last executing test programs: 31.411891334s ago: executing program 1 (id=95): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES16, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x4, 0x0, 0x0, &(0x7f0000000040)="de", 0x1}) 28.818372052s ago: executing program 1 (id=97): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x6, 0x2, 0x1, 0x18102, r1, 0x1ff, '\x00', 0x0, r0, 0x2, 0x4, 0x0, 0xf, @value=r1, @void, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0xee01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x11, "00000100000000000874e4bf7fb3a6835b76e252922cb18f6e2e2aba0000040000003836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e156c5027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = socket(0xa, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000180)={0x28, 0x6, r7, r7, 0xa93, 0x0, 0x3fff}) ioctl(r5, 0x8922, &(0x7f0000000580)="3b901f8a5045f3d8384a3bde60c7001f82c397b61c6e6a903f3cc9ea7cd216c14144b2ca770316b6b30c8f0d80c94eed2beacc5c4f1d26576168f53dc5fec7c2f3ebc5e10a1f36fb3d550fcfb20f22f6dc2980d5f22d0c1045e01bdafc91923ccaeeaa493d9d6a6bbe5feeb0e7df16e5184c4f15b8635e8e5605cb090000f0c5d5a6aaf4a78cf184790f9fc9e8234f9194fa78ed89a00367f7c916228da28752a2abcd143d71e9fd2093fc93f0fcdf0b00cd2a7d1a668209dc11a0e4777d1900000000ac000000000000e8ee4a611574c3bf5ebf543f728903d1b021f2135fc4cd5c2dd0eea6f435602bbadefbf49044b69adf63e1f033845560d84b28c68f7ebdb0ae42a1cb1e333769cf56991bd8bec63a66e728d164d04d645cfd190e000021d1dd44a0422b5ff2aec3c7da4d745b60e6764ba2092e769f75db4b26f7cec519aae3114310358aed0ff1c42a358e90dbd66d0a226993f74f8e911be492e90b54620d38945f35ec76702747782be332fd066484f4b404d08fc554af03b0d24559a523d7f637e38a00e1d90e59ec288b97b1dd99e03b441370a05552ce52ccca1853d6cfd55b0fd36700000200000000000000000000fb8841035da56ddfe3e5d2cebfca824592530762067a957beeff546659be56dfb6da8d1de079da36f293082c75b8438bbec1258a84e8884c173f1a5451f9458510d10acf507d7d52bf6fe2cabe3aed28bd5b9712ada20ac7112ecfe6cef897ea89787b769bd02b95dda68fb80e2a5e7a6258bc3a06acf6a59a1322b99275fa01389b719d7fd73f64d7a3a4ee84e4d788bfed2b640193dd45b087b600eee01596a007956eb9f6e0237b4790aa7077bb124a4418689f06050d497f2ad739cb788471d19609e037e3c19ce8558ac238f5699fe2ae7c3fd6d0b6665056691a3f613fae337469d6157a94d556f2d2aa0ec89d362a68000000000000") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 23.608495935s ago: executing program 1 (id=104): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES16, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000000040)="de", 0x1}) 15.136091916s ago: executing program 2 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x101) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000500)=""/45, 0x2d) getdents64(r5, 0x0, 0x18) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 14.274531845s ago: executing program 1 (id=123): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES16, @ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r8}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r8, 0x0, &(0x7f0000000040)="de", 0x1}) 12.049321143s ago: executing program 2 (id=127): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x20000000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/73, 0x49) getdents64(r1, &(0x7f0000003ec0)=""/4110, 0x100e) unshare(0x2000400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r2, 0x4b36) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = mq_open(&(0x7f0000000480)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r3, &(0x7f0000000300)={0x800}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x619, 0x8000022, 0xffffffffffffff9c, 0x0) 11.794559784s ago: executing program 2 (id=128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 10.621510173s ago: executing program 2 (id=130): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock2(&(0x7f0000293000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.761460123s ago: executing program 2 (id=133): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000580)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff0000000110000300", 0x47}], 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x22}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x14}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0x3ff) r10 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) preadv(r10, &(0x7f0000000380)=[{&(0x7f0000000280)=""/182, 0xb6}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) 7.005558811s ago: executing program 2 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r8 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f00000002c0)={{0x32, @remote, 0x4e22, 0x2, 'rr\x00', 0xc, 0x5, 0x5e}, {@rand_addr=0x64010100, 0x4e23, 0x10000, 0x7, 0xfffffffe, 0x5}}, 0x44) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x2, 0x1, "47e6de1ba4ff2b900307276429bb8ebeca965ae5299ce3d2ef605728357fc359", 0x30364d54}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a003400020202020202000004001e01090049"], 0x70}}, 0x0) 6.425129166s ago: executing program 4 (id=142): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x800, {0x4, 0x20, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x0, 0x10, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) (fail_nth: 2) 6.13914879s ago: executing program 1 (id=144): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r2, @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="7800028038000100240001006e6f7469756e740000000000000000000000000000050003000300000497c6345471bda1e51bb56601fb9d00080004"], 0x94}}, 0x0) 5.671075293s ago: executing program 4 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES64=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x94}}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid']) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x48}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r5 = fcntl$dupfd(r3, 0x0, r4) write$FUSE_BMAP(r5, &(0x7f0000000200)={0x18, 0x0, 0x0, {0x7}}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x202, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff3, 0xfff3}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_generic(r8, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x480000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000540)=@vsock, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000003dc0)=""/174, 0xae}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f0000000380)=""/55, 0x37}], 0x6, &(0x7f0000000940)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/161, 0xa1}], 0x2, &(0x7f0000002a00)=""/119, 0x77}, 0x43}, {{&(0x7f0000002a80)=@phonet, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b00)=""/120, 0x78}, {&(0x7f0000002b80)=""/195, 0xc3}, {&(0x7f0000002c80)=""/24, 0x18}], 0x3, &(0x7f0000002d00)=""/4096, 0x1000}, 0x1}], 0x3, 0x0, 0x0) write$sequencer(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="8105000000210000"], 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) 5.280053066s ago: executing program 3 (id=146): r0 = syz_open_dev$vim2m(&(0x7f0000000480), 0x8, 0x2) r1 = userfaultfd(0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000140)="f2fafe1540ab320a349c6248980b7b25ad883976a4921667599d1f25d0e1edeecb1933ff900c6eb2178f0039db5127a96b897b6d5ede25742542b547d7bb2ace25a8f18fc84c2c3f8538ac717c22d7", &(0x7f00000001c0)=@buf="ec558ae9183920abfebf75e8963ef77b2c4eb463378ffe3c807748cb39a8c7ab750ef91ee55124d4803b9f94dbbfa999745bca6a8d09b0e1a110bb79bec0c38bd087e91595071e8037e0d23e23481223b4665fa1e5a85323dd1101fc5bf3b1cc385958c8573cb60c2d9a3d0d83edabf8ef427ec7ffbe231ceb5d04d1bf863a09e93dc4af9cd4e39a076b370b606603ec451dd6564cc2d5e59ad441524757c3731bbd76e851f68da383e2dccb1000d8a376ad45bd00a7236595b477d5748c41b5c262f9b395e29c592364d8df746372c2ea932851ac1131574c8bedfd83f0687c573bb629d13a0d84918aee25292c35fcdf4d", 0x4}, 0x20) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000002480)={{&(0x7f0000c13000/0x1000)=nil, 0x1000}, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3d, 0x2, 0x3, "11010000020027ee005b49f02b0000ff5eff0000000000004a00"}) 5.131058428s ago: executing program 3 (id=147): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x4c, r0, 0x0, 0x0, 0x1}}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) clock_settime(0x5, &(0x7f00000007c0)) 5.068800648s ago: executing program 3 (id=148): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x5452, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@my=0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cff0100", @ANYRES16=r8, @ANYBLOB="01000000000000000000100000000800010090bbc411d0976cd0190885769175e567072d7437eca379a8c8952648040e3b743b2edd7f4a0f3ad1851a509d30000940a2ebeb3e71584415ac4af4e59426bbcc9a01bab41fbb2a1ad57182dd", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host}) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000340)="d260bc9c31ebfd7dd27a99f4b9e7477d9e8023294a96807dcfc486dc88f6030d6bce7527a658b109a424ac55253d3d5dd63b0da9c5ad0e1455f0457cc66d0ab84c", 0x41, 0x0) 4.863874761s ago: executing program 1 (id=149): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x5452, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000300)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@my=0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(0x0, r7) sendmsg$NFC_CMD_LLC_SET_PARAMS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2cff0100", @ANYRES16=r8, @ANYBLOB="01000000000000000000100000000800010090bbc411d0976cd0190885769175e567072d7437eca379a8c8952648040e3b743b2edd7f4a0f3ad1851a509d30000940a2ebeb3e71584415ac4af4e59426bbcc9a01bab41fbb2a1ad57182dd", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@host}) keyctl$revoke(0x3, 0x0) add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000340)="d260bc9c31ebfd7dd27a99f4b9e7477d9e8023294a96807dcfc486dc88f6030d6bce7527a658b109a424ac55253d3d5dd63b0da9c5ad0e1455f0457cc66d0ab84c", 0x41, 0x0) 4.489043867s ago: executing program 4 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000100), 0x4) open_tree(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x101) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000500)=""/45, 0x2d) getdents64(r6, 0x0, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 3.859511038s ago: executing program 0 (id=152): unshare(0x2a020400) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$P9_RGETATTR(r0, &(0x7f0000002300)={0xa0}, 0xa0) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) (fail_nth: 2) 3.676864866s ago: executing program 3 (id=153): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f000001bec0)=""/102381, 0x18fed}], 0x1, 0x3, 0xfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = socket$unix(0x1, 0x1, 0x0) ioctl(r2, 0x8b01, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x25}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r3, 0x0, 0x67, 0x63, &(0x7f0000000400)="8a0e51084671935b4132b0facbd2e726e6c1607bbc5c9fe7edaf4509cb1bceabda771af58e3ccfcb80e8626d07631f265618ee0bb3aa1db2fa1abe712c5b91ad3f18e6947d8a7af2464fadeda208238f9d43dbe82225536dabf7319d358fa6e1072669630b3420", &(0x7f0000000080)=""/99, 0x8, 0x0, 0x16d, 0x137, &(0x7f00000007c0)="0864b1b982ef2667b60013f318087dfc8661d1ddb40bd96578d39e2836a477769b7c6b7486d1aad4ed11b57e9fcd13e86c2aacf4945c7b4356db96e6f984b1051ef28d04a811c69f80c7356996ebf9965946e6f07dd15f136f655cd57a8ec5f9bdf94509b0d167c785ac4e8d05f9023b801205c657da5da108deb469a940cf7d7c0d8f5d5eb9065c3db9339100eb0c4e65894ff4444d37f63ba54bf7c3bda023567a0b13513e48c39cd6526a35d85992392aa6aeb4b1242fdb06a8b981b613371e8461b3083c30fa46646c614ee183474336de01e72ac4e4aa407415d0584660cc3a453425052f372787e88882c8af3223a2cd05dca1449d806b0a9589ce4f29ab59efca2a670f597215cb859e72378e3c1125c773884ed410600e174348a3c21d6ba4de2d768e40b7ba5520b80c8ab6150dab4de9e2c5170047eee9f6343a87e8fd1b466ff7526010ddc01f01e7e98cf4768367653a611d13c4596a5bad94ed095e997e33993f51ae075869e8", &(0x7f00000002c0)="9a51b41058dcbec47e149a13fca778df8aff2a59e9618b4d10cd93f48cdf67a2b96a98d43e25762a531b89d523326fb03e3158fe0b7eab32fde5f121e8bd9cf5c277d9d17f2a44731c322f20224f5572737240f7e7e8e34b86ca954be9951db93001546000bdf0d6e3e3b5d5f87a24aca2336de7587d57ab2b069d12c082d6f4638f4f5dbc6496b2f37cb64fd4007436bf71488e21c9b5329ce3e21680cbf417ba3c1c0a1f330431cc798bbabcd7331c705b786d1f9c62d5052a09312b077da47cac2a860888e5cc1e9c30023a5927cc609a552782304480c295d1377979d227b0ad4f61e29dc79c34de429750e7f5c486f26e47bf946918db8d15834f58ec8f40887c0ec7a9048a6bf786d1628f5bf43f822246cd357f50482538c4c46c7c4d1a5fb554c553181ce3361fa47a0c7e976939a700000000", 0x2, 0x0, 0x8}, 0x50) mprotect(&(0x7f000028f000/0x4000)=nil, 0x4000, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r6, 0x2ff8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r7, 0x1005) chdir(&(0x7f00000001c0)='./file0\x00') io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 3.088573803s ago: executing program 4 (id=154): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b80)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000800000fb00000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = io_uring_setup(0x30d3, &(0x7f00000000c0)) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040), 0x4) connect$qrtr(r6, &(0x7f0000000200), 0xc) read(r6, &(0x7f0000000540)=""/67, 0x43) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x8, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000040)=0x40000006, 0x4) recvmmsg(r4, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/174, 0xae}, 0x80}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xc004, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x40}, 0x1c) 2.855818533s ago: executing program 0 (id=155): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0xfffffffc}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}}, 0x0) 2.765354641s ago: executing program 4 (id=156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.588955542s ago: executing program 3 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) (fail_nth: 2) 1.666524748s ago: executing program 0 (id=158): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x4c, r0, 0x0, 0x0, 0x1}}, 0x20) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fsopen(&(0x7f0000000240)='btrfs\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) clock_settime(0x5, &(0x7f00000007c0)) 1.589301428s ago: executing program 4 (id=159): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x54, 0x75, 0x4e, 0x8, 0x5ac, 0x5b13, 0x9239, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xfd, 0x1}}]}}]}}, 0x0) io_uring_setup(0x2a0c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 1.247963303s ago: executing program 0 (id=160): getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x6, 0x1c, 0x0, 0x20000000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/73, 0x49) getdents64(r1, &(0x7f0000003ec0)=""/4110, 0x100e) unshare(0x2000400) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r2, 0x4b36) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = mq_open(&(0x7f0000000480)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r3, &(0x7f0000000300)={0x800}, 0x0) r4 = fanotify_init(0x0, 0x0) fanotify_mark(r4, 0x619, 0x8000022, 0xffffffffffffff9c, 0x0) 985.095502ms ago: executing program 0 (id=161): r0 = socket(0x10, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) syz_emit_ethernet(0x32, &(0x7f0000000440)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800c271498d96049e06e4b4000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x48, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3e0}, {&(0x7f0000000280)=""/85, 