last executing test programs: 8.535229027s ago: executing program 3 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) (async) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001041aeeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffe0}, {0x0, 0xfff5}}}, 0x24}}, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) (async) r9 = inotify_init() inotify_add_watch(r9, &(0x7f00000001c0)='./file0\x00', 0x6000400) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) write$9p(r8, &(0x7f0000001400)="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", 0x600) (async) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) (rerun: 32) setuid(r10) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r12}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 8.279710902s ago: executing program 3 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x1, 0x60000000}, 0x1c}}, 0x0) 8.222573009s ago: executing program 3 (id=302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0x92, 0x0, &(0x7f0000000000)) 8.062774925s ago: executing program 3 (id=304): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = timerfd_create(0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000006c0)={'#! ', '', [{0x20, '\x00'}, {}], 0xa, "42714a48dec6aecaa1a1a629748078b56ac71a9f564870b0d637c67f66a29419908df8f1a3689d270b0c5d61b1891fcc47293095b6245fc20509006cce63c71ca057decfd0021cac26ff80c388ff7fe7fc13d8009b33e8e2f8367c5db2d2e008c2e8d9c77d541bcc9835a8ba942f8ce36b47410d1889ecf198b5ddff2a46e948af3a500000000000"}, 0x8f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) readv(r1, &(0x7f0000000000)=[{0x0}], 0x15) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000140)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r3}, &(0x7f0000000680), &(0x7f0000000800)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000300)={r3, &(0x7f0000000140), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000980)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) 7.665592015s ago: executing program 3 (id=306): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = io_uring_setup(0x1698, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xfffffffc, 0x4}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1a, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil) r2 = syz_open_procfs(0x0, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100"]) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0x0, 0x0}) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xfffffef9, 0x0, 0x0, 0xc}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}) 7.350026829s ago: executing program 2 (id=311): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000000480)=""/99, 0x63}], 0x2}}], 0x2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='htcp\x00', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x3, 0x6, 0x0, 0x0, [{{}, 0xd}, {{r1}, 0x1ff}, {{}, 0x4}, {{}, 0x4}, {{}, 0x10001}, {{}, 0x7}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0xd, &(0x7f0000000440)={r4}, 0x8) 7.1494016s ago: executing program 2 (id=314): openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r1, 0x5420, &(0x7f0000001d40)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x81}, {0x6}]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582"], 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x5, 0x146, [], 0x0, 0x0, 0x0}, 0x1be) syz_usb_control_io(r4, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x2, 0x3, &(0x7f0000000540)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x8000, @mcast2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x3, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}, 0x0) 6.599469853s ago: executing program 3 (id=315): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x80, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x4}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x11c, 0x4, 0x3f0, 0x100, 0x0, 0x100, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@MARK}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x44e) prlimit64(0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000780)=@getchain={0x16, 0x66, 0x54344af52948ef07}, 0x24}}, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) listen(r6, 0x20003f) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000023000b03d25a806f8c6394e21f24fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) 6.279184598s ago: executing program 1 (id=317): socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000045c0)={0x0, 0x0, 0x900000000000000}, 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) 5.313240646s ago: executing program 1 (id=321): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) 4.930864162s ago: executing program 1 (id=322): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81a000000000000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0xfdf1}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a3000000000090001007379"], 0x80}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b0001000000000904000001"], 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffff89}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sysfs$1(0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e80)={0x4d0, r7, 0x10ada85e65c25349, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x84, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7c}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}]}]}, @NL80211_ATTR_TID_CONFIG={0x424, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x214, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x0, 0x7}, {0x5, 0x4}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x6, 0x1}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0xa}, {0x2, 0x7}, {0x1, 0x4}, {0x6, 0x6}, {0x7, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x3}, {0x3, 0x4}, {0x2}, {0x6, 0x2}, {0x7, 0x7}, {0x4, 0x2}, {0x3, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a93, 0x4, 0x80, 0x1, 0x3, 0x3, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x1}, {0x0, 0x3}, {0x5, 0x8}, {0x6, 0x4}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x3}, {0x2, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0x4}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x2}, {0x4}, {0x7, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {}, {0x4, 0xa}, {0x7, 0x8}, {0x4, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x8}, {0x6, 0x9}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x500, 0x5, 0x834, 0x8001, 0xfff5, 0x5, 0x0, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x5, 0x16, 0x72, 0x18, 0xc, 0xc, 0x1, 0x60, 0xb, 0x30, 0x6, 0x1b, 0x47, 0x1b, 0x60, 0x12, 0x6c, 0x48, 0x5, 0xc, 0x30, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc7f, 0x9, 0x7, 0x6, 0x9, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x4, 0x4, 0xfff, 0x8, 0x2, 0x6]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0x6, 0x48, 0x2, 0x60, 0x60, 0x60, 0x16, 0x3, 0x1b, 0xc, 0x1, 0x6c, 0xc, 0x36]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x2, 0x3, 0x6c, 0x18, 0xc, 0x48, 0x6, 0x5, 0xc, 0x5, 0xc, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x217f, 0x7, 0x9, 0xf, 0x5, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7fff, 0x3d, 0x3, 0x4, 0x101, 0x3b, 0xfaf6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x12, 0x1b, 0xc, 0x24, 0x3, 0x12, 0x51, 0x60, 0x36, 0x4, 0x12, 0x48, 0xc, 0x60, 0x60, 0x1, 0x1b, 0xf41e86fad0284eec, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x1000, 0x1, 0x800, 0xfff, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x6, 0x9}, {0x5, 0x8}, {0x6, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {}, {0x7, 0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x3}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x6}, {0x0, 0x5}, {0x3, 0x3}, {0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {}, {0x7, 0x5}, {0x3, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x4}, {}, {0x7}, {0x0, 0x9}, {0x7, 0x6}, {0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x2}, {}, {0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x9}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x1}, {0x1}, {0x6, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x9, 0x6, 0x671d, 0xfffa, 0x6, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7d}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x18b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x2, 0x4, 0xf, 0x0, 0x10, 0x8, 0x10]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x94, 0x1, 0x1, 0x1d4, 0x3, 0x2]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2, 0xf4, 0xd, 0x399, 0x9, 0xc, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff7, 0x5, 0x4571, 0x9, 0xb47b, 0xc6, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x5}, {0x7, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x4}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x4}, {0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x5, 0x3}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xed, 0x3, 0xfffd, 0x81, 0x3ff, 0xff, 0x6, 0xc3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x7}, {0x4}, {0x1}, {0x1, 0x8}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x5}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x3, 0x3}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x9}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5232, 0x9, 0xd7b, 0x6, 0x10, 0xfffe, 0x6, 0xdd52]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x81, 0xc, 0x9, 0x4, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xda}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6d}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x4d0}}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000340)="b93d0b00000f320f21c0c74424000a000000c744240200000000c7442406000000000f011424d1180f060f08c4e1b5eb3b66b8d3000f00d866ba2100b83a20299cef0f23ae", 0x45}], 0x0, 0xb, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[], 0x180}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) 4.014163212s ago: executing program 2 (id=326): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, &(0x7f0000000100), 0x20) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000400)={0x0, 0x0, [{0x40000010, 0x0, 0x81}, {0x85f, 0x0, 0x4}, {0x0, 0x0, 0x80}, {0x800003e0, 0x0, 0x6}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}}, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04e04020"], 0x7) socket(0x1e, 0x1, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) getsockopt$MRT(r0, 0x0, 0xd1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x0, 0x4}, {0xe, 0x1ff}}}}, 0x11) 3.759174096s ago: executing program 4 (id=327): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) r0 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x17, 0x0, 0x4, 0xd, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x2000000, 0x0, 0x5}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x40100) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001", @ANYBLOB="b761917c95255b62c4b6840e8e93e56cb7497b22d383d8eb81a3639ee29b0ac41b869cbef6546cd4701d40a22b4c640c8038aec2aa984e171526c384a185305cb66cdf40d8d81b4411cd1a4852edc1d4727d1940fa0eadad83074473ae9cbb5cabc94509e4fe56d9514c15743e4451bb488abf7e387c"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008080) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60002014}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgget$private(0x0, 0xc0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000380), 0x4) (async) mmap(&(0x7f0000c1d000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x88c0e000) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) pipe(&(0x7f0000000500)) 3.567547082s ago: executing program 4 (id=328): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) unshare(0x0) syz_emit_vhci(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) io_setup(0x4, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x0) eventfd2(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f00000002c0), 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000004b00)=ANY=[], 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f00000021c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x4100) 3.104880238s ago: executing program 0 (id=329): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xa000000) 2.862248743s ago: executing program 0 (id=330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x7400, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 2.643515123s ago: executing program 0 (id=331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semop(0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r3) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000"], 0x34}], 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6(0xa, 0x3, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) lseek(r1, 0x800, 0x2) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 2.514434739s ago: executing program 4 (id=332): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) 2.305759356s ago: executing program 0 (id=333): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @empty}}}}}}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) prlimit64(0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)) syz_io_uring_setup(0x0, &(0x7f0000000200), 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pread64(r3, &(0x7f0000000180)=""/38, 0x26, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x0, 0x1, 0x2}) r5 = socket$netlink(0x10, 0x3, 0xb) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x1, 0x300, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x25c8}, 0x3}) 2.247280405s ago: executing program 4 (id=334): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000007200f5ff000000000000001f6a000000", @ANYRES32=0x0], 0x18}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/217) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) (async) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x600000000000000}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x600000000000000}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000000)={0x48}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000000)={0x48}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) lsm_set_self_attr(0x0, &(0x7f0000002240)={0x6d, 0x0, 0x20}, 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) syz_emit_ethernet(0xa9, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c200000000000000000008004500005c000000000067907800000000e00000012100907812000228200000000000000000000000ffffffffe0000001442c0003ac1414bb00000000ac14140000000000ac1439a029bfa8d56eb710779e0a140000000000ffffffff0000000000000000"], 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) (async) sendmsg$nl_xfrm(r5, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x1, 0x400}, {0x0, 0x0, 0x1800}], 0x2) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x4, 0x6) (async) r6 = socket$inet6(0xa, 0x4, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r7 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00') lseek(r7, 0x2, 0x0) getdents64(r7, 0xffffffffffffffff, 0x43) socket$nl_generic(0x10, 0x3, 0x10) 1.783928969s ago: executing program 4 (id=335): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000004780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1}}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000000480)=""/99, 0x63}], 0x2}}], 0x2, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='htcp\x00', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000300)={0x0, 0x3, 0x6, 0x0, 0x0, [{{}, 0xd}, {{r1}, 0x1ff}, {{}, 0x4}, {{}, 0x4}, {{}, 0x10001}, {{}, 0x7}]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0xd, &(0x7f0000000440)={r4}, 0x8) 1.618749368s ago: executing program 4 (id=336): pipe2(&(0x7f0000000300), 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002bc0)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x7, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x37c, 0x0, &(0x7f0000000140)="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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x0, 0x2f}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d, 0x0, 0xfe}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x8, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}]}}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0xa5, 0xaf, 0x5f, 0x20, 0xe8d, 0x23, 0x3aab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x56, 0x0, 0x0, 0xa}}]}}]}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000080000000148a3045e2d59b2f835be5ea0e158eca154cbab5354fbf743f5fc122403262404ab03d579ff00ae8803b1d4b880ed1f02b5aa5b0c2883f9126da4a26a5f382ff54dd48e667192affe59dc40ee4fc3ec1030a0850e9281e119ab2de5ada1393ab9069", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001100028005000100030000000500150000000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x1fbf, &(0x7f0000000040)={0x0, 0x0, 0x140}, &(0x7f00000000c0), &(0x7f0000000100)) 1.585377478s ago: executing program 1 (id=337): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240010000f147cf9fd7ac6010000000000000000009b3c0100000000000c00450072646d615f636d00125afafeaaea8aef7b93b266eb53f8fffffffed1f8f56f33c781fd1ad487b9e2eaabb51823c423a575409dad50da8a1e00"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x50, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(0xffffffffffffffff, &(0x7f0000008900)={0x2020}, 