last executing test programs: 7.369633186s ago: executing program 3 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.308386585s ago: executing program 3 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_TEE) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r12 = openat$mice(0xffffff9c, &(0x7f0000000280), 0x141040) write$sysctl(r12, &(0x7f00000002c0)='4\x00', 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x38, 0x9, 0x1, [0x18000]}}) ppoll(&(0x7f0000000380)=[{r6, 0x8010}, {r6, 0x7616}], 0x2, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400)={[0x100000000]}, 0x8) syz_io_uring_submit(r7, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0xc0, 0x0, @fd=r0, 0x7, 0x0, 0xce3, 0x0, 0x1, {0x0, r11}}) 7.080380356s ago: executing program 3 (id=35): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.396597288s ago: executing program 3 (id=41): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x44}, 0x1, 0x600}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc018aec0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x20000700, &(0x7f0000001000/0x1000)=nil}) 4.622460661s ago: executing program 1 (id=50): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000004000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.507777595s ago: executing program 1 (id=51): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000640), 0x0, 0xc0040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000680)={0x3, 0x1, 0x3}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x3, "5f68dd"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)={0x20, 0x22, 0xf0, {0xf0, 0x23, "68049868cd431c11b8d84b747a458eb7d079d4d07cd45dd06456d3d5b1f36ade8f5baf6d21991e0c61566541503ef8a6f68afb291e342e8dac022d5f4637818c8f684bb74eee6d5a9439c5c8ba0c62d8411a6961aed3bebc87a68c514db71fdae73acbaa284b0295c35ce2c5be1f453f4f106f536edd203a9c82e0ab776f97309bbbbf9720b90ff5c1279c6c427b31bda4235e29a002246d7b3fcf56b54982eb92b4f4b46f2259af5c7b930552810a81f321d6e5f8892909406ba376e8322a108fae905ab470b00dc9f50ef606b4406b24da9422206627115fdbaa9901e5a88f01e6165d2046fb732ca0a38f6149"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}, &(0x7f0000000180)={0x0, 0x22, 0x9, {[@global=@item_012={0x2, 0x1, 0x2, '\x00A'}, @main=@item_4={0x3, 0x0, 0xa, "94887817"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa919, 0x6, 0x1, {0x22, 0xf87}}}}, &(0x7f0000000600)={0x2c, &(0x7f00000002c0)={0x40, 0xb, 0xe3, "146e124315b467b2396a30b798568de2c20c9872497e46f7323b3b9e59dcddf9d836c194d4b2a3d920f89e04577017ec71023dc302942a7367f2907d5f78e99fcb1d813f9e9af653896fd51a99606d01bed61ff046acda3aa39308a7cba1b9884a61c00baa5284a297e352c7b46b65d40016fadb2626ec02e9d91fad67a9225a05c764531ed31f74739ca9f288df06bad3fd01c29794da72585e60f9411840edf54c178b1e8a6571a75b1fc686640e2dc93cc966d0a75288976bb6b3b9b41e0cc7e2f4af6aa7e23b818920c2920734f9d9bf4f60880fa740be6cabfc0fd33ebc928639"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0x91, "fb2380fae17658f92cda23bab6cf1c39ab77e2e738f54e6da50ca0c5cc7cba99f917ab77b1c074393425f1d10dbe917b2ad9db8e5a371e43a6b6802c11ad56cea8b295f2a517faadf6a9916e3600729cde23d7e20ff680d9a843cf76056f739bf43bb56e2b46f880e9b60c9c25f0d54d76250e5da04014ff6b4e1509a3f306406a3ba74575fcadee9a781524973023f346"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="00110d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x17, 0xd, "3142bffc3c6e724d4f1de557f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.220165264s ago: executing program 3 (id=52): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904200002ff47d0000905090000000000df09050d"], 0x0) openat$rtc(0xffffff9c, &(0x7f0000001300), 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020081}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)={0x64, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{}, 0x0, @random=0x6, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000000)={0x64, 0x7, 0x0, 0x9, 0x9, 0x7f}) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r4, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="493f78b01549c2d12453d7ac4c08e4fe6189e8fc9046644dd3ec7f26db868b3f83b564d8eed87f9dd56939c38f29240e61ce7e90401583b6c86dbd23787dafa5a05f9aa620e964839cf998cd0172c9117cc29ef2b5d2dad96b0d387980cf30660bb420543e83f1e2fb179c7ccb80885dba90fabcfd5187c4fe48964ca134fe4598b281caa3", 0x85}], 0x1}}], 0x1, 0x0) recvmsg(r4, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/128, 0x80}], 0x1}, 0x102) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0019b40320d812010079de01ec020109021b0001000003000904000001785e4c00090585020004"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r7, &(0x7f0000000000), 0x0, 0x0, 0x0) fgetxattr(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7365637572815810ad416974792e5e00"], &(0x7f0000001240)=""/168, 0xa8) copy_file_range(r5, &(0x7f0000001340)=0x7, r7, &(0x7f0000001380)=0x81, 0x9, 0x0) syz_usb_disconnect(r6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x810) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 2.83251537s ago: executing program 4 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) 2.735727489s ago: executing program 4 (id=59): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000040)="6c045b29e2e78037bfadd30277f911f1a264c927ed6d67ddf696737a8e6c15e30e32477c93abe46c000af7567bdeb6a62587bb27d535465c91f015", 0x3b, 0x84, &(0x7f0000000080)={0xa, 0x4e21, 0x7de4, @mcast1, 0x9}, 0x1c) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) r2 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x20, 0x18, 0x4, 0x5, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x67, 0x0, 0x0, 0x29, 0x0, @remote, @multicast2, {[@noop]}}}}}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.610435324s ago: executing program 4 (id=60): ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x28, @bt={0x13, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7, 0x8, 0x38, 0x27, {0xffff945a, 0x1}, 0x3, 0xf1}}) 2.496712889s ago: executing program 4 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r2) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) 2.369915346s ago: executing program 2 (id=62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x50}, 0x1, 0x0, 0x0, 0xc010}, 0x4000000) 2.322654836s ago: executing program 3 (id=63): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x70, 0x3a, 0xc0, 0x20, 0x458, 0x7006, 0x6991, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc7, 0x76, 0x98}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000005080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}], 0x30) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="55592610", 0x4}, {0x0}], 0x2}, 0x8000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x4802, 0x0) socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) rt_sigqueueinfo(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000040)=[{r4, 0xd088}], 0x1, 0x400) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xa2) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) 2.003580143s ago: executing program 0 (id=65): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x4, 0x0, 0xfffffffd, @vifc_lcl_ifindex}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x3, r3, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r5, 0xffffffffffffffff, 0x0) 1.900903214s ago: executing program 0 (id=66): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x2000, 0x0) 1.788471461s ago: executing program 0 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_TEE) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r12 = openat$mice(0xffffff9c, &(0x7f0000000280), 0x141040) write$sysctl(r12, &(0x7f00000002c0)='4\x00', 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x38, 0x9, 0x1, [0x18000]}}) ppoll(&(0x7f0000000380)=[{r6, 0x8010}, {r6, 0x7616}], 0x2, &(0x7f00000003c0)={0x0, 0x989680}, &(0x7f0000000400)={[0x100000000]}, 0x8) syz_io_uring_submit(r7, r10, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0xc0, 0x0, @fd=r0, 0x7, 0x0, 0xce3, 0x0, 0x1, {0x0, r11}}) 1.653492034s ago: executing program 0 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x1000000000000, 0x0, 0x8000}, 0x4084) 1.607875954s ago: executing program 2 (id=69): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540100001000130700000000000000ff0200000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff00000000001a0000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c"], 0x154}}, 0x0) 1.526676687s ago: executing program 0 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x3a0ffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r8, @ANYRES32=r2], 0x48) r9 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000003000, 0x103382) ioctl$LOOP_SET_STATUS(r9, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x5, 0x2, 0x40, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ece5b861375b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "23639aabe426e78edc0000008000000000fb80c92dc817d44dcdec00"}) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES64=r7, @ANYRESDEC=r3, @ANYRESHEX=r1, @ANYBLOB="21003300d080000008d7e319a048240211000000080211000001505050505050000000000000ca603bf167058e7b7fa719dde45b7ed29e51819c8fe79be17fba490b0ed1f2db327be99ce06a7309ec49c051f01baf821877bbab3a82b64bbe75c524925284c2dc902c8b8b4e7c88e3b9e744ad72d6858fb7527e2e12564fdf30dbc1b4c2f34603c934d5bab4f1a944fa551cbfeee863868b53ba2acf24cf1a163235ceb97a7becc88cdb6930ffc6af0e0b9a0fbb2c0c5dcf01b32f62600b02358da0f5f090e86617cb001049392c26c900007d", @ANYBLOB="59e3221909ace66a8372b20a18d517cf1465c8f1c9928b81e71c1485442822fa23921c8c9b08c5f36bea9e1b957d1081e8e1900d1451165e2d3aace1489dd3ea67b5cc9230fdd6beec6a48946969ec195b984d552c5192404a6c4badb788f8b16ab0432f06329c1b54e56050d6cd32bd9fbe3352a1f0985a7e4f7dd34f2f971411cc"], 