last executing test programs: 1m0.545577896s ago: executing program 3 (id=249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400009) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x10) unshare(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x61) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000650018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)) socket(0x10, 0x3, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000001380)={0x8, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}]}) madvise(&(0x7f00008b6000/0x3000)=nil, 0x3000, 0xa) add_key$keyring(&(0x7f00000016c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 48.476601808s ago: executing program 4 (id=264): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="b09d78dd473fb60e74598afa3c8ec8704f89e2bd01bec56c3888977bfb90808dee432ed2ac87f72416492cee2a271fca47e0bff11465caae", @ANYBLOB="a3571b68f5de1895b68421eab9f179c612f69ce15d43214f9a"], 0x22) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c900e5acc19d88be61a6600c00000038a99531f734a162719cedf9cce321759250ca12d010bd817efedc66ca7dbd58fa3acadc6dbc411db2715773f0a9d8370d3dfdec505285e2ef359559bb81cdb72bbe3f30c0e7a8ab2561c6ee81829c6800e15144437eb8452d3a97d10574d11abe9c1adc29d72f5977fa3f235ceb96e8cc7c9f129742850bdafb44ca7b004a7f380705d49dcf7034cc8dbfca652ee656a01454bf5bcba7463b2db4cf0e5c31ce423b49c9bdec9b8e06e31695a1fc721c0d2e1227d9efe924a1a27297ae4e0286d6f327d172078f4f5449003b6dd90822d8993f38d53095bd80c526717df82c"], 0xe9) syz_emit_vhci(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa0200bb86dd6000000000283aff00000000000000000000ffff7f000001fe8000000000000000000000000000000000000000000000000202286efda6e3d0c0e53531b2993c73"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000001200)=""/4105, &(0x7f0000000140)=0x1009) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 47.395874477s ago: executing program 4 (id=268): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmmsg$alg(r1, &(0x7f0000002040)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}], 0x1, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x4c, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 46.9375519s ago: executing program 4 (id=269): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x593402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ac054b024000010203010902240001fa000000090400000003010400092100000001220000090581030000000000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="0603"]}, {0xe1, &(0x7f0000000500)=ANY=[@ANYBLOB="e1037097e5fe96504511b437bc5c0abae707a816687b349d6e3748e803b80a824c966c777606e55bf46dd69927cf321f2eeee93b458b26dec23bab05d15177f49c1da393d247c71877db9b90bd0f282c85a8660199a03ec11e50620849e557118bd7ba4453ddf02f31633bdb60d8"]}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101301) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r6, &(0x7f0000000480)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(0x0, &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000029c0)={0x1a, {"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", 0x1000}}, 0xf13) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) close_range(r3, 0xffffffffffffffff, 0x0) r10 = socket(0x11, 0x3, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32, @ANYBLOB="06002800b67f00006795aafd27cf64102f648b654ca31da8cbde6c2bafd42c8a7fa6d0450e9d9a3f2482611d8c352d7cd4798780415463bbd50761ea9aef5a64f77fb6e41b794835fa10d86c51bea80ffe97a361d0db131accc813f3f230c71b25e6bcef1698108b52be297b8c546eb88f4f3a713a8855f8f4b0a1e526a8732cfad6060e31c4a970e6157124cab2e055d18e061cbbafe0a4f205e893540835f1c06b16b7"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700880", @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf250100000005003000040000000a000900ffffffffffff000008002b000000ffff050029000000000008003c000900000008000b00ff0f00000800320006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$bt_BT_SECURITY(r10, 0x107, 0x14, 0x0, 0x20000000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0xb}) 42.721063132s ago: executing program 4 (id=275): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000025d62fd22a89ea88009516000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001380)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000080), 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, &(0x7f00000001c0)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x1, 0x5, 0x9, 0xd83b}, 0x14) 42.373759786s ago: executing program 4 (id=277): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="b09d78dd473fb60e74598afa3c8ec8704f89e2bd01bec56c3888977bfb90808dee432ed2ac87f72416492cee2a271fca47e0bff11465caae", @ANYBLOB="a3571b68f5de1895b68421eab9f179c612f69ce15d43214f9a"], 0x22) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c900e5acc19d88be61a6600c00000038a99531f734a162719cedf9cce321759250ca12d010bd817efedc66ca7dbd58fa3acadc6dbc411db2715773f0a9d8370d3dfdec505285e2ef359559bb81cdb72bbe3f30c0e7a8ab2561c6ee81829c6800e15144437eb8452d3a97d10574d11abe9c1adc29d72f5977fa3f235ceb96e8cc7c9f129742850bdafb44ca7b004a7f380705d49dcf7034cc8dbfca652ee656a01454bf5bcba7463b2db4cf0e5c31ce423b49c9bdec9b8e06e31695a1fc721c0d2e1227d9efe924a1a27297ae4e0286d6f327d172078f4f5449003b6dd90822d8993f38d53095bd80c526717df82c"], 0xe9) syz_emit_vhci(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa0200bb86dd6000000000283aff00000000000000000000ffff7f000001fe8000000000000000000000000000000000000000000000000202286efda6e3d0c0e53531b2993c73"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000001200)=""/4105, &(0x7f0000000140)=0x1009) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20.249822554s ago: executing program 2 (id=302): socket$inet6(0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r1, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19.114999924s ago: executing program 2 (id=303): syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) wait4(0x0, 0x0, 0x0, 0x0) gettid() r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000100)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000200)={r9, 0x0, r6}) pwritev2(r5, 0x0, 0x0, 0x0, 0xbc6, 0x0) socket$inet(0x2b, 0x801, 0x0) 17.907302716s ago: executing program 2 (id=304): sched_setscheduler(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) futex(0x0, 0x10b, 0x0, 0x0, &(0x7f0000000040), 0x0) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800}) read(r1, &(0x7f00000000c0)=""/29, 0x1d) 17.646185701s ago: executing program 2 (id=307): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 17.377850054s ago: executing program 2 (id=308): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4", 0xb3}], 0x1}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x890b, &(0x7f0000003380)) syz_usb_connect(0x1, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x5d, 0x9b, 0xd7, 0x8, 0x45e, 0x4cc, 0x210, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x20, 0x9f, 0xb4, 0x0, [], [{{0x9, 0x5, 0xa, 0xd}}]}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x1, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xf4, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0xbc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x600}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x12}]}}}]}]}], {0x14}}, 0x13c}}, 0x0) syz_usbip_server_init(0x3) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000001085000000c80000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbc3bbbbbbbbbbbbbbbbbb08004500002c0000000000119078ac0514aae0000421012938b8fe264f0000000000000000000000000000000000fed2560ec48eb3218021dced2a22d6fa7fc6f10b537f02fac8c1244e221b8e3624c96144604bb0737cd8d9c0"], 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x84c0, &(0x7f0000000100)={[{@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@metacopy_off}]}) 15.167153577s ago: executing program 2 (id=313): syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) wait4(0x0, 0x0, 0x0, 0x0) gettid() r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/201, 0xc9}], 0x1, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000100)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000200)={r9, 0x0, r6}) pwritev2(r5, 0x0, 0x0, 0x0, 0xbc6, 0x0) socket$inet(0x2b, 0x801, 0x0) 5.26684124s ago: executing program 1 (id=327): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) mlock(&(0x7f0000009000/0x2000)=nil, 0x2000) 4.66991923s ago: executing program 1 (id=330): socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.505337525s ago: executing program 3 (id=258): syz_init_net_socket$ax25(0x3, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 2.427726781s ago: executing program 3 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.985635469s ago: executing program 0 (id=336): syz_usb_connect$cdc_ecm(0x0, 0x93, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000102505a1a44000010203010902810001010040000904000000020600000b240600006d176f885b4e58e9d60abb6505240000000d240f010000"], &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="050f0500aa"]}) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x8926, 0x20001114) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="75010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) prlimit64(0x0, 0x9, &(0x7f0000000180)={0xfffffffffffffffe, 0x8b}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x2e, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="dff60000", @ANYRESOCT=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="22003300d000000008021100000108021100000050505050505000000f04000000000000"], 0x40}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000, 0x2244, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffc}, 0x48) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r5, &(0x7f0000003040)=ANY=[@ANYBLOB="080008000003000001000000000045000028000000000089907800000000e000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090ac3200"], 0x36) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000", @ANYRESDEC, @ANYRESDEC=r4], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.961287124s ago: executing program 1 (id=337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e45000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x35}, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x4b44, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) writev(r6, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r6, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2860}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0) r11 = io_uring_setup(0x775f, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r11, 0xb, 0x0, 0x0) 1.68205307s ago: executing program 0 (id=338): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendto$packet(r3, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/184, 0xb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a00)}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002b00)=""/134, 0x86}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) socket(0x9, 0x4, 0x1) 1.463484751s ago: executing program 1 (id=339): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="b09d78dd473fb60e74598afa3c8ec8704f89e2bd01bec56c3888977bfb90808dee432ed2ac87f72416492cee2a271fca47e0bff11465caae", @ANYBLOB="a3571b68f5de1895b68421eab9f179c612f69ce15d43214f9a"], 0x22) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c900e5acc19d88be61a6600c00000038a99531f734a162719cedf9cce321759250ca12d010bd817efedc66ca7dbd58fa3acadc6dbc411db2715773f0a9d8370d3dfdec505285e2ef359559bb81cdb72bbe3f30c0e7a8ab2561c6ee81829c6800e15144437eb8452d3a97d10574d11abe9c1adc29d72f5977fa3f235ceb96e8cc7c9f129742850bdafb44ca7b004a7f380705d49dcf7034cc8dbfca652ee656a01454bf5bcba7463b2db4cf0e5c31ce423b49c9bdec9b8e06e31695a1fc721c0d2e1227d9efe924a1a27297ae4e0286d6f327d172078f4f5449003b6dd90822d8993f38d53095bd80c526717df82c76adcd76f61f"], 0xe9) syz_emit_vhci(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, 0x4}) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaa0200bb86dd6000000000283aff00000000000000000000ffff7f000001fe8000000000000000000000000000000000000000000000000202286efda6e3d0c0e53531b2993c73"], 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000001200)=""/4105, &(0x7f0000000140)=0x1009) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.446288531s ago: executing program 3 (id=340): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x25, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x300, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0xb00, 0x0, 0x0, 0x0) 1.274076008s ago: executing program 0 (id=341): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) (async) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1fb) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000fedbdf2502000000140002006d616373656301000000000000000000140002007465616d5f736c6176655f30000000000900030073797a32000000000900030073797a32000000000900010073797a32000000001400020065727370616e30000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.074718914s ago: executing program 0 (id=342): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x4, 0x13) 968.069314ms ago: executing program 0 (id=343): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x111440, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) vmsplice(r0, 0x0, 0x0, 0x9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) sendmmsg$inet6(r1, &(0x7f00000012c0)=[{{&(0x7f0000000500)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000a00)="c19cd1ad0fb66b63b532f012", 0xc}], 0x2}}, {{&(0x7f0000000c00)={0xa, 0x4e23, 0x444, @empty, 0xffffffff}, 0x1c, &(0x7f0000000d80)=[{0x0}, {&(0x7f0000000d40)}], 0x2}}], 0x2, 0x0) 615.77314ms ago: executing program 1 (id=344): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000400000000000000170b000018550000090000000000000000000000950000000000000097bc4de5e4de73edd7ea2fb120c8f3ce4a06d4d04c5bc53b3a94cb22dd6671cbe1326b0ea842f54181b913781b835f8c5c80e184cf1a21131cafba376f15b1a7b9477fc814888410d6e1fd5c72ffffff7f5b3f63bdef0b5c04e8937a2dcb924b2a91"], 0x0, 0x3878, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) getpriority(0x1, r0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x7) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001800)={0x0, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000745c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r10}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {r6}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "7464fbe08eb369"}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x181401, 0x18a) 302.691714ms ago: executing program 3 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x7000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 264.162595ms ago: executing program 4 (id=287): ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) syz_usb_connect(0x0, 0x5c, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x97, 0x7c, 0x33, 0x8, 0x403, 0xd017, 0x6fff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xe1, 0x43, 0x3a, 0x0, [@uac_control={{}, [@selector_unit={0x6, 0x24, 0x5, 0x4, 0xf7, "87"}]}], [{{0x9, 0x5, 0x8, 0x8, 0x20, 0x6, 0x81, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x2227}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0xa, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x6}]}}, {}]}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000200)}, 0x20) 105.873833ms ago: executing program 1 (id=346): socket$inet6(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff000000000f003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) io_uring_setup(0x6a1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2cc}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x393, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_usb_connect$hid(0x4, 0x84, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000005c0), 0x2}}, 0x20) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x44, {0x44, 0x22, "3880a5486650f24bfb6e3908695fd8e8d042dcd55170e418405b1e65efc859d377b5f7a3983dbecd59a6dc224fd7650449a816952509b938698ee863c84409680b16"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}}, &(0x7f0000000580)={0x34, &(0x7f0000000640)={0x20, 0x11, 0x98, "036fddddb4a439cf5b96747ac98a52af1b58a155fa41d11dfbd9787d256a38418f456353b9f48c5e7fa67ca838ebbae58478475a8f7cafe9f378758df84157d7656fbcfd67028653383815fb966284e12383878851afbb30c50a3ace3b977f46e2d26a088f35beae4df21013eac3ad9a41c260342e85be35c0919ad0ce572daf145cd4b824c837d742c435e456b0e99650ddd47bca6ac76a"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0xaf, {0xad, "d938bec9fb1de43df40e2a17ed1772d15e09e35b200a248447f0fea54828ba0a1fa66ef08405ab85c463e4bd81d3655e2ff97a3072190540a4b5274444776e58f966c50b79149062807a3e0c3ff7dbebf0f2702f7c6e40fc42c3e00e05ed273e65efbd694629db2bb2b9bc88a3e35866b2dea57bbdbcbc6532e890acc3e59bfbe67139c90a85a52d69bf7f3c563640b6755bd8ea59533fec46b14fe3a0ab79514b768934a399c60a0568a7777a"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x81}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 