0x1144}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x5c9}, {&(0x7f00000007c0)=""/154, 0x28}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 891.154183ms ago: executing program 3 (id=162): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/239, 0xef) read$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000580)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff0000000110000300", 0x47}], 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x50, r5, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x22}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x14}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) splice(r6, 0x0, r3, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000180)=0x3ff) r10 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) preadv(r10, &(0x7f0000000380)=[{&(0x7f0000000280)=""/182, 0xb6}], 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) 0s ago: executing program 0 (id=163): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x14100) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f000001a480)={{r0}, "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"}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)='\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) kernel console output (not intermixed with test programs): dding VLAN 0 to HW filter on device team0 [ 85.387258][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.405311][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.413733][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.426691][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.436412][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.476160][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.515854][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.526422][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.571873][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.581535][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.586442][ T5229] Bluetooth: hci0: command tx timeout [ 85.600679][ T5225] Bluetooth: hci4: command tx timeout [ 85.603673][ T5224] Bluetooth: hci2: command tx timeout [ 85.642651][ T5234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.656324][ T5224] Bluetooth: hci1: command tx timeout [ 85.656402][ T5229] Bluetooth: hci3: command tx timeout [ 85.708903][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.771157][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.778622][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.805872][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.834478][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.841891][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.880346][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.916979][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.960101][ T5218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.972959][ T5218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.010111][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.017334][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.040750][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.047941][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.112076][ T5219] veth0_vlan: entered promiscuous mode [ 86.198801][ T5219] veth1_vlan: entered promiscuous mode [ 86.225647][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.238265][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.398897][ T5220] veth0_vlan: entered promiscuous mode [ 86.424460][ T5219] veth0_macvtap: entered promiscuous mode [ 86.436095][ T5220] veth1_vlan: entered promiscuous mode [ 86.454307][ T5234] veth0_vlan: entered promiscuous mode [ 86.467731][ T5219] veth1_macvtap: entered promiscuous mode [ 86.480376][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.505012][ T5234] veth1_vlan: entered promiscuous mode [ 86.526196][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.564404][ T5220] veth0_macvtap: entered promiscuous mode [ 86.585884][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.614242][ T5220] veth1_macvtap: entered promiscuous mode [ 86.655815][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.665429][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.676092][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.685751][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.728475][ T5234] veth0_macvtap: entered promiscuous mode [ 86.749093][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.761825][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.775858][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.786926][ T5234] veth1_macvtap: entered promiscuous mode [ 86.805365][ T5218] veth0_vlan: entered promiscuous mode [ 86.814188][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.828494][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.842980][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.874705][ T5220] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.888767][ T5220] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.899068][ T5220] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.909664][ T5220] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.929648][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.951041][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.972318][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.987662][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.000204][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.014559][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.056491][ T5218] veth1_vlan: entered promiscuous mode [ 87.078447][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.102573][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.114980][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.126597][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.140060][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.177342][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.191717][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.201149][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.210305][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.274921][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.298689][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.368031][ T5218] veth0_macvtap: entered promiscuous mode [ 87.440868][ T5218] veth1_macvtap: entered promiscuous mode [ 87.458697][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.470855][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.512656][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.533731][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.544948][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.566069][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.568529][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.576878][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.593863][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.606411][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.618734][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.630627][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.649621][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.653769][ T5229] Bluetooth: hci2: command tx timeout [ 87.659776][ T5224] Bluetooth: hci0: command tx timeout [ 87.664821][ T5229] Bluetooth: hci4: command tx timeout [ 87.682075][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.699073][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.712678][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.724876][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.737767][ T5224] Bluetooth: hci1: command tx timeout [ 87.746052][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.750360][ T5224] Bluetooth: hci3: command tx timeout [ 87.761266][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.781597][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.871963][ T5218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889164][ T5218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.899328][ T5218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.915624][ T5218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.976735][ T5226] veth0_vlan: entered promiscuous mode [ 88.004208][ T2513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.031251][ T2513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.081021][ T5226] veth1_vlan: entered promiscuous mode [ 88.175818][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.200294][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.366533][ T5305] evm: overlay not supported [ 88.442802][ T29] audit: type=1804 audit(1726697687.592:2): pid=5305 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 88.471126][ T5226] veth0_macvtap: entered promiscuous mode [ 88.933161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.956473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.096920][ T5226] veth1_macvtap: entered promiscuous mode [ 89.138978][ T5308] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 89.200961][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.253248][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.344577][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.399663][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.448405][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.471293][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.514678][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.552637][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.586744][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.674355][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.733201][ T5225] Bluetooth: hci2: command tx timeout [ 89.733987][ T5229] Bluetooth: hci0: command tx timeout [ 89.739599][ T5224] Bluetooth: hci4: command tx timeout [ 89.843099][ T5224] Bluetooth: hci3: command tx timeout [ 89.849713][ T5229] Bluetooth: hci1: command tx timeout [ 89.909498][ T5315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.948798][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.451352][ T5324] Zero length message leads to an empty skb [ 90.455782][ T5321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.534873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.559516][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.588814][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.593070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.624305][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638401][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.696025][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.740049][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.767928][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.807871][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.838023][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.860352][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.923568][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.928334][ T5321] syz.3.4: attempt to access beyond end of device [ 90.928334][ T5321] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.996361][ T5321] SQUASHFS error: Failed to read block 0x0: -5 [ 91.014014][ T5321] unable to read squashfs_super_block [ 91.023793][ T5226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.038856][ T5226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.053943][ T5226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.122726][ T5226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.170269][ T5333] sched: RT throttling activated [ 93.189955][ T940] cfg80211: failed to load regulatory.db [ 93.713307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.723415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.733946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.743738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.970090][ T5309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.059741][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.125491][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.215118][ T5309] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 94.239222][ T2507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.245547][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.258977][ T5309] usb 2-1: Product: syz [ 94.268422][ T5309] usb 2-1: Manufacturer: syz [ 94.274492][ T5309] usb 2-1: SerialNumber: syz [ 94.280911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.309561][ T5309] r8152-cfgselector 2-1: Unknown version 0x0000 [ 94.316726][ T2507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.316978][ T5309] r8152-cfgselector 2-1: config 0 descriptor?? [ 94.324999][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.418067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 94.459088][ T5309] r8152-cfgselector 2-1: Unknown version 0x0000 [ 94.566513][ T5309] r8152-cfgselector 2-1: bad CDC descriptors [ 94.592722][ T940] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.622727][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 94.638399][ T5309] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 94.664632][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 94.718712][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.763479][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.788195][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 94.829029][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.849543][ T940] usb 1-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 94.862279][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.876877][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.908919][ T940] usb 1-1: Product: syz [ 94.925817][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 94.939774][ T940] usb 1-1: Manufacturer: syz [ 94.946850][ T940] usb 1-1: SerialNumber: syz [ 94.953211][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.970118][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.984268][ T940] usb 1-1: config 0 descriptor?? [ 95.001564][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.004304][ T940] ipheth 1-1:0.0: Unable to find alternate settings interface [ 95.028950][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.045838][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 95.073479][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 95.263490][ T5309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.318283][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.790584][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.842919][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.912819][ T5365] capability: warning: `syz.2.9' uses 32-bit capabilities (legacy support in use) [ 98.935368][ T5309] usb 2-1: Using ep0 maxpacket: 8 [ 99.223088][ T5310] usb 1-1: USB disconnect, device number 2 [ 99.268579][ T5309] usb 2-1: device descriptor read/all, error -71 [ 99.382001][ T9] usb 3-1: string descriptor 0 read error: -71 [ 