last executing test programs: 1m12.848950803s ago: executing program 4 (id=5035): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000f, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000094000/0x3000)=nil, 0x3000, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x4, 0xa80) syz_open_dev$usbfs(&(0x7f00000001c0), 0x0, 0x8582) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x2080) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = socket(0x2a, 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0x4, 0x1e6d79bb, 0x97}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}}, 0x8011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) mq_timedsend(r5, &(0x7f0000000080), 0x0, 0x4, &(0x7f0000000000)={0x0, 0x3938700}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4b, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000fdffffff1810", @ANYRES32, @ANYBLOB="00000000000000008520000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000b540600000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000900)={'veth1_virt_wifi\x00', @random='\x00\x00\x00 \x00'}) ioctl$USBDEVFS_BULK(r0, 0x80045515, &(0x7f0000000080)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) 1m12.406540753s ago: executing program 4 (id=5037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0fff1000000bf86000000000000b5080000f8ffffffbfa400000000000007040000f0ffffffb60200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x15e, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5, "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"}}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x10000000000000, 0x8000}) 41.619193902s ago: executing program 4 (id=5038): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}}, 0x24}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) 38.847395466s ago: executing program 4 (id=5119): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x9, 0x2, 0x4, 0x3100, 0x2, {}, {0x0, 0x2, 0x1, 0x7, 0x1, 0x6, "af2e65a2"}, 0xffffffff, 0x4, {}, 0x7df}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x129c81, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="736563752d726974792e2d5d5d60277d29292741232a000025bc31"], &(0x7f0000000240)=""/187, 0xbb) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001100000000000000141100000140017", @ANYRESDEC], 0x30}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x7, 0x4, 0x6, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000000c0)={r6, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000540)=[0x0], 0x0, 0x1, r9, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={&(0x7f0000000300)=[r10], 0x1, r6, r7, 0x9, 0x5, 0xffff1b8e, 0x5, {0xa, 0xacb, 0x8, 0x1, 0x101, 0x4, 0x85e7, 0x2, 0xb, 0x8, 0x9, 0x3, 0x4, 0x100, "368413b5e100e32fbbcf8ac2c6790bff3a5b756e90dbfa56c4cc021d01c1046f"}}) 37.314250286s ago: executing program 4 (id=5121): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_cred(r1, 0x1, 0x46, &(0x7f0000000140), 0xc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000044c0), 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x400c814}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000480)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00'}, {@in=@multicast2, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x69, 0x1, {{'xcbc(aes)\x00'}, 0x108, "447a772103d9fecc820d47a2447b8c8aba6b26da13c212773245945488dd646a6b"}}]}, 0x15c}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) ioctl$EVIOCGABS3F(r0, 0x40084503, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000005, 0x12, r2, 0xaf77f000) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$kcm(r9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4c51) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) r10 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r11 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000040)={0x0, 'vxcan1\x00', {0x4}, 0x9f}) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f00000001c0)={0x6, 0xce4, 0x0, 0xc35, 0x1, "ffd2e0bf3394596ceceffb433ab917913e51db", 0x5, 0xf}) 33.626347441s ago: executing program 4 (id=5134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x11, r3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x700}]}}}]}, 0x3c}}, 0x4000080) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x9, {[@main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0x0, "5e10c465"}, @main=@item_012={0x2, 0x0, 0x9, "91ac"}]}}, 0x0}, 0x0) 33.400346595s ago: executing program 3 (id=5136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="d0b4163e96457321d877d01ac22c", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 33.246626437s ago: executing program 3 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x2000}, 0x4) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x3, 'virt_wifi0\x00', {0x80}, 0x10}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x4}]}}}}}) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x28000000, 0x1, 0x8}, 0x10) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r7 = creat(&(0x7f00000015c0)='./file0\x00', 0x0) fstat(r7, &(0x7f000000f780)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$igmp(0x2, 0x3, 0x2) sendmsg$unix(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="f7", 0x1}], 0x1}, 0x20004001) (async) recvmsg$unix(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000f5ffffff000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) socket$inet(0x2, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) 33.009594033s ago: executing program 3 (id=5140): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000580)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000001fb000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.706405781s ago: executing program 3 (id=5143): rt_sigprocmask(0x0, &(0x7f0000000000)={[0x10000]}, 0x0, 0x8) syz_emit_ethernet(0x52, &(0x7f0000000040)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@x25={0x805, {0x3, 0x9, 0x27, "1a5463132d6c9b66791e2a0757c4b3d8ba8648a824bd5a81a210d2b7af0a2b48fe94265f3a154494bef62ea17ecf2386db0783a24b6de141e5d75547be"}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x953, 0x70c, 0xacf, 0x6ce]}) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f00000005c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000840)=""/46, 0x2e}], 0x9, 0xbd10, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000940), 0x5, 0x800) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000980)={{0x2, 0x3, 0x80000000, 0x13, 0x96d, 0xa}, 0x34b, [0x7e1e, 0x7, 0xd, 0x37f0, 0x0, 0x9fa, 0x7, 0x11b4b077, 0x2f33, 0x493, 0x10000, 0x8c1e, 0x2, 0x4, 0x3, 0x4, 0x1, 0xf890, 0x0, 0x4, 0x10000, 0x2, 0x8, 0x2, 0x1, 0x6, 0x9, 0x10000, 0x8, 0x0, 0xb, 0x8da5, 0xc, 0x63, 0x2, 0xfffffffe, 0xd, 0x1ff, 0xfffffffa, 0x100, 0x5, 0x8, 0xfffffff8, 0x2, 0x4, 0x6, 0xe68, 0x5, 0xfffff801, 0x9, 0x3, 0x7, 0x6, 0x0, 0x5, 0x1, 0x5, 0x1, 0x7f, 0xe8, 0x7, 0x4, 0x9, 0x1, 0x3, 0x2, 0x5, 0x200, 0x3, 0x1, 0x9, 0xfffffffc, 0xac, 0x8, 0x6, 0x9, 0x1000, 0x50a0, 0x1, 0x77, 0x9, 0x1, 0xb, 0x3, 0x1, 0xfffffffb, 0xf, 0x8000, 0x81, 0x7, 0x2, 0x8, 0x47c9, 0xffff, 0x1, 0x8, 0x9, 0x8000, 0x2, 0x4, 0x1, 0x8, 0x10001, 0x10001, 0x10, 0x7, 0x9, 0x8, 0x6e8, 0x1, 0xb, 0xc84e, 0x7fffffff, 0x7f, 0xc, 0x80, 0x9, 0x0, 0x9b, 0x6, 0x8, 0x200, 0x1, 0x10, 0x99, 0x8000, 0x3, 0x6, 0xfffffff7, 0x7, 0x1, 0x3, 0x8, 0xfffffff7, 0x5e, 0x4, 0x3, 0x1, 0x3, 0x912e, 0x5, 0x8, 0x100, 0x3ff, 0x7fff, 0x4, 0x3, 0x5, 0x8, 0x2bb, 0x5, 0x9, 0x0, 0x6000000, 0x57, 0x7, 0x129, 0x6, 0x3, 0x0, 0x3, 0x800, 0x10, 0x2, 0x6, 0x8, 0x2, 0x560, 0x0, 0x9, 0x7, 0x3, 0x5, 0x2, 0x5, 0x2, 0x5, 0x8100, 0xfb8, 0x6fa1, 0x6, 0x7ff, 0xff, 0x7, 0x5, 0x80000000, 0x53, 0x0, 0x7, 0x5, 0xa, 0x26, 0xe643, 0x3, 0x4, 0x1, 0xf9, 0x800, 0xc, 0x535d, 0x3c000000, 0x4, 0x7, 0x0, 0x3, 0x4, 0x9, 0x2, 0xfffffffb, 0x2856, 0xffff, 0x400, 0x7, 0x9, 0x7ff, 0x5, 0xffff75a7, 0x0, 0x10001, 0x1d, 0xa, 0x5, 0x8, 0xf, 0x76b29b3, 0xffffffff, 0x0, 0x9d, 0x74, 0x7, 0xfffffffa, 0x2, 0xfffffff7, 0x10000, 0x0, 0x4, 0x9, 0x7fff, 0xffffff01, 0x3, 0x8, 0x7, 0x2, 0x17, 0x7c6, 0xfffffffa, 0xe, 0x4, 0x7, 0x5, 0x3, 0x9, 0x6, 0x5, 0x400, 0x0, 0x5, 0x1ff, 0x0, 0x6, 0x3, 0x200, 0xfffffff8, 0xfffffffa, 0xff, 0x2, 0x594f, 0x0, 0x9, 0x6, 0xfffffff2, 0x9, 0x6b, 0x2, 0x4, 0x5, 0x3, 0x2, 0xfff, 0x1, 0x1, 0x4, 0xb, 0xfffffffb, 0x8, 0x7, 0x7, 0x29c, 0x8, 0x1, 0x3, 0x7, 0x2, 0x9, 0xb, 0x8001, 0x10001, 0x9, 0x90000, 0x200, 0x81, 0x0, 0x1e, 0xff, 0x4, 0xac3d, 0x10000, 0x4, 0x5, 0x10, 0x8, 0xffffff07, 0x4, 0xfffffffb, 0x816, 0xffff9556, 0xfc, 0x800, 0x3, 0xfffffff6, 0x7f, 0xfffffffa, 0x81, 0x80000001, 0x10, 0x4, 0xcc18, 0x9, 0x400, 0x400, 0x6, 0x0, 0xffffff01, 0xa, 0xffff, 0x1, 0x0, 0xcce, 0xffffffff, 0x0, 0x1ff, 0x0, 0x1, 0xbf, 0xffff4c0f, 0xf, 0xe, 0x0, 0x0, 0xfffffffc, 0x9, 0x5, 0x6, 0x1000, 0x80000000, 0x9, 0x5a, 0x1, 0x0, 0x4, 0x1c0000, 0x8, 0x0, 0x2da, 0xffffffff, 0x1dc, 0x8, 0x1, 0x7, 0x4, 0x8, 0x1000, 0x1, 0x4cc, 0x7, 0x800, 0xb3f, 0x8, 0x1, 0x6, 0x5, 0x401, 0x5, 0x8, 0x2, 0x4, 0xffffffff, 0x401, 0x4, 0x2, 0x8, 0x5, 0x4, 0xc4c, 0x7fffffff, 0x80000001, 0x7, 0xfff, 0x4, 0x1, 0x6, 0xa47b, 0x200, 0x5, 0x3, 0x465, 0x0, 0x4, 0x6d1e, 0xb, 0x4, 0x40, 0x1, 0x0, 0x7, 0xc0000000, 0x1000, 0x8c, 0x0, 0x5, 0xb, 0x1000, 0x400, 0x2e593f66, 0x7fffffff, 0x2, 0x8, 0x8, 0x3, 0x40, 0x6, 0x162, 0x0, 0x49a, 0x200, 0xd, 0xf78, 0xf, 0x3, 0x7ac0, 0x1, 0xfffffff7, 0x31, 0xffff5852, 0x4, 0x6, 0x4, 0x9, 0x16e5, 0x800, 0x3, 0x3, 0xffffffff, 0x6, 0x2, 0x80000000, 0xc, 0x6, 0x6, 0x2, 0x6, 0x6, 0x6, 0xffffff81, 0x3, 0x1, 0x401, 0x2, 0xb, 0x1, 0x0, 0x40, 0x8, 0x10001, 0xb, 0xff, 0xffffffff, 0xc91, 0x9, 0x8, 0x401, 0x80, 0x2, 0xfff, 0x7, 0x8, 0x5, 0x6, 0x6, 0x69b, 0x80000000, 0x7f, 0x2, 0x6, 0x1, 0x1, 0x10, 0x40, 0x2, 0x7ff, 0x3, 0x1, 0x9, 0x2, 0x100, 0x4, 0x0, 0xffffffff, 0x6, 0xffff0001, 0xf1, 0x5, 0x3, 0x8, 0x3b, 0x7, 0x1, 0xffffffff, 0x4a8, 0x200, 0x4, 0x1, 0x185c, 0xfffffffe, 0x2, 0x4, 0x8, 0x7, 0xcec, 0x0, 0x9, 0x9, 0x8, 0x62, 0x10, 0xea1, 0x4, 0x3, 0x409c5f53, 0xc, 0x7fffffff, 0x28000000, 0x80, 0x7, 0x6, 0x9, 0x4, 0xc0, 0x6, 0x7, 0x5, 0x3, 0x7, 0x75e1, 0x4, 0x9, 0x6, 0xfffff801, 0x6, 0xffffff97, 0x0, 0x7, 0x7, 0x1a0, 0x5, 0x7fff, 0x1, 0xb, 0x7, 0x8, 0x9, 0x6, 0xffff8001, 0xff0000, 0x1ce, 0x0, 0x6, 0x0, 0x5, 0xa, 0x2, 0x5, 0x6, 0x7, 0x9, 0x5, 0xf, 0xfffff8f4, 0x6, 0x2, 0x8, 0x8, 0x377, 0x6, 0x7, 0x9, 0x7, 0x80, 0xffffffff, 0x6, 0x3, 0x81, 0x7, 0x5, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x3, 0x10000, 0x7fff, 0xb5a, 0x6, 0x4, 0x0, 0x3, 0x4, 0x6, 0x100, 0xd, 0x80000000, 0x9, 0x0, 0xffffffff, 0x60, 0x4ca, 0x6, 0xc, 0x3, 0x2, 0x9, 0x9, 0x8001, 0x8, 0x7, 0x5, 0x3, 0xfffffffe, 0xd2f00000, 0x9, 0x1ff, 0x0, 0x4, 0x7, 0x2, 0xfffffffb, 0xb, 0x2, 0x6, 0x2d, 0x6c5, 0x0, 0x3, 0xfff, 0x7fff, 0x4, 0x1, 0x3, 0x3, 0x800, 0xf, 0x3, 0x9, 0x7, 0x9, 0x0, 0x5, 0xfd6, 0xbf, 0x3, 0x200, 0x8, 0x2, 0x9, 0xb, 0x8, 0x4, 0x0, 0x6, 0x0, 0x6, 0x4, 0x3, 0x9, 0x4, 0xf8e, 0x7, 0x3, 0x7, 0xe7f0, 0x750e, 0x7, 0x6, 0xe3b6, 0x54, 0x68000, 0x212, 0x9, 0x2, 0x2, 0x4, 0x7f, 0x2, 0x10, 0xfffffff4, 0x1, 0x40, 0x7, 0x68b7, 0x1, 0x7aff55d9, 0x79, 0xf, 0xb510, 0x98, 0xbec, 0x0, 0x3, 0x7, 0x9, 0x8, 0x10001, 0x5, 0x8, 0xffffffff, 0x8000, 0xfffff431, 0x60, 0x5bd4, 0xc8e, 0x6, 0xfffff001, 0x5, 0x5, 0xe75, 0xe1, 0xe07a4ed1, 0x9a, 0x6, 0x8b5f, 0x200, 0xcd, 0x4, 0x2e, 0xd, 0x0, 0x7, 0x8, 0x9, 