18.071016ms ago: executing program 0 (id=347): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="a3c5943f5e3e3f6eb53ffcc048056913ee1495e38925c220c8b26aab0a2162f8095f2634b7137f956e75d7f094dc89ee", 0x30}], 0x1}], 0x1, 0x0) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001480)=""/4087, 0xff7}], 0x1}}], 0x1, 0x2061, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(0xffffffffffffffff, 0x80044325, &(0x7f00000000c0)=0x1) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=348): shutdown(0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000706010200000000000000000000000005000100070000000800064000000004"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): 16][ T5373] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 97.379111][ T5373] RBP: 00007fd50ffae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.387155][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.395184][ T5373] R13: 000000000000000b R14: 00007fd50f303f60 R15: 00007ffda44866d8 [ 97.403191][ T5373] [ 97.779528][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.792777][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.805159][ T62] bond0 (unregistering): Released all slaves [ 97.836972][ T5087] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.068130][ T5087] usb 3-1: Using ep0 maxpacket: 32 [ 98.077802][ T5087] usb 3-1: config 255 has an invalid interface number: 117 but max is 0 [ 98.086195][ T5087] usb 3-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 98.095588][ T5087] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 98.108436][ T5087] usb 3-1: config 255 has no interface number 0 [ 98.114777][ T5087] usb 3-1: config 255 interface 117 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 98.177755][ T5136] usb 2-1: USB disconnect, device number 4 [ 98.188073][ T5087] usb 3-1: config 255 interface 117 has no altsetting 0 [ 98.199799][ T5087] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 98.210062][ T5087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.315824][ T5087] usb 3-1: Product: 譛丘ਘ썵熺⠒믋쐾撼ފ啁屇佽∄熍肷Ʉ琅飿ㄞဖ糧昻踊郉㊢粁콖뽤揌﫱ꟁ쓏䅢戙綮佦ᄺ胹朓驊澖‫〗❆ᐊ伏巓쩗埔䣢ꬎ饄夗䫺φᙧ䏊쌑匧ᦒ椆䗀仩䓓㜃ⴋ䭬͐틴ِ䀼恰㇂㸕妍ꅎ膽捒쉬妴꡺폌㢰垌摮Ս䋁쨁볜 [ 98.369254][ T5087] usb 3-1: Manufacturer: 䐊 [ 98.396606][ T5087] usb 3-1: SerialNumber: ౷ [ 98.713347][ T5387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.735558][ T62] hsr_slave_0: left promiscuous mode [ 98.745848][ T62] hsr_slave_1: left promiscuous mode [ 98.753700][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.764707][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.788753][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.798568][ T5387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.812510][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.842521][ T62] veth1_macvtap: left promiscuous mode [ 98.848740][ T62] veth0_macvtap: left promiscuous mode [ 98.854427][ T62] veth1_vlan: left promiscuous mode [ 98.859895][ T53] Bluetooth: hci4: command tx timeout [ 98.866034][ T62] veth0_vlan: left promiscuous mode [ 100.015925][ T5393] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 100.671072][ T62] team0 (unregistering): Port device team_slave_1 removed [ 100.754071][ T62] team0 (unregistering): Port device team_slave_0 removed [ 100.936741][ T53] Bluetooth: hci4: command tx timeout [ 101.073793][ T5398] netlink: 44 bytes leftover after parsing attributes in process `syz.1.57'. [ 102.132122][ T5087] usb 3-1: USB disconnect, device number 6 [ 102.645826][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 102.756522][ T5087] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 102.950320][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.959002][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.970034][ T5087] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.982051][ T5365] bridge_slave_0: entered allmulticast mode [ 102.988082][ T5087] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 102.999425][ T5365] bridge_slave_0: entered promiscuous mode [ 103.007495][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.022578][ T53] Bluetooth: hci4: command tx timeout [ 103.031706][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.044084][ T5087] usb 3-1: config 0 descriptor?? [ 103.052490][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.063836][ T5087] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 103.071713][ T5365] bridge_slave_1: entered allmulticast mode [ 103.073482][ T5365] bridge_slave_1: entered promiscuous mode [ 103.133351][ T5087] usb 3-1: No valid video chain found. [ 103.210761][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.299621][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.311394][ T5407] Zero length message leads to an empty skb [ 103.355825][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.454778][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.618611][ T5365] team0: Port device team_slave_0 added [ 103.649536][ T5365] team0: Port device team_slave_1 added [ 103.710642][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.789641][ T5253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.819764][ T5253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.928616][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.951152][ T5253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.971461][ T5253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.009276][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.019349][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.046047][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.062497][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.069929][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.104368][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.254613][ T5365] hsr_slave_0: entered promiscuous mode [ 104.261875][ T5365] hsr_slave_1: entered promiscuous mode [ 104.269583][ T5365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.284382][ T5365] Cannot create hsr debugfs directory [ 104.505421][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.521521][ T62] bridge_slave_1: left allmulticast mode [ 104.531480][ T62] bridge_slave_1: left promiscuous mode [ 104.542193][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.556086][ T62] bridge_slave_0: left allmulticast mode [ 104.567135][ T62] bridge_slave_0: left promiscuous mode [ 104.573015][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.070646][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.091104][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.106595][ T53] Bluetooth: hci4: command tx timeout [ 105.138670][ T62] bond0 (unregistering): Released all slaves [ 105.185720][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.242434][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.319163][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.358746][ T5133] usb 3-1: USB disconnect, device number 7 [ 105.789021][ T62] hsr_slave_0: left promiscuous mode [ 105.795375][ T62] hsr_slave_1: left promiscuous mode [ 105.809891][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.824149][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.837792][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.845251][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.883117][ T62] veth1_macvtap: left promiscuous mode [ 105.890196][ T62] veth0_macvtap: left promiscuous mode [ 105.895871][ T62] veth1_vlan: left promiscuous mode [ 105.908762][ T62] veth0_vlan: left promiscuous mode [ 106.525438][ T62] team0 (unregistering): Port device team_slave_1 removed [ 106.586601][ T62] team0 (unregistering): Port device team_slave_0 removed [ 107.245921][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.410231][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.485771][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.492993][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.611127][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.618341][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.630581][ T5445] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 108.748014][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.858243][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.053999][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.061246][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.074878][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.082532][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.081823][ T5365] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 110.200810][ T5365] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 110.304410][ T5365] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 110.407072][ T5365] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.525697][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.645460][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.771666][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.962796][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 111.987537][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 111.997492][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.008621][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.019954][ T5094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 112.030863][ T5094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.093607][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.100844][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.169934][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.177153][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.277184][ T5242] veth0_vlan: entered promiscuous mode [ 112.343549][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.455321][ T5242] veth1_vlan: entered promiscuous mode [ 113.351689][ T5242] veth0_macvtap: entered promiscuous mode [ 113.554158][ T5242] veth1_macvtap: entered promiscuous mode [ 113.923916][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.970198][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.016468][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.046565][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.066561][ T5094] Bluetooth: hci5: command tx timeout [ 114.068944][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.131901][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.161302][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.196082][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.232296][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.263983][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.300555][ T5242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.325864][ T5242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.352385][ T5242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.382400][ T5242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.497423][ T5488] chnl_net:caif_netlink_parms(): no params data found [ 114.980941][ T5253] veth0_vlan: entered promiscuous mode [ 115.053950][ T5253] veth1_vlan: entered promiscuous mode [ 115.210495][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.486223][ T5253] veth0_macvtap: entered promiscuous mode [ 115.559295][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.587005][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.594317][ T5488] bridge_slave_0: entered allmulticast mode [ 115.626822][ T5488] bridge_slave_0: entered promiscuous mode [ 115.691408][ T5253] veth1_macvtap: entered promiscuous mode [ 115.720250][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.737516][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.744816][ T5488] bridge_slave_1: entered allmulticast mode [ 115.778078][ T5488] bridge_slave_1: entered promiscuous mode [ 115.929976][ T5488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.010803][ T5488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.080294][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.102136][ T5365] veth0_vlan: entered promiscuous mode [ 116.110166][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.139423][ T5094] Bluetooth: hci5: command tx timeout [ 116.216159][ T5365] veth1_vlan: entered promiscuous mode [ 116.250095][ T5488] team0: Port device team_slave_0 added [ 116.283079][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.321158][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.331290][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.349315][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.375193][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.396483][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.418674][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.460237][ T5488] team0: Port device team_slave_1 added [ 116.513269][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.544202][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.564459][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.585453][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.609198][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.630576][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.654111][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.674164][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.703128][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.800500][ T5253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.819972][ T5253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.846905][ T5253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.855740][ T5253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.907677][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.914680][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.940659][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.964600][ T5488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.042714][ T5365] veth0_macvtap: entered promiscuous mode [ 117.109359][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.131985][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.158016][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.175689][ T5488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.216030][ T5365] veth1_macvtap: entered promiscuous mode [ 117.502625][ T5488] hsr_slave_0: entered promiscuous mode [ 117.532233][ T5488] hsr_slave_1: entered promiscuous mode [ 117.554332][ T5488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.581305][ T5488] Cannot create hsr debugfs directory [ 117.706670][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.716258][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.948446][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.977608][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.016461][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.046490][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.084669][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.116051][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.155597][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.198942][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.217310][ T5094] Bluetooth: hci5: command tx timeout [ 118.285962][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.560361][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.598276][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.625925][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.647800][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.676538][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.697742][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.719008][ T5365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.746558][ T5365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.775905][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.858173][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.886273][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.953335][ T5365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.014975][ T5365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.034618][ T5365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.056636][ T5365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.195008][ T5488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.296622][ T5094] Bluetooth: hci5: command tx timeout [ 120.369084][ T5603] FAULT_INJECTION: forcing a failure. [ 120.369084][ T5603] name failslab, interval 1, probability 0, space 0, times 0 [ 120.435546][ T5603] CPU: 0 PID: 5603 Comm: syz.4.30 