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0xac}}, 0x20000000) 1.356681595s ago: executing program 2 (id=71): ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x28, @bt={0x13, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7, 0x8, 0x38, 0x27, {0xffff945a, 0x1}, 0x3, 0xf1}}) 1.356500454s ago: executing program 1 (id=72): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0xe82) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (fail_nth: 5) 1.32886731s ago: executing program 0 (id=73): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x7, 0x880281) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xffb) syz_open_dev$sndctrl(&(0x7f0000000140), 0xfffffffffffffffe, 0xc08a43) r2 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x800000}) read$FUSE(r0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) sendfile(r3, r3, 0x0, 0x6) ioctl$RTC_WIE_OFF(r0, 0x7010) syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f) 1.220864521s ago: executing program 2 (id=74): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x25, &(0x7f0000000180), 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) keyctl$update(0x2, 0x0, &(0x7f0000000600)="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", 0x29f) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.195576537s ago: executing program 4 (id=75): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb0", 0x62}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0xa, 0x6, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32=r7], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003e5566400c0000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000, @void, @value}, 0x94) 759.617323ms ago: executing program 1 (id=76): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="93d90400030300", 0x7}, {&(0x7f0000000000)="b2", 0x1}], 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2780, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003a80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xfffe, 0x4e20, 0x2, 0x2, 0xa0, 0x20, 0xe2, r3, r5}, {0x9, 0x1, 0x9, 0x94, 0x8000000000000001, 0x7fffffffffffffff, 0x4, 0x9}, {0x5, 0x40, 0x2, 0x7}, 0x0, 0x0, 0x1, 0x1, 0x4, 0x3}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x4, 0x2, 0x0, 0x40000, 0x5, 0x5a5c}}, 0xe8) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="93d90400030300", 0x7}, {&(0x7f0000000000)="b2", 0x1}], 0x2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2780, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) read$FUSE(r4, &(0x7f0000003a80)={0x2020}, 0x2020) (async) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r5, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0xfffe, 0x4e20, 0x2, 0x2, 0xa0, 0x20, 0xe2, r3, r5}, {0x9, 0x1, 0x9, 0x94, 0x8000000000000001, 0x7fffffffffffffff, 0x4, 0x9}, {0x5, 0x40, 0x2, 0x7}, 0x0, 0x0, 0x1, 0x1, 0x4, 0x3}, {{@in6=@remote, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3500, 0x4, 0x2, 0x0, 0x40000, 0x5, 0x5a5c}}, 0xe8) (async) 745.133102ms ago: executing program 2 (id=77): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x3, 0x4, 0x0, 0xfffffffd, @vifc_lcl_ifindex}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000100)={0x3, r3, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) close_range(r5, 0xffffffffffffffff, 0x0) 382.585561ms ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) (fail_nth: 3) 265.087678ms ago: executing program 2 (id=79): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) syz_open_dev$tty20(0xc, 0x4, 0x0) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x0, 0x46c, 0x0, 0x0, 0x1000000000}, 0x0, &(0x7f0000004640)={0xf8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000300)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfce) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_io_uring_setup(0x231, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 136.485595ms ago: executing program 1 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x82, 0xfffffffffffffffe, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x9, @link_local, 'batadv_slave_0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000000100000400000007f00000001020000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000200000008000000000000000000000000004e09"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0xa4000960) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4018aee1, &(0x7f0000000040)=ANY=[]) ioctl$PPPIOCCONNECT(r5, 0x40047435, &(0x7f00000002c0)=0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001cc0), 0x400000000000026, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b0001006d6163736563000002800600024000000000"], 0x3c}}, 0x0) 0s ago: executing program 4 (id=81): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x722, 0x200, 0x7, 0x8, 0x38, 0x27, {0xffff945a, 0x1}, 0x3, 0xf1}}) (fail_nth: 6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 59.184578][ T5220] cgroup: Unknown subsys name 'net' [ 59.317401][ T5220] cgroup: Unknown subsys name 'cpuset' [ 59.325826][ T5220] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.850832][ T5220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.012326][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.034740][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.042692][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.077419][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.087447][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.097001][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.104723][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.112604][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.121363][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.130539][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.140395][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.142391][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.155785][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.164042][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.175240][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.184309][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.184998][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.191946][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.201837][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.206248][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.214237][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.219994][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.229619][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.238389][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.243014][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.249430][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.262375][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.269950][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.324845][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.333365][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.739383][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 63.790265][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 63.816654][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 63.862882][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 63.938023][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 64.017159][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.024766][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.032142][ T5246] bridge_slave_0: entered allmulticast mode [ 64.039566][ T5246] bridge_slave_0: entered promiscuous mode [ 64.047644][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.054891][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.062059][ T5249] bridge_slave_0: entered allmulticast mode [ 64.069373][ T5249] bridge_slave_0: entered promiscuous mode [ 64.081027][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.088430][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.095754][ T5249] bridge_slave_1: entered allmulticast mode [ 64.102629][ T5249] bridge_slave_1: entered promiscuous mode [ 64.129603][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.140371][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.147874][ T5246] bridge_slave_1: entered allmulticast mode [ 64.154887][ T5246] bridge_slave_1: entered promiscuous mode [ 64.203615][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.210746][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.218168][ T5248] bridge_slave_0: entered allmulticast mode [ 64.224956][ T5248] bridge_slave_0: entered promiscuous mode [ 64.261617][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.268979][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.276265][ T5248] bridge_slave_1: entered allmulticast mode [ 64.282923][ T5248] bridge_slave_1: entered promiscuous mode [ 64.312002][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.324077][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.351182][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.384332][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.391535][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.402736][ T5247] bridge_slave_0: entered allmulticast mode [ 64.410035][ T5247] bridge_slave_0: entered promiscuous mode [ 64.421383][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.432119][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.460472][ T5249] team0: Port device team_slave_0 added [ 64.466991][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.474250][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.481532][ T5247] bridge_slave_1: entered allmulticast mode [ 64.488840][ T5247] bridge_slave_1: entered promiscuous mode [ 64.507408][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.527108][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.534489][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.541650][ T5250] bridge_slave_0: entered allmulticast mode [ 64.549306][ T5250] bridge_slave_0: entered promiscuous mode [ 64.557515][ T5249] team0: Port device team_slave_1 added [ 64.563416][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.571320][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.578715][ T5250] bridge_slave_1: entered allmulticast mode [ 64.585875][ T5250] bridge_slave_1: entered promiscuous mode [ 64.610619][ T5246] team0: Port device team_slave_0 added [ 64.642805][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.668602][ T5246] team0: Port device team_slave_1 added [ 64.677342][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.684351][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.710459][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.731871][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.750337][ T5248] team0: Port device team_slave_0 added [ 64.760686][ T5248] team0: Port device team_slave_1 added [ 64.775618][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.782598][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.808881][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.822146][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.843150][ T5247] team0: Port device team_slave_0 added [ 64.865744][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.872749][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.899348][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.917065][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.938556][ T5247] team0: Port device team_slave_1 added [ 64.963980][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.971388][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.997672][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.009838][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.017203][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.043537][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.069367][ T5250] team0: Port device team_slave_0 added [ 65.091969][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.099131][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.125957][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.144862][ T5250] team0: Port device team_slave_1 added [ 65.151231][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.158222][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.184388][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.197732][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.205238][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.231425][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.257275][ T5249] hsr_slave_0: entered promiscuous mode [ 65.263683][ T5249] hsr_slave_1: entered promiscuous mode [ 65.313045][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.320308][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.348074][ T5237] Bluetooth: hci1: command tx timeout [ 65.348080][ T5238] Bluetooth: hci3: command tx timeout [ 65.348366][ T5238] Bluetooth: hci0: command tx timeout [ 65.353852][ T5239] Bluetooth: hci2: command tx timeout [ 65.360443][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.404283][ T5239] Bluetooth: hci4: command tx timeout [ 65.424789][ T5246] hsr_slave_0: entered promiscuous mode [ 65.431303][ T5246] hsr_slave_1: entered promiscuous mode [ 65.438281][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.446270][ T5246] Cannot create hsr debugfs directory [ 65.452413][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.459440][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.485613][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.504022][ T5248] hsr_slave_0: entered promiscuous mode [ 65.510439][ T5248] hsr_slave_1: entered promiscuous mode [ 65.517367][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.525189][ T5248] Cannot create hsr debugfs directory [ 65.546789][ T5247] hsr_slave_0: entered promiscuous mode [ 65.553223][ T5247] hsr_slave_1: entered promiscuous mode [ 65.559967][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.567785][ T5247] Cannot create hsr debugfs directory [ 65.675162][ T5250] hsr_slave_0: entered promiscuous mode [ 65.681845][ T5250] hsr_slave_1: entered promiscuous mode [ 65.688543][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.696619][ T5250] Cannot create hsr debugfs directory [ 65.985816][ T5247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.006210][ T5247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.015873][ T5247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.031592][ T5247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.061401][ T5248] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.072474][ T5248] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.081730][ T5248] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.093088][ T5248] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.158564][ T5249] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.179979][ T5249] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.211268][ T5249] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.225614][ T5249] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.286683][ T5250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.299650][ T5250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.309389][ T5250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.319294][ T5250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.407845][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.436780][ T5246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.463729][ T5246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.481576][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.490577][ T5246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.513825][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.521129][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.529742][ T5246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.559240][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.570832][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.577985][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.643606][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.703749][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.729941][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.737091][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.750445][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.787638][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.794810][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.803498][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.810647][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.832884][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.840012][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.862230][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.875366][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.903744][ T5248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.914589][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.946973][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.998538][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.005693][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.041395][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.069251][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.076435][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.107113][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.130463][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.159955][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.167067][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.197692][ T5247] veth0_vlan: entered promiscuous mode [ 67.226663][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.233768][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.250880][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.276250][ T5247] veth1_vlan: entered