99.404723][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.462066][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.588485][ T9] usb 3-1: can't set config #168, error -71 [ 99.658856][ T9] usb 3-1: USB disconnect, device number 2 [ 99.848014][ T5386] overlayfs: missing 'lowerdir' [ 100.756654][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.972912][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 101.108940][ T8] usb 4-1: config 17 has an invalid descriptor of length 48, skipping remainder of the config [ 101.122873][ T8] usb 4-1: config 17 has an invalid descriptor of length 48, skipping remainder of the config [ 101.136199][ T8] usb 4-1: config 17 has an invalid descriptor of length 48, skipping remainder of the config [ 101.170190][ T5390] tipc: Enabling not permitted [ 101.178309][ T5390] tipc: Enabling of bearer rejected, failed to enable media [ 101.233072][ T8] usb 4-1: config 17 has an invalid descriptor of length 48, skipping remainder of the config [ 101.259068][ T5397] netlink: 'syz.4.12': attribute type 4 has an invalid length. [ 101.288282][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 101.314301][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 101.345230][ T8] usb 4-1: SerialNumber: syz [ 101.416561][ T8] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 101.449834][ T8] usb 4-1: No valid video chain found. [ 101.522627][ T5309] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.237771][ T8] usb 4-1: USB disconnect, device number 2 [ 106.474444][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.975273][ T5309] usb 1-1: unable to read config index 0 descriptor/all [ 107.022149][ T5309] usb 1-1: can't read configurations, error -110 [ 107.060982][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.128819][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.144685][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.166341][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.183555][ T5309] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.186393][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.273742][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.295171][ T9] usb 5-1: Product: syz [ 107.299937][ T9] usb 5-1: Manufacturer: syz [ 107.310866][ T5429] netlink: 4072 bytes leftover after parsing attributes in process `syz.3.23'. [ 107.339563][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 107.347232][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 107.361590][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 107.372278][ T5429] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.565884][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 107.583309][ T5309] usb 1-1: device descriptor read/64, error -32 [ 110.063022][ T5309] usb usb1-port1: attempt power cycle [ 110.171186][ T25] usb 5-1: USB disconnect, device number 2 [ 110.514844][ T5309] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.709415][ T5309] usb 1-1: device descriptor read/8, error -32 [ 110.984329][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.902862][ T5309] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.984346][ T5309] usb 1-1: device descriptor read/8, error -32 [ 114.222991][ T5309] usb usb1-port1: unable to enumerate USB device [ 114.795290][ T5309] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.803502][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 114.816968][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 114.827087][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 114.871113][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 114.882562][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 114.901238][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.972984][ T5309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.087706][ T5309] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 115.436209][ T5309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.540137][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.553532][ T5461] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.572416][ T5309] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.014296][ T5224] Bluetooth: hci5: command tx timeout [ 117.147799][ T25] usb 5-1: USB disconnect, device number 3 [ 117.674304][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.687647][ T2550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.713341][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.728006][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.754578][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.769159][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 117.792720][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.851170][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.870082][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.881893][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.895344][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.920995][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 117.943073][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.085800][ T2550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.185969][ T5468] chnl_net:caif_netlink_parms(): no params data found [ 118.257522][ T2550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.458291][ T2550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.553240][ T5329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.706090][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.719336][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.730818][ T5468] bridge_slave_0: entered allmulticast mode [ 118.760203][ T5468] bridge_slave_0: entered promiscuous mode [ 118.795142][ T5329] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 118.810714][ T5329] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 118.823319][ T5329] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 118.833602][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.853939][ T5494] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 118.892304][ T5329] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.900724][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.929217][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.943041][ T5468] bridge_slave_1: entered allmulticast mode [ 118.965411][ T5468] bridge_slave_1: entered promiscuous mode [ 119.093017][ T5229] Bluetooth: hci5: command tx timeout [ 119.151996][ T5468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.235136][ T5468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.367656][ T2550] bridge_slave_1: left allmulticast mode [ 119.394291][ T2550] bridge_slave_1: left promiscuous mode [ 119.413220][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.474480][ T9] usb 5-1: USB disconnect, device number 4 [ 119.535107][ T2550] bridge_slave_0: left allmulticast mode [ 119.542782][ T2550] bridge_slave_0: left promiscuous mode [ 119.549037][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.903336][ T5229] Bluetooth: hci0: command tx timeout [ 119.957809][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 120.061028][ T5229] Bluetooth: hci1: command tx timeout [ 120.542677][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.591192][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.628972][ T2550] bond0 (unregistering): Released all slaves [ 120.679537][ T5468] team0: Port device team_slave_0 added [ 120.821184][ T5468] team0: Port device team_slave_1 added [ 120.872761][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.057585][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.133908][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.149239][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.158900][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.170039][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.173003][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.217318][ T5229] Bluetooth: hci5: command tx timeout [ 121.240438][ T5468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.256775][ T5506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.271563][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.355614][ T5468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.399511][ T5468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.457329][ T5468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.550539][ T5488] chnl_net:caif_netlink_parms(): no params data found [ 121.593887][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.693298][ T5486] chnl_net:caif_netlink_parms(): no params data found [ 121.752670][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 121.761951][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 121.791642][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.813065][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.828645][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.834433][ T5274] usb 2-1: USB disconnect, device number 5 [ 121.844008][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.867140][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 121.876128][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.899838][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.915651][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.934605][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.952608][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 121.960374][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.981213][ T5229] Bluetooth: hci0: command tx timeout [ 122.022645][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.052713][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.068043][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.094149][ T9] usb 5-1: string descriptor 0 read error: -22 [ 122.108390][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 122.132661][ T5229] Bluetooth: hci1: command tx timeout [ 122.142665][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.152023][ T5468] hsr_slave_0: entered promiscuous mode [ 122.182199][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 122.194968][ T5468] hsr_slave_1: entered promiscuous mode [ 122.211986][ T5468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.237318][ T5468] Cannot create hsr debugfs directory [ 122.344926][ T2550] hsr_slave_0: left promiscuous mode [ 122.396079][ T2550] hsr_slave_1: left promiscuous mode [ 122.407943][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.435076][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.480784][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.502122][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.586179][ T2550] veth1_macvtap: left promiscuous mode [ 122.613173][ T2550] veth0_macvtap: left promiscuous mode [ 122.632827][ T2550] veth1_vlan: left promiscuous mode [ 122.641277][ T2550] veth0_vlan: left promiscuous mode [ 123.265559][ T5229] Bluetooth: hci5: command tx timeout [ 123.521406][ T5329] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.706171][ T5329] usb 2-1: Using ep0 maxpacket: 32 [ 123.729414][ T2550] team0 (unregistering): Port device team_slave_1 removed [ 123.745985][ T5329] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 123.778158][ T5329] usb 2-1: config 0 has no interface number 0 [ 123.786121][ T5329] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 123.799609][ T5329] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 123.839116][ T5329] usb 2-1: config 0 interface 126 has no altsetting 0 [ 123.866098][ T5329] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.32 [ 123.882043][ T2550] team0 (unregistering): Port device team_slave_0 removed [ 123.905550][ T5329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.915065][ T5329] usb 2-1: Product: syz [ 123.928683][ T5329] usb 2-1: Manufacturer: syz [ 123.936850][ T5329] usb 2-1: SerialNumber: syz [ 123.944486][ T5329] usb 2-1: config 0 descriptor?? [ 123.956520][ T5536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.965656][ T5536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 124.052909][ T5229] Bluetooth: hci0: command tx timeout [ 124.222827][ T5229] Bluetooth: hci1: command tx timeout [ 124.356533][ T5274] usb 5-1: USB disconnect, device number 5 [ 125.241884][ T5486] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.275085][ T5486] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.302961][ T5486] bridge_slave_0: entered allmulticast mode [ 125.329140][ T5486] bridge_slave_0: entered promiscuous mode [ 125.340872][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.368684][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.382305][ T5488] bridge_slave_0: entered allmulticast mode [ 125.392004][ T5488] bridge_slave_0: entered promiscuous mode [ 125.438500][ T5486] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.448588][ T5486] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.487018][ T5486] bridge_slave_1: entered allmulticast mode [ 125.504232][ T5486] bridge_slave_1: entered promiscuous mode [ 125.517494][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.891276][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.904393][ T5488] bridge_slave_1: entered allmulticast mode [ 125.920849][ T5488] bridge_slave_1: entered promiscuous mode [ 126.831889][ T5229] Bluetooth: hci0: command tx timeout [ 126.839732][ T5229] Bluetooth: hci1: command tx timeout [ 127.096966][ T5329] ir_usb 2-1:0.126: IR Dongle converter detected [ 127.140567][ T5329] usb 2-1: IRDA class descriptor not found, device not bound [ 127.326446][ T5329] usb 2-1: USB disconnect, device number 6 [ 127.489036][ T5486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.566246][ T5486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.621617][ T5488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.683723][ T5488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.289613][ T5329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.368672][ T5486] team0: Port device team_slave_0 added [ 128.402857][ T5580] netlink: 4072 bytes leftover after parsing attributes in process `syz.4.42'. [ 128.416045][ T5580] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.529182][ T5486] team0: Port device team_slave_1 added [ 128.600586][ T5488] team0: Port device team_slave_0 added [ 128.673551][ T5329] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.851098][ T5329] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.953494][ T5329] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.003389][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.024839][ T5488] team0: Port device team_slave_1 added [ 129.047728][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.087966][ T5568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 129.097454][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.157757][ T5329] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.242729][ T5486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.681515][ T5486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.737196][ T5486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.747606][ T5274] usb 2-1: USB disconnect, device number 7 [ 129.850230][ T5486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.945761][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.962779][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.003346][ T5488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.103863][ T5486] hsr_slave_0: entered promiscuous mode [ 130.121898][ T5486] hsr_slave_1: entered promiscuous mode [ 130.170791][ T2550] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.188582][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.198475][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.230986][ T5488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.312334][ T2550] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.415177][ T2550] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.610659][ T2550] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.745542][ T5488] hsr_slave_0: entered promiscuous mode [ 130.760253][ T5488] hsr_slave_1: entered promiscuous mode [ 130.773543][ T5488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.788112][ T5488] Cannot create hsr debugfs directory [ 131.065948][ T5468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.083580][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.384636][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 131.431084][ T5468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.519030][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 131.572876][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.631204][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.670118][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.704531][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 131.732990][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 131.781885][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 131.830715][ T5468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.853100][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.883755][ T5468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.901025][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 132.108318][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 132.126245][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 132.137569][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 132.155390][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 132.176132][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 136.325595][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.412876][ T9] usb 2-1: string descriptor 0 read error: -71 [ 136.426059][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.437913][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.482718][ T9] usb 2-1: can't set config #168, error -71 [ 136.500444][ T9] usb 2-1: USB disconnect, device number 8 [ 136.527679][ T5620] FAULT_INJECTION: forcing a failure. [ 136.527679][ T5620] name failslab, interval 1, probability 0, space 0, times 1 [ 136.562930][ T5620] CPU: 1 UID: 0 PID: 5620 Comm: syz.1.47 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 136.574155][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 136.589263][ T5620] Call Trace: [ 136.594320][ T5620] [ 136.597652][ T5620] dump_stack_lvl+0x241/0x360 [ 136.603387][ T5620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.609883][ T5620] ? __pfx__printk+0x10/0x10 [ 136.616289][ T5620] ? get_random_u32+0x1a3/0xab0 [ 136.622245][ T5620] ? get_random_u32+0x59a/0xab0 [ 136.627542][ T5620] ? get_random_u32+0x1a3/0xab0 [ 136.633779][ T5620] should_fail_ex+0x3b0/0x4e0 [ 136.639079][ T5620] should_failslab+0xac/0x100 [ 136.644876][ T5620] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 136.653471][ T5620] ? ip6_fraglist_init+0xb4/0x9a0 [ 136.659395][ T5620] kmemdup_noprof+0x2a/0x60 [ 136.667472][ T5620] ip6_fraglist_init+0xb4/0x9a0 [ 136.674618][ T5620] ip6_fragment+0x10c8/0x22c0 [ 136.679839][ T5620] ? __pfx_ip6_finish_output2+0x10/0x10 [ 136.687660][ T5620] ? __pfx_ip6_fragment+0x10/0x10 [ 136.693984][ T5620] ? __pfx_lock_release+0x10/0x10 [ 136.699245][ T5620] ? nf_hook+0x9e/0x450 [ 136.706349][ T5620] ? __ip6_local_out+0x7c1/0x800 [ 136.711761][ T5620] ? ip6_mtu+0x81/0x3f0 [ 136.717557][ T5620] ip6_finish_output+0x2b8/0x810 [ 136.724304][ T5620] ip6_send_skb+0x1b1/0x3b0 [ 136.730051][ T5620] ? ip6_send_skb+0xfd/0x3b0 [ 136.735705][ T5620] udp_v6_send_skb+0xbf5/0x1870 [ 136.741681][ T5620] udp_v6_push_pending_frames+0x139/0x210 [ 136.749676][ T5620] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 136.757027][ T5620] udp_lib_setsockopt+0x654/0xc10 [ 136.763090][ T5620] ? __pfx_udp_lib_setsockopt+0x10/0x10 [ 136.770188][ T5620] ? __pfx_lock_acquire+0x10/0x10 [ 136.776442][ T5620] udpv6_setsockopt+0x73/0xb0 [ 136.781699][ T5620] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 136.790822][ T5620] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.797767][ T5620] do_sock_setsockopt+0x3af/0x720 [ 136.805581][ T5620] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 136.813489][ T5620] ? __fget_files+0x29/0x470 [ 136.819371][ T5620] ? __fget_files+0x3f3/0x470 [ 136.825184][ T5620] ? __fget_files+0x29/0x470 [ 136.830824][ T5620] __sys_setsockopt+0x1a8/0x250 [ 136.836531][ T5620] __x64_sys_setsockopt+0xb5/0xd0 [ 136.841977][ T5620] do_syscall_64+0xf3/0x230 [ 136.848306][ T5620] ? clear_bhb_loop+0x35/0x90 [ 136.853618][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.863506][ T5620] RIP: 0033:0x7fedcc37def9 [ 136.868503][ T5620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.892780][ T5620] RSP: 002b:00007fedcd1ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.902394][ T5620] RAX: ffffffffffffffda RBX: 00007fedcc535f80 RCX: 00007fedcc37def9 [ 136.914857][ T5620] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003 [ 136.925620][ T5620] RBP: 00007fedcd1ef090 R08: 0000000000000004 R09: 0000000000000000 [ 136.934889][ T5620] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 136.944425][ T5620] R13: 0000000000000000 R14: 00007fedcc535f80 R15: 00007fff20ee5db8 [ 136.955803][ T5620] [ 137.315148][ T2550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.551672][ T2550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.701377][ T2550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.790735][ T5646] kvm: emulating exchange as write [ 137.945375][ T2550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.200992][ T5468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.583780][ T5468] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.628613][ T2550] bridge_slave_1: left allmulticast mode [ 138.642808][ T2550] bridge_slave_1: left promiscuous mode [ 138.675909][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.724564][ T2550] bridge_slave_0: left allmulticast mode [ 138.733386][ T2550] bridge_slave_0: left promiscuous mode [ 138.743938][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.774859][ T2550] bridge_slave_1: left allmulticast mode [ 138.781299][ T2550] bridge_slave_1: left promiscuous mode [ 138.793446][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.821298][ T2550] bridge_slave_0: left allmulticast mode [ 138.829771][ T2550] bridge_slave_0: left promiscuous mode [ 138.841099][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.861022][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.875246][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.932909][ T5309] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 139.098196][ T5309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.127320][ T5309] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 139.191959][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.236361][ T5309] usb 5-1: config 0 descriptor?? [ 139.712770][ T5309] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 140.284223][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.306952][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.784770][ T5221] usb 5-1: USB disconnect, device number 6 [ 141.043875][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.087862][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.107077][ T2550] bond0 (unregistering): Released all slaves [ 141.281315][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.299004][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.315179][ T2550] bond0 (unregistering): Released all slaves [ 141.454451][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.462641][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.505797][ T5488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.738569][ T5488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.663970][ T5488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.710917][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.719934][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.840160][ T5488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.720385][ T2550] hsr_slave_0: left promiscuous mode [ 143.744089][ T2550] hsr_slave_1: left promiscuous mode [ 143.752668][ T5277] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 143.761339][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.779914][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.835837][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.865212][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.921187][ T2550] hsr_slave_0: left promiscuous mode [ 143.937725][ T2550] hsr_slave_1: left promiscuous mode [ 143.946065][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 143.953874][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.960695][ T5277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 143.974721][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.987577][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 143.988479][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.003717][ T5277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.003839][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.048996][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.078229][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.095027][ T2550] veth1_macvtap: left promiscuous mode [ 144.097809][ T5277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 144.111904][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.112178][ T2550] veth0_macvtap: left promiscuous mode [ 144.128161][ T5277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.146887][ T2550] veth1_vlan: left promiscuous mode [ 144.151372][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.158256][ T2550] veth0_vlan: left promiscuous mode [ 144.176684][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.196301][ T2550] veth1_macvtap: left promiscuous mode [ 144.206332][ T2550] veth0_macvtap: left promiscuous mode [ 144.209126][ T5277] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 144.212196][ T2550] veth1_vlan: left promiscuous mode [ 144.220112][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.236057][ T2550] veth0_vlan: left promiscuous mode [ 144.243043][ T5277] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.262035][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.274400][ T5277] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.318455][ T5277] usb 5-1: string descriptor 0 read error: -22 [ 144.326991][ T5277] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.337630][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.387126][ T5277] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 145.881236][ T2550] team0 (unregistering): Port device team_slave_1 removed [ 146.017637][ T2550] team0 (unregistering): Port device team_slave_0 removed [ 146.501451][ T5277] usb 5-1: USB disconnect, device number 7 [ 147.744533][ T2550] team0 (unregistering): Port device team_slave_1 removed [ 147.831627][ T2550] team0 (unregistering): Port device team_slave_0 removed [ 148.645734][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.659630][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.673765][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.703107][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.715752][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.727449][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.479428][ T5468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.517974][ T5486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.573630][ T5486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.631988][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.727525][ T5486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.799593][ T5486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 150.070792][ T5488] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.202386][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.211151][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.333421][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.343584][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.585207][ T5468] veth0_vlan: entered promiscuous mode [ 150.710334][ T5468] veth1_vlan: entered promiscuous mode [ 150.773341][ T5229] Bluetooth: hci2: command tx timeout [ 151.079281][ T5709] chnl_net:caif_netlink_parms(): no params data found [ 153.078710][ T5229] Bluetooth: hci2: command tx timeout [ 153.155558][ T5486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.365486][ T5468] veth0_macvtap: entered promiscuous mode [ 153.489194][ T5486] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.540048][ T5468] veth1_macvtap: entered promiscuous mode [ 153.586470][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.596401][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.621088][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.756191][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.768082][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.827021][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.872779][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.912831][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.953763][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.030661][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.077289][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.110635][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.128821][ T5709] bridge_slave_0: entered allmulticast mode [ 154.159974][ T5709] bridge_slave_0: entered promiscuous mode [ 154.198346][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.420850][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.434820][ T5468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.451783][ T5468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.481390][ T5468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.549893][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.605178][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.626640][ T5709] bridge_slave_1: entered allmulticast mode [ 154.655916][ T5709] bridge_slave_1: entered promiscuous mode [ 154.675760][ T5758] netlink: 4072 bytes leftover after parsing attributes in process `syz.4.60'. [ 154.693960][ T5758] openvswitch: netlink: Actions may not be safe on all matching packets [ 154.789349][ T5468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.814906][ T5468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.826700][ T5468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.859000][ T5468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.892304][ T5709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.063801][ T5709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.177311][ T5229] Bluetooth: hci2: command tx timeout [ 155.207326][ T5488] veth0_vlan: entered promiscuous mode [ 155.428625][ T5488] veth1_vlan: entered promiscuous mode [ 155.504955][ T5709] team0: Port device team_slave_0 added [ 155.584595][ T5709] team0: Port device team_slave_1 added [ 155.759946][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.787592][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.826638][ T5709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.983622][ T5709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.992765][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.032569][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.068437][ T5709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.138210][ T5709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.287527][ T5488] veth0_macvtap: entered promiscuous mode [ 156.346177][ T5709] hsr_slave_0: entered promiscuous mode [ 156.355834][ T5709] hsr_slave_1: entered promiscuous mode [ 156.363976][ T5709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.372740][ T5709] Cannot create hsr debugfs directory [ 156.401156][ T2507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.401701][ T5488] veth1_macvtap: entered promiscuous mode [ 156.421330][ T2507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.433160][ T5486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.618069][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.666676][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.689430][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.706974][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.719529][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.734549][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.746632][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.798601][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.823471][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.838271][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.882792][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.895870][ T5764] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.921786][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.942167][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.974219][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.027555][ T5488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.064912][ T5488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.082687][ T5488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.092272][ T5488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.256919][ T5229] Bluetooth: hci2: command tx timeout [ 157.423774][ T5709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.488313][ T5771] input: syz1 as /devices/virtual/input/input5 [ 157.514251][ T5486] veth0_vlan: entered promiscuous mode [ 157.697210][ T5709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.789034][ T5486] veth1_vlan: entered promiscuous mode [ 157.936018][ T5486] veth0_macvtap: entered promiscuous mode [ 158.128699][ T5709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.246187][ T5486] veth1_macvtap: entered promiscuous mode [ 158.340564][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.482813][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.502658][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.534772][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.561206][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.589265][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.610722][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.630359][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.648348][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.696412][ T5709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.776124][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.880300][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.945399][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.963382][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.982179][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.174885][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.199738][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.238426][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.370531][ T5486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.448673][ T5486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.516719][ T5486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.642457][ T5486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.662784][ T5486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.671551][ T5486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.702413][ T5486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.836153][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.848962][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.089698][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.110540][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.315354][ T5709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 160.363913][ T5709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.403812][ T5709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.435793][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.453972][ T5709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.461005][ T5309] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 160.469465][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.653011][ T5309] usb 4-1: Using ep0 maxpacket: 8 [ 160.682837][ T5309] usb 4-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 160.717700][ T5309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.771952][ T5309] usb 4-1: Product: syz [ 160.799137][ T5309] usb 4-1: Manufacturer: syz [ 160.820347][ T5309] usb 4-1: SerialNumber: syz [ 160.864015][ T5309] usb 4-1: config 0 descriptor?? [ 160.877334][ T5309] ipheth 4-1:0.0: Unable to find alternate settings interface [ 160.918319][ T5709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.017972][ T5709] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.102066][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 161.117057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.125393][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.185151][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.192415][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.327262][ T46] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 161.337000][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.345679][ T46] usb 3-1: Product: syz [ 161.351830][ T46] usb 3-1: Manufacturer: syz [ 161.359456][ T46] usb 3-1: SerialNumber: syz [ 161.383837][ T46] r8152-cfgselector 3-1: Unknown version 0x0000 [ 161.390467][ T46] r8152-cfgselector 3-1: config 0 descriptor?? [ 161.604827][ T46] r8152-cfgselector 3-1: Unknown version 0x0000 [ 161.616677][ T46] r8152-cfgselector 3-1: bad CDC descriptors [ 162.106969][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.280047][ T5274] usb 4-1: USB disconnect, device number 3 [ 168.316882][ T5221] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 168.483007][ T5309] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.855817][ T5709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.876993][ T5221] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.052684][ T5221] usb 3-1: device descriptor read/64, error -71 [ 169.079826][ T5709] veth0_vlan: entered promiscuous mode [ 169.088813][ T5813] FAULT_INJECTION: forcing a failure. [ 169.088813][ T5813] name failslab, interval 1, probability 0, space 0, times 0 [ 169.109699][ T5709] veth1_vlan: entered promiscuous mode [ 169.116680][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: syz.4.69 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 169.126899][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.137078][ T5813] Call Trace: [ 169.140418][ T5813] [ 169.143380][ T5813] dump_stack_lvl+0x241/0x360 [ 169.148095][ T5813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.153502][ T5813] ? __pfx__printk+0x10/0x10 [ 169.158203][ T5813] ? fs_reclaim_acquire+0x93/0x140 [ 169.163508][ T5813] ? __pfx___might_resched+0x10/0x10 [ 169.169339][ T5813] should_fail_ex+0x3b0/0x4e0 [ 169.174052][ T5813] ? tomoyo_encode+0x26f/0x540 [ 169.178838][ T5813] should_failslab+0xac/0x100 [ 169.183707][ T5813] ? tomoyo_encode+0x26f/0x540 [ 169.188491][ T5813] __kmalloc_noprof+0xd8/0x400 [ 169.193277][ T5813] tomoyo_encode+0x26f/0x540 [ 169.197888][ T5813] tomoyo_realpath_from_path+0x59e/0x5e0 [ 169.203551][ T5813] tomoyo_path_number_perm+0x23a/0x880 [ 169.209308][ T5813] ? tomoyo_path_number_perm+0x208/0x880 [ 169.214973][ T5813] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.221012][ T5813] ? __fget_files+0x29/0x470 [ 169.225901][ T5813] ? __fget_files+0x3f3/0x470 [ 169.230745][ T5813] security_file_ioctl+0xc6/0x2a0 [ 169.235967][ T5813] __se_sys_ioctl+0x47/0x170 [ 169.240774][ T5813] do_syscall_64+0xf3/0x230 [ 169.245916][ T5813] ? clear_bhb_loop+0x35/0x90 [ 169.250738][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.257680][ T5813] RIP: 0033:0x7febe2b7def9 [ 169.262126][ T5813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.281941][ T5813] RSP: 002b:00007febe3a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.290560][ T5813] RAX: ffffffffffffffda RBX: 00007febe2d35f80 RCX: 00007febe2b7def9 [ 169.298555][ T5813] RDX: 0000000000000000 RSI: 0000000000005206 RDI: 0000000000000003 [ 169.307243][ T5813] RBP: 00007febe3a42090 R08: 0000000000000000 R09: 0000000000000000 [ 169.316118][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.324581][ T5813] R13: 0000000000000000 R14: 00007febe2d35f80 R15: 00007ffd3e760518 [ 169.333248][ T5813] [ 169.353989][ T5813] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.476888][ T5709] veth0_macvtap: entered promiscuous mode [ 169.482700][ T5221] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.512408][ T5815] ======================================================= [ 169.512408][ T5815] WARNING: The mand mount option has been deprecated and [ 169.512408][ T5815] and is ignored by this kernel. Remove the mand [ 169.512408][ T5815] option from the mount to silence this warning. [ 169.512408][ T5815] ======================================================= [ 169.580804][ T5709] veth1_macvtap: entered promiscuous mode [ 169.622904][ T5221] usb 3-1: device descriptor read/64, error -71 [ 169.736493][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.783029][ T5221] usb usb3-port1: attempt power cycle [ 169.819434][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.860280][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.901356][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.962585][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.999268][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.213306][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.222663][ T5221] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.384980][ T5221] usb 3-1: device descriptor read/8, error -71 [ 170.545579][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.562866][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.578887][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.608476][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.628308][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.636474][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.640786][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.687829][ T5221] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.770969][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.935427][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.951821][ T5221] usb 3-1: device descriptor read/8, error -71 [ 171.001728][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.029317][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.062653][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.083128][ T5221] usb usb3-port1: unable to enumerate USB device [ 171.110369][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.140961][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.172634][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.204886][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.241331][ T5709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.302959][ T5709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.360684][ T5709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.654381][ T5709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.728699][ T5709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.742043][ T5709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.792717][ T5709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.004588][ T5801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.550205][ T5801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.778098][ T5224] Bluetooth: hci6: command tx timeout [ 172.968842][ T5801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.104259][ T5844] FAULT_INJECTION: forcing a failure. [ 173.104259][ T5844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 173.126613][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.4.75 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 173.137687][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.148227][ T5844] Call Trace: [ 173.151824][ T5844] [ 173.155509][ T5844] dump_stack_lvl+0x241/0x360 [ 173.160806][ T5844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.167427][ T5844] ? __pfx__printk+0x10/0x10 [ 173.172493][ T5844] should_fail_ex+0x3b0/0x4e0 [ 173.177860][ T5844] prepare_alloc_pages+0x1da/0x5d0 [ 173.183971][ T5844] __alloc_pages_noprof+0x166/0x6c0 [ 173.189462][ T5844] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 173.195255][ T5844] alloc_pages_mpol_noprof+0x3e8/0x680 [ 173.200746][ T5844] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 173.206748][ T5844] ? do_raw_spin_unlock+0x13c/0x8b0 [ 173.212045][ T5844] folio_alloc_mpol_noprof+0x36/0x50 [ 173.218778][ T5844] __read_swap_cache_async+0x249/0x8c0 [ 173.224635][ T5844] ? __pfx___read_swap_cache_async+0x10/0x10 [ 173.231265][ T5844] ? blk_start_plug+0x70/0x1b0 [ 173.236146][ T5844] swap_cluster_readahead+0x392/0x800 [ 173.241843][ T5844] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 173.247872][ T5844] ? xas_load+0x59b/0x5c0 [ 173.254190][ T5844] swapin_readahead+0x1bf/0xfd0 [ 173.259266][ T5844] ? filemap_get_entry+0x123/0x3b0 [ 173.264933][ T5844] ? __pfx_swapin_readahead+0x10/0x10 [ 173.270338][ T5844] ? __filemap_get_folio+0x984/0xc10 [ 173.275827][ T5844] ? swap_cache_get_folio+0xa6/0x570 [ 173.282078][ T5844] do_swap_page+0x798/0x5b40 [ 173.287736][ T5844] ? do_raw_spin_unlock+0x13c/0x8b0 [ 173.292993][ T5844] ? rcu_is_watching+0x15/0xb0 [ 173.297790][ T5844] ? __pte_offset_map+0x2c4/0x380 [ 173.302858][ T5844] ? do_swap_page+0x151/0x5b40 [ 173.308550][ T5844] ? __pfx_do_swap_page+0x10/0x10 [ 173.314176][ T5844] ? __pfx_hlock_conflict+0x10/0x10 [ 173.320340][ T5844] ? pte_offset_map_nolock+0x137/0x1f0 [ 173.326053][ T5844] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 173.331922][ T5844] ? check_path+0x21/0x40 [ 173.336398][ T5844] ? check_noncircular+0x259/0x4a0 [ 173.341538][ T5844] handle_pte_fault+0x61f/0x6fc0 [ 173.346862][ T5844] ? __pfx_check_noncircular+0x10/0x10 [ 173.352467][ T5844] ? lockdep_unlock+0x16a/0x300 [ 173.357882][ T5844] ? __pfx_lockdep_unlock+0x10/0x10 [ 173.366638][ T5844] ? mark_lock+0x9a/0x360 [ 173.371142][ T5844] ? __pfx_handle_pte_fault+0x10/0x10 [ 173.377079][ T5844] ? mt_find+0x226/0x850 [ 173.381563][ T5844] ? __pfx_lock_release+0x10/0x10 [ 173.388906][ T5844] handle_mm_fault+0x1053/0x1ad0 [ 173.394187][ T5844] ? __pfx_handle_mm_fault+0x10/0x10 [ 173.399777][ T5844] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 173.406242][ T5844] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 173.412723][ T5844] exc_page_fault+0x2b9/0x8c0 [ 173.418170][ T5844] asm_exc_page_fault+0x26/0x30 [ 173.423639][ T5844] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 173.430840][ T5844] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 173.453799][ T5844] RSP: 0018:ffffc90002d9fbb0 EFLAGS: 00050216 [ 173.460628][ T5844] RAX: 0000000000000000 RBX: 0000000020000220 RCX: 0000000000000020 [ 173.470991][ T5844] RDX: 0000000000000000 RSI: ffff8880285b6020 RDI: 0000000020000200 [ 173.480153][ T5844] RBP: ffff8880285b6020 R08: ffff8880285b603f R09: 1ffff110050b6c07 [ 173.488809][ T5844] R10: dffffc0000000000 R11: ffffed10050b6c08 R12: 0000000000000020 [ 173.498219][ T5844] R13: 0000000000000000 R14: 0000000020000200 R15: ffff8880285b6020 [ 173.507177][ T5844] _copy_to_user+0x86/0xb0 [ 173.513322][ T5844] aio_read_events+0x322/0x6d0 [ 173.519985][ T5844] do_io_getevents+0x531/0x670 [ 173.526385][ T5844] ? __pfx_do_io_getevents+0x10/0x10 [ 173.532336][ T5844] ? __mutex_unlock_slowpath+0x21d/0x750 [ 173.540680][ T5844] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 173.548979][ T5844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.557734][ T5844] ? __pfx_autoremove_wake_function+0x10/0x10 [ 173.564295][ T5844] __se_sys_io_getevents+0xf6/0x220 [ 173.573751][ T5844] ? __pfx___se_sys_io_getevents+0x10/0x10 [ 173.581202][ T5844] ? do_syscall_64+0x100/0x230 [ 173.586531][ T5844] ? __x64_sys_io_getevents+0x20/0xc0 [ 173.593869][ T5844] do_syscall_64+0xf3/0x230 [ 173.601424][ T5844] ? clear_bhb_loop+0x35/0x90 [ 173.606926][ T5844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.615174][ T5844] RIP: 0033:0x7febe2b7def9 [ 173.620218][ T5844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.650222][ T5844] RSP: 002b:00007febe3a42038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 173.660691][ T5844] RAX: ffffffffffffffda RBX: 00007febe2d35f80 RCX: 00007febe2b7def9 [ 173.670922][ T5844] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007febe3a21000 [ 173.680357][ T5844] RBP: 00007febe3a42090 R08: 0000000000000000 R09: 0000000000000000 [ 173.690201][ T5844] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 173.698491][ T5844] R13: 0000000000000000 R14: 00007febe2d35f80 R15: 00007ffd3e760518 [ 173.706791][ T5844] [ 173.753061][ T5801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.949696][ T5849] FAULT_INJECTION: forcing a failure. [ 173.949696][ T5849] name failslab, interval 1, probability 0, space 0, times 0 [ 173.965107][ T5849] CPU: 1 UID: 0 PID: 5849 Comm: syz.2.77 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 173.976147][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.986533][ T5849] Call Trace: [ 173.990205][ T5849] [ 173.993980][ T5849] dump_stack_lvl+0x241/0x360 [ 173.998726][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.003994][ T5849] ? __pfx__printk+0x10/0x10 [ 174.008658][ T5849] ? __kmalloc_noprof+0xb0/0x400 [ 174.017664][ T5849] ? __pfx___might_resched+0x10/0x10 [ 174.024585][ T5849] should_fail_ex+0x3b0/0x4e0 [ 174.032127][ T5849] ? alloc_pipe_info+0x1ff/0x4d0 [ 174.041602][ T5849] should_failslab+0xac/0x100 [ 174.047090][ T5849] ? alloc_pipe_info+0x1ff/0x4d0 [ 174.052349][ T5849] __kmalloc_noprof+0xd8/0x400 [ 174.058424][ T5849] alloc_pipe_info+0x1ff/0x4d0 [ 174.064148][ T5849] splice_direct_to_actor+0xa9e/0xc80 [ 174.071176][ T5849] ? __pfx_direct_splice_actor+0x10/0x10 [ 174.076993][ T5849] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 174.085049][ T5849] ? __fget_files+0x29/0x470 [ 174.089890][ T5849] ? __pfx_lock_release+0x10/0x10 [ 174.095841][ T5849] do_splice_direct+0x289/0x3e0 [ 174.100837][ T5849] ? __pfx_do_splice_direct+0x10/0x10 [ 174.107018][ T5849] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 174.113307][ T5849] ? bpf_lsm_file_permission+0x9/0x10 [ 174.119047][ T5849] ? security_file_permission+0x74/0x280 [ 174.128053][ T5849] ? rw_verify_area+0x1c3/0x6f0 [ 174.133027][ T5849] do_sendfile+0x561/0xe10 [ 174.137916][ T5849] ? __pfx_do_sendfile+0x10/0x10 [ 174.142913][ T5849] __se_sys_sendfile64+0x17c/0x1e0 [ 174.148147][ T5849] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 174.154359][ T5849] ? do_syscall_64+0x100/0x230 [ 174.159432][ T5849] ? do_syscall_64+0xb6/0x230 [ 174.164361][ T5849] do_syscall_64+0xf3/0x230 [ 174.170206][ T5849] ? clear_bhb_loop+0x35/0x90 [ 174.175692][ T5849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.181692][ T5849] RIP: 0033:0x7f1dfbd7def9 [ 174.186135][ T5849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.205946][ T5849] RSP: 002b:00007f1dfcb57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.214479][ T5849] RAX: ffffffffffffffda RBX: 00007f1dfbf35f80 RCX: 00007f1dfbd7def9 [ 174.222560][ T5849] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 174.231070][ T5849] RBP: 00007f1dfcb57090 R08: 0000000000000000 R09: 0000000000000000 [ 174.239093][ T5849] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 174.248782][ T5849] R13: 0000000000000000 R14: 00007f1dfbf35f80 R15: 00007ffd62d5c438 [ 174.256998][ T5849] [ 174.305738][ T5852] netlink: 'syz.4.78': attribute type 1 has an invalid length. [ 174.334459][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 174.362908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.392711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.659534][ T5801] bridge_slave_1: left allmulticast mode [ 174.686494][ T5801] bridge_slave_1: left promiscuous mode [ 174.706952][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.786844][ T5801] bridge_slave_0: left allmulticast mode [ 174.813361][ T5801] bridge_slave_0: left promiscuous mode [ 174.854184][ T5224] Bluetooth: hci6: command tx timeout [ 174.870782][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.945230][ T5869] FAULT_INJECTION: forcing a failure. [ 174.945230][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 174.965213][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.3.84 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 174.975525][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.985715][ T5869] Call Trace: [ 174.989032][ T5869] [ 174.991994][ T5869] dump_stack_lvl+0x241/0x360 [ 174.996989][ T5869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.002242][ T5869] ? __pfx__printk+0x10/0x10 [ 175.006977][ T5869] ? fs_reclaim_acquire+0x93/0x140 [ 175.012319][ T5869] ? __pfx___might_resched+0x10/0x10 [ 175.018148][ T5869] should_fail_ex+0x3b0/0x4e0 [ 175.023084][ T5869] ? tomoyo_encode+0x26f/0x540 [ 175.028217][ T5869] should_failslab+0xac/0x100 [ 175.033405][ T5869] ? tomoyo_encode+0x26f/0x540 [ 175.038387][ T5869] __kmalloc_noprof+0xd8/0x400 [ 175.043527][ T5869] tomoyo_encode+0x26f/0x540 [ 175.048405][ T5869] tomoyo_realpath_from_path+0x59e/0x5e0 [ 175.054261][ T5869] tomoyo_path_number_perm+0x23a/0x880 [ 175.060038][ T5869] ? tomoyo_path_number_perm+0x208/0x880 [ 175.066411][ T5869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 175.072917][ T5869] ? __fget_files+0x29/0x470 [ 175.077682][ T5869] ? __fget_files+0x3f3/0x470 [ 175.082395][ T5869] security_file_ioctl+0xc6/0x2a0 [ 175.088435][ T5869] __se_sys_ioctl+0x47/0x170 [ 175.093950][ T5869] do_syscall_64+0xf3/0x230 [ 175.098589][ T5869] ? clear_bhb_loop+0x35/0x90 [ 175.103549][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.109725][ T5869] RIP: 0033:0x7fb2e337def9 [ 175.114369][ T5869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.136543][ T5869] RSP: 002b:00007fb2e4204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.145759][ T5869] RAX: ffffffffffffffda RBX: 00007fb2e3535f80 RCX: 00007fb2e337def9 [ 175.153926][ T5869] RDX: 00000000200003c0 RSI: 00000000c0a85320 RDI: 0000000000000003 [ 175.162720][ T5869] RBP: 00007fb2e4204090 R08: 0000000000000000 R09: 0000000000000000 [ 175.171230][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.181331][ T5869] R13: 0000000000000000 R14: 00007fb2e3535f80 R15: 00007fff4dbc83b8 [ 175.190132][ T5869] [ 175.193882][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.242792][ T5869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.938662][ T5224] Bluetooth: hci6: command tx timeout [ 177.227487][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.281035][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.336605][ T5801] bond0 (unregistering): Released all slaves [ 177.469471][ T2513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.492955][ T2513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.505874][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 179.780747][ T5224] Bluetooth: hci6: command tx timeout [ 180.521888][ T5917] FAULT_INJECTION: forcing a failure. [ 180.521888][ T5917] name failslab, interval 1, probability 0, space 0, times 0 [ 180.606262][ T5917] CPU: 1 UID: 0 PID: 5917 Comm: syz.1.56 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 180.617404][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 180.630732][ T5917] Call Trace: [ 180.635193][ T5917] [ 180.638573][ T5917] dump_stack_lvl+0x241/0x360 [ 180.644606][ T5917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.651013][ T5917] ? __pfx__printk+0x10/0x10 [ 180.657945][ T5917] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 180.666236][ T5917] ? __pfx___might_resched+0x10/0x10 [ 180.673961][ T5917] should_fail_ex+0x3b0/0x4e0 [ 180.680955][ T5917] should_failslab+0xac/0x100 [ 180.687705][ T5917] ? __alloc_skb+0x1c3/0x440 [ 180.694813][ T5917] kmem_cache_alloc_node_noprof+0x71/0x320 [ 180.702164][ T5917] __alloc_skb+0x1c3/0x440 [ 180.708495][ T5917] ? __pfx___alloc_skb+0x10/0x10 [ 180.714443][ T5917] ? netlink_autobind+0xd6/0x2f0 [ 180.719811][ T5917] ? netlink_autobind+0x2b0/0x2f0 [ 180.727350][ T5917] netlink_sendmsg+0x638/0xcb0 [ 180.733334][ T5917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.739202][ T5917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.747787][ T5917] __sock_sendmsg+0x221/0x270 [ 180.753847][ T5917] ____sys_sendmsg+0x52a/0x7e0 [ 180.761945][ T5917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.768639][ T5917] __sys_sendmsg+0x2aa/0x390 [ 180.774148][ T5917] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.782863][ T5917] ? vfs_write+0x7bf/0xc90 [ 180.789184][ T5917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.798302][ T5917] ? do_syscall_64+0x100/0x230 [ 180.804177][ T5917] ? do_syscall_64+0xb6/0x230 [ 180.811261][ T5917] do_syscall_64+0xf3/0x230 [ 180.816949][ T5917] ? clear_bhb_loop+0x35/0x90 [ 180.824197][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.830890][ T5917] RIP: 0033:0x7fd4e297def9 [ 180.836026][ T5917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.860229][ T5917] RSP: 002b:00007fd4e3839038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.870779][ T5917] RAX: ffffffffffffffda RBX: 00007fd4e2b35f80 RCX: 00007fd4e297def9 [ 180.881215][ T5917] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 180.891405][ T5917] RBP: 00007fd4e3839090 R08: 0000000000000000 R09: 0000000000000000 [ 180.902207][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.910830][ T5917] R13: 0000000000000000 R14: 00007fd4e2b35f80 R15: 00007ffde05a6518 [ 180.922910][ T5917] [ 183.930333][ T5801] hsr_slave_0: left promiscuous mode [ 184.092749][ T5801] hsr_slave_1: left promiscuous mode [ 184.128047][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.158985][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.209104][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.319551][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.461649][ T5801] veth1_macvtap: left promiscuous mode [ 184.507699][ T5801] veth0_macvtap: left promiscuous mode [ 184.515095][ T5801] veth1_vlan: left promiscuous mode [ 184.522855][ T5801] veth0_vlan: left promiscuous mode [ 184.672844][ T5329] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.812894][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 184.882208][ T5329] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.906025][ T5329] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.918762][ T5329] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.930255][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.967618][ T5955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.989581][ T5329] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.064990][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 185.215854][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.310788][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.367506][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.401893][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.501281][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 185.560992][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.624969][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.638094][ T46] usb 5-1: Product: syz [ 185.646104][ T46] usb 5-1: Manufacturer: syz [ 185.662241][ T46] usb 5-1: SerialNumber: syz [ 185.679268][ T5329] usb 3-1: USB disconnect, device number 8 [ 186.464409][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 186.671897][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 188.337453][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.356195][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.373398][ T5821] bridge_slave_0: entered allmulticast mode [ 188.410034][ T5821] bridge_slave_0: entered promiscuous mode [ 188.449783][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.492821][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.511061][ T5821] bridge_slave_1: entered allmulticast mode [ 188.535329][ T5821] bridge_slave_1: entered promiscuous mode [ 188.598120][ T5957] vti0: entered promiscuous mode [ 188.621671][ T5962] netlink: 'syz.1.97': attribute type 4 has an invalid length. [ 188.696408][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.728052][ T5965] netlink: 'syz.1.97': attribute type 17 has an invalid length. [ 188.745561][ T5972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.843171][ T46] cdc_ncm 5-1:1.0: bind() failure [ 188.876108][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.901958][ T46] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 188.917575][ T46] cdc_ncm 5-1:1.1: bind() failure [ 188.968060][ T46] usb 5-1: USB disconnect, device number 9 [ 188.984105][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.151235][ T5821] team0: Port device team_slave_0 added [ 189.204183][ T5821] team0: Port device team_slave_1 added [ 189.316995][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.348740][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.396386][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.570494][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.682996][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.798010][ T5989] Bluetooth: MGMT ver 1.23 [ 190.422631][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.245215][ T6013] FAULT_INJECTION: forcing a failure. [ 191.245215][ T6013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.272778][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 191.334262][ T5821] hsr_slave_0: entered promiscuous mode [ 191.357232][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.4.111 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 191.370122][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 191.383461][ T6013] Call Trace: [ 191.387146][ T6013] [ 191.391078][ T6013] dump_stack_lvl+0x241/0x360 [ 191.396169][ T6013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.402099][ T6013] ? __pfx__printk+0x10/0x10 [ 191.407518][ T6013] ? __pfx_lock_release+0x10/0x10 [ 191.412605][ T6013] should_fail_ex+0x3b0/0x4e0 [ 191.418222][ T6013] _copy_from_user+0x2f/0xe0 [ 191.424258][ T6013] sctp_getsockopt_ecn_supported+0xd8/0x5e0 [ 191.430677][ T6013] ? __local_bh_enable_ip+0x168/0x200 [ 191.437958][ T6013] ? __pfx_sctp_getsockopt_ecn_supported+0x10/0x10 [ 191.446159][ T6013] sctp_getsockopt+0x8fc/0xbb0 [ 191.452369][ T6013] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 191.460418][ T6013] do_sock_getsockopt+0x3c4/0x7e0 [ 191.466238][ T6013] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 191.475940][ T6013] ? __fget_files+0x3f3/0x470 [ 191.482705][ T6013] ? __fget_files+0x29/0x470 [ 191.488979][ T6013] __sys_getsockopt+0x26b/0x330 [ 191.495290][ T6013] ? __pfx___sys_getsockopt+0x10/0x10 [ 191.502805][ T6013] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.511106][ T6013] ? do_syscall_64+0x100/0x230 [ 191.516653][ T6013] __x64_sys_getsockopt+0xb5/0xd0 [ 191.524161][ T6013] do_syscall_64+0xf3/0x230 [ 191.531308][ T6013] ? clear_bhb_loop+0x35/0x90 [ 191.537003][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.543401][ T6013] RIP: 0033:0x7febe2b7def9 [ 191.550219][ T6013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.575419][ T6013] RSP: 002b:00007febe3a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 191.587049][ T6013] RAX: ffffffffffffffda RBX: 00007febe2d35f80 RCX: 00007febe2b7def9 [ 191.599445][ T6013] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000004 [ 191.608432][ T6013] RBP: 00007febe3a42090 R08: 0000000020000040 R09: 0000000000000000 [ 191.617472][ T6013] R10: 0000000020001f00 R11: 0000000000000246 R12: 0000000000000001 [ 191.629088][ T6013] R13: 0000000000000000 R14: 00007febe2d35f80 R15: 00007ffd3e760518 [ 191.640446][ T6013] [ 191.698790][ T5821] hsr_slave_1: entered promiscuous mode [ 191.706754][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.755254][ T5821] Cannot create hsr debugfs directory [ 191.762658][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 191.807178][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 191.828498][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.868080][ T9] usb 4-1: Product: syz [ 191.893454][ T9] usb 4-1: Manufacturer: syz [ 191.898773][ T9] usb 4-1: SerialNumber: syz [ 191.943520][ T9] usb 4-1: config 0 descriptor?? [ 191.981404][ T9] ipheth 4-1:0.0: Unable to find alternate settings interface [ 192.068060][ T6022] FAULT_INJECTION: forcing a failure. [ 192.068060][ T6022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.123028][ T6022] CPU: 0 UID: 0 PID: 6022 Comm: syz.2.113 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 192.135099][ T6022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 192.148271][ T6022] Call Trace: [ 192.153389][ T6022] [ 192.156457][ T6022] dump_stack_lvl+0x241/0x360 [ 192.161469][ T6022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.166822][ T6022] ? __pfx__printk+0x10/0x10 [ 192.172449][ T6022] ? snprintf+0xda/0x120 [ 192.178422][ T6022] should_fail_ex+0x3b0/0x4e0 [ 192.184570][ T6022] _copy_to_user+0x2f/0xb0 [ 192.189879][ T6022] simple_read_from_buffer+0xca/0x150 [ 192.198800][ T6022] proc_fail_nth_read+0x1e9/0x250 [ 192.204642][ T6022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.212108][ T6022] ? rw_verify_area+0x568/0x6f0 [ 192.219840][ T6022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.227010][ T6022] vfs_read+0x201/0xbc0 [ 192.231837][ T6022] ? __pfx_lock_release+0x10/0x10 [ 192.237899][ T6022] ? __pfx_vfs_read+0x10/0x10 [ 192.244012][ T6022] ? __fget_files+0x3f3/0x470 [ 192.249418][ T6022] ? __fdget_pos+0x24e/0x320 [ 192.256901][ T6022] ksys_read+0x1a0/0x2c0 [ 192.263051][ T6022] ? __pfx_ksys_read+0x10/0x10 [ 192.271359][ T6022] ? do_syscall_64+0x100/0x230 [ 192.276375][ T6022] ? do_syscall_64+0xb6/0x230 [ 192.281911][ T6022] do_syscall_64+0xf3/0x230 [ 192.287303][ T6022] ? clear_bhb_loop+0x35/0x90 [ 192.292764][ T6022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.300458][ T6022] RIP: 0033:0x7f1dfbd7c93c [ 192.306075][ T6022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 192.328920][ T6022] RSP: 002b:00007f1dfcb57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.340117][ T6022] RAX: ffffffffffffffda RBX: 00007f1dfbf35f80 RCX: 00007f1dfbd7c93c [ 192.349660][ T6022] RDX: 000000000000000f RSI: 00007f1dfcb570a0 RDI: 0000000000000004 [ 192.359023][ T6022] RBP: 00007f1dfcb57090 R08: 0000000000000000 R09: 0000000000000000 [ 192.369248][ T6022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.378985][ T6022] R13: 0000000000000000 R14: 00007f1dfbf35f80 R15: 00007ffd62d5c438 [ 192.387677][ T6022] [ 194.133056][ T25] usb 4-1: USB disconnect, device number 4 [ 196.022628][ T29] audit: type=1326 audit(1726697795.222:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6046 comm="syz.4.117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febe2b7def9 code=0x0 [ 196.453128][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.642723][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 196.665739][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.714047][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.730983][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 196.755418][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.775808][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.798788][ T9] usb 4-1: Product: syz [ 196.822640][ T9] usb 4-1: Manufacturer: syz [ 196.828004][ T9] usb 4-1: SerialNumber: syz [ 196.839860][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.875025][ T9] usb 4-1: config 0 descriptor?? [ 196.906698][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.935827][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 196.967344][ T9] usb 4-1: selecting invalid altsetting 1 [ 197.097902][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.142150][ T9] gspca_stk014: init reg: 0x00 [ 197.169738][ T9] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 197.333201][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.411539][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.454626][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.462367][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.499159][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.508490][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.277140][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.766838][ T5821] veth0_vlan: entered promiscuous mode [ 198.848425][ T5821] veth1_vlan: entered promiscuous mode [ 198.938234][ T5821] veth0_macvtap: entered promiscuous mode [ 198.969964][ T5821] veth1_macvtap: entered promiscuous mode [ 199.016647][ T5329] usb 4-1: USB disconnect, device number 5 [ 199.062118][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.090285][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.120086][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.142402][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.171211][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.192069][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.214853][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.242426][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.282199][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.333337][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.601075][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.728050][ T6098] FAULT_INJECTION: forcing a failure. [ 199.728050][ T6098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.774085][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.4.125 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 199.786669][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 199.798278][ T6098] Call Trace: [ 199.802166][ T6098] [ 199.805605][ T6098] dump_stack_lvl+0x241/0x360 [ 199.810438][ T6098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.816690][ T6098] ? __pfx__printk+0x10/0x10 [ 199.821932][ T6098] ? snprintf+0xda/0x120 [ 199.826463][ T6098] should_fail_ex+0x3b0/0x4e0 [ 199.831396][ T6098] _copy_to_user+0x2f/0xb0 [ 199.837342][ T6098] simple_read_from_buffer+0xca/0x150 [ 199.842843][ T6098] proc_fail_nth_read+0x1e9/0x250 [ 199.848909][ T6098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.857536][ T6098] ? rw_verify_area+0x55e/0x6f0 [ 199.863003][ T6098] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.870098][ T6098] vfs_read+0x201/0xbc0 [ 199.874543][ T6098] ? __pfx_lock_release+0x10/0x10 [ 199.880425][ T6098] ? do_sock_setsockopt+0x3e2/0x720 [ 199.886134][ T6098] ? __pfx_vfs_read+0x10/0x10 [ 199.891201][ T6098] ? __fget_files+0x3f3/0x470 [ 199.897026][ T6098] ? __fdget_pos+0x24e/0x320 [ 199.902603][ T6098] ksys_read+0x1a0/0x2c0 [ 199.908829][ T6098] ? __pfx_ksys_read+0x10/0x10 [ 199.916199][ T6098] ? do_syscall_64+0x100/0x230 [ 199.921606][ T6098] ? do_syscall_64+0xb6/0x230 [ 199.927536][ T6098] do_syscall_64+0xf3/0x230 [ 199.932353][ T6098] ? clear_bhb_loop+0x35/0x90 [ 199.938043][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.945112][ T6098] RIP: 0033:0x7febe2b7c93c [ 199.949782][ T6098] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 199.972443][ T6098] RSP: 002b:00007febe3a42030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.983340][ T6098] RAX: ffffffffffffffda RBX: 00007febe2d35f80 RCX: 00007febe2b7c93c [ 199.992362][ T6098] RDX: 000000000000000f RSI: 00007febe3a420a0 RDI: 0000000000000004 [ 200.005131][ T6098] RBP: 00007febe3a42090 R08: 0000000000000000 R09: 0000000000000000 [ 200.016705][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.025531][ T6098] R13: 0000000000000000 R14: 00007febe2d35f80 R15: 00007ffd3e760518 [ 200.035039][ T6098] [ 200.043133][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.067268][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.207169][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.257937][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.357110][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.383185][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.436401][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.448794][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.476679][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.126'. [ 200.491403][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.520490][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.535510][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.551265][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 200.599711][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.668952][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.716483][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.749028][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.759596][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 200.890514][ T6114] syz.2.128 uses obsolete (PF_INET,SOCK_PACKET) [ 200.936680][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.980330][ T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 201.020309][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.270463][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.534210][ T6097] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 201.622978][ T8] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.091987][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.139335][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.460936][ T5273] usb 4-1: USB disconnect, device number 6 [ 202.567267][ T2513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.715925][ T2513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.162686][ T5273] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 203.261151][ T6158] FAULT_INJECTION: forcing a failure. [ 203.261151][ T6158] name failslab, interval 1, probability 0, space 0, times 0 [ 203.318906][ T6158] CPU: 0 UID: 0 PID: 6158 Comm: syz.0.68 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 203.330220][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 203.341868][ T6158] Call Trace: [ 203.345522][ T6158] [ 203.348848][ T6158] dump_stack_lvl+0x241/0x360 [ 203.354704][ T6158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.360174][ T6158] ? __pfx__printk+0x10/0x10 [ 203.365699][ T6158] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 203.372713][ T6158] ? __pfx___might_resched+0x10/0x10 [ 203.379285][ T6158] should_fail_ex+0x3b0/0x4e0 [ 203.386843][ T6158] should_failslab+0xac/0x100 [ 203.392662][ T6158] ? __alloc_skb+0x1c3/0x440 [ 203.398123][ T6158] kmem_cache_alloc_node_noprof+0x71/0x320 [ 203.406039][ T6158] __alloc_skb+0x1c3/0x440 [ 203.411052][ T6158] ? __pfx___alloc_skb+0x10/0x10 [ 203.416065][ T6158] ? netlink_autobind+0xd6/0x2f0 [ 203.422489][ T6158] ? netlink_autobind+0x2b0/0x2f0 [ 203.428294][ T6158] netlink_sendmsg+0x638/0xcb0 [ 203.433199][ T6158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.438907][ T6158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.446782][ T6158] __sock_sendmsg+0x221/0x270 [ 203.452863][ T6158] ____sys_sendmsg+0x52a/0x7e0 [ 203.457972][ T6158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.465834][ T6158] __sys_sendmsg+0x2aa/0x390 [ 203.471286][ T6158] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.477425][ T6158] ? vfs_write+0x7bf/0xc90 [ 203.482178][ T6158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.489259][ T6158] ? do_syscall_64+0x100/0x230 [ 203.494099][ T6158] ? do_syscall_64+0xb6/0x230 [ 203.498892][ T6158] do_syscall_64+0xf3/0x230 [ 203.504489][ T6158] ? clear_bhb_loop+0x35/0x90 [ 203.510632][ T6158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.517898][ T6158] RIP: 0033:0x7f568f37def9 [ 203.524471][ T6158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.547505][ T6158] RSP: 002b:00007f56901dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.558598][ T6158] RAX: ffffffffffffffda RBX: 00007f568f535f80 RCX: 00007f568f37def9 [ 203.568104][ T6158] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 203.579881][ T6158] RBP: 