6039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.928558][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.944783][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.988221][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.012058][ T6040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.032144][ T6040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.072867][ T6040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.202745][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.233326][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.253177][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.299019][ T6039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.379362][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.396160][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.437150][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.573231][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.689288][ T6042] hsr_slave_0: entered promiscuous mode [ 152.717468][ T6042] hsr_slave_1: entered promiscuous mode [ 152.725475][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.733082][ T6042] Cannot create hsr debugfs directory [ 152.837740][ T6040] hsr_slave_0: entered promiscuous mode [ 152.861465][ T6040] hsr_slave_1: entered promiscuous mode [ 152.887334][ T6040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.904365][ T6040] Cannot create hsr debugfs directory [ 153.220723][ T6039] hsr_slave_0: entered promiscuous mode [ 153.240350][ T6039] hsr_slave_1: entered promiscuous mode [ 153.259853][ T6039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.280730][ T6039] Cannot create hsr debugfs directory [ 153.582937][ T6035] hsr_slave_0: entered promiscuous mode [ 153.625433][ T6035] hsr_slave_1: entered promiscuous mode [ 153.650092][ T6035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.663167][ T6035] Cannot create hsr debugfs directory [ 154.989866][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.411479][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.634389][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.821425][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.988374][ T5994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 156.056048][ T5994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 156.143837][ T5994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 156.167803][ T5994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 156.590515][ T35] bridge_slave_1: left allmulticast mode [ 156.614808][ T35] bridge_slave_1: left promiscuous mode [ 156.620602][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.677782][ T35] bridge_slave_0: left allmulticast mode [ 156.683506][ T35] bridge_slave_0: left promiscuous mode [ 156.714898][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.738027][ T35] bridge_slave_1: left allmulticast mode [ 156.743754][ T35] bridge_slave_1: left promiscuous mode [ 156.775713][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.827235][ T35] bridge_slave_0: left allmulticast mode [ 156.851397][ T35] bridge_slave_0: left promiscuous mode [ 156.879568][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.925700][ T35] bridge_slave_1: left allmulticast mode [ 156.931608][ T35] bridge_slave_1: left promiscuous mode [ 156.963973][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.022166][ T35] bridge_slave_0: left allmulticast mode [ 157.040638][ T35] bridge_slave_0: left promiscuous mode [ 157.065467][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.829639][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.862656][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.898212][ T35] bond0 (unregistering): Released all slaves [ 160.301865][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.340264][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.380596][ T35] bond0 (unregistering): Released all slaves [ 160.842407][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.881809][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.915967][ T35] bond0 (unregistering): Released all slaves [ 161.308005][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.366156][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.404490][ T35] IPVS: stopping backup sync thread 5873 ... [ 161.446312][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.453494][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.687648][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.694861][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.948269][ T6042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.010778][ T6040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.049251][ T6040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.248488][ T6042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.301094][ T6040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.337894][ T6040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.578661][ T6042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.726875][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.839351][ T6042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.423537][ T5994] veth0_vlan: entered promiscuous mode [ 163.592856][ T5994] veth1_vlan: entered promiscuous mode [ 164.011451][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.112726][ T5994] veth0_macvtap: entered promiscuous mode [ 164.383332][ T5994] veth1_macvtap: entered promiscuous mode [ 164.530084][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.564972][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.598311][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.632491][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.665790][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.704666][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.734875][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.770294][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.806285][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.857315][ T6040] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.961964][ T35] hsr_slave_0: left promiscuous mode [ 164.990206][ T35] hsr_slave_1: left promiscuous mode [ 165.035382][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.042974][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.083746][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.093833][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.148333][ T35] hsr_slave_0: left promiscuous mode [ 165.178255][ T35] hsr_slave_1: left promiscuous mode [ 165.198642][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.215139][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.236069][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.243737][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.297637][ T35] hsr_slave_0: left promiscuous mode [ 165.327126][ T35] hsr_slave_1: left promiscuous mode [ 165.352411][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.364865][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.385727][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.393312][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.522191][ T35] veth1_macvtap: left promiscuous mode [ 165.542598][ T35] veth0_macvtap: left promiscuous mode [ 165.548741][ T35] veth1_vlan: left promiscuous mode [ 165.554070][ T35] veth0_vlan: left promiscuous mode [ 165.600577][ T35] veth1_macvtap: left promiscuous mode [ 165.613401][ T35] veth0_macvtap: left promiscuous mode [ 165.625588][ T35] veth1_vlan: left promiscuous mode [ 165.635262][ T35] veth0_vlan: left promiscuous mode [ 165.670850][ T35] veth1_macvtap: left promiscuous mode [ 165.682122][ T35] veth0_macvtap: left promiscuous mode [ 165.694096][ T35] veth1_vlan: left promiscuous mode [ 165.704941][ T35] veth0_vlan: left promiscuous mode [ 167.248690][ T35] team0 (unregistering): Port device team_slave_1 removed [ 167.358532][ T35] team0 (unregistering): Port device team_slave_0 removed [ 169.553904][ T35] team0 (unregistering): Port device team_slave_1 removed [ 169.684163][ T35] team0 (unregistering): Port device team_slave_0 removed [ 171.801543][ T35] team0 (unregistering): Port device team_slave_1 removed [ 171.931788][ T35] team0 (unregistering): Port device team_slave_0 removed [ 173.403539][ T6035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.453281][ T6035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.613770][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.620998][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.648105][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.657761][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.667323][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.676045][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.683813][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.708652][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.715863][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.760440][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 174.143052][ T6035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.193692][ T6035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.931815][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.063467][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.180041][ T6207] chnl_net:caif_netlink_parms(): no params data found [ 175.652415][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.868270][ T5238] Bluetooth: hci2: command tx timeout [ 175.912662][ T6039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.958039][ T6039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.046724][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.053896][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.078919][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.086137][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.173829][ T6039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.189162][ T6207] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.199698][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.207504][ T6207] bridge_slave_0: entered allmulticast mode [ 176.216575][ T6207] bridge_slave_0: entered promiscuous mode [ 176.292093][ T6040] veth0_vlan: entered promiscuous mode [ 176.350989][ T6039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.368019][ T6207] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.385006][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.392317][ T6207] bridge_slave_1: entered allmulticast mode [ 176.410395][ T6207] bridge_slave_1: entered promiscuous mode [ 176.610195][ T6207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.657733][ T6040] veth1_vlan: entered promiscuous mode [ 176.704393][ T6207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.992368][ T6042] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.030183][ T6042] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.098375][ T6207] team0: Port device team_slave_0 added [ 177.142485][ T6042] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.178944][ T6042] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.231913][ T6207] team0: Port device team_slave_1 added [ 177.389309][ T6040] veth0_macvtap: entered promiscuous mode [ 177.557098][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.564114][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.625160][ T6207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.657656][ T6207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.670207][ T6207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.724630][ T6207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.870663][ T6040] veth1_macvtap: entered promiscuous mode [ 177.905232][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.946415][ T5238] Bluetooth: hci2: command tx timeout [ 178.123862][ T6207] hsr_slave_0: entered promiscuous mode [ 178.155801][ T6207] hsr_slave_1: entered promiscuous mode [ 178.420148][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.444835][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.462666][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.493320][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.508481][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.577938][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.591185][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.607169][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.686910][ T6035] veth0_vlan: entered promiscuous mode [ 178.724321][ T6040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.745718][ T6040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.765984][ T6040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.794853][ T6040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.889933][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.978224][ T6035] veth1_vlan: entered promiscuous mode [ 179.037746][ T35] bridge_slave_1: left allmulticast mode [ 179.043462][ T35] bridge_slave_1: left promiscuous mode [ 179.065908][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.100678][ T35] bridge_slave_0: left allmulticast mode [ 179.114852][ T35] bridge_slave_0: left promiscuous mode [ 179.120725][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.029128][ T5238] Bluetooth: hci2: command tx timeout [ 180.365960][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.396156][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.435707][ T35] bond0 (unregistering): Released all slaves [ 180.617603][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.820742][ T35] hsr_slave_0: left promiscuous mode [ 180.851863][ T35] hsr_slave_1: left promiscuous mode [ 180.866824][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.874317][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.894273][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.941392][ T35] veth1_macvtap: left promiscuous mode [ 180.954127][ T35] veth0_macvtap: left promiscuous mode [ 180.963108][ T35] veth1_vlan: left promiscuous mode [ 180.973959][ T35] veth0_vlan: left promiscuous mode [ 182.109231][ T5238] Bluetooth: hci2: command tx timeout [ 182.207755][ T35] team0 (unregistering): Port device team_slave_1 removed [ 182.346942][ T35] team0 (unregistering): Port device team_slave_0 removed [ 183.682368][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.889515][ T6035] veth0_macvtap: entered promiscuous mode [ 183.916338][ T2905] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.923508][ T2905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.018038][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.026523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.034391][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.183872][ T6035] veth1_macvtap: entered promiscuous mode [ 184.217065][ T2905] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.224251][ T2905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.459727][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.466949][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.628683][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.660897][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.688453][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.730809][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.766782][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.781848][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.792896][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.800079][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.820098][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.937029][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.977838][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.025771][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.054682][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.090480][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.282360][ T6035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.334820][ T6035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.372891][ T6035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.593604][ T6035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.619545][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.648683][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.844948][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.688514][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.699228][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.714866][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.746766][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.756924][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.766110][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.773369][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.782893][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.792486][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.800905][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 214.809306][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.816546][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.971496][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.999149][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.008388][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.019538][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.027862][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.035807][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.135516][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 215.145706][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 215.167989][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 215.176654][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 215.185062][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 215.192495][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 216.904957][ T5235] Bluetooth: hci3: command tx timeout [ 216.911161][ T5237] Bluetooth: hci5: command tx timeout [ 217.064765][ T5237] Bluetooth: hci7: command tx timeout [ 217.224687][ T5237] Bluetooth: hci8: command tx timeout [ 218.984844][ T5237] Bluetooth: hci5: command tx timeout [ 218.990350][ T5237] Bluetooth: hci3: command tx timeout [ 219.144937][ T5237] Bluetooth: hci7: command tx timeout [ 219.304780][ T5237] Bluetooth: hci8: command tx timeout [ 221.065341][ T5235] Bluetooth: hci5: command tx timeout [ 221.072060][ T5237] Bluetooth: hci3: command tx timeout [ 221.230751][ T5237] Bluetooth: hci7: command tx timeout [ 221.384740][ T5237] Bluetooth: hci8: command tx timeout [ 223.144725][ T5235] Bluetooth: hci5: command tx timeout [ 223.150232][ T5237] Bluetooth: hci3: command tx timeout [ 223.304733][ T5237] Bluetooth: hci7: command tx timeout [ 223.464720][ T5237] Bluetooth: hci8: command tx timeout [ 235.137538][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.154806][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.163138][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.173997][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.183131][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.190671][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.224724][ T5235] Bluetooth: hci0: command tx timeout [ 239.304782][ T5235] Bluetooth: hci0: command tx timeout [ 241.387003][ T5235] Bluetooth: hci0: command tx timeout [ 243.464643][ T5235] Bluetooth: hci0: command tx timeout [ 255.869005][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.882939][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.352445][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.368883][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.377987][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.388058][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.396211][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 273.405817][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.959304][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.005273][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.017817][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.050927][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.061210][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 274.069074][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.567588][ T6396] chnl_net:caif_netlink_parms(): no params data found [ 274.637648][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.646857][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.657318][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.666744][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.675092][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.682556][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.005366][ T6396] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.027886][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 275.037170][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 275.046528][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 275.061443][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 275.076350][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 275.085213][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 275.114222][ T6396] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.194776][ T6396] bridge_slave_0: entered allmulticast mode [ 275.212222][ T6396] bridge_slave_0: entered promiscuous mode [ 