promiscuous mode [ 67.338649][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.360828][ T5248] veth0_vlan: entered promiscuous mode [ 67.405079][ T5239] Bluetooth: hci0: command tx timeout [ 67.407680][ T5247] veth0_macvtap: entered promiscuous mode [ 67.410594][ T5239] Bluetooth: hci2: command tx timeout [ 67.417538][ T5235] Bluetooth: hci3: command tx timeout [ 67.428255][ T5238] Bluetooth: hci1: command tx timeout [ 67.448820][ T5247] veth1_macvtap: entered promiscuous mode [ 67.462870][ T5248] veth1_vlan: entered promiscuous mode [ 67.481568][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.489274][ T5238] Bluetooth: hci4: command tx timeout [ 67.499040][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.508548][ T5249] veth0_vlan: entered promiscuous mode [ 67.545646][ T5249] veth1_vlan: entered promiscuous mode [ 67.561400][ T5247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.571492][ T5247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.580873][ T5247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.589822][ T5247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.646905][ T5248] veth0_macvtap: entered promiscuous mode [ 67.658566][ T5248] veth1_macvtap: entered promiscuous mode [ 67.671091][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.681096][ T5249] veth0_macvtap: entered promiscuous mode [ 67.703918][ T5250] veth0_vlan: entered promiscuous mode [ 67.712968][ T5249] veth1_macvtap: entered promiscuous mode [ 67.781170][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.797764][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.812000][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.823922][ T5250] veth1_vlan: entered promiscuous mode [ 67.832711][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.845169][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.855642][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.866483][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.878299][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.899641][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.911055][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.922886][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.946427][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.957404][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.969987][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.981166][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.992480][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.012792][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.022714][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.037845][ T5248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.053667][ T5248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.063772][ T5248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.072882][ T5248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.098556][ T5249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.107966][ T5249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.117473][ T5249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.127203][ T5249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.176353][ T5246] veth0_vlan: entered promiscuous mode [ 68.183453][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.192639][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.223603][ T5250] veth0_macvtap: entered promiscuous mode [ 68.283807][ T5250] veth1_macvtap: entered promiscuous mode [ 68.306777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.315427][ T5246] veth1_vlan: entered promiscuous mode [ 68.328056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.329226][ T5247] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.359895][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.372325][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.382466][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.393155][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.403067][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.413614][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.425375][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.441613][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.453250][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.465296][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.476083][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.486277][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.497003][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.508254][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.556554][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.566641][ T5250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.577874][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.590451][ T5250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.608084][ T5250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.617793][ T5250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.720490][ T5246] veth0_macvtap: entered promiscuous mode [ 68.731726][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.734600][ T5246] veth1_macvtap: entered promiscuous mode [ 68.752576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.762816][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.773210][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.852866][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.876311][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.886375][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.898487][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.908793][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.919507][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.929697][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.940405][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.961242][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.012515][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.058545][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.083063][ T5291] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.098774][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.122353][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.132599][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.143185][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.153485][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.164028][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.174995][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.185896][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.197020][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.212106][ T5246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.220979][ T5246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.230432][ T5246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.239725][ T5246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.320349][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.330434][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.370239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.410018][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.473093][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.487350][ T5238] Bluetooth: hci2: command tx timeout [ 69.487367][ T5235] Bluetooth: hci0: command tx timeout [ 69.494333][ T5235] Bluetooth: hci1: command tx timeout [ 69.498403][ T5238] Bluetooth: hci3: command tx timeout [ 69.504427][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.565322][ T5238] Bluetooth: hci4: command tx timeout [ 69.831843][ T5296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.855388][ T5296] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.984362][ T5296] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.060215][ T5296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.069285][ T5296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.087832][ T5296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.101368][ T5296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.115587][ T5296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.145711][ T5296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.165966][ T5296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.172004][ T5296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.190011][ T5296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.265043][ T5296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 70.271197][ T5296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.280313][ T5296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 70.772681][ T5333] pimreg: entered allmulticast mode [ 70.994566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.024454][ T5234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.184331][ T5234] usb 2-1: Using ep0 maxpacket: 8 [ 71.216310][ T5234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.239457][ T5234] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 71.288091][ T5340] tipc: Started in network mode [ 71.292167][ T5234] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 71.293176][ T5340] tipc: Node identity ac1414bb, cluster identity 4711 [ 71.311139][ T5340] tipc: Enabling of bearer rejected, failed to enable media [ 71.320324][ T5234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.394491][ T5234] usb 2-1: config 0 descriptor?? [ 71.396984][ T1179] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.497216][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.506283][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.564362][ T1179] usb 1-1: Using ep0 maxpacket: 16 [ 71.571506][ T1179] usb 1-1: config 7 has an invalid interface number: 247 but max is 0 [ 71.579882][ T1179] usb 1-1: config 7 has no interface number 0 [ 71.591121][ T1179] usb 1-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 71.616016][ T1179] usb 1-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.644457][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.678314][ T1179] usb 1-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 71.773166][ T1179] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 71.795178][ T1179] usb 1-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 71.834415][ T1179] usb 1-1: Product: syz [ 71.838722][ T1179] usb 1-1: Manufacturer: syz [ 71.864312][ T1179] usb 1-1: SerialNumber: syz [ 71.924724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.005772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.086809][ T1179] ni6501 1-1:7.247: driver 'ni6501' failed to auto-configure device. [ 72.124382][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.130872][ T5235] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.139272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.212544][ T5237] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.219276][ T5238] Bluetooth: hci3: Opcode 0x206c failed: -110 [ 72.272700][ T5328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.284555][ T5237] Bluetooth: hci4: command 0x0c1a tx timeout [ 72.310741][ T5328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.626863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.635798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.714800][ T5363] syzkaller0: entered allmulticast mode [ 72.844944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 72.899484][ T5336] Zero length message leads to an empty skb [ 73.488349][ T5284] usb 1-1: USB disconnect, device number 2 [ 73.726711][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.782322][ T5374] pimreg: entered allmulticast mode [ 73.817528][ T5376] mmap: syz.3.28 (5376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 74.205105][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.207908][ T5235] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.284829][ T5238] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 74.286019][ T5235] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.334494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.364717][ T5235] Bluetooth: hci4: command 0x0c1a tx timeout [ 74.406360][ T1179] usb 2-1: USB disconnect, device number 2 [ 74.500821][ T5391] lo: entered allmulticast mode [ 74.544003][ T5391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.582591][ T5396] FAULT_INJECTION: forcing a failure. [ 74.582591][ T5396] name failslab, interval 1, probability 0, space 0, times 1 [ 74.604774][ T5396] CPU: 0 UID: 0 PID: 5396 Comm: syz.4.36 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 74.614984][ T5396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.625050][ T5396] Call Trace: [ 74.628336][ T5396] [ 74.631266][ T5396] dump_stack_lvl+0x241/0x360 [ 74.635960][ T5396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.641179][ T5396] ? __pfx__printk+0x10/0x10 [ 74.645790][ T5396] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 74.651802][ T5396] ? __pfx___might_resched+0x10/0x10 [ 74.657102][ T5396] should_fail_ex+0x3b0/0x4e0 [ 74.661791][ T5396] should_failslab+0xac/0x100 [ 74.666474][ T5396] ? __alloc_skb+0x1c3/0x440 [ 74.671087][ T5396] kmem_cache_alloc_node_noprof+0x71/0x320 [ 74.676906][ T5396] __alloc_skb+0x1c3/0x440 [ 74.681333][ T5396] ? __pfx___alloc_skb+0x10/0x10 [ 74.686284][ T5396] ? netlink_autobind+0xd6/0x2f0 [ 74.691240][ T5396] ? netlink_autobind+0x2b0/0x2f0 [ 74.696272][ T5396] netlink_sendmsg+0x638/0xcb0 [ 74.701059][ T5396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.706353][ T5396] ? aa_sock_msg_perm+0x91/0x160 [ 74.711306][ T5396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.716596][ T5396] __sock_sendmsg+0x221/0x270 [ 74.721453][ T5396] ____sys_sendmsg+0x52a/0x7e0 [ 74.726245][ T5396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.731547][ T5396] __sys_sendmsg+0x292/0x380 [ 74.736154][ T5396] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.741280][ T5396] ? __pfx_vfs_write+0x10/0x10 [ 74.746070][ T5396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.752421][ T5396] ? do_syscall_64+0x100/0x230 [ 74.758407][ T5396] ? do_syscall_64+0xb6/0x230 [ 74.763180][ T5396] do_syscall_64+0xf3/0x230 [ 74.767715][ T5396] ? clear_bhb_loop+0x35/0x90 [ 74.772441][ T5396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.778340][ T5396] RIP: 0033:0x7fa69917df39 [ 74.782768][ T5396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.802383][ T5396] RSP: 002b:00007fa69a018038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.810890][ T5396] RAX: ffffffffffffffda RBX: 00007fa699335f80 RCX: 00007fa69917df39 [ 74.818866][ T5396] RDX: 0000000000004084 RSI: 0000000020000000 RDI: 0000000000000003 [ 74.826837][ T5396] RBP: 00007fa69a018090 R08: 0000000000000000 R09: 0000000000000000 [ 74.834809][ T5396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.842779][ T5396] R13: 0000000000000000 R14: 00007fa699335f80 R15: 00007fa69945fa28 [ 74.850765][ T5396] [ 74.853859][ C0] vkms_vblank_simulate: vblank timer overrun [ 75.013845][ T5391] netlink: 'syz.2.34': attribute type 17 has an invalid length. [ 75.015269][ T5395] syz.2.34 uses obsolete (PF_INET,SOCK_PACKET) [ 75.100820][ T5402] pimreg: entered allmulticast mode [ 75.213513][ T5400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 75.258728][ T5408] FAULT_INJECTION: forcing a failure. [ 75.258728][ T5408] name failslab, interval 1, probability 0, space 0, times 0 [ 75.277435][ T5408] CPU: 1 UID: 0 PID: 5408 Comm: syz.1.43 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 75.287677][ T5408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.297761][ T5408] Call Trace: [ 75.301071][ T5408] [ 75.304036][ T5408] dump_stack_lvl+0x241/0x360 [ 75.308764][ T5408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.314009][ T5408] ? __pfx__printk+0x10/0x10 [ 75.318649][ T5408] ? ref_tracker_alloc+0x332/0x490 [ 75.323817][ T5408] should_fail_ex+0x3b0/0x4e0 [ 75.328551][ T5408] ? skb_clone+0x20c/0x390 [ 75.329937][ T5412] FAULT_INJECTION: forcing a failure. [ 75.329937][ T5412] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.332993][ T5408] should_failslab+0xac/0x100 [ 75.333031][ T5408] ? skb_clone+0x20c/0x390 [ 75.333062][ T5408] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 75.360657][ T5408] skb_clone+0x20c/0x390 [ 75.364934][ T5408] __netlink_deliver_tap+0x3cc/0x7c0 [ 75.370350][ T5408] ? netlink_deliver_tap+0x2e/0x1b0 [ 75.375568][ T5408] netlink_deliver_tap+0x19d/0x1b0 [ 75.380702][ T5408] netlink_unicast+0x7c4/0x990 [ 75.385535][ T5408] ? __pfx_netlink_unicast+0x10/0x10 [ 75.390834][ T5408] ? __virt_addr_valid+0x183/0x530 [ 75.395973][ T5408] ? __check_object_size+0x48e/0x900 [ 75.401389][ T5408] netlink_sendmsg+0x8e4/0xcb0 [ 75.406207][ T5408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.411519][ T5408] ? aa_sock_msg_perm+0x91/0x160 [ 75.416486][ T5408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.421797][ T5408] __sock_sendmsg+0x221/0x270 [ 75.426506][ T5408] ____sys_sendmsg+0x52a/0x7e0 [ 75.431301][ T5408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.436627][ T5408] __sys_sendmsg+0x292/0x380 [ 75.441252][ T5408] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.446414][ T5408] ? __pfx_vfs_write+0x10/0x10 [ 75.451244][ T5408] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.457590][ T5408] ? do_syscall_64+0x100/0x230 [ 75.462370][ T5408] ? do_syscall_64+0xb6/0x230 [ 75.467058][ T5408] do_syscall_64+0xf3/0x230 [ 75.471574][ T5408] ? clear_bhb_loop+0x35/0x90 [ 75.476265][ T5408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.482169][ T5408] RIP: 0033:0x7f936af7df39 [ 75.486594][ T5408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.506237][ T5408] RSP: 002b:00007f936be18038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.514669][ T5408] RAX: ffffffffffffffda RBX: 00007f936b135f80 RCX: 00007f936af7df39 [ 75.522649][ T5408] RDX: 0000000000000000 RSI: 00000000200029c0 RDI: 0000000000000004 [ 75.530643][ T5408] RBP: 00007f936be18090 R08: 0000000000000000 R09: 0000000000000000 [ 75.538623][ T5408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.546600][ T5408] R13: 0000000000000000 R14: 00007f936b135f80 R15: 00007f936b25fa28 [ 75.554590][ T5408] [ 75.560795][ T5412] CPU: 1 UID: 0 PID: 5412 Comm: syz.0.44 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 75.570998][ T5412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.581074][ T5412] Call Trace: [ 75.584375][ T5412] [ 75.587313][ T5412] dump_stack_lvl+0x241/0x360 [ 75.592006][ T5412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.597215][ T5412] ? __pfx__printk+0x10/0x10 [ 75.601819][ T5412] ? __pfx_lock_release+0x10/0x10 [ 75.606866][ T5412] should_fail_ex+0x3b0/0x4e0 [ 75.611651][ T5412] _copy_to_user+0x2f/0xb0 [ 75.616083][ T5412] video_usercopy+0xe5e/0x1180 [ 75.620884][ T5412] ? __pfx___video_do_ioctl+0x10/0x10 [ 75.626284][ T5412] ? __pfx_video_usercopy+0x10/0x10 [ 75.631619][ T5412] ? __fget_files+0x29/0x470 [ 75.636241][ T5412] ? __fget_files+0x3f3/0x470 [ 75.640976][ T5412] v4l2_ioctl+0x189/0x1e0 [ 75.645325][ T5412] ? __pfx_v4l2_ioctl+0x10/0x10 [ 75.650194][ T5412] __se_sys_ioctl+0xf9/0x170 [ 75.654816][ T5412] do_syscall_64+0xf3/0x230 [ 75.659342][ T5412] ? clear_bhb_loop+0x35/0x90 [ 75.664048][ T5412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.669965][ T5412] RIP: 0033:0x7fecc837df39 [ 75.674399][ T5412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.694020][ T5412] RSP: 002b:00007fecc925c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.702443][ T5412] RAX: ffffffffffffffda RBX: 00007fecc8535f80 RCX: 00007fecc837df39 [ 75.710420][ T5412] RDX: 0000000020000380 RSI: 00000000c0845657 RDI: 0000000000000003 [ 75.718402][ T5412] RBP: 00007fecc925c090 R08: 0000000000000000 R09: 0000000000000000 [ 75.726386][ T5412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.734368][ T5412] R13: 0000000000000000 R14: 00007fecc8535f80 R15: 00007fecc865fa28 [ 75.742457][ T5412] [ 75.745718][ T5234] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.809893][ T5235] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.915801][ T5234] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 75.924881][ T5281] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.936034][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.948477][ T5234] usb 4-1: config 0 descriptor?? [ 75.974679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.982999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.064274][ T5281] usb 5-1: device descriptor read/64, error -71 [ 76.166399][ T5234] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 76.204386][ T5284] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 76.287300][ T5235] Bluetooth: hci2: command 0x0c1a tx timeout [ 76.287348][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.304260][ T5281] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.313021][ T5282] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.374982][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 76.385180][ T5284] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 76.399022][ T5406] binder: BINDER_SET_CONTEXT_MGR already set [ 76.405582][ T5284] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 76.413722][ T5284] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 76.418869][ T5406] binder: 5405:5406 ioctl 4018620d 20000100 returned -16 [ 76.426682][ T5284] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 76.432872][ T5406] binder: 5405:5406 ioctl c018620c 20000000 returned -1 [ 76.442585][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 76.457043][ T5281] usb 5-1: device descriptor read/64, error -71 [ 76.458577][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 76.470980][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.480852][ T5284] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 76.484335][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 76.507455][ T5284] usb 1-1: string descriptor 0 read error: -22 [ 76.514865][ T5284] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 76.524058][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.537132][ T5282] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 76.538785][ T5284] usb 1-1: config 0 descriptor?? [ 76.558291][ T5284] hub 1-1:0.0: bad descriptor, ignoring hub [ 76.565210][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.571318][ T5284] hub 1-1:0.0: probe with driver hub failed with error -5 [ 76.573226][ T5282] usb 3-1: Product: syz [ 76.573248][ T5282] usb 3-1: Manufacturer: syz [ 76.584702][ T5284] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 76.584800][ T5282] usb 3-1: SerialNumber: syz [ 76.610874][ T5281] usb usb5-port1: attempt power cycle [ 76.633274][ T5282] usb 3-1: config 0 descriptor?? [ 76.688551][ T25] usb 4-1: USB disconnect, device number 2 [ 76.821332][ T8] usb 1-1: USB disconnect, device number 3 [ 76.845175][ T5282] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 76.984742][ T5281] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.005016][ T5281] usb 5-1: device descriptor read/8, error -71 [ 77.255976][ T5281] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.305500][ T5281] usb 5-1: device descriptor read/8, error -71 [ 77.314225][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.444824][ T5281] usb usb5-port1: unable to enumerate USB device [ 77.486129][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.506386][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.519069][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 77.531699][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.543118][ T25] usb 2-1: config 0 descriptor?? [ 77.664487][ T5284] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.814236][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 77.821491][ T5284] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 77.829990][ T5284] usb 4-1: config 0 has no interface number 0 [ 77.838290][ T5284] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 77.848211][ T5284] usb 4-1: config 0 interface 32 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 77.862094][ T5284] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 77.872398][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.880601][ T5284] usb 4-1: Product: syz [ 77.891044][ T5284] usb 4-1: Manufacturer: syz [ 77.895767][ T5284] usb 4-1: SerialNumber: syz [ 77.902546][ T5284] usb 4-1: config 0 descriptor?? [ 77.924387][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.972794][ T25] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 78.086929][ T5440] FAULT_INJECTION: forcing a failure. [ 78.086929][ T5440] name failslab, interval 1, probability 0, space 0, times 0 [ 78.100302][ T5440] CPU: 0 UID: 0 PID: 5440 Comm: syz.4.56 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 78.110508][ T5440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.120597][ T5440] Call Trace: [ 78.123910][ T5440] [ 78.126878][ T5440] dump_stack_lvl+0x241/0x360 [ 78.131609][ T5440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.136848][ T5440] ? __pfx__printk+0x10/0x10 [ 78.141482][ T5440] ? fs_reclaim_acquire+0x93/0x140 [ 78.143407][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.146622][ T5440] ? __pfx___might_resched+0x10/0x10 [ 78.146671][ T5440] should_fail_ex+0x3b0/0x4e0 [ 78.146708][ T5440] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 78.146737][ T5440] should_failslab+0xac/0x100 [ 78.146765][ T5440] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 78.146791][ T5440] __kmalloc_noprof+0xd8/0x400 [ 78.146827][ T5440] tomoyo_realpath_from_path+0xcf/0x5e0 [ 78.146866][ T5440] tomoyo_check_open_permission+0x255/0x500 [ 78.146900][ T5440] ? __lock_acquire+0x1384/0x2050 [ 78.202664][ T5440] ? tomoyo_check_open_permission+0x204/0x500 [ 78.208788][ T5440] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 78.215292][ T5440] ? tomoyo_file_open+0x165/0x220 [ 78.220361][ T5440] security_file_open+0x777/0x990 [ 78.225430][ T5440] do_dentry_open+0x369/0x1460 [ 78.230249][ T5440] vfs_open+0x3e/0x330 [ 78.234361][ T5440] path_openat+0x2c84/0x3590 [ 78.239006][ T5440] ? __lock_acquire+0x1384/0x2050 [ 78.244107][ T5440] ? __pfx_path_openat+0x10/0x10 [ 78.249110][ T5440] do_filp_open+0x235/0x490 [ 78.253663][ T5440] ? __pfx_do_filp_open+0x10/0x10 [ 78.258759][ T5440] ? _raw_spin_unlock+0x28/0x50 [ 78.263646][ T5440] ? alloc_fd+0x5a1/0x640 [ 78.268049][ T5440] do_sys_openat2+0x13e/0x1d0 [ 78.272770][ T5440] ? __pfx_do_sys_openat2+0x10/0x10 [ 78.278034][ T5440] __x64_sys_openat+0x247/0x2a0 [ 78.282952][ T5440] ? __pfx___x64_sys_openat+0x10/0x10 [ 78.288392][ T5440] ? do_syscall_64+0x100/0x230 [ 78.293730][ T5440] ? do_syscall_64+0xb6/0x230 [ 78.298455][ T5440] do_syscall_64+0xf3/0x230 [ 78.303003][ T5440] ? clear_bhb_loop+0x35/0x90 [ 78.307729][ T5440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.313667][ T5440] RIP: 0033:0x7fa69917c8d0 [ 78.318123][ T5440] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 78.337771][ T5440] RSP: 002b:00007fa69a017b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 78.346235][ T5440] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa69917c8d0 [ 78.354338][ T5440] RDX: 0000000000000000 RSI: 00007fa69a017c10 RDI: 00000000ffffff9c [ 78.362345][ T5440] RBP: 00007fa69a017c10 R08: 0000000000000000 R09: 0000000000000000 [ 78.370352][ T5440] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 78.378361][ T5440] R13: 0000000000000000 R14: 00007fa699335f80 R15: 00007fa69945fa28 [ 78.386488][ T5440] [ 78.389696][ C0] vkms_vblank_simulate: vblank