0x0, 0xffff, 0x1, 0xfff, 0x2, 0x8, 0xf, 0xfffffffc, 0x2, 0x9c6, 0x7fffffff, 0x8, 0xfffffff9, 0x4, 0x7fff8000, 0xfffffffe, 0x0, 0x7ff, 0x5, 0xfffffffa, 0x2, 0x1000000, 0xdc00, 0x1, 0x1, 0xffffff01, 0x7, 0x3, 0x3, 0x9, 0xffff3f28, 0x7, 0x5273, 0x1, 0x7, 0x3, 0x4, 0x4, 0x4, 0x2, 0x10, 0x10, 0x4, 0xffff, 0x1ff, 0x5, 0x8, 0x4, 0xe9f, 0x0, 0x2c4e, 0x3, 0xd2, 0x9, 0x5, 0x1ff, 0x8, 0x6, 0x10000, 0x8, 0x1, 0x6, 0x6c, 0x5, 0x7, 0x5, 0x80000000, 0x4, 0x631, 0x6, 0x9, 0x2, 0x4, 0x5, 0x7fff, 0x920b, 0x9, 0x2, 0x6, 0xff, 0x3, 0xe4f, 0x5bf, 0x80000000, 0x7dcb, 0x3, 0x9, 0x101, 0x7, 0xd5f, 0x101, 0xa, 0x1, 0x7, 0x3, 0x5, 0x3db, 0xffffff80, 0x4, 0x1, 0x9, 0x5, 0xa3, 0x8, 0x6, 0x3, 0xb4d, 0x6, 0x400, 0x6, 0x1, 0x1, 0x0, 0x4, 0x800, 0x7, 0x5, 0x2397c7f3, 0x658a, 0x5a7, 0x0, 0x8, 0x0, 0x8, 0x2, 0x7, 0x50000000, 0x10001, 0x20b6, 0xc810, 0xd, 0x5, 0x7, 0xea77, 0x1f, 0x3, 0xbe, 0x2, 0x1, 0x7fffffff, 0x80000001, 0x1b, 0x4, 0x4, 0x6, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x2, 0xfff, 0x71, 0x2c, 0x7d3, 0x0, 0x1a000, 0x2, 0x100, 0x10001, 0x3, 0xf6, 0x0, 0x81, 0x10, 0x9, 0x0, 0x8, 0x3, 0x6, 0x4, 0x2, 0x9, 0x9, 0x0, 0x0, 0xfffffffa, 0x3, 0x6, 0x8, 0x9, 0x3, 0x7, 0x3, 0x2, 0x17b, 0x0, 0x1, 0x6, 0x7ff, 0x6, 0x1ff, 0x81, 0x40, 0x0, 0x9, 0x10, 0x9cd, 0x400, 0x9, 0x6, 0x4, 0x1, 0x200, 0xc31, 0x6af58d92, 0x7f, 0xfffff001, 0x80, 0xbdd5, 0x5, 0x1, 0x3, 0x5, 0x0, 0x8, 0xdd3, 0x8, 0x7ff, 0x4, 0x1, 0x2, 0x4, 0x6, 0x6, 0x0, 0x7, 0xf5, 0x2f0, 0x6, 0x80000000, 0x8000, 0xe, 0x92, 0xfffffff8, 0x8, 0x0, 0x6, 0xc36, 0x100, 0xe, 0x7, 0x5, 0x7ff, 0x7, 0x6, 0xfffffa1b, 0x10000, 0x5, 0x3, 0x5, 0xff, 0x1, 0x6, 0x8001, 0x6, 0x2, 0xb91, 0x100, 0x401, 0x9, 0x7ba, 0x9, 0x6, 0x6, 0x8, 0x3, 0x9, 0x6, 0x6, 0xff, 0x5]}) ioctl$KDADDIO(r0, 0x4b34, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000019c0), 0x6d2503, 0x0) write$tun(r3, &(0x7f0000001a00)={@val={0x0, 0x8864}, @val={0x2, 0x80, 0x0, 0x4, 0x4, 0x1}, @llc={@snap={0xaa, 0x54, '8', "bbb2ea", 0x862a, "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"}}}, 0x1016) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000002a40)='*\x00', 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0), r0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002c00), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x50, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x40005) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002d80)={0x0, 0x30, &(0x7f0000002d40)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002dc0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002e40)={r7, 0x30, &(0x7f0000002e00)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000002e80)=0x10) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003080), 0x311100, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xb30, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003200)=@generic={&(0x7f00000031c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003240)={r0, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003300)={0x11, 0x17, &(0x7f0000002ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x1, 0x7, 0x6, 0xb, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002f80)='GPL\x00', 0x4, 0x81, &(0x7f0000002fc0)=""/129, 0x41100, 0x1, '\x00', r1, 0x0, r8, 0x8, &(0x7f00000030c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003100)={0x3, 0x9, 0x3, 0xb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003280)=[r9, r0, r10, r0, r0, r11], &(0x7f00000032c0)=[{0x5, 0x2, 0x5, 0xe}, {0x2, 0x5, 0x7}], 0x10, 0xf, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000036c0)={r12, 0xe0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000033c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000003400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003480)=[0x0, 0x0], 0x0, 0xf4, &(0x7f00000034c0)=[{}], 0x8, 0x10, &(0x7f0000003500), &(0x7f0000003540), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000003580)}}, 0x10) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003700), 0x153b80) ioctl$SNDCTL_SYNTH_ID(r13, 0xc08c5114, &(0x7f0000003740)={"f5e56edda97d0796b866516d34a32b7cc80addac965dfa0d214f45f19fbf", 0x9, 0x3, 0x401, 0x5, 0x5, 0x5, 0xd1, 0x5, [0xffff8001, 0x7e0, 0x7, 0x2, 0xda09, 0x9, 0x2, 0xd1, 0x9, 0x7fff, 0xa2, 0x8, 0x7, 0x1, 0x36b7, 0x2, 0x4, 0xffffffff, 0xc460]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000003800)=""/115) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003880)='/sys/kernel/fscaps', 0x80240, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f00000038c0), &(0x7f0000003940)=0x68) 31.375055934s ago: executing program 3 (id=5145): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x163902, 0x0) read$sequencer(r0, &(0x7f0000000500)=""/79, 0x4f) 21.861938595s ago: executing program 2 (id=5175): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) r2 = getpid() fcntl$setown(r1, 0x8, r2) fcntl$setsig(r1, 0xa, 0x21) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x5) readv(r0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x1b}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x8001, 0xe, 0x4, 0xffffc000, 0x90, 0xabb}, 0x9c) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 21.330921573s ago: executing program 2 (id=5176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}}, 0x24}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) 18.913201585s ago: executing program 0 (id=5178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310400000000000000001600000018001180140002006e657464657273696d3000000000000005000300000000000500060001000000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r5, 0x1, 0x1a, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x2000) r10 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x40800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) 18.880568994s ago: executing program 2 (id=5179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x400040) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x2}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @sack={0x5, 0x1a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 18.680530201s ago: executing program 2 (id=5180): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21}}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x6) r4 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r10 = syz_io_uring_setup(0x5573, &(0x7f0000000380)={0x0, 0xf73c, 0x10100, 0x20, 0x0, 0x0, r8}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r10, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r13 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r13, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0xff7}], 0x4e}}], 0x1, 0x0, 0x0) 17.698879618s ago: executing program 2 (id=5182): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x2}}}, 0x24}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r4, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c0002"], 0xdc}}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, 0x0) 17.371777036s ago: executing program 2 (id=5183): r0 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0}, &(0x7f0000000900)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000a80)={0x14, 0x15, 0x400, 0x70bd28, 0x25dfdbfe, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xfbbb44f06d73fcd9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@ipv4, @in6=@ipv4={""/10, ""/2, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe8) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0xfffffffffffffea2) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d002c"], 0x44}}, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e22, 0xe5, 0x2, 0xa0, 0x20, 0x87, r9, r10}, {0x362, 0x1ff, 0xecd, 0x8, 0x7, 0xc734, 0x7, 0xffffffff}, {0x1ff, 0xffffffffffffffff, 0x200, 0x2}, 0x7595d378, 0x9, 0x1, 0x1, 0x1, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x6c}, 0xa, @in6=@empty, 0x0, 0x1, 0x2, 0x9, 0x7, 0x0, 0x3}}, 0xe8) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="07c4090fec6f52a70be5ff32852b582127000500", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="040002000000000008000300", @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0x64, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000101010240000000000000000a0000000400028008001a4000"], 0x34}}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)) r12 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES16], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x4000, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x22000080}, 0x9006) 15.64904109s ago: executing program 0 (id=5187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0xe25, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a680fbe326b997c1f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe90000000000000000620601000000e5af9b1c568302ffff02ff0331dd3bab0840024f0298", 0x99) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0505510, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000000c0)={0x0, 0x0, [0x2, 0x6, 0x4, 0x1, 0x9, 0x0, 0x80000000, 0x7c40]}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff0}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x377}]}}]}, 0x40}}, 0x0) 15.329272476s ago: executing program 0 (id=5188): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x97, &(0x7f0000000000), &(0x7f0000000240)=0x4) syz_usb_connect(0x5, 0x3d, &(0x7f0000000500)=ANY=[@ANYBLOB="12011001c2bc7710fd0b060189ec0102030109022b0001350720ce0904f00002ffffff0d0705a4be1b82"], 0x0) 12.040608377s ago: executing program 0 (id=5193): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xe) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) futex_waitv(&(0x7f0000001840)=[{0x0, 0xfffffffffffffffc, 0x82}], 0x1, 0x0, 0x0, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, &(0x7f00000000c0)=0x6, 0x8004, 0x4) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = dup2(r0, r0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffe5f, r1, {0x4ea}}, './file0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x80000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000000)={0x10000000000000, 0x8000}) 11.546871878s ago: executing program 0 (id=5195): r0 = socket(0x22, 0x2, 0x4) getsockname(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xac1, 0x4, 0x28}, 0x18) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000001340)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, r4, 0x0, 0x0, 0xa513}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r4}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) 10.539835629s ago: executing program 0 (id=5196): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000000)={0x2, 0x3000000, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x48) 6.639783832s ago: executing program 1 (id=5199): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) dup(0xffffffffffffffff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5.302606878s ago: executing program 1 (id=5200): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0x3, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x0, 0x6, {{0xb, 0x4, 0x1, 0x6, 0x2c, 0x68, 0x0, 0x81, 0x2f, 0x0, @private=0xa010101, @private=0xa010102, {[@rr={0x7, 0xf, 0x39, [@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}]}, @generic={0x7, 