0x2020) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x23, &(0x7f0000000200)=0x194, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000400000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000f"], 0x0, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) bind$can_raw(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000004780)=""/31, 0x46}], 0x1, 0x0, 0xffffffffffffff92}}], 0x1, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000140)=@srh={0x0, 0x0, 0x4, 0x0, 0xc9}, 0x8) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) 1.277779432s ago: executing program 2 (id=338): accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{}, {}, @device_b}}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) 1.23006307s ago: executing program 0 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x1c000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.067522108s ago: executing program 0 (id=340): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00'}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x1a00, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x400, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) 550.340587ms ago: executing program 1 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 456.233447ms ago: executing program 2 (id=342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x8018}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 12) 71.516486ms ago: executing program 2 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f000001f780)=""/102387, 0x18ff3}], 0x1, 0x0, 0xfffffffd) io_uring_setup(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 1 (id=344): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 56.914342][ T5078] cgroup: Unknown subsys name 'net' [ 57.049960][ T5078] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.482239][ T5078] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.343865][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.351781][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.360810][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.368175][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.376629][ T5092] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.385298][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.394715][ T5092] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.402508][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.410651][ T5092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.418131][ T5092] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.422309][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.436007][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.436212][ T4490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.452125][ T5094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.460114][ T5094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.481341][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.492665][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.500299][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.522222][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.530892][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.539468][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.550005][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.559200][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.580072][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.581564][ T5094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.614133][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.622637][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.630827][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.639385][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.646867][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.967349][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 63.201651][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 63.224112][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.231865][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.240188][ T5097] bridge_slave_0: entered allmulticast mode [ 63.247625][ T5097] bridge_slave_0: entered promiscuous mode [ 63.260978][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 63.304779][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.312350][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.319512][ T5097] bridge_slave_1: entered allmulticast mode [ 63.327163][ T5097] bridge_slave_1: entered promiscuous mode [ 63.364768][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 63.450119][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.463007][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.483835][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.491014][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.499438][ T5108] bridge_slave_0: entered allmulticast mode [ 63.506950][ T5108] bridge_slave_0: entered promiscuous mode [ 63.519654][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.527417][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.534672][ T5108] bridge_slave_1: entered allmulticast mode [ 63.541465][ T5108] bridge_slave_1: entered promiscuous mode [ 63.623893][ T5097] team0: Port device team_slave_0 added [ 63.657867][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 63.670220][ T5097] team0: Port device team_slave_1 added [ 63.709550][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.747757][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.755074][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.762877][ T5106] bridge_slave_0: entered allmulticast mode [ 63.769771][ T5106] bridge_slave_0: entered promiscuous mode [ 63.780816][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.807460][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.814504][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.840990][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.863669][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.870801][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.878773][ T5100] bridge_slave_0: entered allmulticast mode [ 63.885868][ T5100] bridge_slave_0: entered promiscuous mode [ 63.894113][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.901251][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.909003][ T5106] bridge_slave_1: entered allmulticast mode [ 63.916778][ T5106] bridge_slave_1: entered promiscuous mode [ 63.946264][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.956555][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.983877][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.995446][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.003000][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.010218][ T5100] bridge_slave_1: entered allmulticast mode [ 64.017247][ T5100] bridge_slave_1: entered promiscuous mode [ 64.037622][ T5108] team0: Port device team_slave_0 added [ 64.083041][ T5108] team0: Port device team_slave_1 added [ 64.091410][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.143756][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.190545][ T5097] hsr_slave_0: entered promiscuous mode [ 64.197396][ T5097] hsr_slave_1: entered promiscuous mode [ 64.208640][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.252904][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.260130][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.268253][ T5104] bridge_slave_0: entered allmulticast mode [ 64.275116][ T5104] bridge_slave_0: entered promiscuous mode [ 64.284786][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.306827][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.314203][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.340336][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.353908][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.360883][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.386928][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.420585][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.427878][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.435503][ T5104] bridge_slave_1: entered allmulticast mode [ 64.442894][ T5104] bridge_slave_1: entered promiscuous mode [ 64.464264][ T5100] team0: Port device team_slave_0 added [ 64.472922][ T5090] Bluetooth: hci1: command tx timeout [ 64.472935][ T53] Bluetooth: hci0: command tx timeout [ 64.494883][ T5106] team0: Port device team_slave_0 added [ 64.530318][ T5100] team0: Port device team_slave_1 added [ 64.552294][ T5090] Bluetooth: hci2: command tx timeout [ 64.562903][ T5106] team0: Port device team_slave_1 added [ 64.574955][ T5108] hsr_slave_0: entered promiscuous mode [ 64.581332][ T5108] hsr_slave_1: entered promiscuous mode [ 64.588013][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.596450][ T5108] Cannot create hsr debugfs directory [ 64.632060][ T5090] Bluetooth: hci3: command tx timeout [ 64.678644][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.694586][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.704544][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.711505][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.737962][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.751985][ T5090] Bluetooth: hci4: command tx timeout [ 64.753881][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.764881][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.791154][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.803495][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.810704][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.837358][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.855306][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.862492][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.888805][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.978466][ T5104] team0: Port device team_slave_0 added [ 64.988274][ T5104] team0: Port device team_slave_1 added [ 65.065134][ T5100] hsr_slave_0: entered promiscuous mode [ 65.071587][ T5100] hsr_slave_1: entered promiscuous mode [ 65.078840][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.086443][ T5100] Cannot create hsr debugfs directory [ 65.119214][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.126435][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.153105][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.166003][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.173234][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.199612][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.291800][ T5106] hsr_slave_0: entered promiscuous mode [ 65.298409][ T5106] hsr_slave_1: entered promiscuous mode [ 65.305135][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.313207][ T5106] Cannot create hsr debugfs directory [ 65.461004][ T5104] hsr_slave_0: entered promiscuous mode [ 65.467489][ T5104] hsr_slave_1: entered promiscuous mode [ 65.474778][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.482869][ T5104] Cannot create hsr debugfs directory [ 65.604147][ T5097] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.617559][ T5097] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.648515][ T5097] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.658629][ T5097] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.774354][ T5108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.818441][ T5108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.828685][ T5108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.858293][ T5108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.935174][ T5100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.957288][ T5100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.968414][ T5100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.996454][ T5100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.044036][ T5106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.080407][ T5106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.090629][ T5106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.125954][ T5106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.166088][ T5104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.176761][ T5104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.201076][ T5104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.216747][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.243828][ T5104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.307224][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.355633][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.363674][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.416232][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.423395][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.479191][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.555480][ T5090] Bluetooth: hci0: command tx timeout [ 66.555490][ T53] Bluetooth: hci1: command tx timeout [ 66.583749][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.628283][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.638485][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.645287][ T5090] Bluetooth: hci2: command tx timeout [ 66.685696][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.692902][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.706864][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.722270][ T5090] Bluetooth: hci3: command tx timeout [ 66.739856][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.747029][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.789168][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.796334][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.804999][ T5090] Bluetooth: hci4: command tx timeout [ 66.815624][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.823020][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.869567][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.889324][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.908159][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.915333][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.950609][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.960953][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.968185][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.055149][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.127518][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.160039][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.176906][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.184099][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.231060][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.238263][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.251583][ T5097] veth0_vlan: entered promiscuous mode [ 67.271201][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.297999][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.324945][ T5097] veth1_vlan: entered promiscuous mode [ 67.371450][ T5100] veth0_vlan: entered promiscuous mode [ 67.406942][ T5100] veth1_vlan: entered promiscuous mode [ 67.480553][ T5108] veth0_vlan: entered promiscuous mode [ 67.499667][ T5097] veth0_macvtap: entered promiscuous mode [ 67.524701][ T5097] veth1_macvtap: entered promiscuous mode [ 67.553638][ T5106] veth0_vlan: entered promiscuous mode [ 67.564556][ T5100] veth0_macvtap: entered promiscuous mode [ 67.574908][ T5100] veth1_macvtap: entered promiscuous mode [ 67.598794][ T5108] veth1_vlan: entered promiscuous mode [ 67.610077][ T5106] veth1_vlan: entered promiscuous mode [ 67.639062][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.659536][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.680306][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.701048][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.717919][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.729752][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.743140][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.753808][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.767114][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.780227][ T5100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790234][ T5100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.799091][ T5100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.807828][ T5100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.825683][ T5097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.835833][ T5097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.845432][ T5097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.854677][ T5097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.933835][ T5106] veth0_macvtap: entered promiscuous mode [ 67.945036][ T5106] veth1_macvtap: entered promiscuous mode [ 68.002882][ T5108] veth0_macvtap: