last executing test programs: 18.763165605s ago: executing program 1 (id=2883): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x1002, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xc}) 18.655648326s ago: executing program 1 (id=2884): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 17.711419874s ago: executing program 1 (id=2885): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x2}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x2, 0x0, 0x80, {0xdddd0000, 0x10000}}, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.279292283s ago: executing program 1 (id=2886): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c0000000000000800fe8000000000000000000000000000bbe000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000101"], 0xb8}}, 0x0) 17.186483905s ago: executing program 1 (id=2887): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x96) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000500)=0x304000000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x40001000, 0x0, 0x0, 0x0}) fchdir(r0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x1000}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="201602000000f2b2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00149400000045"], 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) write$binfmt_script(r6, 0x0, 0xfffffe5d) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYBLOB="ed8a25cb3c60ac90b25d9e312b8b35b1df642a05cd57c06ba9eb0016bcafad908bb4604a240c27ca6c106816d597bdd032154cd564570009d412f2e5a4e30ec202df84aff129f5459dfb0ff8b34f6e0dd2", @ANYBLOB="01d707c580d230ebe41135ae0881df00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r7}}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0xb1, &(0x7f0000000300)=ANY=[@ANYBLOB="080000a99729699bfe0c2aa4da805ae63dc421c1149fb70cda592fd9324fb65cbe956dbab6bd101005dfbf4da717529f2882443f575dde2022d8fa9d1dfce5e641d2943aa3222a850dcf6cd55690d435ab58a75d832a0f12e531314f39dc894dd30057fffcb41a6e990354e7b2417751517f845e3d01167f91de7ee4eb9984c5c8c71ba02079eb7fd9cbaede4a2c8ed097422fc1563869e68311200527f35b4d5ee2ed5b197e6d715721"]) 16.288977304s ago: executing program 1 (id=2888): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=ANY=[@ANYBLOB=' \x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000340)='./file0\x00', 0x203) write$binfmt_misc(r4, &(0x7f0000000100), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x3001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000800)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) pselect6(0x40, &(0x7f00000001c0)={0x8}, 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x14, {0x14, 0x22, "3f14a675fc6b12f9ff217f690d9a6e3a30a9"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}, &(0x7f0000000140)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x40, 0xad, 0x1, {0x22, 0x8bf}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x16, 0x4, "d24e4118"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x1, 0x3d, "2e5e7a84d44f55c046fe9291fe27d36cfa8772933b71e9a4c294fbc41361ffa20d8c59ee8e6e58d9ef88c93ab488887de4811e6619c6b80174e655d729"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5f, {0x5f, 0x0, "a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810ac55fbda3e39fcbe111cc28def45137dd52b615507901e312253d859be5cdac84dd1ab0ebff44827"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.454925622s ago: executing program 2 (id=2907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x50, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000000380), 0x0, 0x24049c40) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)=""/216, &(0x7f0000000140)=0xd8) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0xfffffffffffefffd]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r7) inotify_init1(0x0) fcntl$setstatus(r7, 0x4, 0x2c00) r8 = gettid() fcntl$setown(r7, 0x8, r8) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 8.299082964s ago: executing program 0 (id=2908): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400304c197000000000001090224000100000000090400000103000000092100000001220500090581030008000000"], 0x0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x11, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x0, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000040000000000000000000000feffffff0000000000000000000000000000000000000000000000000008000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000000000ff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f00000000c0)) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) connect$unix(r8, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x2042, 0x0, 0x2}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000100)={0x0, 0xfffffffffffffd26, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001fffffff080001006e00000008000300", @ANYRES64=r5], 0x60}}, 0x0) bind$tipc(r6, 0x0, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f0000000000), 0x4) 7.62322255s ago: executing program 2 (id=2909): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x0, 0x200, 0x0, 0x272}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x28, 0x0, r0, &(0x7f0000000000)=0x80, &(0x7f00000002c0)=@caif=@dgm, 0x0, 0x80000}) io_uring_enter(r3, 0x1a3c, 0x5e6f, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5327) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) 7.36593808s ago: executing program 2 (id=2911): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000600"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000003a80), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000080)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x8}}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xe0000, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @loopback}, &(0x7f0000000500)=0xc) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb000018000000000000000c0000000c00000003000000000000000000000a030000000000002af72a909d53b99f284888f339ee12af03"], &(0x7f0000000580)=""/114, 0x27, 0x72, 0x0, 0x2, 0x10000, @value}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'wg2\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1d}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="181c47495f5900751874a9260000", @ANYRES32=r1, @ANYBLOB="000000000800000018190000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xfa, &(0x7f00000003c0)=""/250, 0x0, 0x1, '\x00', r5, 0x0, r6, 0x8, &(0x7f00000014c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001340)=[{0x3, 0x2, 0x1, 0x6}, {0x2, 0x5, 0x9}, {0x3, 0x1}, {0xa57, 0x5, 0x3, 0x7}, {0x1, 0x5, 0x1, 0x4}, {0x0, 0x1, 0x1, 0x2}], 0x10, 0x5, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000040)={0x7274}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TIOCGRS485(r9, 0x5416, &(0x7f0000000200)) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r10, 0xc0045103, &(0x7f0000000540)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r12, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2004c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x90], 0x0, 0x8640}) 7.094265289s ago: executing program 2 (id=2913): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0x0, 0x0, 0x0, 0xffff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x80d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0xdd7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x45c) r1 = socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x1000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) read$char_usb(r0, &(0x7f0000000980)=""/4096, 0x1000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 6.886422487s ago: executing program 2 (id=2914): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r1, 0x0, 0x0, &(0x7f0000001dc0)={0x7}, 0x20) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000340)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cae130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2dca696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x3, 0x2, 0x7, 0x5, 0x81, 0x9, "1bfe0d1e"}, 0x5, 0x1, {0x0}}) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x30, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "efab13afc9f79aa9ba07fb754d144abe6e"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 6.64713205s ago: executing program 2 (id=2915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0x4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) 5.706991102s ago: executing program 4 (id=2920): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_io_uring_setup(0x2483, &(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c4000000000080008"], 0x7c}}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000b000100697036746e6c00001800028014000300ff020000000000000000020000000001000000000000000000"], 0x48}}, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x6) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/41, 0x29}, {0x0}], 0x4, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000001c0)={@loopback, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ifreq(r5, 0x8942, &(0x7f0000000280)={'gre0\x00', @ifru_addrs=@xdp={0x2c, 0x5, r6, 0x35}}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x0, 0x1, [{0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="6003ac4a6420e2017d519023e8b80840575ea056a1791ccef20df4cfc007a7c019b99ff8c7357e674d9b6175a6e74df0b0eab28dc87fe4d95cd9473f021c8dae4f9b6dad587e34b99f54afae170a6ef99600"/96]}]}) socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x5}, 0x1c) ptrace$ARCH_SET_CPUID(0x1e, 0x0, 0x1, 0x1012) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x0, 0x0) splice(r9, 0x0, r8, 0x0, 0x8, 0x0) 5.685387838s ago: executing program 3 (id=2921): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1001, 0x8, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) getpgrp(0x0) 5.257364096s ago: executing program 0 (id=2922): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x20, 0x8, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="ef2574fa265a5c616b26f2528492a9aa3cba1d92a263e6ff134d5001a7234f581570ac9a8cf90139bd7ef51fefe6acbefca5ca53ee2677bc649ad0246570066c2c73425f85e01d94541686ff7cb4b4cc75d07f3942960d561a5b823d3cfb6ff33706a11ae777e46c2e07a12b2a8d44c8fddb256e5b66e0c6af2b3150884046283c8a1a4261faa9a73246bc1b3ff5"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 4.131073387s ago: executing program 3 (id=2923): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) poll(0x0, 0x5a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000080000000000aa00004e2200"/38, @ANYRES32=0x41424344, @ANYRES32=r2, @ANYBLOB="5c02000090780000"], 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='statm\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4$alg(r6, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, 0x0) unshare(0x2040400) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)) io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7, 0x9, 0x8, 0x10000, 0x1, 0x7, '\x00', 0x0, r5, 0x4, 0x2, 0x1, 0x8, @void, @value, @value=r8}, 0x50) preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x1, 0x1, 0x3) 2.912343233s ago: executing program 3 (id=2924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0x4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x2000000, 0x33}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=@delchain={0x24, 0x2d, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)) 2.687478066s ago: executing program 3 (id=2925): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000040)=0x1) 2.53519306s ago: executing program 4 (id=2926): prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0xfffffffffffffe4b) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x7, 0x13, r0, 0x0) 2.498062858s ago: executing program 3 (id=2927): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) dup(r0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000078c2000000000063bbced0c6983190f081a26562980cf1dd0e0dbfd0dfc7142a2fa3b699aedb401bf45b3c5203dd7f9a4b7ebc85c22c68f3647a77cc84aa661492abb37071593c30969429a646eb86ac37c54737ebf845ed33c065a73879da5e11", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1814000000000008001811000000000000000040", @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="f31681", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000900)="718530c6aedb22fe5ed6ba88d2b12c039e822be436f4a165d9006e546c778ff433ba8feb2e9d9b89ffb95a2287f718f332c98b4b9e770343a908b44375600baf8e85fddac784965322556db3c1357fa5c0626487b308de553daa41a2b7fed0d1785fd57f1ee4017dcb0c8ed2cdca2eb3569f5676ef8be08cf25ac142a1df9f44a7e085fcc005f57989835678a83806b89fbf9b13029078fb7f1c4e56fea3f5a6c30fbbc5a365060c3822c2ac024ce52606460d0c3cdf5ac09e44f234ec24ead80f6316c429890a9c26dbd97a2911f64718b871c0e7a598a6d1cf0e8f292a", 0xde}, {&(0x7f0000000a00)="b6b5a8d0c84473bd45670571a627335e55b3c6bde70166a6215b365443a446b2e2a38eaf00c6e569d9e19325ac88488a1d321776472ed9fa7a21871c7d85ed1b103e971021482e37e687feb81cf7dacd3fc29d9d4b2b829915369989d21d09d2b498ce2f75eee62ec71258cce755952ef3fd9c629c1e5f2523d82590d61413f1e6c089ba8e133cafd156cca176e102392f0c6cae6ad5a30b0edabeea0ebdcf1d15912d718d89742da350f83ceaeb609aab3807252e9acbd0825a4e8d8e3e8cc902445a8b618ec8655a65885255dc105a00928782", 0xd4}, {&(0x7f0000000b00)="3cd3d8e592d1ebc07003f43999c6468478723124e972789a31d34439b251b82bb50765de58466f7a00e22a4c86a654c5d05047eb092997d6a97e91a818a4c4028309c8d1f1fb51aaadaad5ca965abab1b359f0caf181cb61", 0x58}, {&(0x7f0000000240)="d8207fe6fcf06f281169441f2dae50eaddbfe02b8463183fab69c471d482743f2d0cc11bfd8a445313db67c771ccac728934cdf1f28dd17d339b44ede87d", 0x27}, {&(0x7f0000000bc0)="f9d98758c76cc3ffb7e032da7718ba9c5a1dcc6378dbfd84b0685374777727bf9cc5c71b5eb9ab78849a7c36e0acaad7bcd9b3961642ae1c5cf3ed3c1d25c244306a14bcc81b3a0a49f3d55c66e6c658489a79e69785008cbc81bc213d351b830c33feef2d8af7636ab7cb73a6fd1c8723275570307fb16b84e91564caa6a6afc184425fc679e3c5795238df3ab4d20388b6207ab7cf043ea7ca42af0c7f0d165ffe0f399cf52cddfea2d3e11ea7458fffd05ae66544350d1eb1fc2545b6cb1ed62158f0bab612aaf11a58f6a68dddefdc59dac5908d00"/230, 0xe6}, {&(0x7f0000000cc0)="e1460888ca13efb628433cd4d92651ab8238977f5cd59de559a2a7a736a246780f02324f83465e0d2d38dc", 0x2b}, {&(0x7f0000000d00)="ab001d875435ad6dfe41a0cfae06078afe4a96d12d550b9cd347e450e54e7630f3a65d95f75767c9275c", 0x2a}, {&(0x7f0000000d40)="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", 0xc95}, {&(0x7f0000000380)="951323d0a32e82fdfcdcd294cda905e388f4a8887fe182983c33aaa070a701ea13b3e3fb4c51ea1e89612212653b47efbba40f506515715ee8357a2ffa3d4ec6210cb516ec95c8ad130d961899b02963e6797451668694c5b5840b38a1859eeaa93bb9aedec5a4f243199f3e95691fb3ab8562b647b1d9b9af8b1f32"}, {&(0x7f0000000540)="1f6fe25bf3c79c573a25339c1bb068074f305fc38fea0d0f131210798645dd753815ccdd0d57b2c6d392ee475ee4b3cc24c07582b96ca11828f0127c2a9d9bbd09875d564a842afbbad784d5603ae1726fdc94d0ff5f80f6e4e80feed0"}], 0x8}}, {{0x0, 0x0, &(0x7f0000002140), 0x5}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002200)="6e4a6dc3d5234de33d61a79e1f5f7b146aa6cf2605ded7f384e56161abe9d81b4afcfdc289b4e35afb7b630ae42b4915e3c3b622ac2c1a3fa6511983b7c30c894fdafc95b06e60cc6b05f73c7a82942032f579173d213646c83e083d3011668a38161e3f6f9c937151eea34ae9f1a5acf1e37c34dbef7895b94244f8b4f0e6dd12c7cf8142a141bfd3bf4b6428aeac87cdbd5a3faebc6c05ae7de8f0c42efb776e43250d5075706a8c2a72876411bd4ad03feb535b04164da9", 0xfe72}, {&(0x7f00000022c0)="cc4e7d040c4244bf1a51037c173ad489743fe303cae7fd577c1fc71b117a82678da7624164de55f6304bdc2da243b1bc3c6160f94e148e5240071fb8785252e54457d3ae6350b27e1abf76d9a0c4b4a9a1e54b691f03e58b1ae875863d27fd739ab6fce39b123059a25072e514734c70254f6c41104e4cc99840d3c0a542c626", 0x80}], 0x2}}], 0x40000000000003b, 0x40) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1, r6}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r7, r7, &(0x7f0000000000)=0x7, 0x4) unshare(0x2c060000) unshare(0x24020400) 2.379006881s ago: executing program 4 (id=2928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x41045508, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe, 0x20}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x3c}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x200, 0x200) 2.123216947s ago: executing program 4 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000010000000000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="0000000000000000300016802c00018028000300feffff7f00000000ffff000000000000000000000000000000000100000000000000000008000400ff"], 0x58}}, 0x0) 2.011687104s ago: executing program 0 (id=2930): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e00000020000000000000001001eac00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 1.885573075s ago: executing program 4 (id=2931): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_getscheduler(r0) socket$inet6(0xa, 0x800, 0x5) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x8c0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd47536208624271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000005"], 0x80}}, 0x24) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r6 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x1, r6}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpid() process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 1.782854282s ago: executing program 0 (id=2932): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)={0xfff3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b000000000084756a5e660255ffe70000000000000000000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x17, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_GETQUOTA(0x2, &(0x7f0000000140)=@filename='./file0/file0/file0/file0/file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xe62390}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f0000000000)='./file0\x00', 