0x8, "f37ee1bac654"}]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0800001100"/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$inet_dccp(0x2, 0x6, 0x0) accept4(r8, &(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000009c0)=0x80, 0x1000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={0x230, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r9}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x2, 0xe8, 0xff, 0x5}, {0x9, 0x1, 0x3, 0xfffffffc}, {0x8000, 0x42, 0x2, 0x7}, {0x5, 0x4, 0x0, 0x2}, {0xe806, 0xa, 0x9, 0x9}, {0x297e, 0x9, 0x5}, {0x0, 0xe, 0x9, 0xffffff80}]}}}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x800}, 0x4004014) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unlink(&(0x7f0000000140)='./cgroup\x00') 4.134679111s ago: executing program 1 (id=5201): lgetxattr(0x0, &(0x7f0000000040)=@known='security.apparmor\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000000]}) eventfd(0x0) unshare(0x22020600) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) flock(0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "5390e55e4a0113ad12a9692b8eaab89b3a186c"}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 3.862425543s ago: executing program 1 (id=5202): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e4cd6f08422c361601170102fa226010e9f56b701781030109021b00010000000009040000012e5b67000905041500000000001e867e441ebd6c347b17b3c800615745c991b3f13f4f549c602ae40a04f0f99dc19130"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x82) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) r2 = socket(0x37, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x4, 0x0, 0x4}}, 0xfffffffffffffe98) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000000000080001"], 0xf8}}, 0x0) write$binfmt_aout(r3, 0x0, 0xad7) open$dir(&(0x7f0000000100)='./file0\x00', 0x200000, 0x84) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x280, 0xa, 0x500, 0x0, 0x0, 0x180, 0x2, 0x1, {0x0, 0x10, 0x3}, {0x24}, {0x0, 0x2000000}, {0x0, 0x100, 0x2}, 0x0, 0x180, 0x2, 0x1002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x18, 0x0, 0x1, 0x9}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 1.025719621s ago: executing program 3 (id=5146): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket(0x22, 0x0, 0x4) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc00000000000000410000000000000000000000000000000000000000000000625300000040"], 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x400000001ffffffd) listen(r0, 0xe539) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000740)=[{}, {}], 0x44) symlinkat(&(0x7f0000000040)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') removexattr(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)=@known='security.selinux\x00') r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$binfmt_script(r4, &(0x7f0000000900)={'#! ', './file0'}, 0xb) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) eventfd(0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) syz_open_procfs(0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f00000001c0)=0xff, 0x4) 438.676788ms ago: executing program 1 (id=5204): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x4, 0x1, 0x15, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2344aadd6d4dcdec00000000000000001200", [0x1]}) 0s ago: executing program 1 (id=5205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.894135][T29576] RSP: 002b:00007fc417bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1603.902535][T29576] RAX: ffffffffffffffda RBX: 00007fc416f35f80 RCX: 00007fc416d7dff9 [ 1603.910492][T29576] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1603.918446][T29576] RBP: 00007fc417bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1603.926425][T29576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1603.934379][T29576] R13: 0000000000000000 R14: 00007fc416f35f80 R15: 00007fc41705fa28 [ 1603.942364][T29576] [ 1603.945388][ C1] vkms_vblank_simulate: vblank timer overrun [ 1604.011789][T29553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1604.301086][T29553] team0: Port device team_slave_0 added [ 1604.321959][T29553] team0: Port device team_slave_1 added [ 1604.328441][T29178] Bluetooth: hci9: command tx timeout [ 1604.474574][T29590] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1604.537873][T29553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.558777][T29588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4999'. [ 1604.586296][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.681341][T29553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.777156][T29553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.802178][T29553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1604.872449][T29553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1605.070567][T29553] hsr_slave_0: entered promiscuous mode [ 1605.079970][T29553] hsr_slave_1: entered promiscuous mode [ 1605.129089][T29553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1605.160491][T29553] Cannot create hsr debugfs directory [ 1605.237895][T29596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.304348][T29596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.675164][T29553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.868263][T17947] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1605.899776][T29553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.923616][T29605] netlink: 'syz.0.5006': attribute type 4 has an invalid length. [ 1605.935314][T29605] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5006'. [ 1605.965524][T29605] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1606.033629][T29553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.084723][T17947] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1606.112588][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.130349][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.143495][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.154506][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.167649][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.178887][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.191043][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.195656][T29553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.200077][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.200109][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.235586][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.257327][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.286969][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.296965][T29608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5008'. [ 1606.342637][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.364596][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.402315][T29178] Bluetooth: hci9: command tx timeout [ 1606.426261][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.460108][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.486356][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.528282][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.540984][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.580590][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.603027][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.611354][T17947] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1606.621111][T17947] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1606.632890][T17947] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1606.642730][T17947] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1606.655861][T17947] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1606.669333][T17947] usb 5-1: Product: syz [ 1606.673520][T17947] usb 5-1: Manufacturer: syz [ 1606.678900][T17947] usb 5-1: SerialNumber: syz [ 1606.699309][T17947] usb 5-1: config 0 descriptor?? [ 1606.713361][T17947] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 1606.759178][T29553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1606.818608][T29553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1606.861622][T29553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1606.887399][T29553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1606.980310][T22141] usb 5-1: USB disconnect, device number 76 [ 1606.998469][T22141] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 1607.145722][T29553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.161589][T29553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.181473][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.188641][T16613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.233752][T29626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1607.277627][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.292860][T16613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.335577][T29553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.500227][T29553] veth0_vlan: entered promiscuous mode [ 1607.592680][T29553] veth1_vlan: entered promiscuous mode [ 1607.613509][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.653670][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.688978][T29553] veth0_macvtap: entered promiscuous mode [ 1607.705075][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1607.722470][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1607.750917][T29553] veth1_macvtap: entered promiscuous mode [ 1607.760850][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1607.779393][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.790495][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.800501][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.811048][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.820959][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.832727][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.844276][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.855280][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.865257][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.875772][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.877322][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1607.885674][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.897106][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1607.903253][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.911021][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1607.920436][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.939807][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.951187][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.961726][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.971608][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1607.982263][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.992224][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.003129][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.013164][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.023720][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.035492][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.047656][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.057686][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