timer overrun [ 78.398412][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.405617][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 78.411804][ T5440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 78.422979][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.433890][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.454321][ T8] usb 1-1: Product: syz [ 78.454619][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.458509][ T8] usb 1-1: Manufacturer: syz [ 78.458535][ T8] usb 1-1: SerialNumber: syz [ 78.467117][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 78.480667][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 78.565744][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 78.578150][ T5282] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 78.597851][ T5282] usb 3-1: USB disconnect, device number 2 [ 78.629692][ T1179] usb 4-1: USB disconnect, device number 3 [ 78.708105][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 78.730150][ T8] r8152-cfgselector 1-1: bad CDC descriptors [ 78.766966][ T8] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 78.978081][ T25] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device [ 78.994617][ T25] pyra 0003:1E7D:2CF6.0001: couldn't install mouse [ 79.014776][ T25] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -32 [ 79.045913][ T5450] syzkaller0: entered allmulticast mode [ 79.367461][ T5458] bond0: entered promiscuous mode [ 79.372704][ T5458] bond_slave_0: entered promiscuous mode [ 79.378703][ T5458] bond_slave_1: entered promiscuous mode [ 79.389324][ T5458] bond0: left promiscuous mode [ 79.394556][ T5458] bond_slave_0: left promiscuous mode [ 79.400749][ T5458] bond_slave_1: left promiscuous mode [ 79.604242][ T5286] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.768328][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 79.779908][ T5286] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 79.808265][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.829949][ T5286] usb 4-1: config 0 descriptor?? [ 79.859986][ T5286] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 80.115823][ T8] usb 2-1: USB disconnect, device number 3 [ 80.217664][ T5479] FAULT_INJECTION: forcing a failure. [ 80.217664][ T5479] name failslab, interval 1, probability 0, space 0, times 0 [ 80.240644][ T5479] CPU: 0 UID: 0 PID: 5479 Comm: syz.1.72 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 80.250893][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.260985][ T5479] Call Trace: [ 80.264302][ T5479] [ 80.267261][ T5479] dump_stack_lvl+0x241/0x360 [ 80.272436][ T5479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.277675][ T5479] ? __pfx__printk+0x10/0x10 [ 80.282310][ T5479] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 80.288253][ T5479] ? __pfx___might_resched+0x10/0x10 [ 80.293571][ T5479] ? __asan_memset+0x23/0x50 [ 80.298210][ T5479] should_fail_ex+0x3b0/0x4e0 [ 80.302937][ T5479] should_failslab+0xac/0x100 [ 80.307661][ T5479] __kmalloc_cache_node_noprof+0x74/0x300 [ 80.313422][ T5479] ? __alloc_workqueue+0x709/0x1f20 [ 80.318658][ T5479] __alloc_workqueue+0x709/0x1f20 [ 80.323727][ T5479] ? __mutex_lock+0x2ef/0xd70 [ 80.328451][ T5479] alloc_workqueue+0xd6/0x210 [ 80.333160][ T5479] ? loop_configure+0x1f7/0xeb0 [ 80.338059][ T5479] ? loop_configure+0x425/0xeb0 [ 80.342952][ T5479] ? __pfx_alloc_workqueue+0x10/0x10 [ 80.348257][ T5479] ? __asan_memcpy+0x40/0x70 [ 80.352868][ T5479] ? loop_set_status_from_info+0x181/0x2b0 [ 80.358707][ T5479] loop_configure+0x519/0xeb0 [ 80.363417][ T5479] lo_ioctl+0x846/0x1f50 [ 80.367680][ T5479] ? mark_lock+0x9a/0x360 [ 80.372023][ T5479] ? validate_chain+0x11e/0x5920 [ 80.376970][ T5479] ? __pfx_lo_ioctl+0x10/0x10 [ 80.381663][ T5479] ? mark_lock+0x9a/0x360 [ 80.386004][ T5479] ? __lock_acquire+0x1384/0x2050 [ 80.391083][ T5479] ? __pfx_lock_acquire+0x10/0x10 [ 80.396229][ T5479] ? is_bpf_text_address+0x26/0x2a0 [ 80.401454][ T5479] ? __pfx_lock_release+0x10/0x10 [ 80.406506][ T5479] ? unwind_next_frame+0x18e6/0x22d0 [ 80.411819][ T5479] ? preempt_count_add+0x93/0x190 [ 80.416979][ T5479] ? is_bpf_text_address+0x285/0x2a0 [ 80.422375][ T5479] ? is_bpf_text_address+0x26/0x2a0 [ 80.427587][ T5479] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 80.433759][ T5479] ? kernel_text_address+0xa7/0xe0 [ 80.438886][ T5479] ? __kernel_text_address+0xd/0x40 [ 80.444097][ T5479] ? unwind_get_return_address+0x4d/0x90 [ 80.449776][ T5479] ? arch_stack_walk+0xfd/0x150 [ 80.454653][ T5479] ? stack_trace_save+0x118/0x1d0 [ 80.459692][ T5479] ? __pfx_stack_trace_save+0x10/0x10 [ 80.465079][ T5479] ? stack_depot_save_flags+0x29/0x830 [ 80.470732][ T5479] ? kasan_save_track+0x51/0x80 [ 80.475594][ T5479] ? kasan_save_track+0x3f/0x80 [ 80.480446][ T5479] ? kasan_save_free_info+0x40/0x50 [ 80.485765][ T5479] ? __kasan_slab_free+0x59/0x70 [ 80.490708][ T5479] ? kfree+0x1a0/0x440 [ 80.494792][ T5479] ? tomoyo_path_number_perm+0x68d/0x880 [ 80.500446][ T5479] ? security_file_ioctl+0xc6/0x2a0 [ 80.505658][ T5479] ? __se_sys_ioctl+0x47/0x170 [ 80.510437][ T5479] ? do_syscall_64+0xf3/0x230 [ 80.515123][ T5479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.521202][ T5479] ? do_vfs_ioctl+0xf08/0x2e40 [ 80.525986][ T5479] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 80.531038][ T5479] ? mark_lock+0x9a/0x360 [ 80.535409][ T5479] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 80.541058][ T5479] ? tomoyo_path_number_perm+0x208/0x880 [ 80.546709][ T5479] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.552752][ T5479] ? file_to_blk_mode+0xcc/0x140 [ 80.557702][ T5479] ? __pfx_lo_ioctl+0x10/0x10 [ 80.562402][ T5479] blkdev_ioctl+0x57d/0x6a0 [ 80.566923][ T5479] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.571964][ T5479] ? __pfx_blkdev_ioctl+0x10/0x10 [ 80.577004][ T5479] __se_sys_ioctl+0xf9/0x170 [ 80.581611][ T5479] do_syscall_64+0xf3/0x230 [ 80.586130][ T5479] ? clear_bhb_loop+0x35/0x90 [ 80.590846][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.596755][ T5479] RIP: 0033:0x7f936af7df39 [ 80.601177][ T5479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.620789][ T5479] RSP: 002b:00007f936be18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.629215][ T5479] RAX: ffffffffffffffda RBX: 00007f936b135f80 RCX: 00007f936af7df39 [ 80.637199][ T5479] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 80.645179][ T5479] RBP: 00007f936be18090 R08: 0000000000000000 R09: 0000000000000000 [ 80.653156][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.661132][ T5479] R13: 0000000000000000 R14: 00007f936b135f80 R15: 00007f936b25fa28 [ 80.669126][ T5479] [ 80.672281][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.675143][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.696330][ T5286] gspca_sunplus: reg_w_riv err -110 [ 80.701624][ T5286] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 80.804307][ T25] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 80.897004][ T5493] pimreg: entered allmulticast mode [ 80.974986][ T5484] hub 9-0:1.0: USB hub found [ 80.975926][ T25] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 81.008592][ T25] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 81.008632][ T5484] hub 9-0:1.0: 8 ports detected [ 81.021817][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 81.059227][ T25] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 81.083187][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 81.104072][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 81.116076][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 81.140284][ T25] usb 1-1: string descriptor 0 read error: -22 [ 81.150033][ T25] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 81.176247][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.202165][ T25] usb 1-1: config 0 descriptor?? [ 81.211734][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 81.224000][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 81.244374][ T25] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 81.302348][ T5484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 81.409495][ T5484] vlan2: entered promiscuous mode [ 81.428731][ T25] usb 1-1: USB disconnect, device number 5 [ 81.451458][ T5484] bridge0: entered promiscuous mode [ 81.582205][ C0] [ 81.585128][ C0] ================================ [ 81.588346][ T5513] FAULT_INJECTION: forcing a failure. [ 81.588346][ T5513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.590246][ C0] WARNING: inconsistent lock state [ 81.590258][ C0] 6.11.0-syzkaller-10622-gaa486552a110 #0 Not tainted [ 81.590273][ C0] -------------------------------- [ 81.620483][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 81.627324][ C0] syz.1.80/5509 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 81.633563][ C0] ffff8880612771e0 (&pch->downl){+.?.