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 120.445491][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.455579][ T5603] Call Trace: [ 120.458886][ T5603] [ 120.461841][ T5603] dump_stack_lvl+0x241/0x360 [ 120.466573][ T5603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.471808][ T5603] ? __pfx__printk+0x10/0x10 [ 120.476442][ T5603] ? do_raw_spin_lock+0x14f/0x370 [ 120.481512][ T5603] should_fail_ex+0x3b0/0x4e0 [ 120.486236][ T5603] ? alloc_empty_file+0x9e/0x1d0 [ 120.491209][ T5603] should_failslab+0x9/0x20 [ 120.495760][ T5603] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 120.501175][ T5603] alloc_empty_file+0x9e/0x1d0 [ 120.505972][ T5603] alloc_file_pseudo+0x1da/0x290 [ 120.510943][ T5603] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 120.516438][ T5603] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.521685][ T5603] sock_alloc_file+0xb8/0x290 [ 120.526392][ T5603] do_accept+0x3b8/0x6c0 [ 120.530674][ T5603] ? __pfx_do_accept+0x10/0x10 [ 120.535578][ T5603] __sys_accept4+0x11e/0x1c0 [ 120.540205][ T5603] ? __pfx___sys_accept4+0x10/0x10 [ 120.545352][ T5603] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.551726][ T5603] ? do_syscall_64+0x100/0x230 [ 120.556560][ T5603] __x64_sys_accept4+0x9a/0xb0 [ 120.561379][ T5603] do_syscall_64+0xf3/0x230 [ 120.565906][ T5603] ? clear_bhb_loop+0x35/0x90 [ 120.570603][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.576624][ T5603] RIP: 0033:0x7fe944b75bd9 [ 120.581067][ T5603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.600685][ T5603] RSP: 002b:00007fe945995048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 120.609146][ T5603] RAX: ffffffffffffffda RBX: 00007fe944d04038 RCX: 00007fe944b75bd9 [ 120.617125][ T5603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 120.625161][ T5603] RBP: 00007fe9459950a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.633152][ T5603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.641138][ T5603] R13: 000000000000006e R14: 00007fe944d04038 R15: 00007ffc987b3028 [ 120.649135][ T5603] [ 120.652177][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.795501][ T5488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.019445][ T5488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.299807][ T5488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.565115][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.623389][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.692057][ T1044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.740965][ T1044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.945109][ T5488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.983069][ T5488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.123583][ T5488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.195799][ T5488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.266491][ T5135] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.536534][ T5135] usb 5-1: Using ep0 maxpacket: 8 [ 123.554242][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.596576][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.644231][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.666475][ T5135] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 123.868770][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 123.908667][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 123.921178][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 123.933929][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 124.669343][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 124.704673][ T5488] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.725934][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 124.786633][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 125.067823][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.075038][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.084699][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 125.098782][ T5135] usb 5-1: config 0 interface 0 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 125.114290][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.121523][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.200326][ T5201] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.661686][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.751604][ T5201] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 125.822387][ T5201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.867915][ T5135] usb 5-1: Dual-Role OTG device on HNP port [ 125.881673][ T5135] usb 5-1: can't set HNP mode: -71 [ 125.994499][ T5201] usb 4-1: config 0 descriptor?? [ 126.103987][ T5201] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 127.184523][ T5488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.263430][ T5201] usb 4-1: USB disconnect, device number 3 [ 127.852709][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.044830][ T5488] veth0_vlan: entered promiscuous mode [ 128.140840][ T5488] veth1_vlan: entered promiscuous mode [ 128.175222][ T5702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.96'. [ 128.237994][ T5702] FAULT_INJECTION: forcing a failure. [ 128.237994][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 128.281083][ T5702] CPU: 0 PID: 5702 Comm: syz.3.96 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 128.291065][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 128.301155][ T5702] Call Trace: [ 128.304468][ T5702] [ 128.305471][ T5488] veth0_macvtap: entered promiscuous mode [ 128.307414][ T5702] dump_stack_lvl+0x241/0x360 [ 128.317880][ T5702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.323122][ T5702] ? __pfx__printk+0x10/0x10 [ 128.327809][ T5702] ? __lock_acquire+0x1346/0x1fd0 [ 128.332923][ T5702] should_fail_ex+0x3b0/0x4e0 [ 128.337644][ T5702] ? __alloc_skb+0x1c3/0x440 [ 128.342255][ T5702] should_failslab+0x9/0x20 [ 128.346793][ T5702] kmem_cache_alloc_node_noprof+0x71/0x320 [ 128.352611][ T5702] __alloc_skb+0x1c3/0x440 [ 128.357049][ T5702] ? __pfx___alloc_skb+0x10/0x10 [ 128.362098][ T5702] ? km_report+0x240/0x240 [ 128.366544][ T5702] ? __pfx_lock_release+0x10/0x10 [ 128.371579][ T5702] xfrm_alloc_compat+0x1b6/0x1680 [ 128.376665][ T5702] ? xfrm_get_translator+0x19/0x240 [ 128.381891][ T5702] dump_one_state+0x282/0x3f0 [ 128.386586][ T5702] xfrm_alloc_userspi+0x91d/0xdf0 [ 128.391650][ T5702] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 128.397207][ T5702] ? safesetid_security_capable+0xb2/0x1d0 [ 128.403024][ T5702] ? __nla_parse+0x40/0x60 [ 128.407457][ T5702] xfrm_user_rcv_msg+0x75d/0xa80 [ 128.412411][ T5702] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.417908][ T5702] ? __mutex_trylock_common+0x183/0x2e0 [ 128.423468][ T5702] ? __pfx___might_resched+0x10/0x10 [ 128.428827][ T5702] netlink_rcv_skb+0x1e3/0x430 [ 128.433608][ T5702] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.439074][ T5702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.444423][ T5702] xfrm_netlink_rcv+0x79/0x90 [ 128.449123][ T5702] netlink_unicast+0x7ea/0x980 [ 128.453909][ T5702] ? __pfx_netlink_unicast+0x10/0x10 [ 128.459199][ T5702] ? __virt_addr_valid+0x183/0x530 [ 128.464326][ T5702] ? __check_object_size+0x49c/0x900 [ 128.469620][ T5702] ? bpf_lsm_netlink_send+0x9/0x10 [ 128.474801][ T5702] netlink_sendmsg+0x8db/0xcb0 [ 128.479596][ T5702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.484911][ T5702] ? __import_iovec+0x536/0x820 [ 128.489777][ T5702] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.495068][ T5702] ? security_socket_sendmsg+0x87/0xb0 [ 128.500574][ T5702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.505894][ T5702] __sock_sendmsg+0x221/0x270 [ 128.510588][ T5702] ____sys_sendmsg+0x525/0x7d0 [ 128.515373][ T5702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.520688][ T5702] __sys_sendmsg+0x2b0/0x3a0 [ 128.525295][ T5702] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.530435][ T5702] ? vfs_write+0x7c4/0xc90 [ 128.534910][ T5702] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.541249][ T5702] ? do_syscall_64+0x100/0x230 [ 128.546025][ T5702] ? do_syscall_64+0xb6/0x230 [ 128.550708][ T5702] do_syscall_64+0xf3/0x230 [ 128.555218][ T5702] ? clear_bhb_loop+0x35/0x90 [ 128.559904][ T5702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.565810][ T5702] RIP: 0033:0x7f62a4575bd9 [ 128.570239][ T5702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.589852][ T5702] RSP: 002b:00007f62a52b3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.598277][ T5702] RAX: ffffffffffffffda RBX: 00007f62a4703f60 RCX: 00007f62a4575bd9 [ 128.606264][ T5702] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 128.614237][ T5702] RBP: 00007f62a52b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.622211][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.630188][ T5702] R13: 000000000000000b R14: 00007f62a4703f60 R15: 00007fff447fff68 [ 128.638182][ T5702] [ 128.662016][ T5707] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 128.733958][ T5488] veth1_macvtap: entered promiscuous mode [ 128.844421][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.880085][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.922555][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.959925][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.003082][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.016633][ T5201] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.045394][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.088222][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.139247][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.172644][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.226532][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.246545][ T5201] usb 4-1: Using ep0 maxpacket: 8 [ 129.260206][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.278757][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.295570][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.330298][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.341838][ T5201] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 129.361978][ T5201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 129.372957][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.413057][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.423920][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 129.466502][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.476607][ T5201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 129.495330][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.512755][ T5201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 129.550104][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.566436][ T5201] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 129.586456][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.598836][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 129.616454][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.626308][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.646505][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 129.676679][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 129.706682][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.722371][ T5201] usb 4-1: config 0 interface 0 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 129.748387][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.756564][ T5201] usb 4-1: Dual-Role OTG device on HNP port [ 129.796509][ T5201] usb 4-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 129.805610][ T5201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.859783][ T5488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.885013][ T5201] usb 4-1: config 0 descriptor?? [ 129.906464][ T5488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.915248][ T5488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.926775][ T5709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.935002][ T5709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.969941][ T5201] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 129.981391][ T5488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.992467][ T5201] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 130.366122][ T5134] usb 4-1: USB disconnect, device number 4 [ 130.759380][ T5134] ftdi_sio 4-1:0.0: device disconnected [ 131.087782][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.095702][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.187699][ T2805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.200743][ T2805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.587016][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.597604][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.250459][ T5740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'. [ 134.706791][ T5755] netlink: 44 bytes leftover after parsing attributes in process `syz.4.108'. [ 134.961476][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 135.496482][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 135.507637][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1289, setting to 64 [ 135.526671][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 135.546764][ T8] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 135.579810][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 135.606591][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 135.636578][ T8] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 135.673578][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 135.710046][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 135.748679][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 135.787195][ T8] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 135.823572][ T8] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 135.847834][ T8] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 135.876969][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 135.933929][ T8] usb 3-1: Dual-Role OTG device on HNP port [ 135.954513][ T29] audit: type=1326 audit(1720890494.267:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5771 comm="syz.3.116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62a4575bd9 code=0x0 [ 135.957134][ T8] usb 3-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 136.020698][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.082779][ T8] usb 3-1: config 0 descriptor?? [ 136.355570][ T5754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.378574][ T8] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 136.400136][ T8] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 136.642571][ T5134] usb 3-1: USB disconnect, device number 8 [ 136.674201][ T5134] ftdi_sio 3-1:0.0: device disconnected [ 137.255198][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.264385][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.276224][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.285040][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.293336][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 137.300827][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.863719][ T5798] FAULT_INJECTION: forcing a failure. [ 137.863719][ T5798] name failslab, interval 1, probability 0, space 0, times 0 [ 137.876510][ T5798] CPU: 1 PID: 5798 Comm: syz.2.122 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 137.886523][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.896606][ T5798] Call Trace: [ 137.899908][ T5798] [ 137.902862][ T5798] dump_stack_lvl+0x241/0x360 [ 137.907599][ T5798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.912839][ T5798] ? __pfx__printk+0x10/0x10 [ 137.917475][ T5798] ? __pfx___might_resched+0x10/0x10 [ 137.922810][ T5798] should_fail_ex+0x3b0/0x4e0 [ 137.927529][ T5798] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 137.933278][ T5798] should_failslab+0x9/0x20 [ 137.937832][ T5798] __kmalloc_noprof+0xd8/0x400 [ 137.942647][ T5798] ? kfree+0x4e/0x360 [ 137.946675][ T5798] tomoyo_realpath_from_path+0xcf/0x5e0 [ 137.952270][ T5798] tomoyo_path_number_perm+0x23a/0x880 [ 137.957791][ T5798] ? tomoyo_path_number_perm+0x208/0x880 [ 137.963466][ T5798] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.969532][ T5798] ? __fget_files+0x29/0x470 [ 137.974207][ T5798] ? __fget_files+0x3f6/0x470 [ 137.978927][ T5798] ? __fget_files+0x29/0x470 [ 137.983565][ T5798] security_file_ioctl+0x75/0xb0 [ 137.988548][ T5798] __se_sys_ioctl+0x47/0x170 [ 137.993184][ T5798] do_syscall_64+0xf3/0x230 [ 137.997726][ T5798] ? clear_bhb_loop+0x35/0x90 [ 138.002491][ T5798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.008444][ T5798] RIP: 0033:0x7fd50f175bd9 [ 138.012889][ T5798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.032614][ T5798] RSP: 002b:00007fd50ff6c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.041079][ T5798] RAX: ffffffffffffffda RBX: 00007fd50f304110 RCX: 00007fd50f175bd9 [ 138.049077][ T5798] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000007 [ 138.057098][ T5798] RBP: 00007fd50ff6c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.065112][ T5798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.073135][ T5798] R13: 000000000000006e R14: 00007fd50f304110 R15: 00007ffda44866d8 [ 138.081183][ T5798] [ 138.086176][ T5798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 138.751237][ T1063] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.080223][ T1063] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.318177][ T1063] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.346221][ T5094] Bluetooth: hci2: command tx timeout [ 139.510275][ T1063] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.346744][ T1063] bridge_slave_1: left allmulticast mode [ 140.377902][ T1063] bridge_slave_1: left promiscuous mode [ 140.384542][ T1063] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.433765][ T1063] bridge_slave_0: left allmulticast mode [ 140.457190][ T1063] bridge_slave_0: left promiscuous mode [ 140.463477][ T1063] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.947299][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 141.028286][ T29] audit: type=1326 audit(1720890499.