0xa) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x205c) write$FUSE_INIT(r3, &(0x7f0000000500)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0x0, 0x8, 0x7ff1, 0x0, 0xfffffffc}}, 0x50) io_uring_setup(0xa94, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r9, &(0x7f0000000180)=""/15, 0xfffffe9c, 0x358) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.386807697s ago: executing program 3 (id=2933): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000006800090327bd7000000000000a000000010000000400040008000500", @ANYRES32=0x0, @ANYBLOB="d115e5e5ccc974f88876d5debeb0a1a9613e0d23b2a38a234a6cec7a397b5867b8ab922b901dc2bc5989b6589f3428a69dbbd1757fe3a32ba6be67667acd500c47ab50d2618cfda39286020d8724651f45e024f13543bab99e80d11f17b0e45503cc37eba36a9a601059918a72304388f761427555fbcecc00312f702a7bad2d1ca13d42dac3ed981002095f4c47884546e69dacf75630a31c82da"], 0x24}}, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xe4}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000060000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f00000001c0), 0x400300) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$inet6(0xa, 0x400000000001, 0x0) unshare(0x680) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/reserved_size', 0x0, 0x0) getdents64(r7, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c01000017000000fdffffff00000000e0000002000000000000000000000000000000006c000000fe80000000000000000000000000000000000000000000000000000000000001ff01000000000000000000000000000100000000000000000000000021000000", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="fe88000000000001000000000000943e3c51000000150000000000ea899fa269b8524e000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r8], 0x16c}}, 0x0) r12 = dup(r10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYRESOCT=r12]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 894.090896ms ago: executing program 0 (id=2934): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x94) close(0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x23210, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r1, 0x0, 0x0, &(0x7f0000001dc0)={0x7}, 0x20) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000340)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cae130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2dca696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x8a82, 0x2) sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') 346.987395ms ago: executing program 0 (id=2935): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x123, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a538ae464632", @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "a44353", 0xed, 0x11, 0xff, @mcast2, @empty, {[@srh={0x2b, 0x14, 0x4, 0xa, 0x1, 0x48, 0x3, [@rand_addr=' \x01\x00', @mcast1, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast1, @rand_addr=' \x01\x00', @mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x5e}], {0x4e22, 0x4e24, 0x3d, 0x0, @opaque="ae52a90e7217cca7bf36836169b9a890ff62762e2ec53eb1143b39ba59b4047b2d25f5baf8553e0da21af71f7847d4a0005c5c5a1b"}}}}}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xb, "0441b613a31ed707e2"}, @timestamp_addr={0x44, 0x4, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async, rerun: 32) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 0s ago: executing program 4 (id=2936): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280"], 0xec}, 0x1, 0x0, 0xc00000000000000}, 0x0) kernel console output (not intermixed with test programs): ecommended to keep mac addresses unique to avoid problems! [ 833.528105][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.540150][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.551133][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.562467][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.573259][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.587151][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.597374][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.610107][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.620950][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.632743][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.643951][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.655957][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.666321][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.677626][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.682090][T13047] Bluetooth: hci9: command 0x0406 tx timeout [ 833.712666][T17893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.733577][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2714'. [ 833.769100][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.808914][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.831959][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.844002][T17016] Bluetooth: hci10: command tx timeout [ 833.860667][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.873476][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.884422][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.897030][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.909617][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.920829][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.932664][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.942905][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.953771][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.964658][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.975729][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.987907][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.003076][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.014954][T17893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 834.025911][T17893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.038569][T17893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.114493][T17893] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.133465][T17893] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.142840][T17893] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.171673][T17893] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.352438][T17922] veth0_vlan: entered promiscuous mode [ 834.380104][T17922] veth1_vlan: entered promiscuous mode [ 834.456189][T17973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.525480][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.533491][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.561223][T11886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.562495][T17973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.585088][T11886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.718726][T10657] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 834.738336][T17922] veth0_macvtap: entered promiscuous mode [ 834.749120][T10657] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 834.750392][T17922] veth1_macvtap: entered promiscuous mode [ 834.764712][T10657] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 834.780816][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.802025][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.820774][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.831852][T10657] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 834.839581][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.840427][ T5279] IPVS: starting estimator thread 0... [ 834.849812][T10657] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 834.863548][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.874443][T10657] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 834.878757][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.890637][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.901778][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.913144][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.927964][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.956567][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.967276][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 834.978131][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 834.981591][T17988] IPVS: using max 18 ests per chain, 43200 per kthread [ 834.988449][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.029534][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.042445][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.053412][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.063881][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.074995][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.085368][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.096117][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.111481][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 835.127462][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.142138][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.154133][T17922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.200812][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.226040][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.236313][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.246945][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.256916][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.267478][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.277478][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.288419][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.291806][T10657] Bluetooth: hci11: command tx timeout [ 835.298338][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.314363][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.324302][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.335796][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.346561][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.357128][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.367240][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.377833][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.387782][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.398370][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.408335][T17922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 835.418913][T17922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 835.432105][T17922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.446201][T17922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.455041][T17922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.463862][T17922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.472674][T17922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.601803][T10657] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 835.611731][T10657] Bluetooth: hci9: Injecting HCI hardware error event [ 835.621255][T13047] Bluetooth: hci9: hardware error 0x00 [ 835.834795][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.856137][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.980471][ T5721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.025579][ T5721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.034657][T17992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.046097][T17992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.077731][T17989] chnl_net:caif_netlink_parms(): no params data found [ 836.108279][T18005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'. [ 836.324848][T18010] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2724'. [ 836.347430][T17989] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.363524][T17989] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.374890][T17989] bridge_slave_0: entered allmulticast mode [ 836.385095][T17989] bridge_slave_0: entered promiscuous mode [ 836.395700][T17989] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.405681][T17989] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.413326][T17989] bridge_slave_1: entered allmulticast mode [ 836.421131][T17989] bridge_slave_1: entered promiscuous mode [ 836.513388][T18022] binder_alloc: binder_alloc_mmap_handler: 18020 20ffa000-20ffd000 already mapped failed -16 [ 836.530225][T17989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.540286][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2727'. [ 836.557250][T17989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.573930][T18022] binder_alloc: binder_alloc_mmap_handler: 18020 20ffa000-20ffd000 already mapped failed -16 [ 836.584508][T10657] Bluetooth: hci4: command 0x0406 tx timeout [ 836.602076][T18022] binder_alloc: binder_alloc_mmap_handler: 18020 20ffa000-20ffd000 already mapped failed -16 [ 836.767698][T17989] team0: Port device team_slave_0 added [ 836.812685][T18028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.819741][T17989] team0: Port device team_slave_1 added [ 836.828043][T18028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.907805][T17989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.916060][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.942843][T17989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.961938][T17016] Bluetooth: hci12: command tx timeout [ 836.975914][T17989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.985864][T17989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.013814][T17989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.125602][T17989] hsr_slave_0: entered promiscuous mode [ 837.147924][T17989] hsr_slave_1: entered promiscuous mode [ 837.161894][T17989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.181619][T17989] Cannot create hsr debugfs directory [ 837.498054][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 837.684525][T13047] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 837.760039][T18049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.787474][T17989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.934003][T18049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.969802][T18051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2737'. [ 838.055695][T17989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.360861][T18052] team0 (unregistering): Port device team_slave_0 removed [ 838.376097][T18052] team0 (unregistering): Port device team_slave_1 removed [ 838.459666][T17989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.558617][T17989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.776293][T18056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.789683][T18056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.840259][T17989] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 838.858947][T17989] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 838.893241][T17989] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 838.907869][T17989] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 839.051629][T13047] Bluetooth: hci12: command tx timeout [ 839.141819][T17989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.172337][T17989] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.210976][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.218218][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.283138][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.290728][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.557892][T17989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.697171][T17989] veth0_vlan: entered promiscuous mode [ 839.751591][T17989] veth1_vlan: entered promiscuous mode [ 839.851864][T17989] veth0_macvtap: entered promiscuous mode [ 839.864609][T17989] veth1_macvtap: entered promiscuous mode [ 839.908896][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.963050][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.998202][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.019331][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.049848][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.071772][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.091844][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.122543][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.141524][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.152775][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.164264][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.175372][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.185526][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.196348][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.206517][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.217336][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.227489][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.239171][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.271616][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.321596][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.351615][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.371011][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.398511][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.410386][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.449073][T17989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.485619][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.504126][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.514758][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.541621][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.581753][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.597933][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.608393][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.619781][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.630613][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.643074][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.658670][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.670159][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.681325][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.692386][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.702919][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.714858][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.726616][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.732639][T13047] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 