275.223118][ T6396] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.240208][ T6396] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.251322][ T6396] bridge_slave_1: entered allmulticast mode [ 275.267919][ T6396] bridge_slave_1: entered promiscuous mode [ 275.387705][ T6396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.411288][ T6396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.468201][ T5237] Bluetooth: hci1: command tx timeout [ 275.485194][ T6396] team0: Port device team_slave_0 added [ 275.504522][ T6396] team0: Port device team_slave_1 added [ 275.601130][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.613376][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.653801][ T6396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.676537][ T6396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.683545][ T6396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.721602][ T6396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.838815][ T6396] hsr_slave_0: entered promiscuous mode [ 275.856235][ T6396] hsr_slave_1: entered promiscuous mode [ 275.888049][ T6396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.900779][ T6396] Cannot create hsr debugfs directory [ 276.265124][ T5237] Bluetooth: hci6: command tx timeout [ 276.744832][ T5237] Bluetooth: hci5: command tx timeout [ 277.144891][ T5237] Bluetooth: hci9: command tx timeout [ 277.546952][ T5237] Bluetooth: hci1: command tx timeout [ 278.344883][ T5237] Bluetooth: hci6: command tx timeout [ 278.824760][ T5237] Bluetooth: hci5: command tx timeout [ 279.225324][ T5237] Bluetooth: hci9: command tx timeout [ 279.624679][ T5237] Bluetooth: hci1: command tx timeout [ 280.424711][ T5237] Bluetooth: hci6: command tx timeout [ 280.906432][ T5237] Bluetooth: hci5: command tx timeout [ 281.310512][ T5237] Bluetooth: hci9: command tx timeout [ 281.704614][ T5237] Bluetooth: hci1: command tx timeout [ 282.508182][ T5237] Bluetooth: hci6: command tx timeout [ 282.984798][ T5237] Bluetooth: hci5: command tx timeout [ 283.387719][ T5237] Bluetooth: hci9: command tx timeout [ 284.034293][ T6396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.704727][ T30] INFO: task syz.2.187:6024 blocked for more than 144 seconds. [ 291.713920][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 291.744663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 291.753418][ T30] task:syz.2.187 state:D stack:25872 pid:6024 tgid:6018 ppid:5244 flags:0x00004006 [ 291.845297][ T30] Call Trace: [ 291.848651][ T30] [ 291.851621][ T30] __schedule+0x1895/0x4b30 [ 291.864722][ T5215] syz-executor (5215) used greatest stack depth: 19152 bytes left [ 291.964865][ T30] ? __pfx___schedule+0x10/0x10 [ 291.969842][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.044712][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 292.050725][ T30] ? schedule+0x90/0x320 [ 292.094451][ T30] schedule+0x14b/0x320 [ 292.098822][ T30] fuse_simple_request+0x1199/0x1b90 [ 292.104171][ T30] ? __pfx_fuse_simple_request+0x10/0x10 [ 292.184792][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 292.190974][ T30] ? up_write+0x1a9/0x590 [ 292.252510][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 292.283014][ T30] ? __pfx_up_write+0x10/0x10 [ 292.305079][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 292.310386][ T30] ? filemap_check_errors+0xe1/0x140 [ 292.354613][ T30] fuse_flush+0x696/0x950 [ 292.359046][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 292.363966][ T30] ? __pfx_task_work_add+0x10/0x10 [ 292.404595][ T30] ? __pfx___might_resched+0x10/0x10 [ 292.409979][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 292.451621][ T30] ? __pfx_lock_release+0x10/0x10 [ 292.474606][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 292.479555][ T30] filp_flush+0xac/0x150 [ 292.483850][ T30] filp_close+0x1e/0x40 [ 292.528926][ T30] put_files_struct+0x1b6/0x360 [ 292.533871][ T30] do_exit+0xa10/0x28e0 [ 292.569081][ T30] ? __pfx_do_exit+0x10/0x10 [ 292.573772][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 292.613858][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.629704][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.648715][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 292.653922][ T30] do_group_exit+0x207/0x2c0 [ 292.679086][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.684374][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 292.701667][ T30] get_signal+0x176f/0x1810 [ 292.710408][ T30] ? __pfx_get_signal+0x10/0x10 [ 292.722323][ T30] ? kvm_dev_ioctl+0x184b/0x2370 [ 292.730379][ T30] arch_do_signal_or_restart+0x96/0x860 [ 292.743658][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 292.752761][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.765171][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 292.770987][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 292.785743][ T30] do_syscall_64+0x100/0x230 [ 292.790495][ T30] ? clear_bhb_loop+0x35/0x90 [ 292.803871][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.810212][ T30] RIP: 0033:0x7f7e2d37def9 [ 292.823098][ T30] RSP: 002b:00007f7e2e16e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.853375][ T30] RAX: fffffffffffffffc RBX: 00007f7e2d536058 RCX: 00007f7e2d37def9 [ 292.863043][ T30] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 292.875048][ T30] RBP: 