}-{2:2}, at: ppp_input+0x18b/0xa10 [ 81.641933][ C0] {SOFTIRQ-ON-W} state was registered at: [ 81.647644][ C0] lock_acquire+0x1ed/0x550 [ 81.652246][ C0] _raw_spin_lock+0x2e/0x40 [ 81.656839][ C0] ppp_input+0x18b/0xa10 [ 81.661169][ C0] pppoe_rcv_core+0x117/0x310 [ 81.665939][ C0] __release_sock+0x243/0x350 [ 81.670724][ C0] release_sock+0x61/0x1f0 [ 81.675236][ C0] pppoe_sendmsg+0xd5/0x750 [ 81.679829][ C0] __sock_sendmsg+0x221/0x270 [ 81.684595][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 81.689451][ C0] __sys_sendmmsg+0x3ab/0x730 [ 81.694298][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 81.699242][ C0] do_syscall_64+0xf3/0x230 [ 81.703844][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.709827][ C0] irq event stamp: 7376 [ 81.713974][ C0] hardirqs last enabled at (7376): [] __local_bh_enable_ip+0x168/0x200 [ 81.723871][ C0] hardirqs last disabled at (7375): [] __local_bh_enable_ip+0x106/0x200 [ 81.733774][ C0] softirqs last enabled at (7318): [] pppoe_sendmsg+0xd5/0x750 [ 81.742984][ C0] softirqs last disabled at (7319): [] do_softirq+0x11b/0x1e0 [ 81.752016][ C0] [ 81.752016][ C0] other info that might help us debug this: [ 81.760071][ C0] Possible unsafe locking scenario: [ 81.760071][ C0] [ 81.767521][ C0] CPU0 [ 81.770798][ C0] ---- [ 81.774083][ C0] lock(&pch->downl); [ 81.778163][ C0] [ 81.781612][ C0] lock(&pch->downl); [ 81.785856][ C0] [ 81.785856][ C0] *** DEADLOCK *** [ 81.785856][ C0] [ 81.793992][ C0] 4 locks held by syz.1.80/5509: [ 81.798920][ C0] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: process_backlog+0x33b/0x15b0 [ 81.808524][ C0] #1: ffff8880601fb1d8 (slock-AF_PPPOX){+.-.}-{2:2}, at: __sk_receive_skb+0x18c/0x8b0 [ 81.818213][ C0] #2: ffff8880601fb258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: __netif_receive_skb+0x2e0/0x650 [ 81.828320][ C0] #3: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: ppp_input+0x55/0xa10 [ 81.837205][ C0] [ 81.837205][ C0] stack backtrace: [ 81.843086][ C0] CPU: 0 UID: 0 PID: 5509 Comm: syz.1.80 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 81.853320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.863476][ C0] Call Trace: [ 81.866762][ C0] [ 81.869605][ C0] dump_stack_lvl+0x241/0x360 [ 81.874299][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.879513][ C0] ? __pfx__printk+0x10/0x10 [ 81.884115][ C0] print_usage_bug+0x62e/0x8b0 [ 81.888975][ C0] ? is_bpf_text_address+0x285/0x2a0 [ 81.894268][ C0] valid_state+0x13a/0x1c0 [ 81.898683][ C0] mark_lock_irq+0xbb/0xc20 [ 81.903189][ C0] ? arch_stack_walk+0xfd/0x150 [ 81.908042][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 81.913154][ C0] ? stack_trace_save+0x118/0x1d0 [ 81.918182][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 81.923559][ C0] ? validate_chain+0x11e/0x5920 [ 81.928498][ C0] ? lockdep_lock+0x123/0x2b0 [ 81.933183][ C0] ? save_trace+0x5a/0xb50 [ 81.937598][ C0] ? mark_lock+0x9a/0x360 [ 81.941933][ C0] mark_lock+0x223/0x360 [ 81.946176][ C0] __lock_acquire+0xbf9/0x2050 [ 81.950950][ C0] lock_acquire+0x1ed/0x550 [ 81.955461][ C0] ? ppp_input+0x18b/0xa10 [ 81.959900][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 81.964935][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 81.969970][ C0] _raw_spin_lock+0x2e/0x40 [ 81.974487][ C0] ? ppp_input+0x18b/0xa10 [ 81.978905][ C0] ppp_input+0x18b/0xa10 [ 81.983166][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 81.988540][ C0] ? ppp_input+0x55/0xa10 [ 81.992873][ C0] pppoe_rcv_core+0x117/0x310 [ 81.997551][ C0] ? __netif_receive_skb+0x2e0/0x650 [ 82.002846][ C0] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 82.008046][ C0] __sk_receive_skb+0x82b/0x8b0 [ 82.012903][ C0] ? __pfx_pppoe_rcv+0x10/0x10 [ 82.017670][ C0] __netif_receive_skb+0x2e0/0x650 [ 82.022797][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 82.027841][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 82.033479][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.039465][ C0] ? __pfx_lock_release+0x10/0x10 [ 82.044496][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 82.049613][ C0] process_backlog+0x662/0x15b0 [ 82.054466][ C0] ? process_backlog+0x33b/0x15b0 [ 82.059497][ C0] ? __pfx_process_backlog+0x10/0x10 [ 82.064789][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.070786][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.077124][ C0] __napi_poll+0xcb/0x490 [ 82.081466][ C0] net_rx_action+0x89b/0x1240 [ 82.086238][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 82.091353][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 82.096647][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.102986][ C0] handle_softirqs+0x2c5/0x980 [ 82.107755][ C0] ? do_softirq+0x11b/0x1e0 [ 82.112262][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 82.117553][ C0] do_softirq+0x11b/0x1e0 [ 82.121887][ C0] [ 82.124820][ C0] [ 82.127750][ C0] ? __pfx_do_softirq+0x10/0x10 [ 82.132600][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 82.138323][ C0] ? pppoe_sendmsg+0xd5/0x750 [ 82.143007][ C0] ? rcu_is_watching+0x15/0xb0 [ 82.147781][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 82.152983][ C0] ? pppoe_sendmsg+0xd5/0x750 [ 82.157731][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 82.163474][ C0] pppoe_sendmsg+0xd5/0x750 [ 82.167984][ C0] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 82.173095][ C0] __sock_sendmsg+0x221/0x270 [ 82.177776][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 82.182547][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.187854][ C0] ? rcu_is_watching+0x15/0xb0 [ 82.193052][ C0] ? __might_fault+0xaa/0x120 [ 82.197739][ C0] __sys_sendmmsg+0x3ab/0x730 [ 82.202441][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.207655][ C0] ? try_to_wake_up+0x9d9/0x1480 [ 82.212607][ C0] ? __pfx_lock_release+0x10/0x10 [ 82.217817][ C0] ? wake_up_q+0xdc/0x120 [ 82.222150][ C0] ? futex_wake+0x523/0x5c0 [ 82.227096][ C0] ? __pfx_futex_wake+0x10/0x10 [ 82.231954][ C0] ? sock_do_ioctl+0x1d4/0x460 [ 82.236814][ C0] ? __pfx_sock_do_ioctl+0x10/0x10 [ 82.241931][ C0] ? do_futex+0x392/0x560 [ 82.246270][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.252255][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.258592][ C0] ? do_syscall_64+0x100/0x230 [ 82.263363][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 82.268219][ C0] do_syscall_64+0xf3/0x230 [ 82.272726][ C0] ? clear_bhb_loop+0x35/0x90 [ 82.277411][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.283307][ C0] RIP: 0033:0x7f936af7df39 [ 82.287724][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.307416][ C0] RSP: 002b:00007f936be18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.316052][ C0] RAX: ffffffffffffffda RBX: 00007f936b135f80 RCX: 00007f936af7df39 [ 82.324049][ C0] RDX: 0400000000000026 RSI: 0000000020001cc0 RDI: 0000000000000005 [ 82.332022][ C0] RBP: 00007f936aff0216 R08: 0000000000000000 R09: 0000000000000000 [ 82.339992][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.347962][ C0] R13: 0000000000000000 R14: 00007f936b135f80 R15: 00007f936b25fa28 [ 82.355944][ C0] [ 82.359072][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.368254][ T5513] CPU: 1 UID: 0 PID: 5513 Comm: syz.4.81 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 82.368286][ T5513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.368300][ T5513] Call Trace: [ 82.368308][ T5513] [ 82.368317][ T5513] dump_stack_lvl+0x241/0x360 [ 82.368351][ T5513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.368378][ T5513] ? __pfx__printk+0x10/0x10 [ 82.368406][ T5513] ? snprintf+0xda/0x120 [ 82.368437][ T5513] should_fail_ex+0x3b0/0x4e0 [ 82.368468][ T5513] _copy_to_user+0x2f/0xb0 [ 82.368496][ T5513] simple_read_from_buffer+0xca/0x150 [ 82.368530][ T5513] proc_fail_nth_read+0x1e9/0x250 [ 82.368564][ T5513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.368596][ T5513] ? bpf_lsm_file_permission+0x9/0x10 [ 82.368629][ T5513] ? security_file_permission+0x74/0x280 [ 82.368660][ T5513] ? rw_verify_area+0x55e/0x6f0 [ 82.368691][ T5513] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 82.368724][ T5513] vfs_read+0x201/0xbc0 [ 82.368754][ T5513] ? __pfx_lock_release+0x10/0x10 [ 82.368789][ T5513] ? __pfx_vfs_read+0x10/0x10 [ 82.368823][ T5513] ? __fget_files+0x3f3/0x470 [ 82.368870][ T5513] ? fdget_pos+0x24e/0x320 [ 82.368893][ T5513] ksys_read+0x183/0x2b0 [ 82.368924][ T5513] ? __pfx_ksys_read+0x10/0x10 [ 82.368954][ T5513] ? rcu_is_watching+0x15/0xb0 [ 82.368977][ T5513] ? rcu_is_watching+0x15/0xb0 [ 82.369001][ T5513] do_syscall_64+0xf3/0x230 [ 82.369027][ T5513] ? clear_bhb_loop+0x35/0x90 [ 82.369055][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.369097][ T5513] RIP: 0033:0x7fa69917c97c [ 82.369117][ T5513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 82.369135][ T5513] RSP: 002b:00007fa69a018030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 82.369164][ T5513] RAX: ffffffffffffffda RBX: 00007fa699335f80 RCX: 00007fa69917c97c [ 82.369181][ T5513] RDX: 000000000000000f RSI: 00007fa69a0180a0 RDI: 0000000000000004 [ 82.369196][ T5513] RBP: 00007fa69a018090 R08: 0000000000000000 R09: 0000000000000000 [ 82.369211][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.369225][ T5513] R13: 0000000000000000 R14: 00007fa699335f80 R15: 00007fa69945fa28 [ 82.369248][ T5513] [ 82.408442][ T937] cfg80211: failed to load regulatory.db [ 82.427936][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 82.540062][ T8] usb 4-1: USB disconnect, device number 4