.068324][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.078483][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.089019][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.098995][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.109529][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.119616][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1608.130183][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.145689][T29553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.156076][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.167090][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.177092][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.187990][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.198132][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.217918][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.227945][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.241261][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.257019][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.267624][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.277561][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.288108][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.298105][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.308622][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.318616][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.329139][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.340779][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.354230][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.364159][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.374683][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.384689][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.395208][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.405315][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.416014][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.425948][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.436522][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.448209][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.460430][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.470396][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.480956][ T5234] Bluetooth: hci9: command tx timeout [ 1608.480972][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.496385][T29553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1608.506926][T29553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1608.519204][T29553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.535385][T29553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.546389][T29553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.558507][T29553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.567409][T29553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.941313][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.981992][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.116667][T29641] chnl_net:caif_netlink_parms(): no params data found [ 1609.153311][T24588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.166610][T24588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.464131][T29641] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.517705][T29641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.535375][T29641] bridge_slave_0: entered allmulticast mode [ 1609.544585][T29641] bridge_slave_0: entered promiscuous mode [ 1609.560412][T29641] bridge0: port 2(bridge_slave_1) entered blocking state [ 1609.586592][T29641] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.651318][T29641] bridge_slave_1: entered allmulticast mode [ 1609.659348][T29641] bridge_slave_1: entered promiscuous mode [ 1609.691871][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 1609.954308][T29641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.996915][T29178] Bluetooth: hci10: command tx timeout [ 1610.074151][T29641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1610.267682][T22141] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1610.314417][T29641] team0: Port device team_slave_0 added [ 1610.338185][T29641] team0: Port device team_slave_1 added [ 1610.481041][T22141] usb 5-1: config 226 has an invalid descriptor of length 123, skipping remainder of the config [ 1610.494038][T22141] usb 5-1: config 226 has 0 interfaces, different from the descriptor's value: 1 [ 1610.514414][T22141] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 1610.523749][T22141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.532067][T22141] usb 5-1: Product: syz [ 1610.536515][T22141] usb 5-1: Manufacturer: syz [ 1610.541124][T22141] usb 5-1: SerialNumber: syz [ 1610.565442][T29178] Bluetooth: hci9: command tx timeout [ 1610.633665][T29641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.670612][T29641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.715536][T29698] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1610.756441][T29641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.794918][T29641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.809798][T29641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1610.856381][T29641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1611.017200][T29696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1611.130425][T29641] hsr_slave_0: entered promiscuous mode [ 1611.180775][T29641] hsr_slave_1: entered promiscuous mode [ 1611.241365][T29641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1611.260308][T22141] usb 5-1: USB disconnect, device number 77 [ 1611.303470][T29641] Cannot create hsr debugfs directory [ 1611.900531][T29641] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.064082][T29641] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.085155][T29178] Bluetooth: hci10: command tx timeout [ 1612.363098][T29641] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.410710][T29713] FAULT_INJECTION: forcing a failure. [ 1612.410710][T29713] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.454164][T29713] CPU: 0 UID: 0 PID: 29713 Comm: syz.4.5030 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1612.464990][T29713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1612.475066][T29713] Call Trace: [ 1612.478359][T29713] [ 1612.481299][T29713] dump_stack_lvl+0x241/0x360 [ 1612.485997][T29713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1612.491211][T29713] ? __pfx__printk+0x10/0x10 [ 1612.495821][T29713] ? __kmalloc_noprof+0xb0/0x400 [ 1612.500784][T29713] ? __pfx___might_resched+0x10/0x10 [ 1612.506109][T29713] should_fail_ex+0x3b0/0x4e0 [ 1612.510828][T29713] ? do_handle_open+0x543/0x9a0 [ 1612.515709][T29713] should_failslab+0xac/0x100 [ 1612.520406][T29713] ? do_handle_open+0x543/0x9a0 [ 1612.525289][T29713] __kmalloc_noprof+0xd8/0x400 [ 1612.530091][T29713] do_handle_open+0x543/0x9a0 [ 1612.534871][T29713] ? __pfx_do_handle_open+0x10/0x10 [ 1612.540105][T29713] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1612.546117][T29713] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1612.552476][T29713] ? do_syscall_64+0x100/0x230 [ 1612.557266][T29713] ? do_syscall_64+0xb6/0x230 [ 1612.561963][T29713] do_syscall_64+0xf3/0x230 [ 1612.566484][T29713] ? clear_bhb_loop+0x35/0x90 [ 1612.571181][T29713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.577097][T29713] RIP: 0033:0x7fc416d7dff9 [ 1612.581525][T29713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1612.601159][T29713] RSP: 002b:00007fc417bdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1612.609602][T29713] RAX: ffffffffffffffda RBX: 00007fc416f35f80 RCX: 00007fc416d7dff9 [ 1612.617590][T29713] RDX: 00000000feffffff RSI: 00000000200021c0 RDI: 0000000000000004 [ 1612.625574][T29713] RBP: 00007fc417bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.633561][T29713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.641547][T29713] R13: 0000000000000000 R14: 00007fc416f35f80 R15: 00007fc41705fa28 [ 1612.649557][T29713] [ 1613.028016][T29641] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.621888][T29728] bond0: entered promiscuous mode [ 1613.677035][T29728] bond_slave_0: entered promiscuous mode [ 1613.727109][T29728] bond_slave_1: entered promiscuous mode [ 1614.038038][ T2482] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.126989][T29726] bond0: left promiscuous mode [ 1614.131793][T29726] bond_slave_0: left promiscuous mode [ 1614.156544][T29726] bond_slave_1: left promiscuous mode [ 1614.182917][T29641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1614.216522][T29178] Bluetooth: hci10: command tx timeout [ 1614.362311][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1614.368832][T29641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1614.394687][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1614.411260][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1614.439831][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1614.458826][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1614.468830][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1614.625187][ T2482] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.644787][T29641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1614.685964][T29641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1614.809854][T29744] netlink: 'syz.2.5043': attribute type 9 has an invalid length. [ 1614.837014][T29744] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.5043'. [ 1614.867927][ T2482] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.002311][ T2482] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.215547][T29641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.334749][T29641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.350584][T29753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.404293][T29753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.455327][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.462509][T16610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.504594][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.511869][T16610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.533760][ T2482] bridge_slave_1: left allmulticast mode [ 1615.539615][ T2482] bridge_slave_1: left promiscuous mode [ 1615.545291][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1615.575840][ T2482] bridge_slave_0: left allmulticast mode [ 1615.583232][ T2482] bridge_slave_0: left promiscuous mode [ 1615.629634][ T2482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1616.050844][T29760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1616.236346][T29178] Bluetooth: hci10: command tx timeout [ 1616.570154][T29178] Bluetooth: hci7: command tx timeout [ 1616.879882][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1616.896682][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.073719][T29767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.103014][T29767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.130798][T29767] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.5050'. [ 1617.663557][ T2482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.829500][ T2482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.898380][ T2482] bond0 (unregistering): Released all slaves [ 1618.264713][T29641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1618.336266][T29641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1618.402325][T29739] chnl_net:caif_netlink_parms(): no params data found [ 1618.647376][T29178] Bluetooth: hci7: command tx timeout [ 1618.882112][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1618.882131][ T29] audit: type=1326 audit(1728711137.367:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1618.950982][ T29] audit: type=1326 audit(1728711137.367:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1618.996623][T29641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.049886][ T29] audit: type=1326 audit(1728711137.367:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.072329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.079795][ T29] audit: type=1326 audit(1728711137.367:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.102217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.115836][ T29] audit: type=1326 audit(1728711137.367:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.138276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.147655][ T29] audit: type=1326 audit(1728711137.417:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.169987][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.178871][ T29] audit: type=1326 audit(1728711137.417:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.201297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.241328][ T29] audit: type=1326 audit(1728711137.417:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.264052][ T29] audit: type=1326 audit(1728711137.427:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.286418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1619.376847][ T29] audit: type=1326 audit(1728711137.427:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29793 comm="syz.2.5054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ec97dff9 code=0x7ffc0000 [ 1619.410492][T29739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.422072][T29739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1619.516980][T29739] bridge_slave_0: entered allmulticast mode [ 1619.524257][T29739] bridge_slave_0: entered promiscuous mode [ 1619.532745][T29739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.540174][T29739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1619.558070][T29739] bridge_slave_1: entered allmulticast mode [ 1619.565828][T29739] bridge_slave_1: entered promiscuous mode [ 1619.619803][T29811] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1619.644091][T29811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1619.929253][T29739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.035106][ T2482] hsr_slave_0: left promiscuous mode [ 1620.059162][ T2482] hsr_slave_1: left promiscuous mode [ 1620.114458][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.152036][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.179438][ T2482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.191676][ T2482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.214948][T29816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1620.284268][T29816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.300669][ T5234] Bluetooth: hci9: unexpected subevent 0x03 length: 244 > 9 [ 1620.325504][ T2482] veth1_macvtap: left promiscuous mode [ 1620.335305][ T2482] veth0_macvtap: left promiscuous mode [ 1620.342569][ T2482] veth1_vlan: left promiscuous mode [ 1620.348680][ T2482] veth0_vlan: left promiscuous mode [ 1620.716483][ T5234] Bluetooth: hci7: command tx timeout [ 1620.754119][T29819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1622.156689][ T2482] team0 (unregistering): Port device team_slave_1 removed [ 1622.312796][ T2482] team0 (unregistering): Port device team_slave_0 removed [ 1622.797135][ T5234] Bluetooth: hci7: command tx timeout [ 1623.420092][T29739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.441703][T29821] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1623.667609][T29840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.694636][T29840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.715003][T29840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.725000][T29840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.829361][T29739] team0: Port device team_slave_0 added [ 1623.867178][T29739] team0: Port device team_slave_1 added [ 1624.022450][T29739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1624.043557][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.083980][T29739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1624.218533][T29739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1624.298480][T29739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1624.331284][T29739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1624.344808][T29641] veth0_vlan: entered promiscuous mode [ 1624.544177][T29641] veth1_vlan: entered promiscuous mode [ 1624.577048][T29641] veth0_macvtap: entered promiscuous mode [ 1624.735298][T29863] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1624.747817][T29739] hsr_slave_0: entered promiscuous mode [ 1624.772573][T29739] hsr_slave_1: entered promiscuous mode [ 1624.838997][T29739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1624.854510][T29863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5068'. [ 1624.885688][T29739] Cannot create hsr debugfs directory [ 1624.933480][T29641] veth1_macvtap: entered promiscuous mode [ 1625.187763][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.255651][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.263928][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.305690][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.333604][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.361312][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.374661][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.385703][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.396777][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.409303][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.422819][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.435057][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.449984][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.459982][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.472279][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.483761][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.494417][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.504566][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.515180][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.530273][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.541672][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.554408][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.592890][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.602996][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.613555][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.623832][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.635331][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.649095][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.660628][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.671514][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.697072][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.707096][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1625.720429][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.732368][T29641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1625.742654][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.743428][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.766722][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.776695][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.787356][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.798097][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.812151][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.822241][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.833689][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.844814][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.858168][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.871167][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.882506][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.893232][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.904516][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1625.915458][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1625.971885][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.009314][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.041577][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.079644][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.104023][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.114619][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.125479][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.136416][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.167151][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.198884][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.279752][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.333113][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.406874][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.443588][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.490118][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.541642][T29641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1626.553021][T29641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1626.593598][T29641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1626.932067][T29641] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1626.994435][T29641] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.036473][T29641] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.046588][T29641] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.069206][T24586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1628.085064][T24586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1628.132615][T29895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5077'. [ 1628.174951][T29178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1628.187789][T29178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1628.197737][T29178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1628.210236][T29178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1628.217893][T29178] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1628.228244][T29178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1628.336872][T29901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1628.446835][T29901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1628.509538][T24585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.652475][T24585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.913773][T24585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.974479][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5081'. [ 