entered promiscuous mode [ 68.044155][ T5108] veth1_macvtap: entered promiscuous mode [ 68.098737][ T5104] veth0_vlan: entered promiscuous mode [ 68.108756][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.120376][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.130469][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.140973][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.152190][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.170064][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.181610][ T5104] veth1_vlan: entered promiscuous mode [ 68.190927][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.193917][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.209758][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.220293][ T5106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.230945][ T5106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.246419][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.263550][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.276922][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.286848][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.297365][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.307502][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.328823][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.341097][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.376495][ T5106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.387382][ T5106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.397975][ T5106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.407399][ T5106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.419647][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.430637][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.440798][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.451537][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.461705][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.474387][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.485752][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.516203][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.516885][ T5108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.532854][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.545194][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.550797][ T5108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.562992][ T5108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.571715][ T5108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.581578][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.633089][ T53] Bluetooth: hci1: command tx timeout [ 68.639644][ T5090] Bluetooth: hci0: command tx timeout [ 68.691151][ T5104] veth0_macvtap: entered promiscuous mode [ 68.704609][ T4104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.714666][ T4104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.717895][ T5090] Bluetooth: hci2: command tx timeout [ 68.792509][ T5090] Bluetooth: hci3: command tx timeout [ 68.860925][ T5104] veth1_macvtap: entered promiscuous mode [ 68.872838][ T5090] Bluetooth: hci4: command tx timeout [ 68.906688][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.908089][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.923833][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.978208][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.008195][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.031449][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.038335][ T5150] Zero length message leads to an empty skb [ 69.049271][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.061396][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.072142][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.091196][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.108480][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.178390][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.205698][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.214301][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.225332][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.246449][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.260243][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.271257][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.285008][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.295142][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.305716][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.317659][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.341605][ T5156] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 69.371267][ T5156] team0: Port device netdevsim0 added [ 69.426822][ T963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.450693][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.468958][ T5104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.493965][ T5104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.510089][ T5104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.523179][ T5104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.546850][ T2393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.571325][ T2393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.803055][ T4104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.831280][ T4104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.905752][ T5172] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 69.914851][ T5172] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 69.946110][ T2393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.991529][ T2393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.103657][ T5177] FAULT_INJECTION: forcing a failure. [ 70.103657][ T5177] name failslab, interval 1, probability 0, space 0, times 1 [ 70.166093][ T5177] CPU: 1 PID: 5177 Comm: syz.3.13 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 70.176136][ T5177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.186245][ T5177] Call Trace: [ 70.189547][ T5177] [ 70.192675][ T5177] dump_stack_lvl+0x241/0x360 [ 70.197403][ T5177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.202647][ T5177] ? __wake_up_klogd+0xcc/0x110 [ 70.207542][ T5177] should_fail_ex+0x3b0/0x4e0 [ 70.212279][ T5177] ? tomoyo_encode+0x26f/0x540 [ 70.217076][ T5177] should_failslab+0x9/0x20 [ 70.221611][ T5177] __kmalloc_noprof+0xd8/0x400 [ 70.226403][ T5177] tomoyo_encode+0x26f/0x540 [ 70.231011][ T5177] tomoyo_realpath_from_path+0x59e/0x5e0 [ 70.236656][ T5177] tomoyo_path_number_perm+0x23a/0x880 [ 70.242128][ T5177] ? tomoyo_path_number_perm+0x208/0x880 [ 70.247760][ T5177] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.253759][ T5177] ? __fget_files+0x29/0x470 [ 70.258346][ T5177] ? __fget_files+0x3f6/0x470 [ 70.263013][ T5177] ? __fget_files+0x29/0x470 [ 70.267600][ T5177] security_file_ioctl+0x75/0xb0 [ 70.272536][ T5177] __se_sys_ioctl+0x47/0x170 [ 70.277216][ T5177] do_syscall_64+0xf3/0x230 [ 70.281718][ T5177] ? clear_bhb_loop+0x35/0x90 [ 70.286655][ T5177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.292560][ T5177] RIP: 0033:0x7f06bd175bd9 [ 70.296978][ T5177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.316580][ T5177] RSP: 002b:00007f06bde7b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 70.325019][ T5177] RAX: ffffffffffffffda RBX: 00007f06bd303f60 RCX: 00007f06bd175bd9 [ 70.332983][ T5177] RDX: 0000000020000100 RSI: 0000000040505330 RDI: 0000000000000003 [ 70.341064][ T5177] RBP: 00007f06bde7b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.349045][ T5177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.357107][ T5177] R13: 000000000000000b R14: 00007f06bd303f60 R15: 00007f06bd42fa68 [ 70.365091][ T5177] [ 70.419489][ T5177] ERROR: Out of memory at tomoyo_realpath_from_path. [ 70.715739][ T5185] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.732908][ T5090] Bluetooth: hci0: command tx timeout [ 70.738358][ T5090] Bluetooth: hci1: command tx timeout [ 70.792858][ T5090] Bluetooth: hci2: command tx timeout [ 70.873770][ T5090] Bluetooth: hci3: command tx timeout [ 70.930446][ T5203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 70.940608][ T5203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18'. [ 70.952680][ T5090] Bluetooth: hci4: command tx timeout [ 71.172402][ T5140] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.203774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.364905][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.416958][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.584306][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.597852][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.643652][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.675821][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.744465][ T5218] FAULT_INJECTION: forcing a failure. [ 71.744465][ T5218] name failslab, interval 1, probability 0, space 0, times 0 [ 71.751106][ T5220] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 71.757274][ T5218] CPU: 1 PID: 5218 Comm: syz.0.25 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 71.757305][ T5218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 71.757316][ T5218] Call Trace: [ 71.757324][ T5218] [ 71.757332][ T5218] dump_stack_lvl+0x241/0x360 [ 71.757366][ T5218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.757391][ T5218] ? __pfx__printk+0x10/0x10 [ 71.757426][ T5218] ? fib_lookup+0x81/0x450 [ 71.757449][ T5218] should_fail_ex+0x3b0/0x4e0 [ 71.757479][ T5218] ? dst_alloc+0x12b/0x190 [ 71.757499][ T5218] should_failslab+0x9/0x20 [ 71.757523][ T5218] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 71.757553][ T5218] dst_alloc+0x12b/0x190 [ 71.757579][ T5218] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 71.757617][ T5218] ip_route_output_key_hash+0x193/0x2b0 [ 71.757639][ T5218] ? ip_route_output_key_hash+0xdf/0x2b0 [ 71.757658][ T5218] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 71.757692][ T5218] ? inet_reqsk_alloc+0x504/0x800 [ 71.757716][ T5218] ip_route_output_flow+0x29/0x140 [ 71.757751][ T5218] inet_csk_route_req+0x625/0xde0 [ 71.757772][ T5218] ? tcp_v4_route_req+0x300/0x4f0 [ 71.757791][ T5218] ? inet_csk_route_req+0x5e/0xde0 [ 71.757817][ T5218] tcp_conn_request+0xf07/0x32f0 [ 71.757868][ T5218] ? __pfx_tcp_conn_request+0x10/0x10 [ 71.757915][ T5218] ? tcp_v4_conn_request+0x177/0x1d0 [ 71.757936][ T5218] ? tcp_rcv_state_process+0x20a/0x4570 [ 71.757957][ T5218] tcp_rcv_state_process+0x1bd1/0x4570 [ 71.757977][ T5218] ? tcp_do_parse_auth_options+0x29b/0x330 [ 71.758008][ T5218] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 71.758026][ T5218] ? sk_filter_trim_cap+0x5bf/0xa80 [ 71.758052][ T5218] ? __inet_lookup_listener+0x27a/0x3f0 [ 71.758076][ T5218] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 71.936323][ T5218] tcp_v4_do_rcv+0x778/0xc60 [ 71.940921][ T5218] ? tcp_v4_fill_cb+0x1de/0x460 [ 71.945779][ T5218] tcp_v4_rcv+0x2ad7/0x37b0 [ 71.950319][ T5218] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 71.955170][ T5218] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 71.960019][ T5218] ip_protocol_deliver_rcu+0x225/0x430 [ 71.965478][ T5218] ? ip_local_deliver_finish+0x22e/0x5f0 [ 71.971114][ T5218] ip_local_deliver_finish+0x33f/0x5f0 [ 71.976584][ T5218] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 71.982559][ T5218] NF_HOOK+0x3a4/0x450 [ 71.986624][ T5218] ? NF_HOOK+0x9a/0x450 [ 71.990777][ T5218] ? __pfx_NF_HOOK+0x10/0x10 [ 71.995370][ T5218] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 72.001350][ T5218] ? ip_rcv_finish+0x406/0x560 [ 72.006110][ T5218] ? __pfx_ip_rcv_finish+0x10/0x10 [ 72.011221][ T5218] NF_HOOK+0x3a4/0x450 [ 72.015286][ T5218] ? NF_HOOK+0x9a/0x450 [ 72.019442][ T5218] ? __pfx_NF_HOOK+0x10/0x10 [ 72.024031][ T5218] ? ip_rcv_core+0x7ff/0xd10 [ 72.029051][ T5218] ? __pfx_ip_rcv_finish+0x10/0x10 [ 72.034168][ T5218] ? __pfx_ip_rcv+0x10/0x10 [ 72.038685][ T5218] __netif_receive_skb+0x2bf/0x650 [ 72.043838][ T5218] ? __pfx_lock_acquire+0x10/0x10 [ 72.048877][ T5218] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 72.055152][ T5218] ? __pfx___netif_receive_skb+0x10/0x10 [ 72.060791][ T5218] ? __kasan_slab_alloc+0x66/0x80 [ 72.065811][ T5218] ? read_tsc+0x9/0x20 [ 72.069930][ T5218] ? timekeeping_get_ns+0x2c0/0x420 [ 72.075143][ T5218] ? netif_receive_skb+0x131/0x890 [ 72.080351][ T5218] ? netif_receive_skb+0x131/0x890 [ 72.085482][ T5218] netif_receive_skb+0x1e8/0x890 [ 72.090509][ T5218] ? tun_rx_batched+0x160/0x8f0 [ 72.095356][ T5218] ? __pfx_netif_receive_skb+0x10/0x10 [ 72.100849][ T5218] ? tun_rx_batched+0x160/0x8f0 [ 72.105704][ T5218] tun_rx_batched+0x1b7/0x8f0 [ 72.110378][ T5218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.116703][ T5218] ? __pfx_lock_acquire+0x10/0x10 [ 72.121728][ T5218] ? __pfx_tun_rx_batched+0x10/0x10 [ 72.126945][ T5218] tun_get_user+0x2f35/0x4560 [ 72.131634][ T5218] ? tun_get_user+0x2a2f/0x4560 [ 72.136493][ T5218] ? __pfx_tun_get_user+0x10/0x10 [ 72.141521][ T5218] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 72.146982][ T5218] ? tun_get+0x1e/0x2f0 [ 72.151148][ T5218] ? tun_get+0x1e/0x2f0 [ 72.155308][ T5218] ? tun_get+0x27d/0x2f0 [ 72.159555][ T5218] tun_chr_write_iter+0x113/0x1f0 [ 72.164582][ T5218] vfs_write+0xa72/0xc90 [ 72.168825][ T5218] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 72.174369][ T5218] ? __pfx_vfs_write+0x10/0x10 [ 72.179180][ T5218] ksys_write+0x1a0/0x2c0 [ 72.183515][ T5218] ? __pfx_ksys_write+0x10/0x10 [ 72.188389][ T5218] ? do_syscall_64+0x100/0x230 [ 72.193158][ T5218] ? do_syscall_64+0xb6/0x230 [ 72.197853][ T5218] do_syscall_64+0xf3/0x230 [ 72.202359][ T5218] ? clear_bhb_loop+0x35/0x90 [ 72.207029][ T5218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.212926][ T5218] RIP: 0033:0x7fc899b7475f [ 72.217341][ T5218] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 72.236982][ T5218] RSP: 002b:00007fc89a888010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 72.245398][ T5218] RAX: ffffffffffffffda RBX: 00007fc899d03f60 RCX: 00007fc899b7475f [ 72.253363][ T5218] RDX: 0000000000000036 RSI: 0000000020000140 RDI: 00000000000000c8 [ 72.261327][ T5218] RBP: 00007fc89a8880a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.269302][ T5218] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000002 [ 72.277272][ T5218] R13: 000000000000000b R14: 00007fc899d03f60 R15: 00007fc899e2fa68 [ 72.285281][ T5218] [ 72.294658][ T5203] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.325386][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.332737][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.413176][ T5220] process 'syz.1.26' launched '/dev/fd/6' with NULL argv: empty string added [ 72.493825][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.533038][ T5223] warning: `syz.1.