840.738482][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.746224][T13047] Bluetooth: hci11: Injecting HCI hardware error event [ 840.759650][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.768384][T17016] Bluetooth: hci11: hardware error 0x00 [ 840.775260][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.793601][T17989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.805872][T17989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.820700][T17989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.992584][T17989] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.001366][T17989] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.042207][T17989] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.051067][T17989] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.122675][T13047] Bluetooth: hci12: command tx timeout [ 841.290256][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.323855][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.375805][T18098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.442154][T18098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.499984][ T5721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.563903][T18096] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2751'. [ 841.685608][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 841.685629][ T29] audit: type=1326 audit(1728373307.391:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz.3.2753" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c76f7dff9 code=0x0 [ 841.720139][ T5721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.762358][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2753'. [ 841.784390][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.804586][T18105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.812290][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.871783][T18105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.896177][ T5721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.086800][ T5721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.120914][T10657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 842.141894][T10657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 842.151651][T10657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.167340][T10657] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 842.177110][T10657] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 842.202169][T10657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 842.359756][T18119] FAULT_INJECTION: forcing a failure. [ 842.359756][T18119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.374599][T18119] CPU: 0 UID: 0 PID: 18119 Comm: syz.1.2757 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 842.385425][T18119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 842.395534][T18119] Call Trace: [ 842.398870][T18119] [ 842.401847][T18119] dump_stack_lvl+0x241/0x360 [ 842.406571][T18119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 842.411839][T18119] ? __pfx__printk+0x10/0x10 [ 842.416463][T18119] ? __pfx_lock_release+0x10/0x10 [ 842.421534][T18119] should_fail_ex+0x3b0/0x4e0 [ 842.426262][T18119] _copy_from_user+0x2f/0xe0 [ 842.430904][T18119] memdup_user+0x64/0xc0 [ 842.435191][T18119] strndup_user+0x68/0xc0 [ 842.439544][T18119] __se_sys_mount+0xe2/0x3c0 [ 842.444156][T18119] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 842.450196][T18119] ? __pfx___se_sys_mount+0x10/0x10 [ 842.455419][T18119] ? do_syscall_64+0x100/0x230 [ 842.460214][T18119] ? __x64_sys_mount+0x20/0xc0 [ 842.465007][T18119] do_syscall_64+0xf3/0x230 [ 842.469529][T18119] ? clear_bhb_loop+0x35/0x90 [ 842.474229][T18119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.480149][T18119] RIP: 0033:0x7f9c4e97dff9 [ 842.484578][T18119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.504210][T18119] RSP: 002b:00007f9c4f694038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 842.512663][T18119] RAX: ffffffffffffffda RBX: 00007f9c4eb35f80 RCX: 00007f9c4e97dff9 [ 842.520653][T18119] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000020000000 [ 842.528639][T18119] RBP: 00007f9c4f694090 R08: 0000000000000000 R09: 0000000000000000 [ 842.536637][T18119] R10: 0000000000223216 R11: 0000000000000246 R12: 0000000000000001 [ 842.544713][T18119] R13: 0000000000000000 R14: 00007f9c4eb35f80 R15: 00007f9c4ec5fa28 [ 842.552716][T18119] [ 842.560034][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.578231][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.817520][ T5721] bridge_slave_1: left allmulticast mode [ 842.829973][ T5721] bridge_slave_1: left promiscuous mode [ 842.838002][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.862568][ T5721] bridge_slave_0: left allmulticast mode [ 842.883237][ T5721] bridge_slave_0: left promiscuous mode [ 842.889119][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.962304][T17016] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 843.040441][T18130] netlink: 'syz.1.2759': attribute type 4 has an invalid length. [ 843.059654][T18130] netlink: 'syz.1.2759': attribute type 2 has an invalid length. [ 843.068671][T18130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 843.202372][T17016] Bluetooth: hci12: command tx timeout [ 843.257693][T18133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.414170][T18138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.424896][T18133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.466893][T18138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.197689][ T5721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.217045][ T5721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.252191][T17016] Bluetooth: hci6: command tx timeout [ 844.273993][ T5721] bond0 (unregistering): Released all slaves [ 844.372186][T18148] macvlan2: entered promiscuous mode [ 844.384222][T18148] vlan1: entered promiscuous mode [ 844.476210][T18148] team0: Port device macvlan2 added [ 844.931582][T18156] netlink: 'syz.1.2764': attribute type 8 has an invalid length. [ 844.939638][T18156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'. [ 844.966601][T18114] chnl_net:caif_netlink_parms(): no params data found [ 845.171078][ T5721] hsr_slave_0: left promiscuous mode [ 845.177489][ T5721] hsr_slave_1: left promiscuous mode [ 845.201201][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.231757][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.274203][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.312840][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.401113][ T5721] veth1_macvtap: left promiscuous mode [ 845.427726][ T5721] veth0_macvtap: left promiscuous mode [ 845.442727][ T5721] veth1_vlan: left promiscuous mode [ 845.467085][ T5721] veth0_vlan: left promiscuous mode [ 846.333022][T17016] Bluetooth: hci6: command tx timeout [ 846.406402][ T5721] team0 (unregistering): Port device team_slave_1 removed [ 846.552131][ T5721] team0 (unregistering): Port device team_slave_0 removed [ 847.354262][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 847.383108][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.453235][T18184] bridge_slave_0 (unregistering): left allmulticast mode [ 847.460335][T18184] bridge_slave_0 (unregistering): left promiscuous mode [ 847.477276][T18186] FAULT_INJECTION: forcing a failure. [ 847.477276][T18186] name failslab, interval 1, probability 0, space 0, times 0 [ 847.490262][T18186] CPU: 1 UID: 0 PID: 18186 Comm: syz.1.2769 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 847.493864][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.501041][T18186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 847.518157][T18186] Call Trace: [ 847.521468][T18186] [ 847.524413][T18186] dump_stack_lvl+0x241/0x360 [ 847.529112][T18186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 847.534326][T18186] ? __pfx__printk+0x10/0x10 [ 847.538939][T18186] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 847.544506][T18186] ? __pfx___might_resched+0x10/0x10 [ 847.549813][T18186] should_fail_ex+0x3b0/0x4e0 [ 847.554533][T18186] ? getname_flags+0xb7/0x540 [ 847.559227][T18186] should_failslab+0xac/0x100 [ 847.563919][T18186] ? getname_flags+0xb7/0x540 [ 847.568616][T18186] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 847.574008][T18186] getname_flags+0xb7/0x540 [ 847.578525][T18186] ? _copy_from_user+0xa6/0xe0 [ 847.583307][T18186] user_path_at+0x24/0x60 [ 847.587678][T18186] __se_sys_mount+0x297/0x3c0 [ 847.592384][T18186] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 847.598422][T18186] ? __pfx___se_sys_mount+0x10/0x10 [ 847.603652][T18186] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 847.610010][T18186] ? __irq_exit_rcu+0x100/0x1c0 [ 847.614928][T18186] ? __x64_sys_mount+0x20/0xc0 [ 847.619728][T18186] do_syscall_64+0xf3/0x230 [ 847.624246][T18186] ? clear_bhb_loop+0x35/0x90 [ 847.628935][T18186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.634858][T18186] RIP: 0033:0x7f9c4e97dff9 [ 847.639288][T18186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.658912][T18186] RSP: 002b:00007f9c4f694038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 847.667344][T18186] RAX: ffffffffffffffda RBX: 00007f9c4eb35f80 RCX: 00007f9c4e97dff9 [ 847.675329][T18186] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000020000000 [ 847.683309][T18186] RBP: 00007f9c4f694090 R08: 0000000000000000 R09: 0000000000000000 [ 847.691295][T18186] R10: 0000000000223216 R11: 0000000000000246 R12: 0000000000000001 [ 847.699275][T18186] R13: 0000000000000000 R14: 00007f9c4eb35f80 R15: 00007f9c4ec5fa28 [ 847.707268][T18186] [ 847.796487][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2768'. [ 847.834032][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.841244][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.858983][T18114] bridge_slave_0: entered allmulticast mode [ 847.876935][T18114] bridge_slave_0: entered promiscuous mode [ 847.945630][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.971619][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.979132][T18114] bridge_slave_1: entered allmulticast mode [ 847.988046][T18114] bridge_slave_1: entered promiscuous mode [ 848.002140][T18193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.049303][T18196] usb usb8: usbfs: process 18196 (syz.2.2773) did not claim interface 0 before use [ 848.061138][T18197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.082351][T18193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.106067][T18197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.184372][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.242801][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.366155][T18114] team0: Port device team_slave_0 added [ 848.401745][T17016] Bluetooth: hci6: command tx timeout [ 848.420172][T18114] team0: Port device team_slave_1 added [ 848.570322][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.589893][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.668743][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.713590][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.730834][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 848.790842][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.948756][T18114] hsr_slave_0: entered promiscuous mode [ 848.995759][T18114] hsr_slave_1: entered promiscuous mode [ 849.017558][T18114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 849.036935][T18114] Cannot create hsr debugfs directory [ 849.485435][T18230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2780'. [ 849.508412][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 849.726385][T18236] FAULT_INJECTION: forcing a failure. [ 849.726385][T18236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.782679][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2781'. [ 849.791967][T18236] CPU: 1 UID: 0 PID: 18236 Comm: syz.1.2782 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 849.802789][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 849.812888][T18236] Call Trace: [ 849.816212][T18236] [ 849.819178][T18236] dump_stack_lvl+0x241/0x360 [ 849.823963][T18236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.829214][T18236] ? __pfx__printk+0x10/0x10 [ 849.833873][T18236] should_fail_ex+0x3b0/0x4e0 [ 849.838610][T18236] strncpy_from_user+0x36/0x250 [ 849.843518][T18236] getname_flags+0xf1/0x540 [ 849.848077][T18236] user_path_at+0x24/0x60 [ 849.852465][T18236] __se_sys_mount+0x297/0x3c0 [ 849.857188][T18236] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 849.863238][T18236] ? __pfx___se_sys_mount+0x10/0x10 [ 849.868483][T18236] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 849.874864][T18236] ? __irq_exit_rcu+0x100/0x1c0 [ 849.879765][T18236] ? __x64_sys_mount+0x20/0xc0 [ 849.884576][T18236] do_syscall_64+0xf3/0x230 [ 849.889122][T18236] ? clear_bhb_loop+0x35/0x90 [ 849.893838][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.899782][T18236] RIP: 0033:0x7f9c4e97dff9 [ 849.904258][T18236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.923915][T18236] RSP: 002b:00007f9c4f694038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 849.932384][T18236] RAX: ffffffffffffffda RBX: 00007f9c4eb35f80 RCX: 00007f9c4e97dff9 [ 849.940406][T18236] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000020000000 [ 849.948419][T18236] RBP: 00007f9c4f694090 R08: 0000000000000000 R09: 0000000000000000 [ 849.956431][T18236] R10: 0000000000223216 R11: 0000000000000246 R12: 0000000000000001 [ 849.964445][T18236] R13: 0000000000000000 R14: 00007f9c4eb35f80 R15: 00007f9c4ec5fa28 [ 849.972474][T18236] [ 850.320669][T18263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.415165][T18263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.433278][T18263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.465123][T18263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.485737][ T5233] Bluetooth: hci6: command tx timeout [ 850.635797][T18269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.653370][T18269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.010644][T18275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.067326][T18275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.100451][T18114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 851.116404][T18114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 851.140118][T18114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 851.165677][T18114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 851.445290][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.525995][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.602071][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.609299][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.698034][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.705243][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.125584][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.210344][T17016] Bluetooth: hci1: command 0x0406 tx timeout [ 852.218259][T17016] Bluetooth: hci3: command 0x0406 tx timeout [ 852.315823][T18299] FAULT_INJECTION: forcing a failure. [ 852.315823][T18299] name failslab, interval 1, probability 0, space 0, times 0 [ 852.344084][T10657] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 852.351645][T18299] CPU: 0 UID: 0 PID: 18299 Comm: syz.4.2796 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 852.351680][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 852.351696][T18299] Call Trace: [ 852.351705][T18299] [ 852.351717][T18299] dump_stack_lvl+0x241/0x360 [ 852.351749][T18299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.388722][T18299] ? __pfx__printk+0x10/0x10 [ 852.393391][T18299] ? fs_reclaim_acquire+0x93/0x140 [ 852.398552][T18299] ? __pfx___might_resched+0x10/0x10 [ 852.403889][T18299] should_fail_ex+0x3b0/0x4e0 [ 852.408603][T18299] ? tomoyo_encode+0x26f/0x540 [ 852.413388][T18299] should_failslab+0xac/0x100 [ 852.418081][T18299] ? tomoyo_encode+0x26f/0x540 [ 852.422861][T18299] __kmalloc_noprof+0xd8/0x400 [ 852.427653][T18299] tomoyo_encode+0x26f/0x540 [ 852.432290][T18299] tomoyo_mount_permission+0x356/0xb80 [ 852.437783][T18299] ? stack_depot_save_flags+0x29/0x830 [ 852.443273][T18299] ? tomoyo_mount_permission+0x295/0xb80 [ 852.448953][T18299] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 852.455008][T18299] ? hook_sb_mount+0x122/0x390 [ 852.459812][T18299] ? security_sb_mount+0x22/0x2f0 [ 852.464881][T18299] security_sb_mount+0xe0/0x2f0 [ 852.469762][T18299] path_mount+0xb9/0xfa0 [ 852.474031][T18299] ? kmem_cache_free+0x1a2/0x420 [ 852.479019][T18299] ? user_path_at+0x44/0x60 [ 852.483557][T18299] __se_sys_mount+0x2d6/0x3c0 [ 852.488252][T18299] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 852.494254][T18299] ? __pfx___se_sys_mount+0x10/0x10 [ 852.499469][T18299] ? do_syscall_64+0x100/0x230 [ 852.504249][T18299] ? __x64_sys_mount+0x20/0xc0 [ 852.509042][T18299] do_syscall_64+0xf3/0x230 [ 852.513574][T18299] ? clear_bhb_loop+0x35/0x90 [ 852.518358][T18299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.524282][T18299] RIP: 0033:0x7ff4eb57dff9 [ 852.528718][T18299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.548358][T18299] RSP: 002b:00007ff4ec39b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 852.556900][T18299] RAX: ffffffffffffffda RBX: 00007ff4eb735f80 RCX: 00007ff4eb57dff9 [ 852.564924][T18299] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000020000000 [ 852.572914][T18299] RBP: 00007ff4ec39b090 R08: 0000000000000000 R09: 0000000000000000 [ 852.580939][T18299] R10: 0000000000223216 R11: 0000000000000246 R12: 0000000000000001 [ 852.589019][T18299] R13: 0000000000000000 R14: 00007ff4eb735f80 R15: 00007ff4eb85fa28 [ 852.597023][T18299] [ 852.625795][T10657] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 852.637538][T10657] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 852.648284][T10657] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 852.657751][T10657] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 852.660092][T18114] veth0_vlan: entered promiscuous mode [ 852.665440][T10657] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 852.927325][T18114] veth1_vlan: entered promiscuous mode [ 853.254564][T18321] netlink: 'syz.4.2800': attribute type 2 has an invalid length. [ 853.313961][T18114] veth0_macvtap: entered promiscuous mode [ 853.334688][T18114] veth1_macvtap: entered promiscuous mode [ 853.382225][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.405248][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.440472][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.475967][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.529241][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.560193][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.590654][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.624592][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.677238][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.733991][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.766933][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.800753][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.834021][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.899213][T18338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.901558][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.953551][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.992791][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.017082][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.049299][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.079964][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.099116][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.109429][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.120094][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.130524][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.148060][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.170872][T18338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.177284][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.228708][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.276289][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.308060][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.335031][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.352723][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.372983][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.391507][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.419660][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.431864][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.451553][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.480108][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.501638][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.521579][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.541703][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.561620][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.585250][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.611514][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.621389][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.649355][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.660306][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.672058][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.686052][T18114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.698954][T18114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.712253][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.713995][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.732106][ T5233] Bluetooth: hci13: command tx timeout [ 854.775050][T18114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.796833][T18114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.816252][T18114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.835461][T18114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.998545][T18362] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2804'. [ 855.060100][T18368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.113181][T18368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 855.273445][T11886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.296554][T11886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.311134][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'. [ 855.348056][T11886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.359271][T11886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.366337][T18303] chnl_net:caif_netlink_parms(): no params data found [ 855.590443][T18385] loop5: detected capacity change from 0 to 16384 [ 855.621840][T18303] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.654285][T18303] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.672794][T18303] bridge_slave_0: entered allmulticast mode [ 855.680062][T18303] bridge_slave_0: entered promiscuous mode [ 855.689151][T18303] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.696366][T18303] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.705736][T18303] bridge_slave_1: entered allmulticast mode [ 855.713150][T18303] bridge_slave_1: entered promiscuous mode [ 855.865058][T18303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.910872][T18303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.096394][T18303] team0: Port device team_slave_0 added [ 856.122989][T18303] team0: Port device team_slave_1 added [ 856.143726][ T5286] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 856.163097][T18404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.194912][ T5286] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 856.230037][T18404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.263250][T18411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.312464][T18413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.333147][T18411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.350144][T18408] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2813'. [ 856.362302][T18413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.383487][T18408] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2813'. [ 856.408055][ T61] tipc: Subscription rejected, illegal request [ 856.415785][T18408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 856.462939][T18303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.484654][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.561475][T18303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.595469][T18303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.611881][T18303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.666214][T18303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.755428][T18303] hsr_slave_0: entered promiscuous mode [ 856.765418][T18303] hsr_slave_1: entered promiscuous mode [ 856.784151][T18303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.801817][T18303] Cannot create hsr debugfs directory [ 856.802222][ T5233] Bluetooth: hci13: command tx timeout [ 856.824841][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 856.908399][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.959481][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.295405][T18303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.464117][T18303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.595405][T18303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.760064][T18303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.778423][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 858.112620][T18303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 858.128854][T18468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.180584][T18303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 858.190934][T18468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.205072][T18470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.217892][T18303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 858.230897][T18303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 858.238139][T18470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.339091][T18303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.362047][T18303] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.379144][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.386363][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.418112][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.425323][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.559250][T18303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.675575][T18303] veth0_vlan: entered promiscuous mode [ 858.700581][T18303] veth1_vlan: entered promiscuous mode [ 858.780233][T18303] veth0_macvtap: entered promiscuous mode [ 858.816701][T18303] veth1_macvtap: entered promiscuous mode [ 858.859724][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.874201][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.887405][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.892185][ T5233] Bluetooth: hci13: command tx timeout [ 858.897765][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.988422][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.014234][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.050766][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.075905][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.096238][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.107922][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.119431][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.138523][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.149949][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.161567][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.187951][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.253869][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.264518][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.274432][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.285091][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.296230][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.307819][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.317800][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.328366][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.338280][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.348857][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.358948][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 859.370206][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.382688][T18303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 859.387937][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.394991][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.408301][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.418363][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.428937][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.438920][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.449820][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.459884][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.470485][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.480429][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.490989][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.501909][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.513562][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.523608][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.534155][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.544365][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.554894][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.564789][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.575322][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.585599][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.603349][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.613381][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.623918][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.636494][T18303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 859.647022][T18303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 859.658567][T18303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.703938][T18303] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.715327][T18303] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.725951][T18303] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.744611][T18303] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.809720][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.843064][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.007945][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.035221][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.298709][ T5722] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.351999][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.370580][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.455203][ T5722] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.645304][T18489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.684710][T18489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.791805][T18489] input: syz0 as /devices/virtual/input/input127 [ 860.821307][ T5722] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.962051][ T5233] Bluetooth: hci13: command tx timeout [ 861.047036][ T29] audit: type=1326 audit(1728373326.751:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18498 comm="syz.1.2843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x0 [ 861.107461][ T5722] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.151539][T18500] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2843'. [ 861.214735][T10657] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 861.227563][T10657] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 861.240481][T10657] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 861.253747][T10657] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 861.262699][T10657] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 861.272380][T10657] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 861.431200][ T5722] bridge_slave_1: left allmulticast mode [ 861.442173][ T5722] bridge_slave_1: left promiscuous mode [ 861.450442][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.480842][ T5722] bridge_slave_0: left allmulticast mode [ 861.501944][ T5722] bridge_slave_0: left promiscuous mode [ 861.507740][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.366208][T10657] Bluetooth: hci10: command tx timeout [ 863.553392][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.573511][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.595710][ T5722] bond0 (unregistering): Released all slaves [ 863.657993][T18518] netem: unknown loss type 0 [ 863.669616][T18518] netem: change failed [ 863.982191][T18544] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2850'. [ 864.175853][T18548] FAULT_INJECTION: forcing a failure. [ 864.175853][T18548] name failslab, interval 1, probability 0, space 0, times 0 [ 864.188741][T18548] CPU: 1 UID: 0 PID: 18548 Comm: syz.2.2851 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 864.199580][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 864.209679][T18548] Call Trace: [ 864.212993][T18548] [ 864.215958][T18548] dump_stack_lvl+0x241/0x360 [ 864.220688][T18548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 864.225934][T18548] ? __pfx__printk+0x10/0x10 [ 864.230584][T18548] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 864.236181][T18548] ? __pfx___might_resched+0x10/0x10 [ 864.241516][T18548] ? kasan_quarantine_put+0xdc/0x230 [ 864.246844][T18548] ? lockdep_hardirqs_on+0x99/0x150 [ 864.252111][T18548] should_fail_ex+0x3b0/0x4e0 [ 864.256849][T18548] ? getname_kernel+0x59/0x2f0 [ 864.261661][T18548] should_failslab+0xac/0x100 [ 864.266390][T18548] ? getname_kernel+0x59/0x2f0 [ 864.271199][T18548] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 864.276618][T18548] ? tomoyo_realpath_from_path+0x5b3/0x5e0 [ 864.282474][T18548] getname_kernel+0x59/0x2f0 [ 864.287121][T18548] kern_path+0x1d/0x50 [ 864.291243][T18548] tomoyo_mount_permission+0x8db/0xb80 [ 864.296756][T18548] ? stack_depot_save_flags+0x29/0x830 [ 864.302267][T18548] ? tomoyo_mount_permission+0x295/0xb80 [ 864.307949][T18548] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 864.314026][T18548] ? hook_sb_mount+0x122/0x390 [ 864.318842][T18548] ? security_sb_mount+0x22/0x2f0 [ 864.323919][T18548] security_sb_mount+0xe0/0x2f0 [ 864.328825][T18548] path_mount+0xb9/0xfa0 [ 864.333115][T18548] ? kmem_cache_free+0x1a2/0x420 [ 864.338110][T18548] ? user_path_at+0x44/0x60 [ 