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5837 comm="syz.2.130" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd50f175bd9 code=0x0 [ 141.416773][ T5094] Bluetooth: hci2: command tx timeout [ 141.977456][ T1063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.995387][ T1063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.031346][ T1063] bond0 (unregistering): Released all slaves [ 142.169143][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 142.222158][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.129'. [ 142.276987][ T5833] batadv0: entered promiscuous mode [ 142.857200][ T5137] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.268695][ T5137] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.333045][ T5137] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.367183][ T5137] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.546682][ T5094] Bluetooth: hci2: command tx timeout [ 144.126571][ T5137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.155100][ T5137] usb 4-1: config 0 descriptor?? [ 144.216832][ T1063] hsr_slave_0: left promiscuous mode [ 144.366841][ T1063] hsr_slave_1: left promiscuous mode [ 144.368209][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.368253][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.370295][ T1063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.370327][ T1063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.489060][ T1063] veth1_macvtap: left promiscuous mode [ 144.489187][ T1063] veth0_macvtap: left promiscuous mode [ 144.489391][ T1063] veth1_vlan: left promiscuous mode [ 144.489540][ T1063] veth0_vlan: left promiscuous mode [ 144.772417][ T29] audit: type=1326 audit(1720890503.084:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5882 comm="syz.2.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7fd50f175bd9 code=0x0 [ 145.583534][ T5094] Bluetooth: hci2: command tx timeout [ 145.747667][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.757331][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.777752][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.797548][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.805656][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 145.813295][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 146.178611][ T2913] usb 4-1: USB disconnect, device number 5 [ 146.768412][ T5913] could not allocate digest TFM handle rmd128 [ 146.991088][ T1063] team0 (unregistering): Port device team_slave_1 removed [ 147.023002][ T29] audit: type=1326 audit(1720890505.317:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5918 comm="syz.3.142" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62a4575bd9 code=0x0 [ 147.139488][ T1063] team0 (unregistering): Port device team_slave_0 removed [ 147.925369][ T5094] Bluetooth: hci6: command tx timeout [ 148.291445][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.317336][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.344768][ T5789] bridge_slave_0: entered allmulticast mode [ 148.353202][ T5789] bridge_slave_0: entered promiscuous mode [ 148.397096][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.404242][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.455658][ T5789] bridge_slave_1: entered allmulticast mode [ 148.493723][ T5789] bridge_slave_1: entered promiscuous mode [ 148.532165][ T5907] bridge0: port 3(vlan0) entered blocking state [ 148.546499][ T5907] bridge0: port 3(vlan0) entered disabled state [ 148.553038][ T5907] vlan0: entered allmulticast mode [ 148.607567][ T5907] vlan0: left allmulticast mode [ 148.837505][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 148.912342][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.014567][ T5930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.143'. [ 149.042177][ T5929] batadv0: entered promiscuous mode [ 149.108028][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.415690][ T5789] team0: Port device team_slave_0 added [ 149.451512][ T5789] team0: Port device team_slave_1 added [ 150.027902][ T5094] Bluetooth: hci6: command tx timeout [ 151.565146][ T5947] sched: RT throttling activated [ 151.985313][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.011712][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.056818][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.084080][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.112092][ T5094] Bluetooth: hci6: command tx timeout [ 152.127962][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.220754][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.447108][ T29] audit: type=1326 audit(1720890510.707:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5971 comm="syz.3.152" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62a4575bd9 code=0x0 [ 152.676087][ T5789] hsr_slave_0: entered promiscuous mode [ 152.822441][ T5789] hsr_slave_1: entered promiscuous mode [ 153.603539][ T5988] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.744492][ T5904] chnl_net:caif_netlink_parms(): no params data found [ 153.849407][ T5991] FAULT_INJECTION: forcing a failure. [ 153.849407][ T5991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.906150][ T5991] CPU: 1 PID: 5991 Comm: syz.2.157 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 153.916200][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 153.926289][ T5991] Call Trace: [ 153.929576][ T5991] [ 153.932512][ T5991] dump_stack_lvl+0x241/0x360 [ 153.937221][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.942441][ T5991] ? __pfx__printk+0x10/0x10 [ 153.947058][ T5991] should_fail_ex+0x3b0/0x4e0 [ 153.951755][ T5991] _copy_from_user+0x2f/0xe0 [ 153.956445][ T5991] ipv6_set_opt_hdr+0x1fc/0x770 [ 153.961399][ T5991] do_ipv6_setsockopt+0x14ac/0x3630 [ 153.966622][ T5991] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 153.972198][ T5991] ? get_pid_task+0x23/0x1f0 [ 153.976821][ T5991] ? __pfx_lock_release+0x10/0x10 [ 153.981856][ T5991] ? kstrtouint_from_user+0x128/0x190 [ 153.987260][ T5991] ? mark_lock+0x9a/0x350 [ 153.991605][ T5991] ? __lock_acquire+0x1346/0x1fd0 [ 153.996748][ T5991] ? __pfx_lock_acquire+0x10/0x10 [ 154.001804][ T5991] ipv6_setsockopt+0x5c/0x1a0 [ 154.006511][ T5991] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.012423][ T5991] do_sock_setsockopt+0x3af/0x720 [ 154.017480][ T5991] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 154.023048][ T5991] ? __fget_files+0x29/0x470 [ 154.027656][ T5991] ? __fget_files+0x3f6/0x470 [ 154.032358][ T5991] __sys_setsockopt+0x1ae/0x250 [ 154.037240][ T5991] __x64_sys_setsockopt+0xb5/0xd0 [ 154.042286][ T5991] do_syscall_64+0xf3/0x230 [ 154.046797][ T5991] ? clear_bhb_loop+0x35/0x90 [ 154.051482][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.057391][ T5991] RIP: 0033:0x7fd50f175bd9 [ 154.061812][ T5991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.081432][ T5991] RSP: 002b:00007fd50ffae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.089856][ T5991] RAX: ffffffffffffffda RBX: 00007fd50f303f60 RCX: 00007fd50f175bd9 [ 154.097831][ T5991] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000004 [ 154.105809][ T5991] RBP: 00007fd50ffae0a0 R08: 0000000000000018 R09: 0000000000000000 [ 154.113787][ T5991] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 154.121785][ T5991] R13: 000000000000000b R14: 00007fd50f303f60 R15: 00007ffda44866d8 [ 154.129778][ T5991] [ 154.206114][ T5094] Bluetooth: hci6: command tx timeout [ 158.085749][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.099852][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.122317][ T5904] bridge_slave_0: entered allmulticast mode [ 158.148751][ T5904] bridge_slave_0: entered promiscuous mode [ 158.325208][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.353728][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.376984][ T5904] bridge_slave_1: entered allmulticast mode [ 158.395523][ T5904] bridge_slave_1: entered promiscuous mode [ 158.869094][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.944052][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.253601][ T5904] team0: Port device team_slave_0 added [ 159.302314][ T5904] team0: Port device team_slave_1 added [ 159.511181][ T6036] capability: warning: `syz.2.163' uses 32-bit capabilities (legacy support in use) [ 159.580265][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.620836][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.742104][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.802299][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.819730][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.845739][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.923144][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.214795][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 160.287151][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 160.463566][ T5904] hsr_slave_0: entered promiscuous mode [ 160.471338][ T5904] hsr_slave_1: entered promiscuous mode [ 160.498049][ T5904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.505665][ T5904] Cannot create hsr debugfs directory [ 160.547376][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 160.588146][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.616184][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 161.648693][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 161.668359][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 161.685103][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 161.695900][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.703571][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 162.825213][ T5904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.825594][ T5094] Bluetooth: hci7: command tx timeout [ 163.860059][ T5904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.059942][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.335719][ T5904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.500364][ T5904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.705375][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.372186][ T6090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 165.566219][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.573513][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.699160][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.706391][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.771339][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 165.873783][ T6041] chnl_net:caif_netlink_parms(): no params data found [ 165.884303][ T5094] Bluetooth: hci7: command tx timeout [ 165.969421][ T5904] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.005325][ T5904] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.125627][ T5904] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.196142][ T5201] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.213384][ T5904] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.432003][ T5201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.474311][ T5201] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 166.567914][ T5201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.643060][ T5201] usb 4-1: config 0 descriptor?? [ 166.683651][ T5201] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 166.693455][ T5201] usb 4-1: No valid video chain found. [ 166.893235][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.944516][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.951832][ T6041] bridge_slave_0: entered allmulticast mode [ 167.013683][ T6041] bridge_slave_0: entered promiscuous mode [ 167.064964][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.074130][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.099394][ T6041] bridge_slave_1: entered allmulticast mode [ 167.127418][ T6041] bridge_slave_1: entered promiscuous mode [ 167.390939][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.452163][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.635362][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.644843][ T6136] netlink: 'syz.2.177': attribute type 3 has an invalid length. [ 167.678509][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 167.758376][ T6041] team0: Port device team_slave_0 added [ 167.818636][ T6041] team0: Port device team_slave_1 added [ 167.936799][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.954997][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.970332][ T5094] Bluetooth: hci7: command tx timeout [ 167.987616][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.000920][ T5135] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.120037][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.164943][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.225419][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.236291][ T5135] usb 3-1: Using ep0 maxpacket: 32 [ 168.257776][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.271735][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 168.321381][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.365202][ T5135] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 168.395819][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.444845][ T5135] usb 3-1: config 0 descriptor?? [ 168.459251][ T6041] hsr_slave_0: entered promiscuous mode [ 168.474181][ T6139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.485885][ T5135] hub 3-1:0.0: USB hub found [ 168.497712][ T6041] hsr_slave_1: entered promiscuous mode [ 168.515141][ T6041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.522860][ T6041] Cannot create hsr debugfs directory [ 168.565863][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.657028][ T5789] veth0_vlan: entered promiscuous mode [ 168.829216][ T5789] veth1_vlan: entered promiscuous mode [ 168.895293][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.944039][ T5201] usb 4-1: USB disconnect, device number 6 [ 169.056914][ T5135] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 169.068300][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.075510][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.112978][ T5135] usbhid 3-1:0.0: can't add hid device: -71 [ 169.129549][ T5135] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 169.208334][ T5135] usb 3-1: USB disconnect, device number 9 [ 169.311396][ T5789] veth0_macvtap: entered promiscuous mode [ 169.409087][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.416258][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.548673][ T5789] veth1_macvtap: entered promiscuous mode [ 169.686479][ T6041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.921468][ T6041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.061509][ T5094] Bluetooth: hci7: command tx timeout [ 170.257738][ T6041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.371674][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.413296][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.453440][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.504724][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.538056][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.573722][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.602852][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.647737][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.678331][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.702602][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.732270][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.899385][ T6041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.999927][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.053220][ T6192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.086940][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.116892][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.157104][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.187272][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.227522][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.247588][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.277908][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.297916][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.338154][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.380061][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.469096][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.508583][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.539233][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.596383][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.977941][ T6041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.106218][ T6041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.219517][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.953334][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.039710][ T6041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.099846][ T6041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.293701][ T3858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.336116][ T3858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.365150][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.814048][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.915800][ T6041] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.970136][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.977491][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.057233][ T5087] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.094398][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.101673][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.257894][ T5087] usb 1-1: Using ep0 maxpacket: 8 [ 175.279917][ T5087] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.340753][ T5087] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 175.388546][ T5087] usb 1-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 175.448615][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.481475][ T5087] usb 1-1: config 0 descriptor?? [ 175.495212][ T5087] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 175.532584][ T5087] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 175.606514][ T5904] veth0_vlan: entered promiscuous mode [ 175.687607][ T5904] veth1_vlan: entered promiscuous mode [ 175.747288][ T5087] usb 1-1: USB disconnect, device number 3 [ 175.766736][ T5087] ftdi_sio 1-1:0.0: device disconnected [ 175.878070][ T5904] veth0_macvtap: entered promiscuous mode [ 175.943254][ T5904] veth1_macvtap: entered promiscuous mode [ 176.052449][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.080545][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.129669][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.161157][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.198220][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.234784][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.256842][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.280732][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.301203][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.322262][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.380571][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.403512][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.426753][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.508831][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.576916][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.604747][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.634704][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.695964][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.744978][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.785192][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.815943][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.855501][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.875532][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.897474][ T5904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.910577][ T5904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.931502][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.103813][ T5904] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.148092][ T5904] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.157750][ T5904] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.166615][ T5904] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.210793][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.272201][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.280073][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.403538][ T6041] veth0_vlan: entered promiscuous mode [ 178.411904][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.464197][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.497411][ T6041] veth1_vlan: entered promiscuous mode [ 178.924754][ T6041] veth0_macvtap: entered promiscuous mode [ 178.936074][ T5136] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.024492][ T6041] veth1_macvtap: entered promiscuous mode [ 179.149946][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.172703][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.255923][ T5136] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.287890][ T5136] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.301741][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.301741][ T5136] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 179.301774][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.331963][ T5136] usb 3-1: config 0 descriptor?? [ 179.367157][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.410864][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.431394][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.476607][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.496330][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.508277][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.526712][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.544183][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.577056][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.609163][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.632335][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.660029][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.707771][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.768120][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.804122][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.814459][ T5136] wacom 0003:056A:0043.0001: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 179.819279][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.860459][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.884112][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.920938][ T5136] wacom 0003:056A:0043.0001: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 179.937715][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.943295][ T5136] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0001/input/input5 [ 179.958986][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.997727][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.028312][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.059893][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.142809][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.177616][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.181377][ T5136] usb 3-1: USB disconnect, device number 10 [ 180.231294][ T6041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.260816][ T6041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.296046][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.452285][ T6041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.484082][ T6041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.526501][ T6041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.542588][ T6041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.075965][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.083881][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.264306][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.298333][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.542887][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.781557][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.213'. [ 183.000518][ T5094] Bluetooth: hci0: Unknown advertising packet type: 0x76 [ 183.124387][ T6345] input: syz0 as /devices/virtual/input/input8 [ 183.234464][ T5135] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.467842][ T5135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.504828][ T5135] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 183.548814][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.598960][ T5135] usb 1-1: config 0 descriptor?? [ 183.617321][ T5135] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 183.631881][ T5135] usb 1-1: No valid video chain found. [ 185.204379][ T6371] FAULT_INJECTION: forcing a failure. [ 185.204379][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 185.283164][ T6371] CPU: 1 PID: 6371 Comm: syz.3.222 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 185.293218][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.303306][ T6371] Call Trace: [ 185.306615][ T6371] [ 185.309570][ T6371] dump_stack_lvl+0x241/0x360 [ 185.314297][ T6371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.319538][ T6371] ? __pfx__printk+0x10/0x10 [ 185.324168][ T6371] ? nf_ct_pernet+0x45/0x270 [ 185.328800][ T6371] ? __pfx_lock_release+0x10/0x10 [ 185.333860][ T6371] ? nf_conntrack_find_get+0x46d/0x680 [ 185.339354][ T6371] ? nf_conntrack_find_get+0x102/0x680 [ 185.344857][ T6371] should_fail_ex+0x3b0/0x4e0 [ 185.349587][ T6371] ? __nf_conntrack_alloc+0x8f/0x380 [ 185.354904][ T6371] should_failslab+0x9/0x20 [ 185.359437][ T6371] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 185.364856][ T6371] __nf_conntrack_alloc+0x8f/0x380 [ 185.370027][ T6371] ctnetlink_new_conntrack+0x662/0x2240 [ 185.375614][ T6371] ? __mutex_trylock_common+0x183/0x2e0 [ 185.381193][ T6371] ? __pfx___might_resched+0x10/0x10 [ 185.386517][ T6371] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 185.392537][ T6371] ? rcu_is_watching+0x15/0xb0 [ 185.397337][ T6371] ? trace_contention_end+0x3c/0x120 [ 185.402664][ T6371] ? __mutex_lock+0x2ef/0xd70 [ 185.407388][ T6371] ? __pfx___mutex_lock+0x10/0x10 [ 185.412458][ T6371] ? nfnetlink_rcv_msg+0x225/0x1180 [ 185.417706][ T6371] nfnetlink_rcv_msg+0xbec/0x1180 [ 185.422771][ T6371] ? nfnetlink_rcv_msg+0x225/0x1180 [ 185.428040][ T6371] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.433570][ T6371] ? kasan_save_track+0x51/0x80 [ 185.438456][ T6371] ? kasan_save_track+0x3f/0x80 [ 185.443349][ T6371] ? kasan_save_free_info+0x40/0x50 [ 185.448586][ T6371] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 185.453828][ T6371] ? __netlink_deliver_tap+0x54d/0x7c0 [ 185.459321][ T6371] ? netlink_deliver_tap+0x19d/0x1b0 [ 185.464644][ T6371] ? netlink_unicast+0x7b8/0x980 [ 185.469665][ T6371] ? netlink_sendmsg+0x8db/0xcb0 [ 185.474641][ T6371] ? ____sys_sendmsg+0x525/0x7d0 [ 185.479621][ T6371] netlink_rcv_skb+0x1e3/0x430 [ 185.484431][ T6371] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 185.489945][ T6371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.495281][ T6371] ? safesetid_security_capable+0xb2/0x1d0 [ 185.501119][ T6371] ? bpf_lsm_capable+0x9/0x10 [ 185.505834][ T6371] ? security_capable+0x90/0xb0 [ 185.510735][ T6371] nfnetlink_rcv+0x297/0x2a80 [ 185.515448][ T6371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.521813][ T6371] ? __local_bh_enable_ip+0x168/0x200 [ 185.527212][ T6371] ? lockdep_hardirqs_on+0x99/0x150 [ 185.532448][ T6371] ? __local_bh_enable_ip+0x168/0x200 [ 185.537850][ T6371] ? dev_hard_start_xmit+0x773/0x7e0 [ 185.543169][ T6371] ? __dev_queue_xmit+0x2d2/0x3d30 [ 185.548319][ T6371] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 185.554105][ T6371] ? __dev_queue_xmit+0x2d2/0x3d30 [ 185.559326][ T6371] ? __dev_queue_xmit+0x16c9/0x3d30 [ 185.564573][ T6371] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 185.569742][ T6371] ? __dev_queue_xmit+0x2d2/0x3d30 [ 185.574914][ T6371] ? ref_tracker_free+0x643/0x7e0 [ 185.579979][ T6371] ? __asan_memcpy+0x40/0x70 [ 185.584617][ T6371] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.590044][ T6371] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.595285][ T6371] ? skb_clone+0x240/0x390 [ 185.599751][ T6371] ? __pfx_lock_release+0x10/0x10 [ 185.604818][ T6371] ? __netlink_deliver_tap+0x77e/0x7c0 [ 185.610342][ T6371] ? netlink_deliver_tap+0x2e/0x1b0 [ 185.615592][ T6371] netlink_unicast+0x7ea/0x980 [ 185.620429][ T6371] ? __pfx_netlink_unicast+0x10/0x10 [ 185.625752][ T6371] ? __virt_addr_valid+0x183/0x530 [ 185.630978][ T6371] ? __check_object_size+0x49c/0x900 [ 185.636299][ T6371] ? bpf_lsm_netlink_send+0x9/0x10 [ 185.641461][ T6371] netlink_sendmsg+0x8db/0xcb0 [ 185.646292][ T6371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.651636][ T6371] ? __import_iovec+0x536/0x820 [ 185.656533][ T6371] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.661855][ T6371] ? security_socket_sendmsg+0x87/0xb0 [ 185.667366][ T6371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.672695][ T6371] __sock_sendmsg+0x221/0x270 [ 185.677416][ T6371] ____sys_sendmsg+0x525/0x7d0 [ 185.682239][ T6371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.687600][ T6371] __sys_sendmsg+0x2b0/0x3a0 [ 185.692243][ T6371] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.697402][ T6371] ? vfs_write+0x7c4/0xc90 [ 185.701915][ T6371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.708280][ T6371] ? do_syscall_64+0x100/0x230 [ 185.713083][ T6371] ? do_syscall_64+0xb6/0x230 [ 185.717800][ T6371] do_syscall_64+0xf3/0x230 [ 185.722335][ T6371] ? clear_bhb_loop+0x35/0x90 [ 185.727044][ T6371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.732986][ T6371] RIP: 0033:0x7f62a4575bd9 [ 185.737435][ T6371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.757080][ T6371] RSP: 002b:00007f62a52b3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.765543][ T6371] RAX: ffffffffffffffda RBX: 00007f62a4703f60 RCX: 00007f62a4575bd9 [ 185.773561][ T6371] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 185.781620][ T6371] RBP: 00007f62a52b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.789637][ T6371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.797829][ T6371] R13: 000000000000000b R14: 00007f62a4703f60 R15: 00007fff447fff68 [ 185.805864][ T6371] [ 185.808931][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.171826][ T29] audit: type=1326 audit(1720890544.244:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f175bd9 code=0x7fc00000 [ 186.699286][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 186.812890][ T29] audit: type=1326 audit(1720890544.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.2.