00007f56901dd090 R08: 0000000000000000 R09: 0000000000000000 [ 203.590936][ T6158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.601650][ T6158] R13: 0000000000000000 R14: 00007f568f535f80 R15: 00007ffc93aa0e88 [ 203.615213][ T6158] [ 203.662571][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 203.675545][ T5273] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.711403][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 203.770015][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.854100][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.919755][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.972336][ T5273] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 203.998857][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.054945][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.095296][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.124752][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.194946][ T5273] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 204.208807][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 204.270437][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.315423][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.335367][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.359504][ T5273] usb 3-1: string descriptor 0 read error: -22 [ 204.377409][ T5273] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 204.390764][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.421957][ T5273] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 204.579713][ T6174] Bluetooth: MGMT ver 1.23 [ 204.873128][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 204.915766][ T5273] usb 3-1: USB disconnect, device number 9 [ 205.013132][ T8] usb 1-1: device descriptor read/64, error -71 [ 205.263072][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 205.423199][ T8] usb 1-1: device descriptor read/64, error -71 [ 205.537774][ T8] usb usb1-port1: attempt power cycle [ 205.902632][ T8] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 205.979877][ T8] usb 1-1: device descriptor read/8, error -71 [ 206.199007][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 206.251516][ T6212] FAULT_INJECTION: forcing a failure. [ 206.251516][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 206.282716][ T8] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 206.301224][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.4.142 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 206.314488][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.327070][ T6212] Call Trace: [ 206.330596][ T6212] [ 206.334912][ T6212] dump_stack_lvl+0x241/0x360 [ 206.342451][ T6212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.348100][ T6212] ? __pfx__printk+0x10/0x10 [ 206.354674][ T6212] ? fs_reclaim_acquire+0x93/0x140 [ 206.364199][ T6212] ? __pfx___might_resched+0x10/0x10 [ 206.372904][ T6212] should_fail_ex+0x3b0/0x4e0 [ 206.378671][ T6212] ? tomoyo_encode+0x26f/0x540 [ 206.384770][ T6212] should_failslab+0xac/0x100 [ 206.390948][ T6212] ? tomoyo_encode+0x26f/0x540 [ 206.397447][ T6212] __kmalloc_noprof+0xd8/0x400 [ 206.403177][ T6212] tomoyo_encode+0x26f/0x540 [ 206.408117][ T6212] tomoyo_realpath_from_path+0x59e/0x5e0 [ 206.414875][ T6212] tomoyo_path_number_perm+0x23a/0x880 [ 206.422228][ T6212] ? tomoyo_path_number_perm+0x208/0x880 [ 206.428370][ T6212] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 206.435355][ T6212] ? __fget_files+0x29/0x470 [ 206.441732][ T6212] ? __fget_files+0x3f3/0x470 [ 206.448532][ T6212] security_file_ioctl+0xc6/0x2a0 [ 206.454759][ T6212] __se_sys_ioctl+0x47/0x170 [ 206.461886][ T6212] do_syscall_64+0xf3/0x230 [ 206.467555][ T6212] ? clear_bhb_loop+0x35/0x90 [ 206.472984][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.479970][ T6212] RIP: 0033:0x7febe2b7def9 [ 206.485828][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.511995][ T6212] RSP: 002b:00007febe3a42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.522668][ T6212] RAX: ffffffffffffffda RBX: 00007febe2d35f80 RCX: 00007febe2b7def9 [ 206.532002][ T6212] RDX: 0000000020000400 RSI: 00000000c06864a2 RDI: 0000000000000003 [ 206.543683][ T6212] RBP: 00007febe3a42090 R08: 0000000000000000 R09: 0000000000000000 [ 206.552396][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.563537][ T6212] R13: 0000000000000000 R14: 00007febe2d35f80 R15: 00007ffd3e760518 [ 206.575517][ T6212] [ 206.607697][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.139'. [ 206.622340][ T8] usb 1-1: device descriptor read/8, error -71 [ 206.682982][ T6212] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.733004][ T8] usb usb1-port1: unable to enumerate USB device [ 206.757796][ T6208] netlink: 56 bytes leftover after parsing attributes in process `syz.2.139'. [ 207.061693][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 207.262409][ T6228] vlan2: entered promiscuous mode [ 207.502694][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 207.513751][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 209.047927][ T6267] warning: `syz.3.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 209.083338][ T6266] FAULT_INJECTION: forcing a failure. [ 209.083338][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.100210][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.173687][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.0.152 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 209.186935][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.199554][ T6266] Call Trace: [ 209.203955][ T6266] [ 209.207304][ T6266] dump_stack_lvl+0x241/0x360 [ 209.213097][ T6266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.218683][ T6266] ? __pfx__printk+0x10/0x10 [ 209.223659][ T6266] ? __pfx_lock_release+0x10/0x10 [ 209.228736][ T6266] ? validate_chain+0x11e/0x5920 [ 209.234051][ T6266] should_fail_ex+0x3b0/0x4e0 [ 209.239127][ T6266] _copy_from_user+0x2f/0xe0 [ 209.246229][ T6266] do_sys_poll+0x249/0x1600 [ 209.251510][ T6266] ? __pfx_validate_chain+0x10/0x10 [ 209.259449][ T6266] ? __pfx_validate_chain+0x10/0x10 [ 209.266054][ T6266] ? _parse_integer_limit+0x1b5/0x200 [ 209.274930][ T6266] ? __pfx_do_sys_poll+0x10/0x10 [ 209.280783][ T6266] ? mark_lock+0x9a/0x360 [ 209.286748][ T6266] ? mark_lock+0x9a/0x360 [ 209.291217][ T6266] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 209.297856][ T6266] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 209.305078][ T6266] ? ktime_get_ts64+0xa8/0x2b0 [ 209.310658][ T6266] ? lockdep_hardirqs_on+0x99/0x150 [ 209.316445][ T6266] ? __pfx_set_user_sigmask+0x10/0x10 [ 209.322164][ T6266] __se_sys_ppoll+0x2a0/0x330 [ 209.327742][ T6266] ? __pfx___se_sys_ppoll+0x10/0x10 [ 209.333882][ T6266] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.342198][ T6266] ? do_syscall_64+0x100/0x230 [ 209.349045][ T6266] ? __x64_sys_ppoll+0x20/0xc0 [ 209.354971][ T6266] do_syscall_64+0xf3/0x230 [ 209.361253][ T6266] ? clear_bhb_loop+0x35/0x90 [ 209.368439][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.378666][ T6266] RIP: 0033:0x7f568f37def9 [ 209.384148][ T6266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.408784][ T6266] RSP: 002b:00007f56901dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 209.419363][ T6266] RAX: ffffffffffffffda RBX: 00007f568f535f80 RCX: 00007f568f37def9 [ 209.429862][ T6266] RDX: 0000000020002640 RSI: 0000000000000001 RDI: 00000000200001c0 [ 209.438916][ T6266] RBP: 00007f56901dd090 R08: 0000000000000000 R09: 0000000000000000 [ 209.450539][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.463045][ T6266] R13: 0000000000000000 R14: 00007f568f535f80 R15: 00007ffc93aa0e88 [ 209.473688][ T6266] [ 209.477161][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.627576][ T29] audit: type=1326 audit(1726697808.802:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.3.153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2e337def9 code=0x0 [ 209.659175][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.893323][ T6287] FAULT_INJECTION: forcing a failure. [ 210.893323][ T6287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.972969][ T6287] CPU: 1 UID: 0 PID: 6287 Comm: syz.3.157 Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 210.984293][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.996988][ T6287] Call Trace: [ 211.003265][ T6287] [ 211.007661][ T6287] dump_stack_lvl+0x241/0x360 [ 211.014337][ T6287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.022610][ T6287] ? __pfx__printk+0x10/0x10 [ 211.028236][ T6287] ? __pfx_lock_release+0x10/0x10 [ 211.033664][ T6287] ? validate_chain+0x11e/0x5920 [ 211.039140][ T6287] should_fail_ex+0x3b0/0x4e0 [ 211.044483][ T6287] _copy_from_iter+0x1ed/0x1d60 [ 211.049762][ T6287] ? __pfx_validate_chain+0x10/0x10 [ 211.058131][ T6287] ? mark_lock+0x9a/0x360 [ 211.063393][ T6287] ? __lock_acquire+0x1384/0x2050 [ 211.069895][ T6287] ? __pfx__copy_from_iter+0x10/0x10 [ 211.077651][ T6287] tun_get_user+0x445/0x47e0 [ 211.083071][ T6287] ? __lock_acquire+0x1384/0x2050 [ 211.089342][ T6287] ? __pfx_tun_get_user+0x10/0x10 [ 211.096759][ T6287] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 211.106305][ T6287] ? tun_get+0x1e/0x2f0 [ 211.110786][ T6287] ? __pfx_lock_release+0x10/0x10 [ 211.117460][ T6287] ? tun_get+0x1e/0x2f0 [ 211.122092][ T6287] ? tun_get+0x27d/0x2f0 [ 211.128296][ T6287] tun_chr_write_iter+0x10d/0x1f0 [ 211.135496][ T6287] vfs_write+0xa6d/0xc90 [ 211.140250][ T6287] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 211.150631][ T6287] ? __pfx_vfs_write+0x10/0x10 [ 211.155610][ T6287] ? __fdget_pos+0x19a/0x320 [ 211.160720][ T6287] ksys_write+0x1a0/0x2c0 [ 211.168059][ T6287] ? __pfx_ksys_write+0x10/0x10 [ 211.173923][ T6287] ? do_syscall_64+0x100/0x230 [ 211.179929][ T6287] ? do_syscall_64+0xb6/0x230 [ 211.186155][ T6287] do_syscall_64+0xf3/0x230 [ 211.191346][ T6287] ? clear_bhb_loop+0x35/0x90 [ 211.196760][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.203030][ T6287] RIP: 0033:0x7fb2e337def9 [ 211.208244][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.229816][ T6287] RSP: 002b:00007fb2e41c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.239344][ T6287] RAX: ffffffffffffffda RBX: 00007fb2e3536130 RCX: 00007fb2e337def9 [ 211.249186][ T6287] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 0000000000000003 [ 211.258163][ T6287] RBP: 00007fb2e41c2090 R08: 0000000000000000 R09: 0000000000000000 [ 211.269590][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.279100][ T6287] R13: 0000000000000001 R14: 00007fb2e3536130 R15: 00007fff4dbc83b8 [ 211.289763][ T6287] [ 211.732979][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.000033][ T6296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.072839][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 212.115606][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 212.141287][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.160583][ T8] usb 5-1: Product: syz [ 212.166672][ T8] usb 5-1: Manufacturer: syz [ 212.190558][ T8] usb 5-1: SerialNumber: syz [ 212.211626][ T8] usb 5-1: config 0 descriptor?? [ 212.238060][ T8] ipheth 5-1:0.0: Unable to find alternate settings interface [ 212.252593][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 212.442636][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 212.481978][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 212.515385][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 212.595640][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.650866][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.714202][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 212.777619][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 212.801228][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 213.335811][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.990243][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 239.085007][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 243.894357][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 258.945369][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 261.738377][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.543201][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.588564][ T5224] Bluetooth: hci2: command 0x0406 tx timeout [ 295.020517][ T5225] Bluetooth: hci6: command 0x0406 tx timeout [ 308.142529][ C0] hrtimer: interrupt took 547487 ns [ 311.940998][ T9] usb 4-1: unable to read config index 2 descriptor/start: -110 [ 323.178413][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.182603][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.460429][ T9] usb 4-1: can't read configurations, error -110 [ 384.931839][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.519158][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.655613][ T5329] usb 5-1: USB disconnect, device number 10 [ 427.515829][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 432.896247][ T30] Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0 [ 432.905091][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.828386][ T30] task:kworker/0:0 state:D stack:20176 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 434.854663][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 435.283823][ T30] Call Trace: [ 435.288697][ T30] [ 435.517149][ T30] __schedule+0x17ae/0x4a10 [ 435.659291][ T30] ? __pfx___schedule+0x10/0x10 [ 435.688719][ T30] ? __pfx_lock_release+0x10/0x10 [ 435.762574][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 435.836602][ T30] ? schedule+0x90/0x320 [ 435.841292][ T30] schedule+0x14b/0x320 SYZFAIL: failed to send rpc fd=3 want=10584 sent=0 n=-1 (errno 32: Broken pipe) [ 436.024388][ T30] schedule_preempt_disabled+0x13/0x30 [ 436.031282][ T30] __mutex_lock+0x6a4/0xd70 [ 436.273554][ T30] ? __mutex_lock+0x527/0xd70 [ 436.279257][ T30] ? reg_check_chans_work+0x164/0xfd0 [ 436.472551][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 436.479083][ T30] ? process_scheduled_works+0x976/0x1850 [ 436.792705][ T30] reg_check_chans_work+0x164/0xfd0 [ 436.799143][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 436.872975][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 436.942717][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 436.950255][ T30] ? process_scheduled_works+0x976/0x1850 [ 437.055838][ T30] process_scheduled_works+0xa63/0x1850 [ 437.087733][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 437.127261][ T30] ? assign_work+0x364/0x3d0 [ 437.152718][ T30] worker_thread+0x870/0xd30 [ 437.180141][ T30] ? __kthread_parkme+0x169/0x1d0 [ 437.205264][ T30] ? __pfx_worker_thread+0x10/0x10 [ 437.218727][ T30] kthread+0x2f0/0x390 [ 437.232233][ T30] ? __pfx_worker_thread+0x10/0x10 [ 437.243262][ T30] ? __pfx_kthread+0x10/0x10 [ 437.249221][ T30] ret_from_fork+0x4b/0x80 [ 437.263256][ T30] ? __pfx_kthread+0x10/0x10 [ 437.268996][ T30] ret_from_fork_asm+0x1a/0x30 [ 437.277039][ T30] [ 437.311318][ T30] [ 437.311318][ T30] Showing all locks held in the system: [ 437.374630][ T30] 2 locks held by kworker/u8:0/11: [ 437.381507][ T30] 1 lock held by khungtaskd/30: [ 437.453731][ T30] #0: ffffffff8e938aa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0