864.342676][T18548] __se_sys_mount+0x2d6/0x3c0 [ 864.347399][T18548] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 864.353435][T18548] ? __pfx___se_sys_mount+0x10/0x10 [ 864.358679][T18548] ? do_syscall_64+0x100/0x230 [ 864.363489][T18548] ? __x64_sys_mount+0x20/0xc0 [ 864.368294][T18548] do_syscall_64+0xf3/0x230 [ 864.372850][T18548] ? clear_bhb_loop+0x35/0x90 [ 864.377571][T18548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.383514][T18548] RIP: 0033:0x7fb6b377dff9 [ 864.387964][T18548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.407644][T18548] RSP: 002b:00007fb6b4544038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 864.416131][T18548] RAX: ffffffffffffffda RBX: 00007fb6b3935f80 RCX: 00007fb6b377dff9 [ 864.424149][T18548] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000020000000 [ 864.432160][T18548] RBP: 00007fb6b4544090 R08: 0000000000000000 R09: 0000000000000000 [ 864.440169][T18548] R10: 0000000000223216 R11: 0000000000000246 R12: 0000000000000001 [ 864.448180][T18548] R13: 0000000000000000 R14: 00007fb6b3935f80 R15: 00007fb6b3a5fa28 [ 864.456211][T18548] [ 865.444297][T10657] Bluetooth: hci10: command tx timeout [ 865.669990][ T5722] hsr_slave_0: left promiscuous mode [ 865.958535][ T5722] hsr_slave_1: left promiscuous mode [ 865.975236][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.991852][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.116859][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.129719][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.206456][ T5722] vlan1: left promiscuous mode [ 866.232117][ T5722] veth1_macvtap: left promiscuous mode [ 866.265656][ T5722] veth0_macvtap: left promiscuous mode [ 866.314553][ T5722] veth1_vlan: left promiscuous mode [ 866.342375][ T5722] veth0_vlan: left promiscuous mode [ 867.521626][T10657] Bluetooth: hci10: command tx timeout [ 867.628597][ T5722] team0 (unregistering): Port device macvlan2 removed [ 868.493904][ T4683] udevd[4683]: worker [16385] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 868.531633][ T4683] udevd[4683]: worker [16458] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 869.521169][ T5722] team0 (unregistering): Port device team_slave_1 removed [ 869.651533][T10657] Bluetooth: hci10: command tx timeout [ 869.709554][ T5722] team0 (unregistering): Port device team_slave_0 removed [ 870.336267][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.343553][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.562145][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 871.578394][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 871.588866][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 871.597504][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 871.609632][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 871.617394][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 872.316271][T18596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.336177][T18596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.437728][T18590] netlink: 'syz.1.2860': attribute type 2 has an invalid length. [ 872.553787][T18502] chnl_net:caif_netlink_parms(): no params data found [ 872.956054][T18607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 873.002794][T18502] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.039048][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.082060][T18502] bridge_slave_0: entered allmulticast mode [ 873.116909][T18502] bridge_slave_0: entered promiscuous mode [ 873.166154][T18502] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.203502][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.210979][T18502] bridge_slave_1: entered allmulticast mode [ 873.233223][T18502] bridge_slave_1: entered promiscuous mode [ 873.322264][T18502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.355479][T18502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.561807][T18502] team0: Port device team_slave_0 added [ 873.681737][ T5233] Bluetooth: hci6: command tx timeout [ 873.684114][T18502] team0: Port device team_slave_1 added [ 873.886234][T18502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.913761][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.961826][T18629] IPVS: set_ctl: invalid protocol: 8483 191.172.33.114:31595 [ 874.031548][T18502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.146586][T18632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.190499][T18632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.249694][ T5722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.292471][T18502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.299594][T18502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.300896][T18632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.372084][T18502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.392008][T18632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.499927][ T5722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.646066][ T5722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.675852][T18502] hsr_slave_0: entered promiscuous mode [ 874.692255][T18502] hsr_slave_1: entered promiscuous mode [ 874.700149][T18502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 874.709326][T18502] Cannot create hsr debugfs directory [ 874.720886][T18593] chnl_net:caif_netlink_parms(): no params data found [ 874.880761][T18639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.921802][T18639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.976370][ T5722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.343549][T18593] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.350775][T18593] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.371823][T18593] bridge_slave_0: entered allmulticast mode [ 875.391756][T18593] bridge_slave_0: entered promiscuous mode [ 875.496385][T18593] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.506655][T18593] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.514176][T18593] bridge_slave_1: entered allmulticast mode [ 875.521345][T18593] bridge_slave_1: entered promiscuous mode [ 875.764008][ T5233] Bluetooth: hci6: command tx timeout [ 875.819331][T18593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.840853][T18593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 876.354078][T18593] team0: Port device team_slave_0 added [ 876.362988][ T5722] bridge_slave_1: left allmulticast mode [ 876.389633][ T5722] bridge_slave_1: left promiscuous mode [ 876.408166][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.527350][ T5722] bridge_slave_0: left allmulticast mode [ 876.731677][ T5722] bridge_slave_0: left promiscuous mode [ 876.737890][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.851959][ T5233] Bluetooth: hci6: command tx timeout [ 878.426152][T10657] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 878.456969][T10657] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 878.466651][T10657] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 878.476526][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.492017][T10657] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 878.500189][T10657] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 878.507966][T10657] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 878.523023][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.601643][ T5722] bond0 (unregistering): Released all slaves [ 878.855514][T18593] team0: Port device team_slave_1 added [ 879.106938][T18593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.130519][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.159918][T18593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.242431][T18593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.249478][T18593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.279571][T18593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.415216][T18593] hsr_slave_0: entered promiscuous mode [ 879.424774][ T29] audit: type=1326 audit(1728373345.131:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.431921][T18593] hsr_slave_1: entered promiscuous mode [ 879.471608][ T29] audit: type=1326 audit(1728373345.161:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.494203][T18593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.495319][ T29] audit: type=1326 audit(1728373345.161:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.502375][T18593] Cannot create hsr debugfs directory [ 879.569628][ T29] audit: type=1326 audit(1728373345.161:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.592947][ T29] audit: type=1326 audit(1728373345.161:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.616196][ T29] audit: type=1326 audit(1728373345.161:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.639362][ T29] audit: type=1326 audit(1728373345.161:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.663637][ T29] audit: type=1326 audit(1728373345.161:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.666958][ T5722] hsr_slave_0: left promiscuous mode [ 879.688809][ T29] audit: type=1326 audit(1728373345.161:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.714977][ T29] audit: type=1326 audit(1728373345.161:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.1.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 879.742856][ T5722] hsr_slave_1: left promiscuous mode [ 879.768848][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.777166][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.812352][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.820029][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.888371][ T5722] veth1_macvtap: left promiscuous mode [ 879.894150][ T5722] veth0_macvtap: left promiscuous mode [ 879.899790][ T5722] veth1_vlan: left promiscuous mode [ 879.905239][ T5722] veth0_vlan: left promiscuous mode [ 879.921852][ T5233] Bluetooth: hci6: command tx timeout [ 880.571369][ T5233] Bluetooth: hci9: command tx timeout [ 881.514675][ T5722] team0 (unregistering): Port device team_slave_1 removed [ 881.659110][ T5722] team0 (unregistering): Port device team_slave_0 removed [ 882.642714][ T5233] Bluetooth: hci9: command tx timeout [ 883.066636][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.084933][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 883.243905][T18502] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 883.306350][T18502] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 883.318318][T18502] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 883.403673][T18502] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 883.419202][T18663] chnl_net:caif_netlink_parms(): no params data found [ 883.745744][ T5722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.910007][ T5722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.943878][T18663] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.952659][T18663] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.960065][T18663] bridge_slave_0: entered allmulticast mode [ 883.971481][T18663] bridge_slave_0: entered promiscuous mode [ 883.989673][T18663] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.004740][T18663] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.032924][T18663] bridge_slave_1: entered allmulticast mode [ 884.047032][T18663] bridge_slave_1: entered promiscuous mode [ 884.096216][ T5722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.187870][ T5722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.213193][T18663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.235450][T18663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.340865][T18663] team0: Port device team_slave_0 added [ 884.364007][T18663] team0: Port device team_slave_1 added [ 884.428613][T18502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.453790][T18663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.462730][T18663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.501865][T18663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.560850][T18593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 884.621012][T18502] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.674066][T18663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.681093][T18663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.722514][ T5233] Bluetooth: hci9: command tx timeout [ 884.746937][T18706] openvswitch: netlink: Actions may not be safe on all matching packets [ 884.761859][T18663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.789238][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 884.789259][ T29] audit: type=1326 audit(1728373350.491:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 884.866226][T18593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 884.882043][ T29] audit: type=1326 audit(1728373350.491:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 884.908730][T18593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 884.920589][T18593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 884.969469][ T29] audit: type=1326 audit(1728373350.491:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.009658][ T29] audit: type=1326 audit(1728373350.491:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.014468][T10657] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 885.045524][T10657] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 885.056050][ T29] audit: type=1326 audit(1728373350.491:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.056256][T10657] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 885.080047][ T5722] bridge_slave_1: left allmulticast mode [ 885.107880][T10657] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 885.108147][ T5722] bridge_slave_1: left promiscuous mode [ 885.132992][T10657] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 885.140627][T10657] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 885.151483][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.162397][ T29] audit: type=1326 audit(1728373350.491:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.213527][ T29] audit: type=1326 audit(1728373350.491:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.255828][ T29] audit: type=1326 audit(1728373350.491:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.278709][ T29] audit: type=1326 audit(1728373350.491:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.305552][ T29] audit: type=1326 audit(1728373350.491:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18705 comm="syz.1.2877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9c4e97dff9 code=0x7ffc0000 [ 885.875177][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.890427][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.902829][ T5722] bond0 (unregistering): Released all slaves [ 885.918830][ T5722] bond1 (unregistering): Released all slaves [ 885.934028][ T5722] bond2 (unregistering): Released all slaves [ 885.979369][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.986568][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.019573][T18713] tunl0: entered promiscuous mode [ 886.037028][T18713] netlink: 'syz.1.2879': attribute type 1 has an invalid length. [ 886.051792][T18713] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2879'. [ 886.109200][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.116537][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.235300][T18720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.247981][T18720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.277518][T18663] hsr_slave_0: entered promiscuous mode [ 886.301048][T18663] hsr_slave_1: entered promiscuous mode [ 886.326675][T18663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.334574][T18663] Cannot create hsr debugfs directory [ 886.668471][ T5722] hsr_slave_0: left promiscuous mode [ 886.692118][ T5722] hsr_slave_1: left promiscuous mode [ 886.699069][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.707503][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.717631][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.725779][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.758779][ T5722] veth1_macvtap: left promiscuous mode [ 886.764541][ T5722] veth0_macvtap: left promiscuous mode [ 886.770198][ T5722] veth1_vlan: left promiscuous mode [ 886.781619][ T5722] veth0_vlan: left promiscuous mode [ 886.802058][T10657] Bluetooth: hci9: command tx timeout [ 887.292236][T10657] Bluetooth: hci12: command tx timeout [ 887.324502][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.361214][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.740487][ T5722] team0 (unregistering): Port device team_slave_1 removed [ 887.805818][ T5722] team0 (unregistering): Port device team_slave_0 removed [ 888.237774][T18735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.256654][T18735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.017603][T18593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.062807][T18711] chnl_net:caif_netlink_parms(): no params data found [ 889.173363][T18593] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.218134][ T5722] IPVS: stop unused estimator thread 0... [ 889.233247][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.240453][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.313229][T18711] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.320419][T18711] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.328002][T18711] bridge_slave_0: entered allmulticast mode [ 889.336986][T18711] bridge_slave_0: entered promiscuous mode [ 889.346454][T18711] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.356089][T18711] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.371891][T18711] bridge_slave_1: entered allmulticast mode [ 889.372104][T10657] Bluetooth: hci12: command tx timeout [ 889.379552][T18711] bridge_slave_1: entered promiscuous mode [ 889.418715][T18502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.513696][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.520919][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.558279][T18711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.625202][T18663] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 889.645939][T18663] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 889.666110][T18663] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.711371][T18711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.739316][T18663] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 889.926967][T18711] team0: Port device team_slave_0 added [ 889.954412][T18711] team0: Port device team_slave_1 added [ 890.063470][T18711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.070518][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.143895][T18711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.216497][T18711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.232623][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.258721][ C0] vkms_vblank_simulate: vblank timer overrun [ 890.276052][T18774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.302149][T18711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.313140][T18774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.373574][T18502] veth0_vlan: entered promiscuous mode [ 890.420810][T18502] veth1_vlan: entered promiscuous mode [ 890.479465][T18774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2887'. [ 890.512986][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2887'. [ 890.543849][T18711] hsr_slave_0: entered promiscuous mode [ 890.552914][T18711] hsr_slave_1: entered promiscuous mode [ 890.564626][T18711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 890.573507][T18711] Cannot create hsr debugfs directory [ 890.734129][T18593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.794558][T18502] veth0_macvtap: entered promiscuous mode [ 890.936292][T18502] veth1_macvtap: entered promiscuous mode [ 891.023009][T18663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.172129][T18796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.200362][T18796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.206308][T18711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.249069][T18796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.268118][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.283066][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.299400][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.310448][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.327339][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.340023][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.350380][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.361353][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.373449][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.384609][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.395375][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.418310][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.430607][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.446028][T10657] Bluetooth: hci12: command tx timeout [ 891.461583][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.472057][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.491539][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.518976][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.532349][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.561557][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.591631][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.611599][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.631523][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.651903][T18796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.666528][T18502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.747082][T18711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.814511][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.838618][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.864747][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.888291][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.908579][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.931507][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.955375][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.981602][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.001525][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.021471][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.031338][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.058354][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.068530][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.079132][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.091076][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.111467][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.131841][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.158865][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.181580][T18502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 892.201493][T18502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 892.223219][T18502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.237300][T18593] veth0_vlan: entered promiscuous mode [ 892.280309][T18663] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.305840][T18502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.315388][T18502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.341752][T18502] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.350508][T18502] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.427229][T18711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.484032][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.491214][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.528456][T18593] veth1_vlan: entered promiscuous mode [ 892.578089][T18711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.629957][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.637173][ T5722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.910560][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.935438][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.967274][T18593] veth0_macvtap: entered promiscuous mode [ 893.039563][T18711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 893.057830][T18711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 893.093414][T18593] veth1_macvtap: entered promiscuous mode [ 893.122638][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.130519][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.138045][T18711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 893.172095][T18711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 893.295563][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.320331][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.344063][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371493][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371523][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371546][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371560][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371578][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371604][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371621][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371636][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371653][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371675][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371692][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371712][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371729][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371749][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371767][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371785][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371803][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371823][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.371966][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.371997][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 893.372015][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.373782][T18593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.433664][T18663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 893.446297][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.541634][T10657] Bluetooth: hci12: command tx timeout [ 893.551336][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.706816][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.717757][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.728026][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.738661][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.749669][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.760296][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.771060][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.784706][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.812223][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.823419][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.833575][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.845549][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.856006][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.867422][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.877361][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.888182][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.903903][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.914518][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.925743][T18593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 893.936478][T18593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 893.948195][T18593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.021750][T18593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.030602][T18593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.042211][T18593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.051032][T18593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.163581][T18663] veth0_vlan: entered promiscuous mode [ 894.197953][T18663] veth1_vlan: entered promiscuous mode [ 894.320659][ T5723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.358539][ T5723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.389467][T18711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.470336][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.479976][T18711] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.487811][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.520221][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.527434][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.558782][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.565987][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.597112][T18663] veth0_macvtap: entered promiscuous mode [ 894.625098][T18663] veth1_macvtap: entered promiscuous mode [ 894.683879][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'. [ 894.699996][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.711953][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.725736][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.736768][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.747618][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.759849][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.770062][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.781091][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.791317][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.802789][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.813690][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.827641][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.838381][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.849337][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.859518][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.871314][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.881339][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.892913][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.902882][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.913595][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.941077][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.970237][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.991492][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.002690][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.013469][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 895.026362][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.041112][T18663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 895.082727][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.132112][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.160089][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.181854][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.202131][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.216677][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.227061][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.240464][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.250797][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.262607][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.272956][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.289042][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.299999][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.311853][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.322234][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.335496][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.345935][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.356908][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.367915][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.380112][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.390483][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.403651][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.413924][T18663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.424898][T18663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.455623][T18663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.502917][T18850] netlink: 'syz.0.2892': attribute type 29 has an invalid length. [ 895.521077][T18850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 895.555952][T18663] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.585543][T18663] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.606450][T18663] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.626093][T18663] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.662554][T18711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 895.802061][T18711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.975932][ T5722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.985709][ T5722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.112369][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.130703][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 896.147932][T18711] veth0_vlan: entered promiscuous mode [ 896.189356][T18711] veth1_vlan: entered promiscuous mode [ 896.259274][T18711] veth0_macvtap: entered promiscuous mode [ 896.292257][T18711] veth1_macvtap: entered promiscuous mode [ 896.334973][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.359796][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.371186][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.383376][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.394170][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.407273][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.419734][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.431124][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.441377][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.452325][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.466566][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.477484][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.502202][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.521457][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.531322][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.545588][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.555855][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.588414][T18862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.589603][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.608211][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.619437][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.629479][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.640052][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.654420][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.667423][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.677783][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.688723][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.699018][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 896.709589][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.720938][T18862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.722543][T18711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.761387][T18860] netlink: 