1629.010184][T24588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.040442][T24588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1629.065701][T29739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1629.195181][T24585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.265153][T29739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1629.385042][T29739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1629.467637][T29923] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1629.490169][T29922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5082'. [ 1629.528615][T29739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1630.188629][T24585] bridge_slave_1: left allmulticast mode [ 1630.199925][T24585] bridge_slave_1: left promiscuous mode [ 1630.205724][T24585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.258164][T24585] bridge_slave_0: left allmulticast mode [ 1630.263863][T24585] bridge_slave_0: left promiscuous mode [ 1630.300403][T24585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.477513][ T5234] Bluetooth: hci4: command tx timeout [ 1632.191737][T24585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1632.217415][T24585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1632.232862][T24585] bond0 (unregistering): Released all slaves [ 1632.455226][T29902] chnl_net:caif_netlink_parms(): no params data found [ 1632.560532][ T5234] Bluetooth: hci4: command tx timeout [ 1633.074981][T29977] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1633.128982][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5094'. [ 1633.896857][T24585] hsr_slave_0: left promiscuous mode [ 1633.918860][T24585] hsr_slave_1: left promiscuous mode [ 1633.945634][T24585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1633.990965][T24585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1634.067742][T24585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1634.075270][T24585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1634.294534][T24585] veth1_macvtap: left promiscuous mode [ 1634.300375][T24585] veth0_macvtap: left promiscuous mode [ 1634.306082][T24585] veth0_vlan: left promiscuous mode [ 1634.646559][T29178] Bluetooth: hci4: command tx timeout [ 1634.845665][T30000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.904554][T30000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1635.288928][T29178] Bluetooth: hci2: command 0x0405 tx timeout [ 1636.479324][T30027] FAULT_INJECTION: forcing a failure. [ 1636.479324][T30027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.498088][T30027] CPU: 0 UID: 0 PID: 30027 Comm: syz.2.5097 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1636.508982][T30027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1636.519070][T30027] Call Trace: [ 1636.522369][T30027] [ 1636.525324][T30027] dump_stack_lvl+0x241/0x360 [ 1636.530030][T30027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.535256][T30027] ? __pfx__printk+0x10/0x10 [ 1636.539882][T30027] ? __pfx_lock_release+0x10/0x10 [ 1636.544942][T30027] should_fail_ex+0x3b0/0x4e0 [ 1636.549658][T30027] _copy_from_user+0x2f/0xe0 [ 1636.554276][T30027] copy_msghdr_from_user+0xae/0x680 [ 1636.559512][T30027] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1636.565361][T30027] __sys_sendmsg+0x22d/0x380 [ 1636.569998][T30027] ? __pfx___sys_sendmsg+0x10/0x10 [ 1636.575145][T30027] ? __pfx_vfs_write+0x10/0x10 [ 1636.579960][T30027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1636.586319][T30027] ? do_syscall_64+0x100/0x230 [ 1636.591111][T30027] ? do_syscall_64+0xb6/0x230 [ 1636.595812][T30027] do_syscall_64+0xf3/0x230 [ 1636.600344][T30027] ? clear_bhb_loop+0x35/0x90 [ 1636.605048][T30027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.610968][T30027] RIP: 0033:0x7f43ec97dff9 [ 1636.615402][T30027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.635036][T30027] RSP: 002b:00007f43ed6f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1636.643482][T30027] RAX: ffffffffffffffda RBX: 00007f43ecb35f80 RCX: 00007f43ec97dff9 [ 1636.651476][T30027] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000004 [ 1636.659466][T30027] RBP: 00007f43ed6f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.667458][T30027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.675455][T30027] R13: 0000000000000000 R14: 00007f43ecb35f80 R15: 00007f43ecc5fa28 [ 1636.683470][T30027] [ 1636.716638][ T5234] Bluetooth: hci4: command tx timeout [ 1636.882906][T30036] dccp_xmit_packet: Payload too large (65475) for featneg. [ 1636.956547][T24585] team0 (unregistering): Port device team_slave_1 removed [ 1637.166645][T24585] team0 (unregistering): Port device team_slave_0 removed [ 1638.482948][T30049] usb usb6: usbfs: process 30049 (syz.2.5099) did not claim interface 0 before use [ 1638.515318][T29902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.523448][T29902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.566986][T29902] bridge_slave_0: entered allmulticast mode [ 1638.588425][T29902] bridge_slave_0: entered promiscuous mode [ 1638.677858][T29902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.711906][T29902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.742191][T29902] bridge_slave_1: entered allmulticast mode [ 1638.763748][T29902] bridge_slave_1: entered promiscuous mode [ 1638.923307][T30059] FAULT_INJECTION: forcing a failure. [ 1638.923307][T30059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1638.942835][T30059] CPU: 1 UID: 0 PID: 30059 Comm: syz.1.5102 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1638.953638][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1638.963701][T30059] Call Trace: [ 1638.966987][T30059] [ 1638.969925][T30059] dump_stack_lvl+0x241/0x360 [ 1638.974606][T30059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1638.979799][T30059] ? __pfx__printk+0x10/0x10 [ 1638.984392][T30059] ? __pfx_lock_release+0x10/0x10 [ 1638.989426][T30059] ? __lock_acquire+0x1384/0x2050 [ 1638.994456][T30059] should_fail_ex+0x3b0/0x4e0 [ 1638.999145][T30059] _copy_from_user+0x2f/0xe0 [ 1639.003742][T30059] io_submit_one+0xc1/0x18a0 [ 1639.008340][T30059] ? __pfx_io_submit_one+0x10/0x10 [ 1639.013449][T30059] ? __might_fault+0xaa/0x120 [ 1639.018120][T30059] ? __pfx_lock_release+0x10/0x10 [ 1639.023147][T30059] ? lookup_ioctx+0x94/0x6a0 [ 1639.027734][T30059] ? __might_fault+0xaa/0x120 [ 1639.032402][T30059] ? __might_fault+0xc6/0x120 [ 1639.037074][T30059] __se_sys_io_submit+0x179/0x2f0 [ 1639.042106][T30059] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1639.047651][T30059] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1639.053633][T30059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1639.059967][T30059] ? do_syscall_64+0x100/0x230 [ 1639.064738][T30059] ? do_syscall_64+0xb6/0x230 [ 1639.069413][T30059] do_syscall_64+0xf3/0x230 [ 1639.073914][T30059] ? clear_bhb_loop+0x35/0x90 [ 1639.078589][T30059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.084480][T30059] RIP: 0033:0x7f6e1df7dff9 [ 1639.088890][T30059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1639.108491][T30059] RSP: 002b:00007f6e1eca8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1639.116905][T30059] RAX: ffffffffffffffda RBX: 00007f6e1e135f80 RCX: 00007f6e1df7dff9 [ 1639.124869][T30059] RDX: 00000000200005c0 RSI: 0000000000000002 RDI: 00007f6e1ec87000 [ 1639.132834][T30059] RBP: 00007f6e1eca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1639.140798][T30059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1639.148811][T30059] R13: 0000000000000000 R14: 00007f6e1e135f80 R15: 00007f6e1e25fa28 [ 1639.156787][T30059] [ 1639.159903][ C1] vkms_vblank_simulate: vblank timer overrun [ 1639.180026][T29902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.201204][T29739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.249166][T29902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.414545][T29902] team0: Port device team_slave_0 added [ 1639.540594][T29739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.600793][T30078] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1639.622102][T30079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.669593][T30069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5103'. [ 1639.712158][T30079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.775020][T29902] team0: Port device team_slave_1 added [ 1639.898673][ T2482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.905775][ T2482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1639.978129][T29902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.029527][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.063889][T29902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.121991][ T2482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.129166][ T2482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.233415][T29902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.245825][T29902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.274564][T29902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.474732][T29902] hsr_slave_0: entered promiscuous mode [ 1640.527170][T30090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.540602][T29902] hsr_slave_1: entered promiscuous mode [ 1640.572137][T29902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.580682][T30090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.602403][T29902] Cannot create hsr debugfs directory [ 1640.696349][T30090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1640.757590][T30096] FAULT_INJECTION: forcing a failure. [ 1640.757590][T30096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1640.804565][T30090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.843914][T29739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1640.852382][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5107'. [ 1640.861490][T30096] CPU: 0 UID: 0 PID: 30096 Comm: syz.3.5109 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1640.872243][T30096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1640.882315][T30096] Call Trace: [ 1640.885585][T30096] [ 1640.888552][T30096] dump_stack_lvl+0x241/0x360 [ 1640.893220][T30096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1640.898406][T30096] ? __pfx__printk+0x10/0x10 [ 1640.903006][T30096] ? __pfx_lock_release+0x10/0x10 [ 1640.908053][T30096] ? aa_label_sk_perm+0x4f3/0x6c0 [ 1640.913068][T30096] should_fail_ex+0x3b0/0x4e0 [ 1640.917741][T30096] _copy_from_iter+0x1ed/0x1d60 [ 1640.922588][T30096] ? __pfx__copy_from_iter+0x10/0x10 [ 1640.927887][T30096] bcm_sendmsg+0x157/0x7a0 [ 1640.932295][T30096] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1640.937222][T30096] ? aa_sock_msg_perm+0x91/0x160 [ 1640.942146][T30096] ? __pfx_bcm_sendmsg+0x10/0x10 [ 1640.947070][T30096] __sock_sendmsg+0x221/0x270 [ 1640.951740][T30096] ____sys_sendmsg+0x52a/0x7e0 [ 1640.956494][T30096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1640.961802][T30096] __sys_sendmsg+0x292/0x380 [ 1640.966381][T30096] ? __pfx___sys_sendmsg+0x10/0x10 [ 1640.971482][T30096] ? __pfx_vfs_write+0x10/0x10 [ 1640.976261][T30096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1640.982585][T30096] ? do_syscall_64+0x100/0x230 [ 1640.987336][T30096] ? do_syscall_64+0xb6/0x230 [ 1640.992005][T30096] do_syscall_64+0xf3/0x230 [ 1640.996498][T30096] ? clear_bhb_loop+0x35/0x90 [ 1641.001164][T30096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.007053][T30096] RIP: 0033:0x7fef9a17dff9 [ 1641.011456][T30096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.031053][T30096] RSP: 002b:00007fef9b047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.039459][T30096] RAX: ffffffffffffffda RBX: 00007fef9a335f80 RCX: 00007fef9a17dff9 [ 1641.047435][T30096] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 1641.055391][T30096] RBP: 00007fef9b047090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.063351][T30096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.071310][T30096] R13: 0000000000000000 R14: 00007fef9a335f80 R15: 00007fef9a45fa28 [ 1641.079278][T30096] [ 1641.133354][T29739] veth0_vlan: entered promiscuous mode [ 1641.143125][T29739] veth1_vlan: entered promiscuous mode [ 1641.181907][T29739] veth0_macvtap: entered promiscuous mode [ 1641.201611][T29739] veth1_macvtap: entered promiscuous mode [ 1641.320495][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.334123][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.366739][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.399412][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.427145][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.452133][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.477625][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.498405][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.536268][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.573188][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.606270][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.650114][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.679384][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.719136][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.756801][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.779504][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.799839][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.822719][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.848879][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.871970][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.891882][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.912805][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.935854][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.959489][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.980674][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.002726][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.023208][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.051649][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.084262][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.110074][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.141884][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.163458][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.207926][T29739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.275705][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.289803][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.321164][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.345625][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.367780][T30114] i2c i2c-0: Invalid block write size 252 [ 1642.379083][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.400631][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.423940][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.454882][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.472707][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.503096][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.533822][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.575576][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.600750][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.622770][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.649988][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.671848][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.692254][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.712849][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.733788][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.760560][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.781498][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.805649][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.831862][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.857648][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.879455][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.902403][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.922770][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.942465][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.965477][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.983878][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.003995][T29739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1643.022561][T29739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1643.044410][T29739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1643.100931][T30113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5110'. [ 1643.138438][T30114] netlink: 'syz.3.5110': attribute type 21 has an invalid length. [ 1643.160712][T30114] IPv6: NLM_F_CREATE should be specified when creating new route [ 1643.177980][T30114] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1643.185207][T30114] IPv6: NLM_F_CREATE should be set when creating new route [ 1643.192471][T30114] IPv6: NLM_F_CREATE should be set when creating new route [ 1643.199693][T30114] IPv6: NLM_F_CREATE should be set when creating new route [ 1643.321710][T29739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.353586][T29739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.396107][T29739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.430973][T29739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.687300][T30125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.725258][T30125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.138233][T24585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.184096][T24585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.272946][T16613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1644.328659][T16613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.515755][T29902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1644.579021][T29902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1644.643598][T29902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1644.697856][T29902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1644.815482][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1644.852929][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1644.903936][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1644.937799][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1644.977690][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.021670][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.062572][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.108753][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.221641][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.279276][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.287510][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.294931][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.302439][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.312053][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.321213][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.328867][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.336401][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.343818][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.352398][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.363267][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.371436][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.380193][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.388226][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.396395][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.404311][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.414287][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.423643][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.431262][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.441022][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.448860][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.456352][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.463794][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.471404][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.473847][T30157] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1645.479180][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.479212][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.503931][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.516051][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.528465][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.590596][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.598432][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.606091][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.616427][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.624053][T17947] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 1645.647709][T17947] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1645.694228][T29902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.864307][T29902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.924613][T30157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1646.092472][T22425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.099625][T22425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1646.129452][T22425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.136607][T22425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.420946][T30167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1646.563774][T30167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1646.763846][T29902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.941654][T29902] veth0_vlan: entered promiscuous mode [ 1646.974750][T29902] veth1_vlan: entered promiscuous mode [ 1647.113991][T29902] veth0_macvtap: entered promiscuous mode [ 1647.161448][T29902] veth1_macvtap: entered promiscuous mode [ 