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.659779][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.668263][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.676386][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.685431][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.697627][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.706729][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.784897][ T5225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.061139][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 73.127774][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.321650][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.399250][ T29] audit: type=1326 audit(1720144409.642:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.558783][ T29] audit: type=1326 audit(1720144409.652:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.619465][ T29] audit: type=1326 audit(1720144409.652:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.661170][ T29] audit: type=1326 audit(1720144409.652:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.684704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 73.695370][ T29] audit: type=1326 audit(1720144409.652:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.717292][ C0] vkms_vblank_simulate: vblank timer overrun [ 73.858486][ T29] audit: type=1326 audit(1720144409.652:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 73.970845][ T5257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 73.986791][ T29] audit: type=1326 audit(1720144409.652:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 74.135592][ T29] audit: type=1326 audit(1720144409.652:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 74.226324][ T58] usb 4-1: USB disconnect, device number 2 [ 74.238826][ T29] audit: type=1326 audit(1720144409.652:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 74.325562][ T29] audit: type=1326 audit(1720144409.652:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5246 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 74.349907][ T35] bridge_slave_1: left allmulticast mode [ 74.364063][ T35] bridge_slave_1: left promiscuous mode [ 74.377726][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.451318][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.519175][ T35] bridge_slave_0: left allmulticast mode [ 74.540220][ T35] bridge_slave_0: left promiscuous mode [ 74.559342][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.674076][ T8] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 74.686107][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.710915][ T8] usb 3-1: config 0 descriptor?? [ 74.722945][ T8] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 74.793061][ T5090] Bluetooth: hci4: command tx timeout [ 74.919876][ T5099] IPVS: starting estimator thread 0... [ 74.940549][ T5285] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 75.034353][ T5286] IPVS: using max 20 ests per chain, 48000 per kthread [ 75.128882][ T8] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 75.172332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.470270][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.484985][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.509950][ T35] bond0 (unregistering): Released all slaves [ 75.525140][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 75.570808][ T5259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.627319][ T5259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.085392][ T8] gspca_cpia1: usb_control_msg 02, error -71 [ 76.091427][ T8] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 76.170148][ T8] usb 3-1: USB disconnect, device number 2 [ 76.417970][ T5313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.48'. [ 76.466765][ T5313] vlan2: entered promiscuous mode [ 76.472382][ T5313] veth0_virt_wifi: entered promiscuous mode [ 76.505598][ T5313] veth0_virt_wifi: left promiscuous mode [ 76.566516][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.589266][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.616669][ T5320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 76.627217][ T5232] bridge_slave_0: entered allmulticast mode [ 76.650716][ T5232] bridge_slave_0: entered promiscuous mode [ 76.707088][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.735322][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.763632][ T5232] bridge_slave_1: entered allmulticast mode [ 76.771651][ T5232] bridge_slave_1: entered promiscuous mode [ 76.873122][ T5090] Bluetooth: hci4: command tx timeout [ 76.944475][ T35] hsr_slave_0: left promiscuous mode [ 76.981481][ T35] hsr_slave_1: left promiscuous mode [ 77.031713][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.069783][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.094116][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.127460][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.251353][ T35] veth1_macvtap: left promiscuous mode [ 77.269732][ T35] veth0_macvtap: left promiscuous mode [ 77.299153][ T35] veth1_vlan: left promiscuous mode [ 77.317728][ T35] veth0_vlan: left promiscuous mode [ 77.359369][ T5349] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 77.577813][ T5346] kvm: pic: level sensitive irq not supported [ 77.578323][ T5346] kvm: pic: non byte read [ 77.743083][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.53'. [ 77.832406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.072283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.143983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.163222][ T5090] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 78.172745][ T5090] Bluetooth: hci1: Injecting HCI hardware error event [ 78.180773][ T5090] Bluetooth: hci1: hardware error 0x00 [ 78.192244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.255012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.903639][ T35] team0 (unregistering): Port device team_slave_1 removed [ 78.946462][ T35] team0 (unregistering): Port device team_slave_0 removed [ 78.954408][ T53] Bluetooth: hci4: command tx timeout [ 79.024048][ T5138] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.193589][ T5138] usb 1-1: device descriptor read/64, error -71 [ 79.496379][ T5138] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 79.548073][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.599455][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.704500][ T5138] usb 1-1: device descriptor read/64, error -71 [ 79.731783][ T5379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 79.757878][ T5379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 79.773955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.838766][ T5232] team0: Port device team_slave_0 added [ 79.845175][ T5138] usb usb1-port1: attempt power cycle [ 79.879858][ T5232] team0: Port device team_slave_1 added [ 80.033650][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.052396][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.078313][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.153700][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.182537][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.208539][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.245104][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 80.298841][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.316436][ T5138] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 80.374284][ T5138] usb 1-1: device descriptor read/8, error -71 [ 80.481688][ T5404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.66'. [ 80.521084][ T5232] hsr_slave_0: entered promiscuous mode [ 80.543236][ T5232] hsr_slave_1: entered promiscuous mode [ 80.572408][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.592054][ T5232] Cannot create hsr debugfs directory [ 80.652315][ T5138] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 80.694263][ T5138] usb 1-1: device descriptor read/8, error -71 [ 80.763409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.824207][ T5138] usb usb1-port1: unable to enumerate USB device [ 81.033370][ T5090] Bluetooth: hci4: command tx timeout [ 81.638078][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 82.043277][ T5431] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.086242][ T25] cfg80211: failed to load regulatory.db [ 82.383524][ T5140] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.394230][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.435482][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.489113][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.562365][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.614655][ T5140] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 82.638121][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.683354][ T5140] usb 1-1: New USB device found, idVendor=19d2, idProduct=1164, bcdDevice=69.6c [ 82.702032][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.773050][ T5140] usb 1-1: config 0 descriptor?? [ 82.947337][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.995660][ T5140] usb 1-1: string descriptor 0 read error: -71 [ 83.044980][ T5140] usb 1-1: USB disconnect, device number 6 [ 83.058989][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.133718][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.140907][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.160288][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.167973][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.266562][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.378115][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.517867][ T5232] veth0_vlan: entered promiscuous mode [ 83.564370][ T5232] veth1_vlan: entered promiscuous mode [ 83.724099][ T5232] veth0_macvtap: entered promiscuous mode [ 83.774618][ T5232] veth1_macvtap: entered promiscuous mode [ 83.860014][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.907960][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.946119][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.977208][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.019645][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.042338][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.062588][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.078031][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.106192][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.148692][ T5484] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 84.152210][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.211745][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.252585][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.275392][ T5488] usb usb8: usbfs: process 5488 (syz.1.85) did not claim interface 0 before use [ 84.301950][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.326255][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.386542][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.422081][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.457401][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475364][ T5494] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 84.493887][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.544210][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571965][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.602068][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.623804][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.704260][ T5494] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 84.743500][ T5495] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 84.805124][ T5497] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 84.814611][ T5506] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.872811][ T5502] netlink: 'syz.1.87': attribute type 29 has an invalid length. [ 85.230260][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.280597][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.366628][ T5519] input: syz0 as /devices/virtual/input/input5 [ 85.383384][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.418108][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.153884][ T5542] vivid-000: disconnect [ 86.682138][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.850674][ T5534] vivid-000: reconnect [ 86.893131][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 86.910616][ T25] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 86.936884][ T25] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 86.960607][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 87.001194][ T25] usb 4-1: config 1 has no interface number 0 [ 87.040428][ T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.092403][ T25] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 87.138628][ T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 87.163691][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.205969][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 87.220753][ T5564] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 87.267070][ T5564] vlan2: entered promiscuous mode [ 87.267367][ T5567] vivid-000: disconnect [ 87.294411][ T5564] veth0_virt_wifi: entered promiscuous mode [ 87.315872][ T5564] veth0_virt_wifi: left promiscuous mode [ 87.748533][ T5583] FAULT_INJECTION: forcing a failure. [ 87.748533][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 87.802165][ T5583] CPU: 1 PID: 5583 Comm: syz.0.103 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 87.812173][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 87.822239][ T5583] Call Trace: [ 87.825505][ T5583] [ 87.828422][ T5583] dump_stack_lvl+0x241/0x360 [ 87.833189][ T5583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.838394][ T5583] ? __pfx__printk+0x10/0x10 [ 87.842978][ T5583] ? ref_tracker_alloc+0x332/0x490 [ 87.848153][ T5583] should_fail_ex+0x3b0/0x4e0 [ 87.852834][ T5583] ? skb_clone+0x20c/0x390 [ 87.857247][ T5583] should_failslab+0x9/0x20 [ 87.861739][ T5583] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 87.867148][ T5583] skb_clone+0x20c/0x390 [ 87.871388][ T5583] __netlink_deliver_tap+0x3cc/0x7c0 [ 87.876688][ T5583] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.881870][ T5583] netlink_deliver_tap+0x19d/0x1b0 [ 87.887070][ T5583] netlink_unicast+0x7b8/0x980 [ 87.891842][ T5583] ? __pfx_netlink_unicast+0x10/0x10 [ 87.897136][ T5583] ? __virt_addr_valid+0x183/0x520 [ 87.902254][ T5583] ? __check_object_size+0x49c/0x900 [ 87.907532][ T5583] ? bpf_lsm_netlink_send+0x9/0x10 [ 87.912637][ T5583] netlink_sendmsg+0x8db/0xcb0 [ 87.917393][ T5583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.922668][ T5583] ? __import_iovec+0x536/0x820 [ 87.927514][ T5583] ? aa_sock_msg_perm+0x91/0x160 [ 87.932440][ T5583] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.937748][ T5583] ? security_socket_sendmsg+0x87/0xb0 [ 87.943226][ T5583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.948516][ T5583] __sock_sendmsg+0x221/0x270 [ 87.953206][ T5583] ____sys_sendmsg+0x525/0x7d0 [ 87.958080][ T5583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.963379][ T5583] __sys_sendmsg+0x2b0/0x3a0 [ 87.967959][ T5583] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.973086][ T5583] ? vfs_write+0x7c4/0xc90 [ 87.977531][ T5583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.984192][ T5583] ? do_syscall_64+0x100/0x230 [ 87.988953][ T5583] ? do_syscall_64+0xb6/0x230 [ 87.993633][ T5583] do_syscall_64+0xf3/0x230 [ 87.998137][ T5583] ? clear_bhb_loop+0x35/0x90 [ 88.002805][ T5583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.008695][ T5583] RIP: 0033:0x7fc899b75bd9 [ 88.013098][ T5583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.032711][ T5583] RSP: 002b:00007fc89a867048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.041109][ T5583] RAX: ffffffffffffffda RBX: 00007fc899d04038 RCX: 00007fc899b75bd9 [ 88.049072][ T5583] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 88.057059][ T5583] RBP: 00007fc89a8670a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.065126][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.073087][ T5583] R13: 000000000000006e R14: 00007fc899d04038 R15: 00007fc899e2fa68 [ 88.081080][ T5583] [ 88.134822][ T5561] vivid-000: reconnect [ 88.485576][ T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 88.539458][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.549233][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.561158][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.581148][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.597285][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.605206][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.645712][ T5590] input: syz0 as /devices/virtual/input/input6 [ 89.273569][ T58] usb 4-1: USB disconnect, device number 3 [ 89.297867][ T58] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 89.429347][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 89.429367][ T29] audit: type=1326 audit(1720144425.672:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.1.112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x0 [ 89.476629][ T4474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.500605][ T5626] vivid-000: disconnect [ 89.899625][ T4474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.950036][ T5635] netlink: 'syz.1.112': attribute type 24 has an invalid length. [ 90.107196][ T4474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.273427][ T4474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.338352][ T5601] chnl_net:caif_netlink_parms(): no params data found [ 90.343347][ T5622] vivid-000: reconnect [ 90.572001][ T5658] vivid-000: disconnect [ 90.723406][ T53] Bluetooth: hci5: command tx timeout [ 90.919546][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.944449][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.975848][ T5601] bridge_slave_0: entered allmulticast mode [ 91.009055][ T5601] bridge_slave_0: entered promiscuous mode [ 91.048002][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.073630][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.100961][ T5601] bridge_slave_1: entered allmulticast mode [ 91.116884][ T5601] bridge_slave_1: entered promiscuous mode [ 91.276885][ T4474] bridge_slave_1: left allmulticast mode [ 91.307906][ T4474] bridge_slave_1: left promiscuous mode [ 91.323518][ T5650] vivid-000: reconnect [ 91.341804][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.390617][ T4474] bridge_slave_0: left allmulticast mode [ 91.426866][ T4474] bridge_slave_0: left promiscuous mode [ 91.441372][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.519040][ T29] audit: type=1326 audit(1720144427.762:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5682 comm="syz.3.124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bd175bd9 code=0x0 [ 92.043411][ T5680] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.298346][ T5695] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 92.478599][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.504621][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.524659][ T4474] bond0 (unregistering): Released