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd50f175bd9 code=0x7fc00000 [ 187.173624][ T9] usb 1-1: USB disconnect, device number 4 [ 188.286093][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 188.535945][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.754272][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 188.817184][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.931478][ T9] usb 4-1: config 0 descriptor?? [ 188.945733][ T9] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 189.007956][ T9] usb 4-1: No valid video chain found. [ 190.177100][ T29] audit: type=1326 audit(1720890548.229:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6441 comm="syz.2.241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd50f175bd9 code=0x0 [ 190.231101][ T6439] input: syz1 as /devices/virtual/input/input9 [ 190.396375][ T6451] kvm: emulating exchange as write [ 190.779091][ T5087] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.978320][ T5087] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.013779][ T5087] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 191.224859][ T5087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.251720][ T5087] usb 5-1: config 0 descriptor?? [ 191.264212][ T5087] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 191.281439][ T5087] usb 5-1: No valid video chain found. [ 191.741863][ T5087] usb 4-1: USB disconnect, device number 7 [ 191.773524][ T6460] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 192.585951][ T6479] xt_CONNSECMARK: invalid mode: 0 [ 196.541649][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.548147][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.848604][ T5201] usb 5-1: USB disconnect, device number 4 [ 198.825450][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 199.753823][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 203.134475][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.144516][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.153295][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.162292][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.171094][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 203.178681][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.175027][ T6488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.437512][ T6488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.692166][ T6488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.835700][ T6488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.163199][ T6554] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 205.256081][ T53] Bluetooth: hci4: command tx timeout [ 205.380332][ T6488] bridge_slave_1: left allmulticast mode [ 205.395022][ T6488] bridge_slave_1: left promiscuous mode [ 205.405824][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.455256][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 205.547815][ T6488] bridge_slave_0: left allmulticast mode [ 205.562914][ T6488] bridge_slave_0: left promiscuous mode [ 205.574897][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.686250][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.718521][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 205.747847][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.786888][ T8] usb 1-1: config 0 descriptor?? [ 205.801279][ T8] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 205.842387][ T8] usb 1-1: No valid video chain found. [ 205.936760][ T5201] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.139458][ T5201] usb 5-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 206.178114][ T5201] usb 5-1: language id specifier not provided by device, defaulting to English [ 206.212432][ T5201] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 206.252365][ T5201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.292161][ T5201] usb 5-1: Product: syz [ 206.299347][ T5201] usb 5-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 206.360831][ T5201] usb 5-1: SerialNumber: syz [ 206.400020][ T5201] usbhid 5-1:250.0: couldn't find an input interrupt endpoint [ 208.255486][ T53] Bluetooth: hci4: command tx timeout [ 209.130221][ T9] usb 5-1: USB disconnect, device number 5 [ 209.360732][ T6488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.383665][ T6488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.400259][ T6488] bond0 (unregistering): Released all slaves [ 209.570035][ T6561] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 209.844586][ T8] usb 1-1: USB disconnect, device number 5 [ 209.979134][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 210.157933][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.276'. [ 210.169052][ T5135] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.198571][ T6589] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 210.312392][ T53] Bluetooth: hci4: command tx timeout [ 210.379547][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 210.405820][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1289, setting to 1024 [ 210.417045][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.427926][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 210.445535][ T5135] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 210.457737][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 210.468619][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 210.478373][ T6488] hsr_slave_0: left promiscuous mode [ 210.479187][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 210.495500][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 210.509485][ T6488] hsr_slave_1: left promiscuous mode [ 210.517657][ T5135] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 210.532999][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 210.550087][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 210.562872][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 210.573765][ T5135] usb 3-1: config 0 interface 0 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 210.589935][ T5135] usb 3-1: Dual-Role OTG device on HNP port [ 210.601772][ T5135] usb 3-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 210.632570][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.655650][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.659162][ T5135] usb 3-1: config 0 descriptor?? [ 210.678546][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.681484][ T6584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.711189][ T6584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 210.735462][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.736618][ T5135] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 210.761399][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.798176][ T5135] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 210.854778][ T6488] veth1_macvtap: left promiscuous mode [ 210.871908][ T6488] veth0_macvtap: left promiscuous mode [ 210.905499][ T6488] veth1_vlan: left promiscuous mode [ 210.948805][ T6488] veth0_vlan: left promiscuous mode [ 210.984930][ T5135] usb 3-1: USB disconnect, device number 11 [ 211.009661][ T5135] ftdi_sio 3-1:0.0: device disconnected [ 212.385759][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 212.393654][ T5094] Bluetooth: hci4: command tx timeout [ 219.387368][ T6633] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.567816][ T6488] team0 (unregistering): Port device team_slave_1 removed [ 219.706795][ T6488] team0 (unregistering): Port device team_slave_0 removed [ 220.155198][ T5135] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 220.362923][ T5135] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.385726][ T5135] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 220.414402][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.443104][ T5135] usb 3-1: config 0 descriptor?? [ 220.465233][ T5135] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 220.489063][ T5135] usb 3-1: No valid video chain found. [ 220.970606][ T6629] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 221.137803][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.167839][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.190139][ T6525] bridge_slave_0: entered allmulticast mode [ 221.215729][ T6525] bridge_slave_0: entered promiscuous mode [ 221.247405][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.262872][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.285088][ T6525] bridge_slave_1: entered allmulticast mode [ 221.304596][ T6525] bridge_slave_1: entered promiscuous mode [ 221.473681][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.517138][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.751456][ T6525] team0: Port device team_slave_0 added [ 221.767567][ T5094] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 221.787725][ T5094] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 221.800569][ T6525] team0: Port device team_slave_1 added [ 221.806562][ T5094] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 221.815759][ T5094] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 221.831185][ T5094] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 221.839160][ T5094] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 222.023661][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.056922][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.138446][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.320975][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.327984][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.398797][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.775295][ T6525] hsr_slave_0: entered promiscuous mode [ 222.804425][ T6525] hsr_slave_1: entered promiscuous mode [ 222.831411][ T5135] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 222.846159][ T5201] usb 3-1: USB disconnect, device number 12 [ 222.851428][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.864539][ T6525] Cannot create hsr debugfs directory [ 222.991123][ T6488] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.044227][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 223.067109][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1289, setting to 1024 [ 223.106914][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.141128][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 223.165211][ T5135] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 223.187075][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 223.212620][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 223.235231][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 223.246328][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 223.257458][ T5135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 223.268299][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 223.281053][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 223.291650][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 223.302817][ T5135] usb 2-1: config 0 interface 0 altsetting 0 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 223.316318][ T5135] usb 2-1: Dual-Role OTG device on HNP port [ 223.322607][ T5135] usb 2-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 223.327397][ T6488] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.331657][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.365169][ T5135] usb 2-1: config 0 descriptor?? [ 223.371100][ T6661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.381155][ T6661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.412788][ T5135] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 223.432019][ T5135] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 223.586066][ T6488] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.760960][ T5135] usb 2-1: USB disconnect, device number 6 [ 223.783322][ T5135] ftdi_sio 2-1:0.0: device disconnected [ 223.820242][ T6488] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.938545][ T5094] Bluetooth: hci8: command tx timeout [ 225.467525][ T5201] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 225.485143][ T6653] chnl_net:caif_netlink_parms(): no params data found [ 225.532249][ T6488] bridge_slave_1: left allmulticast mode [ 225.539927][ T6488] bridge_slave_1: left promiscuous mode [ 225.545805][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.601582][ T6488] bridge_slave_0: left allmulticast mode [ 225.607301][ T6488] bridge_slave_0: left promiscuous mode [ 225.624385][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.678936][ T5201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.690419][ T5201] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 225.743211][ T5201] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 225.782955][ T5201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.845035][ T5201] usb 1-1: config 0 descriptor?? [ 225.862170][ T6679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.021388][ T5094] Bluetooth: hci8: command tx timeout [ 226.199905][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.237672][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.312643][ T6689] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 226.319739][ T6689] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 226.366196][ T6689] vhci_hcd vhci_hcd.0: Device attached [ 226.623854][ T5087] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 226.727123][ T6488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.764820][ T6488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.796991][ T6488] bond0 (unregistering): Released all slaves [ 226.901270][ T6691] vhci_hcd: connection reset by peer [ 226.913656][ T5201] appletouch 1-1:0.0: Failed to read mode from device. [ 226.929307][ T35] vhci_hcd: stop threads [ 226.947828][ T35] vhci_hcd: release socket [ 226.961318][ T5201] appletouch 1-1:0.0: probe with driver appletouch failed with error -5 [ 226.986049][ T35] vhci_hcd: disconnect device [ 226.993700][ T5201] usb 1-1: USB disconnect, device number 6 [ 228.113403][ T5094] Bluetooth: hci8: command tx timeout [ 230.198021][ T4477] Bluetooth: hci8: command tx timeout [ 230.995752][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 231.055374][ T6488] hsr_slave_0: left promiscuous mode [ 231.079730][ T6488] hsr_slave_1: left promiscuous mode [ 231.096505][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.109463][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.128025][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.149099][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.197896][ T6488] veth1_macvtap: left promiscuous mode [ 231.211560][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 231.230721][ T6488] veth0_macvtap: left promiscuous mode [ 231.238343][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 231.259825][ T6488] veth1_vlan: left promiscuous mode [ 231.265218][ T6488] veth0_vlan: left promiscuous mode [ 231.270648][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 231.290926][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.332300][ T9] usb 3-1: config 0 descriptor?? [ 231.360241][ T6705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.580636][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.610838][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.632756][ T9] ath6kl: Failed to submit usb control message: -71 [ 231.657379][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 231.679573][ T9] ath6kl: Unable to send get target info: -71 [ 231.709276][ T9] ath6kl: Failed to init ath6kl core: -71 [ 231.733981][ T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 231.778473][ T9] usb 3-1: USB disconnect, device number 13 [ 231.790974][ T5087] vhci_hcd: vhci_device speed not set [ 232.759629][ T6488] team0 (unregistering): Port device team_slave_1 removed [ 232.869877][ T6488] team0 (unregistering): Port device team_slave_0 removed [ 234.657514][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.677300][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.684648][ T6653] bridge_slave_0: entered allmulticast mode [ 234.709139][ T6653] bridge_slave_0: entered promiscuous mode [ 234.740359][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.776743][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.796904][ T6653] bridge_slave_1: entered allmulticast mode [ 234.806759][ T6653] bridge_slave_1: entered promiscuous mode [ 234.980478][ T6653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.009740][ T6653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.182392][ T6525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.200852][ T6525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.228498][ T6525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.265779][ T6653] team0: Port device team_slave_0 added [ 235.274336][ T6525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.312131][ T6653] team0: Port device team_slave_1 added [ 235.429780][ T5087] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.460351][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.467355][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.493416][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.583606][ T6653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.607274][ T6653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.625829][ T6653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.669030][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.688952][ T5087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42208, setting to 1024 [ 235.725209][ T5087] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 235.737310][ T6653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.764963][ T5087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.802881][ T5087] usb 3-1: config 0 descriptor?? [ 235.809122][ T6737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.050845][ T6653] hsr_slave_0: entered promiscuous mode [ 236.098886][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.108389][ T6653] hsr_slave_1: entered promiscuous mode [ 236.114303][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.176766][ T6749] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 236.183420][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 236.199806][ T6653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.213846][ T6653] Cannot create hsr debugfs directory [ 236.226537][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 236.301905][ T6750] vhci_hcd: connection closed [ 236.302299][ T51] vhci_hcd: stop threads [ 236.330002][ T5087] appletouch 3-1:0.0: Failed to read mode from device. [ 236.336998][ T51] vhci_hcd: release socket [ 236.353880][ T5087] appletouch 3-1:0.0: probe with driver appletouch failed with error -5 [ 236.370628][ T51] vhci_hcd: disconnect device [ 236.401922][ T5087] usb 3-1: USB disconnect, device number 14 [ 236.419759][ T45] vhci_hcd: vhci_device speed not set [ 236.890101][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.090947][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.273161][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.280399][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.511917][ T5135] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.516397][ T3858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.676899][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.684154][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.744470][ T5135] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.774280][ T5135] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 237.822211][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.843135][ T5135] usb 2-1: config 0 descriptor?? [ 237.859047][ T3858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.876055][ T5135] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 237.902388][ T5135] usb 2-1: No valid video chain found. [ 238.044302][ T5094] Bluetooth: hci5: command 0x0406 tx timeout [ 238.100002][ T3858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.200664][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.248013][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.272431][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.281475][ T5094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.294847][ T5094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.310031][ T5094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.328345][ T5094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.366516][ T3858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.746785][ T6653] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.849795][ T6653] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.908387][ T6653] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.014765][ T6653] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.114307][ T3858] bridge_slave_1: left allmulticast mode [ 239.125079][ T3858] bridge_slave_1: left promiscuous mode [ 239.130989][ T3858] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.184147][ T3858] bridge_slave_0: left allmulticast mode [ 239.214983][ T3858] bridge_slave_0: left promiscuous mode [ 239.220812][ T3858] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.918514][ T6782] FAULT_INJECTION: forcing a failure. [ 239.918514][ T6782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.986400][ T6782] CPU: 0 PID: 6782 Comm: syz.0.316 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 239.996477][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 240.006559][ T6782] Call Trace: [ 240.009847][ T6782] [ 240.012807][ T6782] dump_stack_lvl+0x241/0x360 [ 240.017530][ T6782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.022766][ T6782] ? __pfx__printk+0x10/0x10 [ 240.027389][ T6782] ? __pfx_lock_release+0x10/0x10 [ 240.032461][ T6782] ? vfs_write+0x7c4/0xc90 [ 240.036905][ T6782] should_fail_ex+0x3b0/0x4e0 [ 240.041617][ T6782] _copy_from_user+0x2f/0xe0 [ 240.046231][ T6782] __sys_bpf+0x1a4/0x810 [ 240.050503][ T6782] ? __pfx___sys_bpf+0x10/0x10 [ 240.055298][ T6782] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.061294][ T6782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.067643][ T6782] ? do_syscall_64+0x100/0x230 [ 240.072422][ T6782] __x64_sys_bpf+0x7c/0x90 [ 240.076871][ T6782] do_syscall_64+0xf3/0x230 [ 240.081398][ T6782] ? clear_bhb_loop+0x35/0x90 [ 240.086084][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.091991][ T6782] RIP: 0033:0x7fb4ec375bd9 [ 240.096430][ T6782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.116059][ T6782] RSP: 002b:00007fb4ebdde048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.124493][ T6782] RAX: ffffffffffffffda RBX: 00007fb4ec504038 RCX: 00007fb4ec375bd9 [ 240.132477][ T6782] RDX: 0000000000000038 RSI: 0000000020000280 RDI: 0000000000000018 [ 240.140471][ T6782] RBP: 00007fb4ebdde0a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.148463][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.156447][ T6782] R13: 000000000000006e R14: 00007fb4ec504038 R15: 00007ffe15c530d8 [ 240.164454][ T6782] [ 240.337154][ T5133] usb 2-1: USB disconnect, device number 7 [ 240.368517][ T4477] Bluetooth: hci0: command tx timeout [ 240.724711][ T3858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.772352][ T3858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.799774][ T3858] bond0 (unregistering): Released all slaves [ 240.833269][ T3858] bond1 (unregistering): Released all slaves [ 241.453828][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.690569][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 241.854493][ T3858] hsr_slave_0: left promiscuous mode [ 241.920486][ T3858] hsr_slave_1: left promiscuous mode [ 241.936634][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.950080][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.979125][ T3858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.999710][ T3858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.074162][ T3858] veth1_macvtap: left promiscuous mode [ 242.099913][ T3858] veth0_macvtap: left promiscuous mode [ 242.117614][ T3858] veth1_vlan: left promiscuous mode [ 242.147321][ T3858] veth0_vlan: left promiscuous mode [ 242.451883][ T4477] Bluetooth: hci0: command tx timeout [ 243.480739][ T3858] team0 (unregistering): Port device team_slave_1 removed [ 243.551853][ T3858] team0 (unregistering): Port device team_slave_0 removed [ 244.534642][ T4477] Bluetooth: hci0: command tx timeout [ 245.078859][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.119900][ T6525] veth0_vlan: entered promiscuous mode [ 245.180306][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.225316][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.240167][ T6765] bridge_slave_0: entered allmulticast mode [ 245.267261][ T6765] bridge_slave_0: entered promiscuous mode [ 245.298950][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.316004][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.347534][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 245.376808][ T6765] bridge_slave_1: entered allmulticast mode [ 245.384385][ T6765] bridge_slave_1: entered promiscuous mode [ 245.542393][ T6653] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.622386][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.629670][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.668819][ T6525] veth1_vlan: entered promiscuous mode [ 245.710153][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.750758][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.810841][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.818133][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.996870][ T6765] team0: Port device team_slave_0 added [ 246.054543][ T6765] team0: Port device team_slave_1 added [ 246.287988][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.295028][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.327848][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.383799][ T6525] veth0_macvtap: entered promiscuous mode [ 246.408583][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.415612][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.455628][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.493369][ T6525] veth1_macvtap: entered promiscuous mode [ 246.505789][ T6653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.566728][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.590879][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.605561][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.616503][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.626687][ T4477] Bluetooth: hci0: command tx timeout [ 246.649829][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.667327][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.677185][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.698102][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.724217][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.736953][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.775568][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.853125][ T6826] xt_cgroup: invalid path, errno=-2 [ 246.866494][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.906637][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.938358][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.977841][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.006445][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.027403][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.095710][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.107736][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.162662][ T6525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.198142][ T6525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.230087][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.391948][ T6765] hsr_slave_0: entered promiscuous mode [ 247.409154][ T6765] hsr_slave_1: entered promiscuous mode [ 247.438716][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.458593][ T6765] Cannot create hsr debugfs directory [ 247.476521][ T6525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.495715][ T6525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.519391][ T6525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.528125][ T6525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.935128][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.132887][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.179685][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.403361][ T6853] FAULT_INJECTION: forcing a failure. [ 248.403361][ T6853] name failslab, interval 1, probability 0, space 0, times 0 [ 248.450857][ T6853] CPU: 0 PID: 6853 Comm: syz.0.331 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 248.460902][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 248.471008][ T6853] Call Trace: [ 248.474318][ T6853] [ 248.477268][ T6853] dump_stack_lvl+0x241/0x360 [ 248.482014][ T6853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.487256][ T6853] ? __pfx__printk+0x10/0x10 [ 248.491893][ T6853] ? __pfx___might_resched+0x10/0x10 [ 248.497236][ T6853] should_fail_ex+0x3b0/0x4e0 [ 248.501976][ T6853] ? vm_area_dup+0x27/0x290 [ 248.506542][ T6853] should_failslab+0x9/0x20 [ 248.511101][ T6853] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 248.516528][ T6853] vm_area_dup+0x27/0x290 [ 248.520912][ T6853] __split_vma+0x1a9/0xc30 [ 248.525380][ T6853] ? __pfx___split_vma+0x10/0x10 [ 248.530375][ T6853] vma_modify+0x194/0x350 [ 248.534748][ T6853] mlock_fixup+0x278/0x3b0 [ 248.539229][ T6853] apply_vma_lock_flags+0x31e/0x460 [ 248.541133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.544443][ T6853] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 248.552637][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.557976][ T6853] ? __down_write_common+0x162/0x200 [ 248.570607][ T6853] ? do_mlock+0x192/0x7b0 [ 248.574986][ T6853] do_mlock+0x535/0x7b0 [ 248.579191][ T6853] ? __pfx_do_mlock+0x10/0x10 [ 248.583897][ T6853] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.589894][ T6853] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.596234][ T6853] ? do_syscall_64+0x100/0x230 [ 248.601014][ T6853] __x64_sys_mlock+0x60/0x70 [ 248.605622][ T6853] do_syscall_64+0xf3/0x230 [ 248.610144][ T6853] ? clear_bhb_loop+0x35/0x90 [ 248.614831][ T6853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.620750][ T6853] RIP: 0033:0x7fb4ec375bd9 [ 248.625186][ T6853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.644820][ T6853] RSP: 002b:00007fb4ebdff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 248.653246][ T6853] RAX: ffffffffffffffda RBX: 00007fb4ec503f60 RCX: 00007fb4ec375bd9 [ 248.661225][ T6853] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020009000 [ 248.669204][ T6853] RBP: 00007fb4ebdff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.677193][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.685206][ T6853] R13: 000000000000000b R14: 00007fb4ec503f60 R15: 00007ffe15c530d8 [ 248.693223][ T6853] [ 249.574767][ T6765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.663084][ T6765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.688301][ T6765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.744704][ T6765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.836614][ T6653] veth0_vlan: entered promiscuous mode [ 249.904472][ T6863] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 249.995217][ T6653] veth1_vlan: entered promiscuous mode [ 250.204634][ T6653] veth0_macvtap: entered promiscuous mode [ 250.256748][ T6653] veth1_macvtap: entered promiscuous mode [ 250.431524][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.465273][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.477861][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.494583][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.514109][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.544253][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.573536][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.603640][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.626332][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.653825][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.673541][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.694629][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.720619][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.792485][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.822652][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.853833][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.883804][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.904296][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.923845][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.947376][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.978713][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.004048][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.024281][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.044053][ T6653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.084185][ T6653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.126339][ T6653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.189740][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 251.283041][ T6890] input: syz0 as /devices/virtual/input/input12 [ 251.360460][ T6653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.386911][ T6653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.421457][ T6653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.460906][ T6653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.513746][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.656931][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.723993][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.731335][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.774613][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.781966][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.833825][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.879405][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.997022][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.015146][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.332600][ T6903] Illegal XDP return value 4294967282 on prog (id 41) dev N/A, expect packet loss! [ 252.624558][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.633543][ T30] INFO: task syz.1.57:5400 blocked for more than 143 seconds. [ 252.653444][ T30] Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 252.714745][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.766819][ T30] task:syz.1.57 state:D stack:26032 pid:5400 tgid:5396 ppid:5078 flags:0x00004002 [ 252.819041][ T30] Call Trace: [ 252.822508][ T30] [ 252.826253][ T30] __schedule+0x1796/0x49d0 [ 252.831300][ T30] ? __pfx___schedule+0x10/0x10 [ 252.836241][ T30] ? __pfx_lock_release+0x10/0x10 [ 252.841385][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 252.847512][ T30] ? schedule+0x90/0x320 [ 252.851860][ T30] schedule+0x14b/0x320 [ 252.856058][ T30] schedule_preempt_disabled+0x13/0x30 [ 252.861624][ T30] __mutex_lock+0x6a4/0xd70 [ 252.866210][ T30] ? __mutex_lock+0x527/0xd70 [ 252.871908][ T30] ? ima_file_free+0x18a/0x4e0 [ 252.877769][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 252.885595][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.891926][ T30] ima_file_free+0x18a/0x4e0 [ 252.896774][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 252.903213][ T30] ? __pfx___might_resched+0x10/0x10 [ 252.918998][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.925532][ T30] security_file_release+0x48/0x90 [ 252.972188][ T30] __fput+0x1b3/0x8a0 [ 252.976345][ T30] task_work_run+0x24f/0x310 [ 252.997903][ T5136] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 253.512415][ T30] ? __pfx_task_work_run+0x10/0x10 [ 253.557777][ T30] ? switch_task_namespaces+0xe1/0x110 [ 253.563322][ T30] do_exit+0xa27/0x27e0 [ 253.567531][ T30] ? __pfx_do_exit+0x10/0x10 [ 253.686642][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.738676][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.744757][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.778373][ T6765] veth0_vlan: entered promiscuous mode [ 253.784352][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 253.798029][ T30] do_group_exit+0x207/0x2c0 [ 253.828211][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 253.848221][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 253.853495][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 253.880500][ T6765] veth1_vlan: entered promiscuous mode [ 253.888273][ T30] get_signal+0x16a1/0x1740 [ 253.892893][ T30] ? __pfx_get_signal+0x10/0x10 [ 253.897810][ T30] arch_do_signal_or_restart+0x96/0x860 [ 253.922284][ T5136] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.933593][ T5136] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 253.968418][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 253.974660][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.988369][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 253.994280][ T5136] usb 5-1: New USB device found, idVendor=0403, idProduct=d017, bcdDevice=6f.ff [ 254.009675][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 254.015303][ T30] do_syscall_64+0x100/0x230 [ 254.028856][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.042311][ T6765] veth0_macvtap: entered promiscuous mode [ 254.058964][ T30] ? clear_bhb_loop+0x35/0x90 [ 254.063726][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.070880][ T5136] usb 5-1: config 0 descriptor?? [ 254.083152][ T6765] veth1_macvtap: entered promiscuous mode [ 254.092418][ T5136] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 254.100426][ T30] RIP: 0033:0x7f8591f75bd9 [ 254.104921][ T30] RSP: 002b:00007f8592daa0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.121037][ T5136] ftdi_sio ttyUSB0: unknown device type: 0x6fff [ 254.134001][ T30] RAX: fffffffffffffe00 RBX: 00007f85921041f0 RCX: 00007f8591f75bd9 [ 254.152828][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.163427][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f85921041f0 [ 254.171518][ T30] RBP: 00007f85921041e8 R08: 00007f8592daa6c0 R09: 00007f8592daa6c0 [ 254.179650][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.189635][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85921041f4 [ 254.197639][ T30] R13: 000000000000006e R14: 00007ffedc3f9490 R15: 00007ffedc3f9578 [ 254.205749][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.219100][ T30] [ 254.222260][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.232489][ T30] [ 254.232489][ T30] Showing all locks held in the system: [ 254.248750][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.259301][ T30] 3 locks held by kworker/u8:0/11: [ 254.264449][ T30] 1 lock held by khungtaskd/30: [ 254.269447][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.279329][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 254.304848][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.318061][ T30] 3 locks held by kworker/u8:8/2805: [ 254.328959][ T30] #0: ffff88802ab13148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.348823][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.358696][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.372607][ T2913] usb 5-1: USB disconnect, device number 6 [ 254.392499][ T2913] ftdi_sio 5-1:0.0: device disconnected [ 254.398888][ T30] #1: ffffc900098e7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.413504][ T30] #2: ffffffff8f5d82c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 254.427323][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.437274][ T30] 3 locks held by kworker/1:2/2913: [ 254.442710][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.453706][ T30] #0: ffff88801caa9148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.465151][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.475784][ T30] #1: ffffc90009ce7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.488196][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.509039][ T30] #2: ffff888023d7b190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 254.518192][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.531091][ T30] 2 locks held by getty/4836: [ 254.535841][ T30] #0: ffff88802b1760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 254.548615][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.569603][ T30] #1: ffffc900031432f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 254.592801][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.615154][ T30] 3 locks held by kworker/0:3/5084: [ 254.625010][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.645947][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.666579][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.677526][ T30] #1: ffffc90003dcfd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.699302][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.711765][ T30] #2: ffff888024abe240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 254.732601][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.749408][ T30] 3 locks held by kworker/1:4/5136: [ 254.756864][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.767075][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 254.778408][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.790998][ T30] #1: ffffc90004507d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 254.809580][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.819559][ T30] #2: ffffffff8f5d82c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 254.849656][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.869205][ T30] 2 locks held by syz.1.57/5397: [ 254.874859][ T30] 1 lock held by syz.1.57/5400: [ 254.879976][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.890141][ T30] #0: ffff88802a25e6c8 (&ima_iint_mutex_key[depth]#2){+.+.}-{3:3}, at: ima_file_free+0x18a/0x4e0 [ 254.909629][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.920363][ T30] 1 lock held by syz.4.108/5746: [ 254.925331][ T30] 1 lock held by syz.4.108/5755: [ 254.942790][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.954216][ T30] #0: ffff88802a25e8e8 (&ima_iint_mutex_key[depth]#2){+.+.}-{3:3}, at: ima_file_free+0x18a/0x4e0 [ 254.974541][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.985428][ T30] 1 lock held by syz.1.146/5940: [ 254.990764][ T30] 1 lock held by syz.1.146/5950: [ 254.995737][ T30] #0: ffff88802d185d28 (&ima_iint_mutex_key[depth]#2){+.+.}-{3:3}, at: ima_file_free+0x18a/0x4e0 [ 255.009744][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.030087][ T30] 3 locks held by kworker/u8:11/6482: [ 255.039452][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.047183][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 255.063393][ T6765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.072733][ T30] #1: ffffc90002fbfd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 255.084741][ T6765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.094011][ T30] #2: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 255.105279][ T6765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.121399][ T6765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.130296][ T30] 2 locks held by syz-executor/6765: [ 255.137733][ T30] 1 lock held by syz.1.346/6906: [ 255.148968][ T30] #0: ffff88807c847398 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 255.158682][ T30] 4 locks held by syz.1.346/6916: [ 255.164118][ T30] #0: ffff88802b4b80a8 (&ctx->uring_lock){+.+.}-{3:3}, at: __se_sys_io_uring_register+0x1b8/0x15d0 [ 255.177949][ T30] #1: ffff88807c847398 (&mm->mmap_lock){++++}-{3:3}, at: __gup_longterm_locked+0x3a3/0x2a80 [ 255.206531][ T30] #2: ffff88801b2d6848 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56a/0x3780 [ 255.222008][ T30] #3: ffff888020288a78 (&vma_lock->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x66d/0x3780 [ 255.240127][ T30] 1 lock held by syz.1.346/6927: [ 255.248545][ T30] #0: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 255.290263][ T30] [ 255.292817][ T30] ============================================= [ 255.292817][ T30] [ 255.308527][ T30] NMI backtrace for cpu 1 [ 255.312902][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 255.322849][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.332934][ T30] Call Trace: [ 255.336238][ T30] [ 255.339188][ T30] dump_stack_lvl+0x241/0x360 [ 255.343922][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.349175][ T30] ? __pfx__printk+0x10/0x10 [ 255.353802][ T30] ? vprintk_emit+0x631/0x770 [ 255.358514][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 255.363571][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 255.368544][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.374012][ T30] ? _printk+0xd5/0x120 [ 255.378198][ T30] ? __pfx__printk+0x10/0x10 [ 255.382814][ T30] ? __wake_up_klogd+0xcc/0x110 [ 255.387703][ T30] ? __pfx__printk+0x10/0x10 [ 255.392350][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 255.397405][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 255.403420][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 255.409439][ T30] watchdog+0xfde/0x1020 [ 255.413704][ T30] ? watchdog+0x1ea/0x1020 [ 255.418140][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.422830][ T30] kthread+0x2f0/0x390 [ 255.426914][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.431599][ T30] ? __pfx_kthread+0x10/0x10 [ 255.436205][ T30] ret_from_fork+0x4b/0x80 [ 255.440631][ T30] ? __pfx_kthread+0x10/0x10 [ 255.445245][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.450041][ T30] [ 255.453141][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.461446][ T30] Sending NMI from CPU 1 to CPUs 0: [ 255.466694][ C0] NMI backtrace for cpu 0 [ 255.466707][ C0] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 255.466727][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.466739][ C0] Workqueue: bat_events batadv_nc_worker [ 255.466769][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 255.466793][ C0] Code: 63 03 e9 2b ff ff ff e8 e8 51 01 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 98 80 87 7e e8 fb 6f 01 0a 89 c3 83 f8 08 73 7a [ 255.466809][ C0] RSP: 0018:ffffc90000bb79d0 EFLAGS: 00000257 [ 255.466824][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff817267a4 [ 255.466837][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fac6928 [ 255.466848][ C0] RBP: ffffc90000bb7b40 R08: ffffffff8fac692f R09: 1ffffffff1f58d25 [ 255.466862][ C0] R10: dffffc0000000000 R11: fffffbfff1f58d26 R12: 1ffff92000176f44 [ 255.466876][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 255.466889][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 255.466905][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.466918][ C0] CR2: 00007fba2e4ce2d8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 255.466933][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.466944][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.466956][ C0] Call Trace: [ 255.466963][ C0] [ 255.466971][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 255.466993][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 255.467026][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 255.467046][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.467081][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 255.467102][ C0] ? nmi_handle+0x14f/0x5a0 [ 255.467127][ C0] ? nmi_handle+0x2a/0x5a0 [ 255.467154][ C0] ? rcu_is_watching+0x6/0xb0 [ 255.467173][ C0] ? default_do_nmi+0x63/0x160 [ 255.467194][ C0] ? exc_nmi+0x123/0x1f0 [ 255.467214][ C0] ? end_repeat_nmi+0xf/0x53 [ 255.467239][ C0] ? lock_acquire+0xd4/0x550 [ 255.467257][ C0] ? rcu_is_watching+0x6/0xb0 [ 255.467276][ C0] ? rcu_is_watching+0x6/0xb0 [ 255.467296][ C0] ? rcu_is_watching+0x6/0xb0 [ 255.467315][ C0] [ 255.467320][ C0] [ 255.467326][ C0] lock_acquire+0xe3/0x550 [ 255.467347][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 255.467367][ C0] ? batadv_nc_worker+0xcb/0x610 [ 255.467390][ C0] ? __pfx_lock_release+0x10/0x10 [ 255.467410][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.467433][ C0] batadv_nc_worker+0xec/0x610 [ 255.467455][ C0] ? batadv_nc_worker+0xcb/0x610 [ 255.467496][ C0] ? batadv_nc_worker+0xcb/0x610 [ 255.467522][ C0] ? process_scheduled_works+0x945/0x1830 [ 255.467540][ C0] process_scheduled_works+0xa2c/0x1830 [ 255.467575][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.467611][ C0] ? assign_work+0x364/0x3d0 [ 255.467631][ C0] worker_thread+0x86d/0xd50 [ 255.467653][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.467674][ C0] ? __kthread_parkme+0x169/0x1d0 [ 255.467695][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.467713][ C0] kthread+0x2f0/0x390 [ 255.467734][ C0] ? __pfx_worker_thread+0x10/0x10 [ 255.467751][ C0] ? __pfx_kthread+0x10/0x10 [ 255.467772][ C0] ret_from_fork+0x4b/0x80 [ 255.467795][ C0] ? __pfx_kthread+0x10/0x10 [ 255.467815][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.467849][ C0] [ 255.582691][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 255.582713][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 255.582740][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 255.582755][ T30] Call Trace: [ 255.582767][ T30] [ 255.582777][ T30] dump_stack_lvl+0x241/0x360 [ 255.582826][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.582863][ T30] ? __pfx__printk+0x10/0x10 [ 255.582895][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.582931][ T30] ? vscnprintf+0x5d/0x90 [ 255.582961][ T30] panic+0x349/0x860 [ 255.582997][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.583029][ T30] ? __pfx_panic+0x10/0x10 [ 255.583059][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 255.583095][ T30] ? __irq_work_queue_local+0x137/0x410 [ 255.583123][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 255.583149][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 255.583177][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 255.583208][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 255.583241][ T30] watchdog+0x101d/0x1020 [ 255.583270][ T30] ? watchdog+0x1ea/0x1020 [ 255.583304][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.583330][ T30] kthread+0x2f0/0x390 [ 255.583360][ T30] ? __pfx_watchdog+0x10/0x10 [ 255.583385][ T30] ? __pfx_kthread+0x10/0x10 [ 255.583416][ T30] ret_from_fork+0x4b/0x80 [ 255.583448][ T30] ? __pfx_kthread+0x10/0x10 [ 255.583485][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.583535][ T30] [ 255.587504][ T30] Kernel Offset: disabled [ 255.962272][ T30] Rebooting in 86400 seconds..