00007f7e2d3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 292.883091][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.900481][ T30] R13: 0000000000000000 R14: 00007f7e2d536058 R15: 00007f7e2d65fa28 [ 292.913625][ T30] [ 292.921966][ T30] [ 292.921966][ T30] Showing all locks held in the system: [ 292.934676][ T30] 1 lock held by khungtaskd/30: [ 292.939604][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 292.957839][ T30] 3 locks held by kworker/u8:4/62: [ 292.963020][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 292.988823][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.012288][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 293.023141][ T30] 6 locks held by kworker/u8:5/1119: [ 293.034930][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 293.055660][ T30] #1: ffffc90003fefd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 293.076141][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 293.093334][ T30] #3: ffff88802c1790e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 293.112823][ T30] #4: ffff88802c17a250 (&devlink->lock_key#9){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 293.125524][ T30] #5: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 293.143967][ T30] 2 locks held by dhcpcd/4897: [ 293.150961][ T30] #0: ffff88805b7016c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 293.170273][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 293.182699][ T30] 2 locks held by getty/4985: [ 293.194669][ T30] #0: ffff88814c3120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.212368][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 293.224171][ T30] 6 locks held by kworker/0:6/5283: [ 293.234324][ T30] 2 locks held by syz-executor/6207: [ 293.244657][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 293.253778][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 293.275521][ T30] 2 locks held by syz-executor/6327: [ 293.280875][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.300288][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 293.313338][ T30] 2 locks held by syz-executor/6334: [ 293.324344][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.343322][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 293.357466][ T30] 2 locks held by syz-executor/6335: [ 293.362817][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.382816][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 293.394622][ T30] 2 locks held by syz-executor/6384: [ 293.399968][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.418751][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 293.434040][ T30] 7 locks held by syz-executor/6396: [ 293.445205][ T30] #0: ffff888032e98420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 293.463186][ T30] #1: ffff888029c84888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 293.473723][ T30] #2: ffff888028183878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 293.493526][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 293.504360][ T30] #4: ffff88805d9590e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 293.523776][ T30] #5: ffff88805d95a250 (&devlink->lock_key#7){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 293.545957][ T30] #6: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 293.565037][ T30] 2 locks held by syz-executor/6401: [ 293.570391][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.589183][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 293.604313][ T30] 2 locks held by syz-executor/6405: [ 293.614682][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.624206][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 293.654597][ T30] 2 locks held by syz-executor/6410: [ 293.660285][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 293.679030][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 293.694428][ T30] [ 293.696989][ T30] ============================================= [ 293.696989][ T30] [ 293.716990][ T30] NMI backtrace for cpu 1 [ 293.721411][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 293.731704][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.741889][ T30] Call Trace: [ 293.745200][ T30] [ 293.748159][ T30] dump_stack_lvl+0x241/0x360 [ 293.752910][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.758158][ T30] ? __pfx__printk+0x10/0x10 [ 293.762807][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 293.767806][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.773332][ T30] ? _printk+0xd5/0x120 [ 293.777560][ T30] ? __pfx__printk+0x10/0x10 [ 293.782215][ T30] ? __wake_up_klogd+0xcc/0x110 [ 293.787132][ T30] ? __pfx__printk+0x10/0x10 [ 293.791775][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 293.796909][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.802940][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 293.808987][ T30] watchdog+0xff4/0x1040 [ 293.813281][ T30] ? watchdog+0x1ea/0x1040 [ 293.817747][ T30] ? __pfx_watchdog+0x10/0x10 [ 293.822467][ T30] kthread+0x2f0/0x390 [ 293.826575][ T30] ? __pfx_watchdog+0x10/0x10 [ 293.831302][ T30] ? __pfx_kthread+0x10/0x10 [ 293.835926][ T30] ret_from_fork+0x4b/0x80 [ 293.840389][ T30] ? __pfx_kthread+0x10/0x10 [ 293.845024][ T30] ret_from_fork_asm+0x1a/0x30 [ 293.849846][ T30] [ 293.853466][ T30] Sending NMI from CPU 1 to CPUs 0: [ 293.859027][ C0] NMI backtrace for cpu 0 [ 293.859042][ C0] CPU: 0 UID: 0 PID: 5283 Comm: kworker/0:6 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 293.859064][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 293.859077][ C0] Workqueue: events_long defense_work_handler [ 293.859103][ C0] RIP: 0010:unwind_next_frame+0x328/0x22d0 [ 293.859133][ C0] Code: 72 05 48 89 d8 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 0f b6 04 28 84 c0 0f 85 58 18 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 6a 18 00 00 0f b6 43 01 83 e0 07 0f 84 ca 15 00 00 83 [ 293.859150][ C0] RSP: 0018:ffffc900000065b0 EFLAGS: 00000a06 [ 293.859180][ C0] RAX: 0000000000000000 RBX: ffffffff90ae0630 RCX: ffffffff9034df6c [ 293.859195][ C0] RDX: ffffffff90ae062c RSI: ffffffff90ae0608 RDI: 0000000000000001 [ 293.859208][ C0] RBP: dffffc0000000000 R08: 0000000000000007 R09: ffffc90000006770 [ 293.859221][ C0] R10: ffffc900000066d0 R11: ffffffff81806cf0 R12: 0000000000000006 [ 293.859234][ C0] R13: ffffc90000006680 R14: ffffffff90ae0631 R15: ffffffff81f301e9 [ 293.859249][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 293.859264][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.859278][ C0] CR2: 000055a0cad327f0 CR3: 000000000e734000 CR4: 00000000003506f0 [ 293.859294][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.859305][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.859317][ C0] Call Trace: [ 293.859324][ C0] [ 293.859338][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 293.859366][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 293.859394][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.859421][ C0] ? nmi_handle+0x2a/0x5a0 [ 293.859446][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 293.859470][ C0] ? nmi_handle+0x14f/0x5a0 [ 293.859487][ C0] ? nmi_handle+0x2a/0x5a0 [ 293.859505][ C0] ? unwind_next_frame+0x328/0x22d0 [ 293.859532][ C0] ? default_do_nmi+0x63/0x160 [ 293.859550][ C0] ? exc_nmi+0x123/0x1f0 [ 293.859566][ C0] ? end_repeat_nmi+0xf/0x53 [ 293.859589][ C0] ? alloc_slab_page+0x69/0x120 [ 293.859607][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.859633][ C0] ? unwind_next_frame+0x328/0x22d0 [ 293.859660][ C0] ? unwind_next_frame+0x328/0x22d0 [ 293.859688][ C0] ? unwind_next_frame+0x328/0x22d0 [ 293.859715][ C0] [ 293.859721][ C0] [ 293.859732][ C0] ? alloc_slab_page+0x6a/0x120 [ 293.859750][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.859772][ C0] arch_stack_walk+0x11c/0x150 [ 293.859793][ C0] ? alloc_slab_page+0x6a/0x120 [ 293.859812][ C0] stack_trace_save+0x118/0x1d0 [ 293.859833][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 293.859860][ C0] save_stack+0xfb/0x1f0 [ 293.859876][ C0] ? mark_lock+0x9a/0x360 [ 293.859892][ C0] ? __pfx_save_stack+0x10/0x10 [ 293.859908][ C0] ? post_alloc_hook+0x1f3/0x230 [ 293.859933][ C0] ? get_page_from_freelist+0x3045/0x3190 [ 293.859951][ C0] ? __alloc_pages_noprof+0x256/0x6c0 [ 293.859967][ C0] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 293.859987][ C0] ? alloc_slab_page+0x6a/0x120 [ 293.860012][ C0] __set_page_owner+0x92/0x800 [ 293.860029][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 293.860053][ C0] ? get_page_from_freelist+0x87d/0x3190 [ 293.860072][ C0] ? __pfx_lock_release+0x10/0x10 [ 293.860098][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 293.860119][ C0] post_alloc_hook+0x1f3/0x230 [ 293.860145][ C0] get_page_from_freelist+0x3045/0x3190 [ 293.860167][ C0] ? get_stack_info_noinstr+0x1a/0x130 [ 293.860184][ C0] ? deref_stack_reg+0x17c/0x210 [ 293.860212][ C0] ? __asan_memset+0x23/0x50 [ 293.860251][ C0] __alloc_pages_noprof+0x256/0x6c0 [ 293.860270][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 293.860297][ C0] alloc_pages_mpol_noprof+0x3e8/0x680 [ 293.860321][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 293.860349][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.860374][ C0] ? handle_softirqs+0x2c5/0x980 [ 293.860398][ C0] ? alloc_pages_noprof+0x43/0x170 [ 293.860419][ C0] alloc_slab_page+0x6a/0x120 [ 293.860438][ C0] allocate_slab+0x5a/0x2f0 [ 293.860455][ C0] ___slab_alloc+0xcd1/0x14b0 [ 293.860483][ C0] ? __alloc_skb+0x1f3/0x440 [ 293.860508][ C0] ? __alloc_skb+0x1f3/0x440 [ 293.860530][ C0] __slab_alloc+0x58/0xa0 [ 293.860556][ C0] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 293.860581][ C0] ? __alloc_skb+0x1f3/0x440 [ 293.860605][ C0] ? __alloc_skb+0x1f3/0x440 [ 293.860627][ C0] kmalloc_reserve+0x111/0x2a0 [ 293.860651][ C0] __alloc_skb+0x1f3/0x440 [ 293.860676][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 293.860703][ C0] synproxy_send_client_synack_ipv6+0x1ba/0xc30 [ 293.860729][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 293.860752][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 293.860776][ C0] ? synproxy_pernet+0x45/0x270 [ 293.860798][ C0] nft_synproxy_do_eval+0x739/0xa60 [ 293.860822][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 293.860847][ C0] ? __pfx_validate_chain+0x10/0x10 [ 293.860871][ C0] nft_do_chain+0x4ad/0x1da0 [ 293.860896][ C0] ? nf_nat_inet_fn+0xa30/0xd10 [ 293.860922][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 293.860954][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 293.860982][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 293.861010][ C0] nft_do_chain_inet+0x418/0x6b0 [ 293.861033][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.861053][ C0] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 293.861082][ C0] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 293.861108][ C0] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 293.861137][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 293.861157][ C0] nf_hook_slow+0xc3/0x220 [ 293.861176][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 293.861200][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 293.861224][ C0] NF_HOOK+0x29e/0x450 [ 293.861248][ C0] ? NF_HOOK+0x9a/0x450 [ 293.861269][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 293.861293][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 293.861318][ C0] ? ip6_rcv_finish_core+0x1fb/0x410 [ 293.861349][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 293.861372][ C0] NF_HOOK+0x3a4/0x450 [ 293.861393][ C0] ? skb_orphan+0xae/0xd0 [ 293.861418][ C0] ? NF_HOOK+0x9a/0x450 [ 293.861439][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 293.861463][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 293.861489][ C0] ? __pfx_ipv6_rcv+0x10/0x10 [ 293.861512][ C0] __netif_receive_skb+0x1ea/0x650 [ 293.861531][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 293.861557][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 293.861573][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.861599][ C0] ? __pfx_lock_release+0x10/0x10 [ 293.861625][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 293.861651][ C0] process_backlog+0x662/0x15b0 [ 293.861673][ C0] ? process_backlog+0x33b/0x15b0 [ 293.861695][ C0] ? __pfx_process_backlog+0x10/0x10 [ 293.861725][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.861752][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.861778][ C0] __napi_poll+0xcb/0x490 [ 293.861796][ C0] net_rx_action+0x89b/0x1240 [ 293.861823][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 293.861842][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 293.861882][ C0] handle_softirqs+0x2c5/0x980 [ 293.861906][ C0] ? do_softirq+0x11b/0x1e0 [ 293.861929][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 293.861955][ C0] do_softirq+0x11b/0x1e0 [ 293.861976][ C0] [ 293.861982][ C0] [ 293.861988][ C0] ? __pfx_do_softirq+0x10/0x10 [ 293.862009][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 293.862034][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 293.862059][ C0] ? rcu_is_watching+0x15/0xb0 [ 293.862079][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 293.862102][ C0] ? update_defense_level+0x122/0xcf0 [ 293.862121][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.862143][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 293.862166][ C0] ? update_defense_level+0x122/0xcf0 [ 293.862184][ C0] ? update_defense_level+0x122/0xcf0 [ 293.862203][ C0] update_defense_level+0x8ec/0xcf0 [ 293.862222][ C0] ? update_defense_level+0x122/0xcf0 [ 293.862241][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 293.862264][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.862292][ C0] ? process_scheduled_works+0x976/0x1850 [ 293.862315][ C0] defense_work_handler+0x22/0xd0 [ 293.862339][ C0] process_scheduled_works+0xa63/0x1850 [ 293.862374][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.862401][ C0] ? assign_work+0x364/0x3d0 [ 293.862426][ C0] worker_thread+0x870/0xd30 [ 293.862453][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 293.862474][ C0] ? __kthread_parkme+0x169/0x1d0 [ 293.862500][ C0] ? __pfx_worker_thread+0x10/0x10 [ 293.862523][ C0] kthread+0x2f0/0x390 [ 293.862538][ C0] ? __pfx_worker_thread+0x10/0x10 [ 293.862561][ C0] ? __pfx_kthread+0x10/0x10 [ 293.862577][ C0] ret_from_fork+0x4b/0x80 [ 293.862601][ C0] ? __pfx_kthread+0x10/0x10 [ 293.862617][ C0] ret_from_fork_asm+0x1a/0x30 [ 293.862647][ C0] [ 294.793911][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 294.800930][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 294.811130][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 294.821227][ T30] Call Trace: [ 294.824538][ T30] [ 294.827502][ T30] dump_stack_lvl+0x241/0x360 [ 294.832227][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.837479][ T30] ? __pfx__printk+0x10/0x10 [ 294.842193][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.848231][ T30] ? vscnprintf+0x5d/0x90 [ 294.852606][ T30] panic+0x349/0x880 [ 294.856548][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 294.862756][ T30] ? __pfx_panic+0x10/0x10 [ 294.867300][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 294.872708][ T30] ? __irq_work_queue_local+0x137/0x410 [ 294.878329][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 294.883741][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 294.889950][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 294.896171][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 294.902391][ T30] watchdog+0x1033/0x1040 [ 294.906775][ T30] ? watchdog+0x1ea/0x1040 [ 294.911355][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.916118][ T30] kthread+0x2f0/0x390 [ 294.920224][ T30] ? __pfx_watchdog+0x10/0x10 [ 294.924946][ T30] ? __pfx_kthread+0x10/0x10 [ 294.929573][ T30] ret_from_fork+0x4b/0x80 [ 294.934050][ T30] ? __pfx_kthread+0x10/0x10 [ 294.938675][ T30] ret_from_fork_asm+0x1a/0x30 [ 294.943501][ T30] [ 294.946795][ T30] Kernel Offset: disabled [ 294.951127][ T30] Rebooting in 86400 seconds..