all slaves [ 92.573967][ T5684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 92.617098][ T5688] netlink: 'syz.3.124': attribute type 24 has an invalid length. [ 92.682892][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.750863][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.792043][ T53] Bluetooth: hci5: command tx timeout [ 92.831528][ T5700] vivid-000: disconnect [ 93.121109][ T5601] team0: Port device team_slave_0 added [ 93.132802][ T5601] team0: Port device team_slave_1 added [ 93.387285][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.405567][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.545067][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.625585][ T5697] vivid-000: reconnect [ 93.693988][ T5710] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.703442][ T5710] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.712243][ T5710] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.720946][ T5710] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.820596][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.872212][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.979845][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.039849][ T5723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.129'. [ 94.073839][ T5723] vlan2: entered promiscuous mode [ 94.092241][ T5723] veth0_virt_wifi: entered promiscuous mode [ 94.119785][ T5723] veth0_virt_wifi: left promiscuous mode [ 94.133355][ T5140] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.230989][ T4474] hsr_slave_0: left promiscuous mode [ 94.257229][ T4474] hsr_slave_1: left promiscuous mode [ 94.277049][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.298691][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.310618][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.319306][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.356743][ T4474] veth1_macvtap: left promiscuous mode [ 94.359892][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.377990][ T4474] veth0_macvtap: left promiscuous mode [ 94.380952][ T5140] usb 2-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 94.392782][ T4474] veth1_vlan: left promiscuous mode [ 94.392947][ T4474] veth0_vlan: left promiscuous mode [ 94.402192][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.422623][ T5140] usb 2-1: config 0 descriptor?? [ 94.430313][ T5140] option 2-1:0.0: GSM modem (1-port) converter detected [ 94.643812][ T8] usb 2-1: USB disconnect, device number 3 [ 94.671326][ T8] option 2-1:0.0: device disconnected [ 94.873028][ T53] Bluetooth: hci5: command tx timeout [ 95.079071][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 95.127563][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 95.709794][ T5733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.740607][ T5732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.756589][ T53] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 95.756662][ T53] Bluetooth: hci0: Injecting HCI hardware error event [ 95.757801][ T5090] Bluetooth: hci0: hardware error 0x00 [ 95.857113][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 95.926026][ T5601] hsr_slave_0: entered promiscuous mode [ 95.948426][ T5601] hsr_slave_1: entered promiscuous mode [ 95.985303][ T5601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.016925][ T5601] Cannot create hsr debugfs directory [ 96.022756][ T5757] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.031622][ T5757] use the actual size instead. [ 96.268277][ T5763] vlan2: entered promiscuous mode [ 96.289850][ T5763] veth0: entered promiscuous mode [ 96.299936][ T29] audit: type=1326 audit(1720144432.542:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5764 comm="syz.3.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bd175bd9 code=0x0 [ 96.307471][ T5763] team0: Port device vlan2 added [ 96.800411][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 96.953582][ T53] Bluetooth: hci5: command tx timeout [ 97.413910][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.577701][ T29] audit: type=1326 audit(1720144433.812:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 97.640410][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.653690][ T29] audit: type=1326 audit(1720144433.812:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 97.681528][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.724230][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.742181][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.765548][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.783360][ T29] audit: type=1326 audit(1720144433.812:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 97.788959][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.829143][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 97.852018][ T5090] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 97.868453][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.880025][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.890237][ T45] usb 1-1: Product: syz [ 97.896114][ T45] usb 1-1: Manufacturer: syz [ 97.900735][ T45] usb 1-1: SerialNumber: syz [ 97.917534][ T29] audit: type=1326 audit(1720144433.812:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.052087][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.106673][ T29] audit: type=1326 audit(1720144433.812:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.208347][ T29] audit: type=1326 audit(1720144433.812:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.382258][ T29] audit: type=1326 audit(1720144433.822:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.455846][ T29] audit: type=1326 audit(1720144433.822:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.560760][ T29] audit: type=1326 audit(1720144433.822:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5807 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 98.648552][ T5840] fuse: Unknown parameter '0xffffffffffffffff' [ 98.706481][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.793622][ T5854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 98.831530][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.862389][ T5854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.164'. [ 98.901576][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.908915][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.985476][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.992775][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.157036][ T5601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.172106][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.194967][ T5601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.347455][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.375187][ T58] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.416642][ T58] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.448470][ T58] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.467055][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.538055][ T5858] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 99.548593][ T5601] veth0_vlan: entered promiscuous mode [ 99.616483][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 99.678583][ T5601] veth1_vlan: entered promiscuous mode [ 99.812876][ T5601] veth0_macvtap: entered promiscuous mode [ 99.857563][ T5601] veth1_macvtap: entered promiscuous mode [ 99.970270][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.041753][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.082228][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.116394][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.163372][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.197080][ T45] cdc_ncm 1-1:1.0: bind() failure [ 100.216424][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.260408][ T45] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 100.267338][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.292277][ T45] cdc_ncm 1-1:1.1: bind() failure [ 100.326744][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.353499][ T45] usb 1-1: USB disconnect, device number 7 [ 100.374998][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.407989][ T5880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 100.471213][ T5880] vlan3: entered promiscuous mode [ 100.489267][ T5880] veth0_virt_wifi: entered promiscuous mode [ 100.520925][ T5880] veth0_virt_wifi: left promiscuous mode [ 100.580712][ T5888] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 100.685133][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.726648][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.750670][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.776722][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.806845][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.827877][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.854772][ T5601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.870028][ T5601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.880604][ T5090] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.890883][ T5090] Bluetooth: hci4: Injecting HCI hardware error event [ 100.901696][ T5090] Bluetooth: hci4: hardware error 0x00 [ 100.916571][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.946400][ T5893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.087731][ T5601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.145389][ T5601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.158969][ T5601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.182426][ T5601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.258140][ T4474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.283714][ T4474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.575666][ T4474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.616416][ T4474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.620120][ T5099] usb 5-1: USB disconnect, device number 2 [ 101.785385][ T4474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.841727][ T4474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.971273][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.982453][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.996712][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.005141][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.015616][ T4474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.033082][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 102.040478][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.108070][ T4474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.292285][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 102.343847][ T2407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.351715][ T2407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.697755][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.705741][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.733849][ T4474] bridge_slave_1: left allmulticast mode [ 102.739932][ T4474] bridge_slave_1: left promiscuous mode [ 102.792855][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.804278][ T4474] bridge_slave_0: left allmulticast mode [ 102.809961][ T4474] bridge_slave_0: left promiscuous mode [ 102.817459][ T5094] Bluetooth: hci4: unexpected event for opcode 0x200f [ 102.836612][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.852099][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.953574][ T5090] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 103.053762][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 103.066263][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.096861][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 103.107451][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.149980][ T8] usb 2-1: config 0 descriptor?? [ 103.177265][ T8] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 103.329672][ T5933] mmap: syz.4.184 (5933) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.464868][ T5931] kvm: user requested TSC rate below hardware speed [ 103.509198][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.525537][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.540823][ T4474] bond0 (unregistering): Released all slaves [ 103.580908][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.183'. [ 103.601170][ T5927] vlan2: entered promiscuous mode [ 103.607859][ T5927] veth0_to_hsr: entered promiscuous mode [ 103.622114][ T5927] veth0_to_hsr: left promiscuous mode [ 103.752343][ T5090] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 103.763700][ T5090] Bluetooth: hci3: Injecting HCI hardware error event [ 103.771953][ T5094] Bluetooth: hci3: hardware error 0x00 [ 103.935550][ T5940] vivid-000: disconnect [ 104.072831][ T5090] Bluetooth: hci1: command tx timeout [ 104.410670][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 104.488967][ T4474] hsr_slave_0: left promiscuous mode [ 104.527184][ T4474] hsr_slave_1: left promiscuous mode [ 104.558131][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.596083][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.657921][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.684822][ T5936] vivid-000: reconnect [ 104.718212][ T5960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.188'. [ 104.732014][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.762045][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.188'. [ 104.801598][ T8] usb 2-1: USB disconnect, device number 4 [ 104.864062][ T4474] veth1_macvtap: left promiscuous mode [ 104.906948][ T4474] veth0_macvtap: left promiscuous mode [ 104.919015][ T4474] veth1_vlan: left promiscuous mode [ 104.925508][ T4474] veth0_vlan: left promiscuous mode [ 105.152360][ T5099] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.401557][ T5099] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.432690][ T5099] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.475751][ T5099] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.491176][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.527519][ T5952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.837561][ T5094] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 106.152412][ T5094] Bluetooth: hci1: command tx timeout [ 106.339115][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 106.426036][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 106.842133][ T5139] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.064056][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 107.097340][ T5139] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.113660][ T5139] usb 4-1: no configurations [ 107.139241][ T5139] usb 4-1: can't read configurations, error -22 [ 107.350105][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.392364][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.426306][ T5919] bridge_slave_0: entered allmulticast mode [ 107.440472][ T5919] bridge_slave_0: entered promiscuous mode [ 107.486338][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.507615][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.525845][ T5919] bridge_slave_1: entered allmulticast mode [ 107.536815][ T5919] bridge_slave_1: entered promiscuous mode [ 107.671024][ T5138] usb 5-1: USB disconnect, device number 3 [ 107.745357][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.855141][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.067200][ T5919] team0: Port device team_slave_0 added [ 108.083252][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.108214][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.118890][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.127847][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.141387][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.148403][ T5919] team0: Port device team_slave_1 added [ 108.156808][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.184506][ T4474] IPVS: stop unused estimator thread 0... [ 108.232381][ T5090] Bluetooth: hci1: command tx timeout [ 108.332559][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.365739][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.452018][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.520135][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.552530][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.613672][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.766657][ T5919] hsr_slave_0: entered promiscuous mode [ 108.782615][ T5919] hsr_slave_1: entered promiscuous mode [ 108.788834][ T5919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.796550][ T5919] Cannot create hsr debugfs directory [ 108.933046][ T4474] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.103932][ T4474] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.237609][ T4474] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.402626][ T6048] bond0: (slave bond_slave_0): Releasing backup interface [ 109.521160][ T4474] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.630937][ T6063] sctp: [Deprecated]: syz.3.214 (pid 6063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.630937][ T6063] Use struct sctp_sack_info instead [ 109.989498][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 110.027110][ T6068] vlan3: entered promiscuous mode [ 110.053583][ T6068] veth1_to_hsr: entered promiscuous mode [ 110.082763][ T6068] veth1_to_hsr: left promiscuous mode [ 110.218871][ T6089] binder: 6085:6089 ioctl c018620c 0 returned -14 [ 110.233982][ T5090] Bluetooth: hci2: command tx timeout [ 110.312607][ T5090] Bluetooth: hci1: command tx timeout [ 110.355037][ T4474] bridge_slave_1: left allmulticast mode [ 110.382989][ T4474] bridge_slave_1: left promiscuous mode [ 110.388803][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.412090][ T5099] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.473955][ T4474] bridge_slave_0: left allmulticast mode [ 110.500498][ T4474] bridge_slave_0: left promiscuous mode [ 110.505030][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.220'. [ 110.509338][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.547649][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 110.547680][ T29] audit: type=1326 audit(1720144446.792:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6097 comm="syz.3.