'syz.2.2871': attribute type 2 has an invalid length. [ 896.788780][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.799666][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.811711][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.823564][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.834029][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.844969][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.855430][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.866351][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.881041][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.893803][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.904124][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.915088][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.925423][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.937176][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.947469][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.958791][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.969408][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 896.985488][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 896.995842][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.006768][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.017094][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.028035][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.038363][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.051163][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.061498][T18711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.081636][T18711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.094167][T18711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.115558][T18711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.125921][T18711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.135473][T18711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.144598][T18711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.338073][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.353338][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.422506][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.430843][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.459486][T18868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.490087][T18868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.852365][T18878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.875986][T18878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.002150][T13047] Bluetooth: hci5: command 0x0406 tx timeout [ 898.007636][T17016] Bluetooth: hci7: command 0x0406 tx timeout [ 898.107914][T18878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.127018][T18878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.141646][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2901'. [ 898.165089][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 898.181752][T18878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2900'. [ 898.332616][T18883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.352752][T18883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.702730][T18886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.742148][T18886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.844722][T18890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.866351][T18890] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 899.047141][T18891] Invalid logical block size (1) [ 899.139712][T18895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.152167][T18895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.047771][T18910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.058494][T18910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.108937][ T5233] Bluetooth: hci10: unexpected event 0x0f length: 70 > 4 [ 900.110125][T18910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2912'. [ 900.138273][T18910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.153859][T18910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.772634][T18933] batadv0: entered promiscuous mode [ 901.832514][T18935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2920'. [ 901.894890][T17016] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 901.915673][T17016] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 901.924978][T17016] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 901.942310][T17016] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 901.950201][T17016] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 901.957653][T17016] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 902.845421][T18941] chnl_net:caif_netlink_parms(): no params data found [ 903.121866][T17016] Bluetooth: hci8: command 0x0406 tx timeout [ 903.138760][T18941] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.168155][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.207856][T18941] bridge_slave_0: entered allmulticast mode [ 903.267760][T18941] bridge_slave_0: entered promiscuous mode [ 903.366925][T18941] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.400347][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.432158][T18941] bridge_slave_1: entered allmulticast mode [ 903.476752][T18941] bridge_slave_1: entered promiscuous mode [ 903.638853][T18941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.666611][T18941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.949850][T18941] team0: Port device team_slave_0 added [ 904.002429][ T5233] Bluetooth: hci14: command tx timeout [ 904.136141][T18941] team0: Port device team_slave_1 added [ 904.323202][T18941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.391537][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.417499][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.518560][T18941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.561321][T18941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.580189][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.606209][ C0] vkms_vblank_simulate: vblank timer overrun [ 904.666047][T18941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.877804][T18941] hsr_slave_0: entered promiscuous mode [ 904.927144][T18941] hsr_slave_1: entered promiscuous mode [ 904.973918][T18941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.991696][T18941] Cannot create hsr debugfs directory [ 905.334960][T18970] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 905.860800][T18941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.087613][ T5233] Bluetooth: hci14: command tx timeout [ 906.492845][T18941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.739997][T18941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.995212][T18941] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.327821][T18941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 907.382439][T18941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 907.413235][T18941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 907.444146][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 907.461619][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 907.474398][T18941] netdevsim netdevsim1 netdevsim3: renamed from eth3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.491569][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.500358][ T30] task:kworker/0:0 state:D stack:19760 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 907.542317][ T30] Workqueue: usb_hub_wq hub_event [ 907.547525][ T30] Call Trace: [ 907.550882][ T30] [ 907.571949][ T30] __schedule+0x1895/0x4b30 [ 907.576627][ T30] ? __pfx___schedule+0x10/0x10 [ 907.592043][ T30] ? __pfx_lock_release+0x10/0x10 [ 907.597228][ T30] ? kthread_data+0x52/0xd0 [ 907.612086][ T30] ? schedule+0x90/0x320 [ 907.616506][ T30] ? wq_worker_sleeping+0x66/0x240 [ 907.641635][ T30] ? schedule+0x90/0x320 [ 907.652783][ T30] schedule+0x14b/0x320 [ 907.667360][ T30] schedule_preempt_disabled+0x13/0x30 [ 907.677518][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 907.691623][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 907.699383][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 907.720083][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 907.761878][ T30] ? usb_probe_interface+0x645/0xbb0 [ 907.767293][ T30] ? dev_printk_emit+0xdd/0x120 [ 907.785961][ T30] ? usb_probe_device+0x1b8/0x380 [ 907.852344][ T30] ? really_probe+0x2b8/0xad0 [ 907.857115][ T30] ? __device_attach+0x333/0x520 [ 907.901503][ T30] ? bus_probe_device+0x189/0x260 [ 907.906644][ T30] down_write+0x1d7/0x220 [ 907.911016][ T30] ? __pfx_down_write+0x10/0x10 [ 907.954186][ T30] usb_register_dev+0x13a/0x5a0 [ 907.959142][ T30] ? __pfx_usb_register_dev+0x10/0x10 [ 907.991631][ T30] ? kfree+0x1a0/0x440 [ 907.995797][ T30] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 908.021702][ T30] ? usbtmc_probe+0xf3c/0x1900 [ 908.026588][ T30] usbtmc_probe+0xe67/0x1900 [ 908.052853][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 908.059276][ T30] ? __pfx_usbtmc_probe+0x10/0x10 [ 908.086852][ T30] ? pm_runtime_enable+0xa7/0x2d0 [ 908.092479][ T30] ? __pm_runtime_set_status+0x6c1/0xa10 [ 908.098196][ T30] usb_probe_interface+0x645/0xbb0 [ 908.121588][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 908.127322][ T30] really_probe+0x2b8/0xad0 [ 908.138118][ T30] __driver_probe_device+0x1a2/0x390 [ 908.143796][ T30] driver_probe_device+0x50/0x430 [ 908.148895][ T30] __device_attach_driver+0x2d6/0x530 [ 908.155813][ T30] bus_for_each_drv+0x24e/0x2e0 [ 908.160726][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 908.161873][ T5233] Bluetooth: hci14: command tx timeout [ 908.168813][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 908.178047][ T30] __device_attach+0x333/0x520 [ 908.183854][ T30] ? __pfx_lock_release+0x10/0x10 [ 908.188950][ T30] ? __pfx___device_attach+0x10/0x10 [ 908.194732][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 908.200023][ T30] bus_probe_device+0x189/0x260 [ 908.205515][ T30] device_add+0x856/0xbf0 [ 908.209920][ T30] usb_set_configuration+0x1976/0x1fb0 [ 908.216575][ T30] usb_generic_driver_probe+0x88/0x140 [ 908.222414][ T30] usb_probe_device+0x1b8/0x380 [ 908.227328][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 908.233178][ T30] really_probe+0x2b8/0xad0 [ 908.241004][ T30] __driver_probe_device+0x1a2/0x390 [ 908.247422][ T30] driver_probe_device+0x50/0x430 [ 908.252862][ T30] __device_attach_driver+0x2d6/0x530 [ 908.258558][ T30] bus_for_each_drv+0x24e/0x2e0 [ 908.264752][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 908.270737][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 908.278047][ T30] __device_attach+0x333/0x520 [ 908.283237][ T30] ? __pfx___device_attach+0x10/0x10 [ 908.288689][ T30] bus_probe_device+0x189/0x260 [ 908.294908][ T30] device_add+0x856/0xbf0 [ 908.299426][ T30] usb_new_device+0x104a/0x19a0 [ 908.304844][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 908.310101][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.315820][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 908.321113][ T30] hub_event+0x2d6d/0x5150 [ 908.326117][ T30] ? __pfx_hub_event+0x10/0x10 [ 908.330942][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 908.340922][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 908.347298][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 908.354020][ T30] ? process_scheduled_works+0x976/0x1850 [ 908.359793][ T30] process_scheduled_works+0xa63/0x1850 [ 908.366147][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 908.373260][ T30] ? assign_work+0x364/0x3d0 [ 908.377928][ T30] worker_thread+0x870/0xd30 [ 908.385318][ T30] ? __kthread_parkme+0x169/0x1d0 [ 908.390411][ T30] ? __pfx_worker_thread+0x10/0x10 [ 908.396035][ T30] kthread+0x2f0/0x390 [ 908.400182][ T30] ? __pfx_worker_thread+0x10/0x10 [ 908.406363][ T30] ? __pfx_kthread+0x10/0x10 [ 908.411007][ T30] ret_from_fork+0x4b/0x80 [ 908.415930][ T30] ? __pfx_kthread+0x10/0x10 [ 908.420607][ T30] ret_from_fork_asm+0x1a/0x30 [ 908.425980][ T30] [ 908.429247][ T30] INFO: task syz.2.2427:16666 blocked for more than 144 seconds. [ 908.437779][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 908.448499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 908.479593][ T30] task:syz.2.2427 state:D stack:23072 pid:16666 tgid:16659 ppid:16186 flags:0x00004002 [ 908.503635][ T30] Call Trace: [ 908.507020][ T30] [ 908.509995][ T30] __schedule+0x1895/0x4b30 [ 908.515127][ T30] ? __pfx___schedule+0x10/0x10 [ 908.520072][ T30] ? __pfx_lock_release+0x10/0x10 [ 908.526248][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 908.532534][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 908.538952][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 908.547248][ T30] ? schedule+0x90/0x320 [ 908.551633][ T30] schedule+0x14b/0x320 [ 908.555849][ T30] rpm_resume+0x504/0x1670 [ 908.560329][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 908.566444][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 908.571371][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 908.577810][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 908.583721][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 908.588984][ T30] rpm_resume+0x8fe/0x1670 [ 908.593745][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 908.598658][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 908.604543][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 908.610501][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 908.618943][ T30] __pm_runtime_resume+0x120/0x180 [ 908.624483][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 908.629913][ T30] usb_autopm_get_interface+0x22/0xf0 [ 908.635640][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 908.641079][ T30] wdm_manage_power+0x1c/0xa0 [ 908.648699][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 908.654511][ T30] wdm_release+0x20f/0x460 [ 908.658988][ T30] ? __pfx_wdm_release+0x10/0x10 [ 908.664437][ T30] __fput+0x23f/0x880 [ 908.668590][ T30] task_work_run+0x24f/0x310 [ 908.673515][ T30] ? __pfx_task_work_run+0x10/0x10 [ 908.678721][ T30] ? switch_task_namespaces+0xe4/0x110 [ 908.684655][ T30] do_exit+0xa2f/0x28e0 [ 908.688874][ T30] ? __pfx_do_exit+0x10/0x10 [ 908.693785][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 908.699218][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 908.708569][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 908.715372][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 908.720591][ T30] do_group_exit+0x207/0x2c0 [ 908.731691][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.737114][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 908.743238][ T30] get_signal+0x16a3/0x1740 [ 908.761533][ T30] ? __pfx_get_signal+0x10/0x10 [ 908.766490][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 908.781608][ T30] arch_do_signal_or_restart+0x96/0x860 [ 908.787284][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 908.793827][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 908.799917][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 908.806168][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 908.811993][ T30] do_syscall_64+0x100/0x230 [ 908.816671][ T30] ? clear_bhb_loop+0x35/0x90 [ 908.821918][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.827883][ T30] RIP: 0033:0x7fbcb8d7c990 [ 908.834102][ T30] RSP: 002b:00007fbcb9b49b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 908.843654][ T30] RAX: 000000000000000b RBX: 0000000000000002 RCX: 00007fbcb8d7c990 [ 908.862540][ T30] RDX: 0000000000000002 RSI: 00007fbcb9b49c10 RDI: 00000000ffffff9c [ 908.870614][ T30] RBP: 00007fbcb9b49c10 R08: 0000000000000000 R09: 00007fbcb9b49987 [ 908.880150][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 908.889387][ T30] R13: 0000000000000000 R14: 00007fbcb8f36058 R15: 00007fbcb905fa28 [ 908.897858][ T30] [ 908.901065][ T30] INFO: task syz.3.2452:16748 blocked for more than 144 seconds. [ 908.957977][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 909.001491][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 909.010252][ T30] task:syz.3.2452 state:D stack:26816 pid:16748 tgid:16747 ppid:16335 flags:0x00000004 [ 909.091622][ T30] Call Trace: [ 909.094977][ T30] [ 909.097954][ T30] __schedule+0x1895/0x4b30 [ 909.122181][ T30] ? __pfx___schedule+0x10/0x10 [ 909.127121][ T30] ? __pfx_lock_release+0x10/0x10 [ 909.141636][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 909.147348][ T30] ? schedule+0x90/0x320 [ 909.152287][ T30] schedule+0x14b/0x320 [ 909.193755][ T30] schedule_preempt_disabled+0x13/0x30 [ 909.199407][ T30] __mutex_lock+0x6a7/0xd70 [ 909.215117][ T30] ? __mutex_lock+0x52a/0xd70 [ 909.220058][ T30] ? wdm_open+0x56/0x550 [ 909.241794][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 909.246955][ T30] ? __pfx_down_read+0x10/0x10 [ 909.262318][ T30] ? chrdev_open+0xfb/0x600 [ 909.266963][ T30] ? __pfx_lock_release+0x10/0x10 [ 909.272571][ T30] wdm_open+0x56/0x550 [ 909.276781][ T30] ? __pfx_wdm_open+0x10/0x10 [ 909.282587][ T30] usb_open+0x14b/0x1d0 [ 909.286855][ T30] chrdev_open+0x521/0x600 [ 909.291343][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 909.297170][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 909.304787][ T30] ? security_file_open+0x513/0x990 [ 909.310111][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 909.315502][ T30] do_dentry_open+0x978/0x1460 [ 909.320419][ T30] vfs_open+0x3e/0x330 [ 909.324674][ T30] path_openat+0x2c84/0x3590 [ 909.329749][ T30] ? __pfx_path_openat+0x10/0x10 [ 