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06bd175bd9 code=0x0 [ 110.653815][ T5099] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 110.679684][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.709823][ T5099] usb 5-1: config 0 descriptor?? [ 110.736899][ T5099] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 111.072095][ T4531] bcm5974 5-1:0.0: could not read from device [ 111.098767][ T5099] usb 5-1: USB disconnect, device number 4 [ 111.105939][ T4531] bcm5974 5-1:0.0: could not read from device [ 111.131817][ T4531] bcm5974 5-1:0.0: could not read from device [ 111.255838][ T4474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.269214][ T4474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.280465][ T4474] bond0 (unregistering): Released all slaves [ 111.359643][ T6096] netlink: 'syz.1.220': attribute type 1 has an invalid length. [ 111.418895][ T6026] chnl_net:caif_netlink_parms(): no params data found [ 111.702937][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.710093][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.721446][ T6026] bridge_slave_0: entered allmulticast mode [ 111.732296][ T6026] bridge_slave_0: entered promiscuous mode [ 111.795288][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.808430][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.818459][ T6026] bridge_slave_1: entered allmulticast mode [ 111.825947][ T6026] bridge_slave_1: entered promiscuous mode [ 111.951196][ T6026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.080266][ T6026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.144410][ T4474] hsr_slave_0: left promiscuous mode [ 112.155827][ T4474] hsr_slave_1: left promiscuous mode [ 112.176317][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.204592][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.220569][ T4474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.229595][ T4474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.273873][ T4474] veth1_macvtap: left promiscuous mode [ 112.284791][ T4474] veth0_macvtap: left promiscuous mode [ 112.296538][ T4474] veth1_vlan: left promiscuous mode [ 112.312556][ T5090] Bluetooth: hci2: command tx timeout [ 112.323181][ T4474] veth0_vlan: left promiscuous mode [ 112.601493][ T6143] binder: 6137:6143 ioctl c018620c 0 returned -14 [ 112.608686][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.1.230'. [ 112.902037][ T5138] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.945377][ T4474] team0 (unregistering): Port device team_slave_1 removed [ 112.980693][ T4474] team0 (unregistering): Port device team_slave_0 removed [ 113.102049][ T5138] usb 2-1: Using ep0 maxpacket: 8 [ 113.110342][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.123418][ T5138] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.138332][ T5138] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 113.148141][ T5138] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 113.157722][ T5138] usb 2-1: Manufacturer: syz [ 113.165778][ T5138] usb 2-1: config 0 descriptor?? [ 113.478608][ T6026] team0: Port device team_slave_0 added [ 113.532265][ T5919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.629007][ T6026] team0: Port device team_slave_1 added [ 113.724019][ T5919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.733633][ T5919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.828603][ T5919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.845839][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.877776][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.907604][ T6026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.929695][ T6026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.937270][ T6026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.957551][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.981790][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.008940][ T6026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.171844][ T6026] hsr_slave_0: entered promiscuous mode [ 114.198539][ C0] vxcan0: j1939_tp_txtimer: 0xffff8880298fd400: tx aborted with unknown reason: -2 [ 114.210503][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880298fe000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 114.210735][ T6026] hsr_slave_1: entered promiscuous mode [ 114.229771][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880298fd400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 114.295559][ T6026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.309177][ T6026] Cannot create hsr debugfs directory [ 114.322141][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.329359][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.392136][ T5090] Bluetooth: hci2: command tx timeout [ 114.521983][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 114.544957][ T8] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 114.651949][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.674872][ T8] usb 4-1: Product: syz [ 114.682323][ T8] usb 4-1: Manufacturer: syz [ 114.699283][ T8] usb 4-1: SerialNumber: syz [ 114.726799][ T8] usb 4-1: config 0 descriptor?? [ 114.747680][ T6173] FAULT_INJECTION: forcing a failure. [ 114.747680][ T6173] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.781813][ T6173] CPU: 0 PID: 6173 Comm: syz.4.235 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 114.791825][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.801908][ T6173] Call Trace: [ 114.805200][ T6173] [ 114.808165][ T6173] dump_stack_lvl+0x241/0x360 [ 114.812860][ T6173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.818069][ T6173] ? __pfx__printk+0x10/0x10 [ 114.822678][ T6173] ? n_tty_read+0x393/0x1e10 [ 114.827273][ T6173] ? __pfx_lock_release+0x10/0x10 [ 114.832331][ T6173] should_fail_ex+0x3b0/0x4e0 [ 114.837042][ T6173] _copy_to_iter+0x1f6/0x1960 [ 114.841757][ T6173] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 114.847841][ T6173] ? __pfx__copy_to_iter+0x10/0x10 [ 114.852953][ T6173] ? __pfx_woken_wake_function+0x10/0x10 [ 114.858583][ T6173] ? __check_object_size+0x8e/0x900 [ 114.863781][ T6173] tty_read+0x2cd/0x690 [ 114.867961][ T6173] ? __pfx_tty_read+0x10/0x10 [ 114.872741][ T6173] ? common_file_perm+0x1a6/0x210 [ 114.877771][ T6173] ? security_file_permission+0x7f/0xa0 [ 114.883334][ T6173] vfs_read+0x9bd/0xbc0 [ 114.887486][ T6173] ? __pfx_lock_release+0x10/0x10 [ 114.892518][ T6173] ? __pfx_vfs_read+0x10/0x10 [ 114.897219][ T6173] ksys_read+0x1a0/0x2c0 [ 114.901455][ T6173] ? __pfx_ksys_read+0x10/0x10 [ 114.906210][ T6173] ? do_syscall_64+0x100/0x230 [ 114.910970][ T6173] ? do_syscall_64+0xb6/0x230 [ 114.915837][ T6173] do_syscall_64+0xf3/0x230 [ 114.920770][ T6173] ? clear_bhb_loop+0x35/0x90 [ 114.925543][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.931734][ T6173] RIP: 0033:0x7fdc807746bc [ 114.936157][ T6173] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 114.955758][ T6173] RSP: 002b:00007fdc801fefc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.964256][ T6173] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 00007fdc807746bc [ 114.972225][ T6173] RDX: 0000000000002000 RSI: 0000000020000280 RDI: 0000000000000004 [ 114.980191][ T6173] RBP: 00007fdc801ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.988166][ T6173] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000004 [ 114.996136][ T6173] R13: 0000000020004a00 R14: 00007fdc80904038 R15: 00007fdc80a2fa68 [ 115.004112][ T6173] [ 115.057800][ T8] kaweth 4-1:0.0: Firmware present in device. [ 115.228494][ T8] kaweth 4-1:0.0: Statistics collection: 0 [ 115.250707][ T8] kaweth 4-1:0.0: Multicast filter limit: 0 [ 115.279925][ T8] kaweth 4-1:0.0: MTU: 0 [ 115.305918][ T8] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 115.454934][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.656917][ T5138] usb 2-1: USB disconnect, device number 5 [ 115.681272][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.744007][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.751238][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.780292][ T8] kaweth 4-1:0.0: Error setting receive filter [ 115.797906][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.805188][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.814055][ T8] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 115.845061][ T8] usb 4-1: USB disconnect, device number 6 [ 115.980727][ T6026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.021586][ T6026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 116.037587][ T6026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 116.067138][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.093877][ T6026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 116.244185][ T5919] veth0_vlan: entered promiscuous mode [ 116.277023][ T5919] veth1_vlan: entered promiscuous mode [ 116.381356][ T5919] veth0_macvtap: entered promiscuous mode [ 116.405514][ T5919] veth1_macvtap: entered promiscuous mode [ 116.474453][ T5090] Bluetooth: hci2: command tx timeout [ 116.498590][ T6026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.541584][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.562395][ T6200] binder: 6197:6200 ioctl c018620c 0 returned -14 [ 116.606270][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.632684][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.657860][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.677761][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.691199][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.703861][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.755823][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.776951][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.787765][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.799727][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.809656][ T5919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.820464][ T5919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.838584][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.882976][ T5919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.922637][ T5919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.952523][ T5919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.971748][ T5919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.989037][ T6026] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.036277][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.043526][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.115585][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.122818][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.374690][ T6026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.388627][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.422553][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.523833][ T2393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.559362][ T2393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.617256][ T6026] veth0_vlan: entered promiscuous mode [ 117.668691][ T6026] veth1_vlan: entered promiscuous mode [ 117.677973][ T6229] netlink: 44 bytes leftover after parsing attributes in process `syz.3.245'. [ 117.796658][ T6026] veth0_macvtap: entered promiscuous mode [ 117.827225][ T6026] veth1_macvtap: entered promiscuous mode [ 117.904449][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.941412][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.961750][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.985429][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.022450][ T5144] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.031318][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.067975][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.078408][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.089534][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.105578][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.138950][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.163367][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.174771][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.186030][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.196350][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.208699][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.220978][ T6026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.232044][ T6026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.242358][ T5144] usb 4-1: Using ep0 maxpacket: 8 [ 118.251508][ T5144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.254015][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.262248][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 118.283987][ T6026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.318302][ T6026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.337269][ T5144] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 118.351336][ T6026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.360614][ T5144] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 118.371997][ T6026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.374377][ T5144] usb 4-1: Manufacturer: syz [ 118.387354][ T6026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.392819][ T5144] usb 4-1: config 0 descriptor?? [ 118.483287][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.516367][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.540945][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.558139][ T45] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 118.602043][ T45] usb 2-1: New USB device strings: Mfr=169, Product=179, SerialNumber=0 [ 118.651461][ T6240] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 118.660114][ T45] usb 2-1: Product: syz [ 118.680314][ T45] usb 2-1: Manufacturer: syz [ 118.686205][ T4462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.713666][ T45] usb 2-1: config 0 descriptor?? [ 118.724702][ T4462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.812985][ T963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.844007][ T963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.260964][ T45] acrux 0003:1A34:0802.0001: hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 119.280656][ T45] acrux 0003:1A34:0802.0001: no inputs found [ 119.287307][ T45] acrux 0003:1A34:0802.0001: Failed to enable force feedback support, error: -19 [ 119.316695][ T6265] vivid-000: disconnect [ 119.342282][ T6264] vivid-000: reconnect [ 119.535059][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 119.603489][ T6276] vlan2: entered promiscuous mode [ 119.654975][ T6276] veth0_virt_wifi: entered promiscuous mode [ 119.707616][ T6276] veth0_virt_wifi: left promiscuous mode [ 120.552540][ T45] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 120.914667][ T8] usb 4-1: USB disconnect, device number 7 [ 121.258863][ T6327] loop0: detected capacity change from 0 to 128 [ 121.849431][ T5140] usb 2-1: USB disconnect, device number 6 [ 122.250433][ T6350] vivid-000: disconnect [ 122.266489][ T6349] vivid-000: reconnect [ 122.629649][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 122.666821][ T6368] netlink: 68 bytes leftover after parsing attributes in process `syz.3.267'. [ 122.694702][ T6363] vlan2: entered promiscuous mode [ 122.702629][ T6363] veth0_virt_wifi: entered promiscuous mode [ 122.718216][ T6368] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 122.736453][ T6363] veth0_virt_wifi: left promiscuous mode [ 122.742895][ T6370] random: crng reseeded on system resumption [ 122.848925][ T6374] netlink: 104 bytes leftover after parsing attributes in process `syz.1.269'. [ 123.339267][ T6395] loop0: detected capacity change from 0 to 128 [ 123.418025][ T6397] vivid-000: disconnect [ 123.439888][ T6396] vivid-000: reconnect [ 123.544489][ T29] audit: type=1326 audit(1720144459.782:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 123.621993][ T29] audit: type=1326 audit(1720144459.782:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 123.666085][ T5139] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.722811][ T29] audit: type=1326 audit(1720144459.792:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 123.780419][ T6415] netlink: 'syz.2.278': attribute type 11 has an invalid length. [ 123.793159][ T29] audit: type=1326 audit(1720144459.792:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facfa575bd9 code=0x7ffc0000 [ 123.811995][ T6415] netlink: 'syz.2.278': attribute type 11 has an invalid length. [ 123.818477][ T29] audit: type=1326 audit(1720144459.792:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7facfa574610 code=0x7ffc0000 [ 123.824823][ T5144] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.872194][ T6415] debugfs: Directory 'netdev:' with parent 'phy19' already present! [ 123.896050][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.908605][ T29] audit: type=1326 audit(1720144459.792:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfa5757db code=0x7ffc0000 [ 123.921959][ T5139] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 123.968513][ T29] audit: type=1326 audit(1720144459.792:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfa5757db code=0x7ffc0000 [ 124.034154][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.046703][ T29] audit: type=1326 audit(1720144459.792:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfa5757db code=0x7ffc0000 [ 124.067188][ T5139] usb 4-1: config 0 descriptor?? [ 124.109152][ T5144] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 124.110070][ T29] audit: type=1326 audit(1720144459.792:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfa5757db code=0x7ffc0000 [ 124.147946][ T29] audit: type=1326 audit(1720144459.922:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.1.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7facfa5757db code=0x7ffc0000 [ 124.152591][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.178634][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.281'. [ 124.200848][ T6424] vlan2: entered promiscuous mode [ 124.206533][ T6424] veth0_virt_wifi: entered promiscuous mode [ 124.228279][ T5144] usb 2-1: config 0 descriptor?? [ 124.251600][ T5144] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 124.273311][ T5144] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 124.284094][ T6424] veth0_virt_wifi: left promiscuous mode [ 124.364623][ T6430] Cannot find add_set index 0 as target [ 124.485595][ T5140] usb 2-1: USB disconnect, device number 7 [ 124.495998][ T5140] ftdi_sio 2-1:0.0: device disconnected [ 124.554896][ T5139] cypress 0003:04B4:0001.0002: unexpected long global item [ 124.600400][ T5139] cypress 0003:04B4:0001.0002: parse failed [ 124.611409][ T5139] cypress 0003:04B4:0001.0002: probe with driver cypress failed with error -22 [ 124.636308][ T6442] vivid-000: disconnect [ 124.667449][ T6439] vivid-000: reconnect [ 124.870595][ T5139] usb 4-1: USB disconnect, device number 8 [ 124.972314][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 125.175622][ T45] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 125.201068][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.201240][ T6468] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 125.234948][ T6468] netlink: 'syz.1.295': attribute type 29 has an invalid length. [ 125.250485][ T45] usb 5-1: config 0 descriptor?? [ 125.273436][ T6470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.317897][ T6468] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.529756][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 126.284493][ T6486] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0x9 [ 126.408742][ T6499] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 127.333430][ T5138] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.554046][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 127.568510][ T5138] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.587403][ T5138] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 127.615396][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.639679][ T5138] usb 3-1: config 0 descriptor?? [ 127.651829][ T5138] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 127.665935][ T45] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.755249][ T45] asix 5-1:0.0: probe with driver asix failed with error -71 [ 127.787759][ T45] usb 5-1: USB disconnect, device number 5 [ 128.013110][ T6541] input: syz1 as /devices/virtual/input/input8 [ 128.353619][ T6548] FAULT_INJECTION: forcing a failure. [ 128.353619][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 128.422351][ T6548] CPU: 0 PID: 6548 Comm: syz.0.319 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 128.422379][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 128.422394][ T6548] Call Trace: [ 128.422403][ T6548] [ 128.422412][ T6548] dump_stack_lvl+0x241/0x360 [ 128.422445][ T6548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.422469][ T6548] ? __pfx__printk+0x10/0x10 [ 128.422498][ T6548] ? netlink_insert+0x10b7/0x14b0 [ 128.422523][ T6548] should_fail_ex+0x3b0/0x4e0 [ 128.422549][ T6548] ? __alloc_skb+0x1c3/0x440 [ 128.422570][ T6548] should_failslab+0x9/0x20 [ 128.422593][ T6548] kmem_cache_alloc_node_noprof+0x71/0x320 [ 128.422623][ T6548] __alloc_skb+0x1c3/0x440 [ 128.422648][ T6548] ? __pfx___alloc_skb+0x10/0x10 [ 128.422671][ T6548] ? netlink_autobind+0xd6/0x2f0 [ 128.422699][ T6548] ? netlink_autobind+0x2b0/0x2f0 [ 128.422726][ T6548] netlink_sendmsg+0x631/0xcb0 [ 128.422760][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.422784][ T6548] ? __import_iovec+0x536/0x820 [ 128.422801][ T6548] ? aa_sock_msg_perm+0x91/0x160 [ 128.422826][ T6548] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.422843][ T6548] ? security_socket_sendmsg+0x87/0xb0 [ 128.422865][ T6548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.422886][ T6548] __sock_sendmsg+0x221/0x270 [ 128.422914][ T6548] ____sys_sendmsg+0x525/0x7d0 [ 128.422943][ T6548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.422979][ T6548] __sys_sendmsg+0x2b0/0x3a0 [ 128.423003][ T6548] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.423021][ T6548] ? vfs_write+0x7c4/0xc90 [ 128.423080][ T6548] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.423102][ T6548] ? do_syscall_64+0x100/0x230 [ 128.423127][ T6548] ? do_syscall_64+0xb6/0x230 [ 128.423152][ T6548] do_syscall_64+0xf3/0x230 [ 128.423175][ T6548] ? clear_bhb_loop+0x35/0x90 [ 128.423194][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.423218][ T6548] RIP: 0033:0x7f3d9cd75bd9 [ 128.423235][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.423249][ T6548] RSP: 002b:00007f3d9dbd4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.423281][ T6548] RAX: ffffffffffffffda RBX: 00007f3d9cf03f60 RCX: 00007f3d9cd75bd9 [ 128.423294][ T6548] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 128.423305][ T6548] RBP: 00007f3d9dbd40a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.423318][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.423329][ T6548] R13: 000000000000000b R14: 00007f3d9cf03f60 R15: 00007f3d9d02fa68 [ 128.423357][ T6548] [ 129.236255][ T6568] netlink: 44 bytes leftover after parsing attributes in process `syz.1.322'. [ 129.512783][ T5089] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.692962][ T5089] usb 2-1: Using ep0 maxpacket: 8 [ 129.728663][ T5089] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.742059][ T5099] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.765686][ T5089] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.787685][ T5089] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 129.800589][ T5089] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 129.814780][ T5089] usb 2-1: Manufacturer: syz [ 129.836438][ T5089] usb 2-1: config 0 descriptor?? [ 129.943672][ T5099] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 129.969572][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.995660][ T8] usb 3-1: USB disconnect, device number 3 [ 130.010780][ T5099] usb 1-1: config 0 descriptor?? [ 130.051299][ T5099] usb-storage 1-1:0.0: USB Mass Storage device detected [ 130.147747][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.200338][ T5099] usb-storage 1-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc) [ 130.200338][ T5099] Please send a copy of this message to and [ 130.456128][ T5099] usb 1-1: USB disconnect, device number 8 [ 130.802104][ T5141] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.952073][ T5090] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.952439][ T45] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 130.998970][ T45] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 131.058312][ T5141] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 131.091759][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.150848][ T5141] usb 3-1: config 0 descriptor?? [ 131.661284][ T5090] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 131.878482][ T5141] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 131.924266][ T5141] asix 3-1:0.0: probe with driver asix failed with error -71 [ 131.965174][ T5141] usb 3-1: USB disconnect, device number 4 [ 132.394996][ T5144] usb 2-1: USB disconnect, device number 8 [ 132.952765][ T5141] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.008757][ T6665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.112279][ T45] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 133.130420][ T45] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 133.152043][ T5141] usb 5-1: Using ep0 maxpacket: 32 [ 133.172597][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.200868][ T5141] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.227116][ T5141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.260395][ T5141] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 133.276531][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.283040][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.309254][ T5141] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 133.357218][ T5141] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 133.401311][ T5141] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.427698][ T5141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.462051][ T5144] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.462164][ T5141] usb 5-1: Product: syz [ 133.496695][ T5141] usb 5-1: Manufacturer: syz [ 133.501416][ T5141] usb 5-1: SerialNumber: syz [ 133.689141][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.742882][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.780043][ T6687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.807326][ T5144] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 133.819944][ T6687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.846473][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.880346][ T5144] usb 1-1: config 0 descriptor?? [ 133.909112][ T5144] usbhid 1-1:0.0: can't add hid device: -22 [ 133.940568][ T5144] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 134.144027][ T2393] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.386838][ T2393] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.561009][ T2393] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.704669][ T2393] team0: Port device netdevsim0 removed [ 134.739549][ T2393] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.019282][ T2393] bridge_slave_1: left allmulticast mode [ 135.029303][ T2393] bridge_slave_1: left promiscuous mode [ 135.037198][ T2393] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.050966][ T2393] bridge_slave_0: left allmulticast mode [ 135.057496][ T2393] bridge_slave_0: left promiscuous mode [ 135.064584][ T2393] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.544587][ T5141] cdc_ncm 5-1:1.0: bind() failure [ 135.560410][ T5141] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 135.568052][ T5141] cdc_ncm 5-1:1.1: bind() failure [ 135.578129][ T5141] usb 5-1: USB disconnect, device number 6 [ 135.683768][ T2393] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.699104][ T2393] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.710560][ T2393] bond0 (unregistering): Released all slaves [ 136.044053][ T5141] usb 1-1: USB disconnect, device number 9 [ 194.718215][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.724639][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.168078][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.174694][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.752111][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 281.759714][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 281.767470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.776241][ T30] task:kworker/1:0 state:D stack:22160 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 281.786566][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 281.793373][ T30] Call Trace: [ 281.796690][ T30] [ 281.799648][ T30] __schedule+0x17e8/0x4a20 [ 281.804537][ T30] ? __pfx___schedule+0x10/0x10 [ 281.809416][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.817427][ T30] ? __pfx_lock_release+0x10/0x10 [ 281.827068][ T30] ? kick_pool+0x45c/0x620 [ 281.831525][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 281.840190][ T30] ? schedule+0x90/0x320 [ 281.848805][ T30] schedule+0x14b/0x320 [ 281.853356][ T30] schedule_preempt_disabled+0x13/0x30 [ 281.858845][ T30] __mutex_lock+0x6a4/0xd70 [ 281.868873][ T30] ? __mutex_lock+0x527/0xd70 [ 281.873670][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 281.879932][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 281.886098][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.895071][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.901446][ T30] ? process_scheduled_works+0x945/0x1830 [ 281.907205][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 281.913682][ T30] ? process_scheduled_works+0x945/0x1830 [ 281.919422][ T30] process_scheduled_works+0xa2c/0x1830 [ 281.926957][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.933061][ T30] ? assign_work+0x364/0x3d0 [ 281.937696][ T30] worker_thread+0x86d/0xd50 [ 281.942419][ T30] ? __kthread_parkme+0x169/0x1d0 [ 281.947455][ T30] ? __pfx_worker_thread+0x10/0x10 [ 281.952675][ T30] kthread+0x2f0/0x390 [ 281.956754][ T30] ? __pfx_worker_thread+0x10/0x10 [ 281.961925][ T30] ? __pfx_kthread+0x10/0x10 [ 281.966523][ T30] ret_from_fork+0x4b/0x80 [ 281.970930][ T30] ? __pfx_kthread+0x10/0x10 [ 281.975579][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.980386][ T30] [ 281.983525][ T30] INFO: task kworker/1:1:45 blocked for more than 143 seconds. [ 281.991070][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 281.998868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.007597][ T30] task:kworker/1:1 state:D stack:20208 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 282.017865][ T30] Workqueue: events rfkill_op_handler [ 282.023293][ T30] Call Trace: [ 282.026589][ T30] [ 282.029517][ T30] __schedule+0x17e8/0x4a20 [ 282.035970][ T30] ? __pfx___schedule+0x10/0x10 [ 282.040845][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.045961][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 282.051430][ T30] ? kthread_data+0x52/0xd0 [ 282.056032][ T30] ? schedule+0x90/0x320 [ 282.060288][ T30] ? wq_worker_sleeping+0x66/0x240 [ 282.065560][ T30] ? schedule+0x90/0x320 [ 282.069907][ T30] schedule+0x14b/0x320 [ 282.074387][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.080046][ T30] __mutex_lock+0x6a4/0xd70 [ 282.085075][ T30] ? __mutex_lock+0x527/0xd70 [ 282.089787][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 282.095257][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.100293][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 282.105567][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 282.111467][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.118172][ T30] ? kobject_uevent_env+0x54d/0x8e0 [ 282.126334][ T30] nfc_rfkill_set_block+0x50/0x310 [ 282.131470][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 282.137239][ T30] rfkill_set_block+0x1f1/0x440 [ 282.142434][ T30] rfkill_epo+0x84/0x180 [ 282.146698][ T30] ? process_scheduled_works+0x945/0x1830 [ 282.154768][ T30] rfkill_op_handler+0x121/0x280 [ 282.159735][ T30] process_scheduled_works+0xa2c/0x1830 [ 282.165442][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.171441][ T30] ? assign_work+0x364/0x3d0 [ 282.176114][ T30] worker_thread+0x86d/0xd50 [ 282.180722][ T30] ? __kthread_parkme+0x169/0x1d0 [ 282.185818][ T30] ? __pfx_worker_thread+0x10/0x10 [ 282.190936][ T30] kthread+0x2f0/0x390 [ 282.195082][ T30] ? __pfx_worker_thread+0x10/0x10 [ 282.200212][ T30] ? __pfx_kthread+0x10/0x10 [ 282.204847][ T30] ret_from_fork+0x4b/0x80 [ 282.209274][ T30] ? __pfx_kthread+0x10/0x10 [ 282.213945][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.218730][ T30] [ 282.221854][ T30] INFO: task kworker/u8:6:2393 blocked for more than 143 seconds. [ 282.229673][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 282.237634][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.246362][ T30] task:kworker/u8:6 state:D stack:20944 pid:2393 tgid:2393 ppid:2 flags:0x00004000 [ 282.256602][ T30] Workqueue: netns cleanup_net [ 282.261357][ T30] Call Trace: [ 282.265532][ T30] [ 282.268489][ T30] __schedule+0x17e8/0x4a20 [ 282.273685][ T30] ? __pfx___schedule+0x10/0x10 [ 282.278555][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.283618][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 282.289121][ T30] ? kthread_data+0x52/0xd0 [ 282.293690][ T30] ? schedule+0x90/0x320 [ 282.297938][ T30] ? wq_worker_sleeping+0x66/0x240 [ 282.303311][ T30] ? schedule+0x90/0x320 [ 282.307564][ T30] schedule+0x14b/0x320 [ 282.311705][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.317310][ T30] __mutex_lock+0x6a4/0xd70 [ 282.321937][ T30] ? kobject_put+0x443/0x480 [ 282.326563][ T30] ? __mutex_lock+0x527/0xd70 [ 282.331248][ T30] ? rfkill_unregister+0xd0/0x230 [ 282.336534][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.341570][ T30] ? __pfx_device_del+0x10/0x10 [ 282.346928][ T30] rfkill_unregister+0xd0/0x230 [ 282.352060][ T30] wiphy_unregister+0x22a/0xaa0 [ 282.357115][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 282.363083][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 282.368470][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 282.374316][ T30] ? kfree+0x149/0x360 [ 282.378402][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 282.385752][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 282.391333][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 282.397712][ T30] hwsim_exit_net+0x5c1/0x670 [ 282.402974][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 282.408199][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 282.414099][ T30] cleanup_net+0x802/0xcc0 [ 282.418538][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 282.423521][ T30] ? process_scheduled_works+0x945/0x1830 [ 282.429246][ T30] process_scheduled_works+0xa2c/0x1830 [ 282.435169][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.441160][ T30] ? assign_work+0x364/0x3d0 [ 282.445831][ T30] worker_thread+0x86d/0xd50 [ 282.450437][ T30] ? __kthread_parkme+0x169/0x1d0 [ 282.455678][ T30] ? __pfx_worker_thread+0x10/0x10 [ 282.460797][ T30] kthread+0x2f0/0x390 [ 282.465325][ T30] ? __pfx_worker_thread+0x10/0x10 [ 282.470462][ T30] ? __pfx_kthread+0x10/0x10 [ 282.475277][ T30] ret_from_fork+0x4b/0x80 [ 282.479717][ T30] ? __pfx_kthread+0x10/0x10 [ 282.484414][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.489197][ T30] [ 282.492395][ T30] INFO: task syz-executor:5083 blocked for more than 144 seconds. [ 282.500200][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 282.509985][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.518746][ T30] task:syz-executor state:D stack:24672 pid:5083 tgid:5083 ppid:5078 flags:0x00004002 [ 282.529016][ T30] Call Trace: [ 282.532394][ T30] [ 282.535329][ T30] __schedule+0x17e8/0x4a20 [ 282.539841][ T30] ? __pfx___schedule+0x10/0x10 [ 282.544756][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.549790][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 282.555336][ T30] ? schedule+0x90/0x320 [ 282.559582][ T30] schedule+0x14b/0x320 [ 282.563804][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.569271][ T30] __mutex_lock+0x6a4/0xd70 [ 282.573886][ T30] ? kobject_put+0x443/0x480 [ 282.578491][ T30] ? __mutex_lock+0x527/0xd70 [ 282.583276][ T30] ? rfkill_unregister+0xd0/0x230 [ 282.588316][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.593461][ T30] ? __pfx_device_del+0x10/0x10 [ 282.598342][ T30] ? hci_sock_dev_event+0x2eb/0x5f0 [ 282.603617][ T30] rfkill_unregister+0xd0/0x230 [ 282.608483][ T30] hci_unregister_dev+0x336/0x4e0 [ 282.614121][ T30] vhci_release+0x83/0xd0 [ 282.618502][ T30] ? __pfx_vhci_release+0x10/0x10 [ 282.623938][ T30] __fput+0x24a/0x8a0 [ 282.627946][ T30] task_work_run+0x24f/0x310 [ 282.632651][ T30] ? __pfx_task_work_run+0x10/0x10 [ 282.637790][ T30] ? switch_task_namespaces+0xe1/0x110 [ 282.643356][ T30] do_exit+0xa27/0x27e0 [ 282.647546][ T30] ? __pfx_do_exit+0x10/0x10 [ 282.652512][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.658502][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.664897][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.670187][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 282.675455][ T30] do_group_exit+0x207/0x2c0 [ 282.680059][ T30] __x64_sys_exit_group+0x3f/0x40 [ 282.685449][ T30] do_syscall_64+0xf3/0x230 [ 282.689974][ T30] ? clear_bhb_loop+0x35/0x90 [ 282.694966][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.700984][ T30] RIP: 0033:0x7facfa575bd9 [ 282.705687][ T30] RSP: 002b:00007ffe468547a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 282.714683][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007facfa575bd9 [ 282.723172][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 282.731167][ T30] RBP: 00007facfa704a18 R08: 00007ffe46852547 R09: 000000000000000c [ 282.739479][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 282.747729][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 282.755856][ T30] [ 282.758878][ T30] INFO: task syz.3.315:6530 blocked for more than 144 seconds. [ 282.766501][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 282.774351][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 282.783074][ T30] task:syz.3.315 state:D stack:25488 pid:6530 tgid:6530 ppid:5106 flags:0x00004006 [ 282.793541][ T30] Call Trace: [ 282.796848][ T30] [ 282.799786][ T30] __schedule+0x17e8/0x4a20 [ 282.804772][ T30] ? __pfx___schedule+0x10/0x10 [ 282.809642][ T30] ? __pfx_lock_release+0x10/0x10 [ 282.815243][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 282.820771][ T30] ? schedule+0x90/0x320 [ 282.825337][ T30] schedule+0x14b/0x320 [ 282.829743][ T30] schedule_preempt_disabled+0x13/0x30 [ 282.835369][ T30] __mutex_lock+0x6a4/0xd70 [ 282.839988][ T30] ? kobject_put+0x443/0x480 [ 282.844919][ T30] ? __mutex_lock+0x527/0xd70 [ 282.849630][ T30] ? rfkill_unregister+0xd0/0x230 [ 282.854840][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 282.859958][ T30] ? __pfx_device_del+0x10/0x10 [ 282.865075][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 282.871077][ T30] rfkill_unregister+0xd0/0x230 [ 282.876260][ T30] nfc_unregister_device+0x96/0x2a0 [ 282.881477][ T30] virtual_ncidev_close+0x59/0x90 [ 282.886593][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 282.892646][ T30] __fput+0x24a/0x8a0 [ 282.896658][ T30] task_work_run+0x24f/0x310 [ 282.901255][ T30] ? __pfx_task_work_run+0x10/0x10 [ 282.906427][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 282.912225][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 282.917885][ T30] do_syscall_64+0x100/0x230 [ 282.924492][ T30] ? clear_bhb_loop+0x35/0x90 [ 282.929198][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.935250][ T30] RIP: 0033:0x7f06bd175bd9 [ 282.939696][ T30] RSP: 002b:00007f06bd42fb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 282.948164][ T30] RAX: 0000000000000000 RBX: 00007f06bd305a60 RCX: 00007f06bd175bd9 [ 282.957066][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 282.965114][ T30] RBP: 00007f06bd305a60 R08: 0000000000000006 R09: 0000001dbd42fe7f [ 282.973146][ T30] R10: 00000000005edfb8 R11: 0000000000000246 R12: 000000000001f515 [ 282.981142][ T30] R13: 0000000000000032 R14: 00007f06bd305a60 R15: 00007f06bd304038 [ 282.989400][ T30] [ 282.992545][ T30] [ 282.992545][ T30] Showing all locks held in the system: [ 283.000260][ T30] 3 locks held by kworker/1:0/25: [ 283.005331][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 283.016652][ T30] #1: ffffc900001f7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 283.030410][ T30] #2: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 283.045230][ T30] 1 lock held by khungtaskd/30: [ 283.050115][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 283.060046][ T30] 4 locks held by kworker/1:1/45: [ 283.065106][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 283.076274][ T30] #1: ffffc90000b57d00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 283.087335][ T30] #2: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x4f/0x180 [ 283.096877][ T30] #3: ffff8880727e7100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 283.106846][ T30] 4 locks held by kworker/u8:6/2393: [ 283.112183][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 283.123183][ T30] #1: ffffc9000913fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 283.134009][ T30] #2: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 283.143461][ T30] #3: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 283.153817][ T30] 2 locks held by kworker/u8:9/4462: [ 283.159126][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 283.169585][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 283.181260][ T30] 2 locks held by klogd/4535: [ 283.186325][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 283.197003][ T30] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 283.208555][ T30] 2 locks held by getty/4846: [ 283.213261][ T30] #0: ffff88802afe30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 283.223313][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 283.233476][ T30] 1 lock held by syz-executor/5083: [ 283.238652][ T30] #0: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 283.248886][ T30] 2 locks held by syz.3.315/6530: [ 283.254322][ T30] #0: ffff8880727e7100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 283.264166][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 283.277632][ T30] [ 283.279981][ T30] ============================================= [ 283.279981][ T30] [ 283.288635][ T30] NMI backtrace for cpu 1 [ 283.292980][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 283.302879][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.312929][ T30] Call Trace: [ 283.316198][ T30] [ 283.319118][ T30] dump_stack_lvl+0x241/0x360 [ 283.323795][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.328988][ T30] ? __pfx__printk+0x10/0x10 [ 283.333570][ T30] ? vprintk_emit+0x631/0x770 [ 283.338244][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 283.343267][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 283.348245][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.353714][ T30] ? _printk+0xd5/0x120 [ 283.357873][ T30] ? __pfx__printk+0x10/0x10 [ 283.362460][ T30] ? __wake_up_klogd+0xcc/0x110 [ 283.367314][ T30] ? __pfx__printk+0x10/0x10 [ 283.371894][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 283.376910][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.382880][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 283.388868][ T30] watchdog+0xfde/0x1020 [ 283.393102][ T30] ? watchdog+0x1ea/0x1020 [ 283.397511][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.402175][ T30] kthread+0x2f0/0x390 [ 283.406241][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.410904][ T30] ? __pfx_kthread+0x10/0x10 [ 283.415486][ T30] ret_from_fork+0x4b/0x80 [ 283.419897][ T30] ? __pfx_kthread+0x10/0x10 [ 283.424479][ T30] ret_from_fork_asm+0x1a/0x30 [ 283.429244][ T30] [ 283.432856][ T30] Sending NMI from CPU 1 to CPUs 0: [ 283.438087][ C0] NMI backtrace for cpu 0 [ 283.438099][ C0] CPU: 0 PID: 4462 Comm: kworker/u8:9 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 283.438117][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.438126][ C0] Workqueue: bat_events batadv_tt_purge [ 283.438150][ C0] RIP: 0010:kasan_check_range+0x64/0x290 [ 283.438171][ C0] Code: 48 c1 eb 03 49 ba 00 00 00 00 00 fc ff df 4e 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 <4c> 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c [ 283.438183][ C0] RSP: 0018:ffffc9000d0af800 EFLAGS: 00000807 [ 283.438195][ C0] RAX: 0000000000000001 RBX: 1ffffffff25f4eca RCX: ffffffff81727a0d [ 283.438207][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa7650 [ 283.438217][ C0] RBP: 000000000001ffff R08: ffffffff92fa7657 R09: 1ffffffff25f4eca [ 283.438228][ C0] R10: dffffc0000000000 R11: fffffbfff25f4eca R12: 0000000000000001 [ 283.438239][ C0] R13: ffff88802f668000 R14: dffffc0000000001 R15: fffffbfff25f4ecb [ 283.438251][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 283.438264][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.438276][ C0] CR2: 000055a42d57b8d8 CR3: 000000000e132000 CR4: 00000000003506f0 [ 283.438289][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.438298][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.438308][ C0] Call Trace: [ 283.438315][ C0] [ 283.438321][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 283.438338][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.438355][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.438377][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 283.438394][ C0] ? nmi_handle+0x14f/0x5a0 [ 283.438414][ C0] ? nmi_handle+0x2a/0x5a0 [ 283.438433][ C0] ? kasan_check_range+0x64/0x290 [ 283.438455][ C0] ? default_do_nmi+0x63/0x160 [ 283.438471][ C0] ? exc_nmi+0x123/0x1f0 [ 283.438486][ C0] ? end_repeat_nmi+0xf/0x53 [ 283.438509][ C0] ? __lock_acquire+0xc5d/0x1fd0 [ 283.438524][ C0] ? kasan_check_range+0x64/0x290 [ 283.438542][ C0] ? kasan_check_range+0x64/0x290 [ 283.438560][ C0] ? kasan_check_range+0x64/0x290 [ 283.438577][ C0] [ 283.438582][ C0] [ 283.438588][ C0] __lock_acquire+0xc5d/0x1fd0 [ 283.438611][ C0] lock_acquire+0x1ed/0x550 [ 283.438626][ C0] ? batadv_tt_local_purge+0x107/0x340 [ 283.438648][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.438663][ C0] ? __local_bh_disable_ip+0x187/0x220 [ 283.438678][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 283.438695][ C0] ? batadv_tt_local_purge+0x107/0x340 [ 283.438713][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 283.438727][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 283.438742][ C0] ? batadv_tt_local_purge+0x2a0/0x340 [ 283.438761][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 283.438775][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 283.438795][ C0] ? batadv_tt_local_purge+0x107/0x340 [ 283.438814][ C0] _raw_spin_lock_bh+0x35/0x50 [ 283.438828][ C0] ? batadv_tt_local_purge+0x107/0x340 [ 283.438847][ C0] batadv_tt_local_purge+0x107/0x340 [ 283.438870][ C0] ? process_scheduled_works+0x945/0x1830 [ 283.438885][ C0] batadv_tt_purge+0x35/0xa40 [ 283.438908][ C0] ? process_scheduled_works+0x945/0x1830 [ 283.438922][ C0] process_scheduled_works+0xa2c/0x1830 [ 283.438948][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.438966][ C0] ? assign_work+0x364/0x3d0 [ 283.438983][ C0] worker_thread+0x86d/0xd50 [ 283.439004][ C0] ? __kthread_parkme+0x169/0x1d0 [ 283.439022][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.439037][ C0] kthread+0x2f0/0x390 [ 283.439053][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.439068][ C0] ? __pfx_kthread+0x10/0x10 [ 283.439085][ C0] ret_from_fork+0x4b/0x80 [ 283.439102][ C0] ? __pfx_kthread+0x10/0x10 [ 283.439118][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.439143][ C0] [ 283.440085][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 283.829452][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 283.839332][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 283.849379][ T30] Call Trace: [ 283.852650][ T30] [ 283.855572][ T30] dump_stack_lvl+0x241/0x360 [ 283.860252][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.865443][ T30] ? __pfx__printk+0x10/0x10 [ 283.870025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.876009][ T30] ? vscnprintf+0x5d/0x90 [ 283.880328][ T30] panic+0x349/0x860 [ 283.884220][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 283.890363][ T30] ? __pfx_panic+0x10/0x10 [ 283.894771][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 283.900138][ T30] ? __irq_work_queue_local+0x137/0x410 [ 283.905768][ T30] ? irq_work_queue+0xca/0x150 [ 283.910524][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.916583][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.922641][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.928607][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 283.934753][ T30] watchdog+0x101d/0x1020 [ 283.939071][ T30] ? watchdog+0x1ea/0x1020 [ 283.943570][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.948408][ T30] kthread+0x2f0/0x390 [ 283.952475][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.957143][ T30] ? __pfx_kthread+0x10/0x10 [ 283.961729][ T30] ret_from_fork+0x4b/0x80 [ 283.966145][ T30] ? __pfx_kthread+0x10/0x10 [ 283.970724][ T30] ret_from_fork_asm+0x1a/0x30 [ 283.975488][ T30] [ 283.978746][ T30] Kernel Offset: disabled [ 283.983063][ T30] Rebooting in 86400 seconds..