909.339967][ T30] do_filp_open+0x235/0x490 [ 909.344926][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 909.350105][ T30] ? _raw_spin_unlock+0x28/0x50 [ 909.355184][ T30] ? alloc_fd+0x5a1/0x640 [ 909.359784][ T30] do_sys_openat2+0x13e/0x1d0 [ 909.370088][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.375945][ T30] __x64_sys_openat+0x247/0x2a0 [ 909.381133][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 909.387131][ T30] ? do_syscall_64+0x100/0x230 [ 909.392413][ T30] ? do_syscall_64+0xb6/0x230 [ 909.397277][ T30] do_syscall_64+0xf3/0x230 [ 909.401976][ T30] ? clear_bhb_loop+0x35/0x90 [ 909.407212][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.415439][ T30] RIP: 0033:0x7f2da1d7c990 [ 909.420003][ T30] RSP: 002b:00007f2da2c33b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 909.428565][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2da1d7c990 [ 909.437045][ T30] RDX: 0000000000000002 RSI: 00007f2da2c33c10 RDI: 00000000ffffff9c [ 909.459222][ T30] RBP: 00007f2da2c33c10 R08: 0000000000000000 R09: 00007f2da2c33987 [ 909.471204][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 909.479718][ T30] R13: 0000000000000000 R14: 00007f2da1f35f80 R15: 00007f2da205fa28 [ 909.487907][ T30] [ 909.513536][ T30] INFO: task syz.0.2458:16762 blocked for more than 145 seconds. [ 909.530104][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 909.538021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 909.547194][ T30] task:syz.0.2458 state:D stack:27360 pid:16762 tgid:16760 ppid:16102 flags:0x00000004 [ 909.557614][ T30] Call Trace: [ 909.560962][ T30] [ 909.571538][ T30] __schedule+0x1895/0x4b30 [ 909.576205][ T30] ? __pfx___schedule+0x10/0x10 [ 909.581159][ T30] ? __pfx_lock_release+0x10/0x10 [ 909.611635][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 909.617776][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 909.641583][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 909.646845][ T30] ? schedule+0x90/0x320 [ 909.651174][ T30] schedule+0x14b/0x320 [ 909.674025][ T30] ? down_read+0x6a5/0xa40 [ 909.678590][ T30] schedule_preempt_disabled+0x13/0x30 [ 909.701649][ T30] down_read+0x705/0xa40 [ 909.706030][ T30] ? __pfx_down_read+0x10/0x10 [ 909.710872][ T30] ? __pfx_lock_release+0x10/0x10 [ 909.730677][ T30] usb_open+0x30/0x1d0 [ 909.738461][ T30] chrdev_open+0x521/0x600 [ 909.745023][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 909.750677][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 909.755838][ T30] ? security_file_open+0x513/0x990 [ 909.761107][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 909.766886][ T30] do_dentry_open+0x978/0x1460 [ 909.777139][ T30] vfs_open+0x3e/0x330 [ 909.781327][ T30] path_openat+0x2c84/0x3590 [ 909.786088][ T30] ? __lock_acquire+0x1384/0x2050 [ 909.791235][ T30] ? __pfx_path_openat+0x10/0x10 [ 909.796377][ T30] do_filp_open+0x235/0x490 [ 909.800978][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 909.806543][ T30] ? _raw_spin_unlock+0x28/0x50 [ 909.811602][ T30] ? alloc_fd+0x5a1/0x640 [ 909.816360][ T30] do_sys_openat2+0x13e/0x1d0 [ 909.821158][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 909.826520][ T30] __x64_sys_openat+0x247/0x2a0 [ 909.831480][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 909.836939][ T30] ? do_syscall_64+0x100/0x230 [ 909.842018][ T30] ? do_syscall_64+0xb6/0x230 [ 909.846872][ T30] do_syscall_64+0xf3/0x230 [ 909.853275][ T30] ? clear_bhb_loop+0x35/0x90 [ 909.858073][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.864112][ T30] RIP: 0033:0x7f74c0d7c990 [ 909.868576][ T30] RSP: 002b:00007f74c1c3eb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 909.880795][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f74c0d7c990 [ 909.889000][ T30] RDX: 0000000000000002 RSI: 00007f74c1c3ec10 RDI: 00000000ffffff9c [ 909.897178][ T30] RBP: 00007f74c1c3ec10 R08: 0000000000000000 R09: 00007f74c1c3e987 [ 909.905321][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 909.913414][ T30] R13: 0000000000000000 R14: 00007f74c0f36058 R15: 00007f74c105fa28 [ 909.921805][ T30] [ 909.931579][ T30] [ 909.931579][ T30] Showing all locks held in the system: [ 909.939415][ T30] 6 locks held by kworker/0:0/8: [ 909.951549][ T30] #0: ffff8881416d1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 909.978987][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 909.993801][ T30] #2: ffff888145b08190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 910.005206][ T30] #3: ffff888065dcc190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.014837][ T30] #4: ffff8880686e2160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.024295][ T30] #5: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 910.034133][ T30] 3 locks held by kworker/1:0/25: [ 910.039218][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.061547][ T30] #1: ffffc900001f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.072433][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 910.087345][ T30] 1 lock held by khungtaskd/30: [ 910.092649][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 910.105057][ T30] 6 locks held by kworker/0:2/936: [ 910.110214][ T30] #0: ffff8881416d1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.122246][ T30] #1: ffffc90003bffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.134597][ T30] #2: ffff888145b20190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 910.144030][ T30] #3: ffff88801bbd5190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.154293][ T30] #4: ffff888060948160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.164672][ T30] #5: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 910.174841][ T30] 2 locks held by getty/4991: [ 910.184740][ T30] #0: ffff8880315e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 910.197699][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 910.208243][ T30] 6 locks held by kworker/1:3/5236: [ 910.216018][ T30] #0: ffff8881416d1148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.227768][ T30] #1: ffffc90003a6fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.240096][ T30] #2: ffff888028358190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 910.241951][ T5233] Bluetooth: hci14: command tx timeout [ 910.251121][ T30] #3: ffff888060405190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.264787][ T30] #4: ffff88807ef90160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 910.274316][ T30] #5: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 910.286847][ T30] 3 locks held by kworker/u8:2/11886: [ 910.294209][ T30] #0: ffff88802dd16948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.306053][ T30] #1: ffffc90004ccfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.319052][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 910.329145][ T30] 3 locks held by kworker/1:7/13816: [ 910.334624][ T30] #0: ffff88801c297548 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.345495][ T30] #1: ffffc90004237d00 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.357897][ T30] #2: ffff888145bb3510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 910.368545][ T30] 4 locks held by udevd/16385: [ 910.373785][ T30] #0: ffff8880633cd2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 910.382808][ T30] #1: ffff8880513f3088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 910.395333][ T30] #2: ffff8880527431e8 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 910.407323][ T30] #3: ffff888060405190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 910.416906][ T30] 4 locks held by udevd/16458: [ 910.421768][ T30] #0: ffff888031392d58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 910.430720][ T30] #1: ffff88802271d088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 910.440330][ T30] #2: ffff8880644de698 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 910.450064][ T30] #3: ffff88801bbd5190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 910.459565][ T30] 1 lock held by syz.2.2427/16666: [ 910.464898][ T30] #0: ffffffff8f633668 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 910.473825][ T30] 2 locks held by syz.3.2452/16748: [ 910.479094][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.490734][ T30] #1: ffffffff8f633668 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 910.499437][ T30] 1 lock held by syz.0.2458/16762: [ 910.504695][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.515658][ T30] 1 lock held by syz.4.2484/16873: [ 910.520873][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.529821][ T30] 1 lock held by syz.1.2487/16946: [ 910.535049][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.544065][ T30] 1 lock held by syz.4.2565/17386: [ 910.549232][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.558273][ T30] 1 lock held by syz.3.2640/17718: [ 910.563540][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.572539][ T30] 1 lock held by syz.1.2650/17758: [ 910.577713][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.586742][ T30] 1 lock held by syz.4.2688/17877: [ 910.594606][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.603622][ T30] 1 lock held by syz.3.2753/18105: [ 910.608799][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.617812][ T30] 3 locks held by syz-executor/18486: [ 910.625124][ T30] #0: ffff88805412cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 910.635340][ T30] #1: ffff88805412c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 910.662593][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 910.681537][ T30] 1 lock held by syz-executor/18502: [ 910.686976][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 910.711516][ T30] 1 lock held by syz.3.2868/18632: [ 910.716708][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.725991][ T30] 3 locks held by syz-executor/18711: [ 910.731845][ T30] #0: ffff8880748c0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 910.742385][ T30] #1: ffff8880748c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 910.752955][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 910.763373][ T30] 1 lock held by syz.1.2888/18796: [ 910.768549][ T30] #0: ffffffff8f5ab8f0 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 910.777600][ T30] 3 locks held by syz.2.2914/18919: [ 910.783111][ T30] #0: ffff888063ffcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 910.796302][ T30] #1: ffff888063ffc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 910.809025][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 910.819737][ T30] 3 locks held by syz-executor/18941: [ 910.825524][ T30] #0: ffff88805a350d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 910.835987][ T30] #1: ffff88805a350078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 910.847131][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 910.857608][ T30] 3 locks held by kworker/u8:6/18979: [ 910.863437][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 910.878361][ T30] #1: ffffc9000349fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 910.890038][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 910.903027][ T30] 2 locks held by syz.0.2934/18992: [ 910.908317][ T30] #0: ffff888073f28d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 910.918548][ T30] #1: ffff888073f28078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 910.928670][ T30] [ 910.936067][ T30] ============================================= [ 910.936067][ T30] [ 910.944628][ T30] NMI backtrace for cpu 1 [ 910.948993][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 910.959526][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 910.969604][ T30] Call Trace: [ 910.972893][ T30] [ 910.975827][ T30] dump_stack_lvl+0x241/0x360 [ 910.980512][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 910.985714][ T30] ? __pfx__printk+0x10/0x10 [ 910.990324][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 910.995271][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 911.000750][ T30] ? _printk+0xd5/0x120 [ 911.004971][ T30] ? __pfx__printk+0x10/0x10 [ 911.009616][ T30] ? __wake_up_klogd+0xcc/0x110 [ 911.014514][ T30] ? __pfx__printk+0x10/0x10 [ 911.019145][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 911.024211][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 911.030266][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 911.036263][ T30] watchdog+0xff4/0x1040 [ 911.040515][ T30] ? watchdog+0x1ea/0x1040 [ 911.044944][ T30] ? __pfx_watchdog+0x10/0x10 [ 911.049629][ T30] kthread+0x2f0/0x390 [ 911.053715][ T30] ? __pfx_watchdog+0x10/0x10 [ 911.058435][ T30] ? __pfx_kthread+0x10/0x10 [ 911.063060][ T30] ret_from_fork+0x4b/0x80 [ 911.067520][ T30] ? __pfx_kthread+0x10/0x10 [ 911.072136][ T30] ret_from_fork_asm+0x1a/0x30 [ 911.076919][ T30] [ 911.082216][ T30] Sending NMI from CPU 1 to CPUs 0: [ 911.087502][ C0] NMI backtrace for cpu 0 [ 911.087517][ C0] CPU: 0 UID: 0 PID: 1161 Comm: kworker/u8:5 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 911.087540][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 911.087553][ C0] Workqueue: bat_events batadv_nc_worker [ 911.087582][ C0] RIP: 0010:lock_acquire+0x1a4/0x550 [ 911.087614][ C0] Code: 00 00 00 00 00 9c 8f 84 24 80 00 00 00 42 80 3c 2b 00 74 08 4c 89 ff e8 6a 41 8e 00 48 8d 5c 24 60 4c 8b bc 24 80 00 00 00 fa <48> c7 c7 a0 d7 0a 8c e8 70 3f 55 0a 65 ff 05 a9 33 92 7e 45 31 c9 [ 911.087631][ C0] RSP: 0018:ffffc900045179e0 EFLAGS: 00000046 [ 911.087647][ C0] RAX: 0000000000000000 RBX: ffffc90004517a40 RCX: ffffffff817055f4 [ 911.087662][ C0] RDX: 0000000000000000 RSI: ffffffff8c60fb80 RDI: ffffffff8c60fb40 [ 911.087676][ C0] RBP: ffffc90004517b40 R08: ffffffff901ced2f R09: 1ffffffff2039da5 [ 911.087691][ C0] R10: dffffc0000000000 R11: fffffbfff2039da6 R12: 1ffff920008a2f44 [ 911.087706][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 911.087720][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 911.087737][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.087751][ C0] CR2: 00007f8851467d60 CR3: 000000007f212000 CR4: 00000000003526f0 [ 911.087769][ C0] DR0: 0000000000000005 DR1: 0000000000000000 DR2: 0000000000000002 [ 911.087781][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 911.087794][ C0] Call Trace: [ 911.087801][ C0] [ 911.087809][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 911.087832][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 911.087862][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 911.087885][ C0] ? nmi_handle+0x2a/0x5a0 [ 911.087913][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 911.087939][ C0] ? nmi_handle+0x14f/0x5a0 [ 911.087959][ C0] ? nmi_handle+0x2a/0x5a0 [ 911.087979][ C0] ? lock_acquire+0x1a4/0x550 [ 911.088007][ C0] ? default_do_nmi+0x63/0x160 [ 911.088031][ C0] ? exc_nmi+0x123/0x1f0 [ 911.088052][ C0] ? end_repeat_nmi+0xf/0x53 [ 911.088075][ C0] ? lock_acquire+0xd4/0x550 [ 911.088103][ C0] ? lock_acquire+0x1a4/0x550 [ 911.088131][ C0] ? lock_acquire+0x1a4/0x550 [ 911.088159][ C0] ? lock_acquire+0x1a4/0x550 [ 911.088187][ C0] [ 911.088194][ C0] [ 911.088204][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 911.088235][ C0] ? batadv_nc_worker+0xcb/0x610 [ 911.088260][ C0] ? __pfx_lock_release+0x10/0x10 [ 911.088290][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 911.088323][ C0] batadv_nc_worker+0xec/0x610 [ 911.088347][ C0] ? batadv_nc_worker+0xcb/0x610 [ 911.088370][ C0] ? batadv_nc_worker+0xcb/0x610 [ 911.088395][ C0] ? process_scheduled_works+0x976/0x1850 [ 911.088423][ C0] process_scheduled_works+0xa63/0x1850 [ 911.088463][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 911.088500][ C0] ? assign_work+0x364/0x3d0 [ 911.088528][ C0] worker_thread+0x870/0xd30 [ 911.088562][ C0] ? __kthread_parkme+0x169/0x1d0 [ 911.088591][ C0] ? __pfx_worker_thread+0x10/0x10 [ 911.088618][ C0] kthread+0x2f0/0x390 [ 911.088636][ C0] ? __pfx_worker_thread+0x10/0x10 [ 911.088662][ C0] ? __pfx_kthread+0x10/0x10 [ 911.088681][ C0] ret_from_fork+0x4b/0x80 [ 911.088709][ C0] ? __pfx_kthread+0x10/0x10 [ 911.088727][ C0] ret_from_fork_asm+0x1a/0x30 [ 911.088762][ C0] [ 911.109719][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 911.109741][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 911.109769][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 911.109784][ T30] Call Trace: [ 911.109794][ T30] [ 911.109804][ T30] dump_stack_lvl+0x241/0x360 [ 911.109838][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.109864][ T30] ? __pfx__printk+0x10/0x10 [ 911.109896][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 911.109943][ T30] ? vscnprintf+0x5d/0x90 [ 911.109975][ T30] panic+0x349/0x880 [ 911.110011][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 911.110044][ T30] ? __pfx_panic+0x10/0x10 [ 911.110075][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 911.110103][ T30] ? __irq_work_queue_local+0x137/0x410 [ 911.110137][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 911.110163][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 911.110193][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 911.110230][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 911.110263][ T30] watchdog+0x1033/0x1040 [ 911.110297][ T30] ? watchdog+0x1ea/0x1040 [ 911.110335][ T30] ? __pfx_watchdog+0x10/0x10 [ 911.110368][ T30] kthread+0x2f0/0x390 [ 911.110391][ T30] ? __pfx_watchdog+0x10/0x10 [ 911.110423][ T30] ? __pfx_kthread+0x10/0x10 [ 911.110448][ T30] ret_from_fork+0x4b/0x80 [ 911.110489][ T30] ? __pfx_kthread+0x10/0x10 [ 911.110514][ T30] ret_from_fork_asm+0x1a/0x30 [ 911.110561][ T30] [ 911.570294][ T30] Kernel Offset: disabled [ 911.574636][ T30] Rebooting in 86400 seconds..