1647.230524][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.306399][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.336414][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.367518][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.416001][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.484269][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.504162][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.566001][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.576860][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.602633][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.615304][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.655149][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.670495][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.689732][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.699747][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.714484][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.727919][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.741248][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.836263][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.857633][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.891340][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.973396][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.026942][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.086348][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.143849][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.279990][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.305944][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.326298][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.336144][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.366281][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.376137][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.391891][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.403276][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1648.454670][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.541748][T29902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.720259][T30188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 1648.775663][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.900557][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.916246][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.926884][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.936840][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.948924][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.958870][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.969416][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.979361][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.989861][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.001795][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.014119][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.024021][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.034529][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.044667][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.055263][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.065311][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.075822][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.085731][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.098316][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.110103][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.121122][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.131149][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.141637][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.151572][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.162126][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.176245][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.186834][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.200459][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.213159][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.223097][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.233674][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.243908][T29902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1649.254431][T29902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1649.266043][T29902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.281107][T29902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.289908][T29902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.298704][T29902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.311657][T29902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.416480][T14666] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1649.636446][T14666] usb 5-1: Using ep0 maxpacket: 32 [ 1649.800965][T14666] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.801010][T14666] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1649.801051][T14666] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1649.801076][T14666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.802909][T14666] usb 5-1: config 0 descriptor?? [ 1649.808642][T14666] hub 5-1:0.0: bad descriptor, ignoring hub [ 1649.808672][T14666] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1649.810203][T14666] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1649.944459][T16613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1649.944481][T16613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.249922][T24588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.249949][T24588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.662616][T30232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.735982][T30232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.820777][T30232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5125'. [ 1651.156585][T12042] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1651.316914][T12042] usb 4-1: Using ep0 maxpacket: 16 [ 1651.338601][T12042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.355623][T12042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.368574][T12042] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1651.384778][T12042] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1651.395228][T12042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.408882][T12042] usb 4-1: config 0 descriptor?? [ 1651.650113][T30260] geneve2: entered promiscuous mode [ 1651.769549][T30262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.783051][T30262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.061479][T12042] usbhid 4-1:0.0: can't add hid device: -71 [ 1652.094367][T12042] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1652.123513][T12042] usb 4-1: USB disconnect, device number 87 [ 1652.206869][T30264] FAULT_INJECTION: forcing a failure. [ 1652.206869][T30264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.223232][T30264] CPU: 0 UID: 0 PID: 30264 Comm: syz.1.5133 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1652.234032][T30264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1652.244111][T30264] Call Trace: [ 1652.247412][T30264] [ 1652.250357][T30264] dump_stack_lvl+0x241/0x360 [ 1652.255058][T30264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1652.260283][T30264] ? __pfx__printk+0x10/0x10 [ 1652.264902][T30264] ? __pfx_lock_release+0x10/0x10 [ 1652.269960][T30264] should_fail_ex+0x3b0/0x4e0 [ 1652.274675][T30264] _copy_from_user+0x2f/0xe0 [ 1652.279291][T30264] copy_msghdr_from_user+0xae/0x680 [ 1652.284518][T30264] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1652.290367][T30264] __sys_sendmsg+0x22d/0x380 [ 1652.294982][T30264] ? __pfx___sys_sendmsg+0x10/0x10 [ 1652.300129][T30264] ? __pfx_vfs_write+0x10/0x10 [ 1652.304934][T30264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1652.311293][T30264] ? do_syscall_64+0x100/0x230 [ 1652.316095][T30264] ? do_syscall_64+0xb6/0x230 [ 1652.320800][T30264] do_syscall_64+0xf3/0x230 [ 1652.325326][T30264] ? clear_bhb_loop+0x35/0x90 [ 1652.330022][T30264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.335945][T30264] RIP: 0033:0x7f6e1df7dff9 [ 1652.340376][T30264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1652.360007][T30264] RSP: 002b:00007f6e1eca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1652.368451][T30264] RAX: ffffffffffffffda RBX: 00007f6e1e135f80 RCX: 00007f6e1df7dff9 [ 1652.376446][T30264] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 1652.384438][T30264] RBP: 00007f6e1eca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.392425][T30264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.400421][T30264] R13: 0000000000000000 R14: 00007f6e1e135f80 R15: 00007f6e1e25fa28 [ 1652.408427][T30264] [ 1652.420296][T14666] usb 5-1: USB disconnect, device number 78 [ 1652.424433][T30262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.439800][T30262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.509669][T30266] syzkaller1: entered promiscuous mode [ 1652.516111][T30266] syzkaller1: entered allmulticast mode [ 1652.585297][T30269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1652.650272][T30269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1652.718787][T30271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1652.725277][T30271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1652.757265][T30273] openvswitch: netlink: Actions may not be safe on all matching packets [ 1652.776472][T17953] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1652.786738][T30273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1652.794029][T30273] IPv6: NLM_F_CREATE should be set when creating new route [ 1652.959578][T17953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.027835][T17953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.079116][T17953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1653.119682][T17953] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 1653.129574][T17953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.177276][T17953] usb 5-1: config 0 descriptor?? [ 1653.465912][T30289] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1654.704739][T30307] FAULT_INJECTION: forcing a failure. [ 1654.704739][T30307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.837408][T30307] CPU: 1 UID: 0 PID: 30307 Comm: syz.0.5144 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1654.848229][T30307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1654.858314][T30307] Call Trace: [ 1654.861616][T30307] [ 1654.864554][T30307] dump_stack_lvl+0x241/0x360 [ 1654.869265][T30307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1654.874465][T30307] ? __pfx__printk+0x10/0x10 [ 1654.879088][T30307] ? snprintf+0xda/0x120 [ 1654.883330][T30307] should_fail_ex+0x3b0/0x4e0 [ 1654.888040][T30307] _copy_to_user+0x2f/0xb0 [ 1654.892494][T30307] simple_read_from_buffer+0xca/0x150 [ 1654.897897][T30307] proc_fail_nth_read+0x1e9/0x250 [ 1654.902960][T30307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1654.908537][T30307] ? rw_verify_area+0x55e/0x6f0 [ 1654.913416][T30307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1654.918977][T30307] vfs_read+0x201/0xbc0 [ 1654.923143][T30307] ? __pfx_lock_release+0x10/0x10 [ 1654.928185][T30307] ? __pfx_vfs_read+0x10/0x10 [ 1654.932875][T30307] ? __fget_files+0x3f3/0x470 [ 1654.937588][T30307] ? fdget_pos+0x24e/0x320 [ 1654.942012][T30307] ksys_read+0x183/0x2b0 [ 1654.946270][T30307] ? __pfx_ksys_read+0x10/0x10 [ 1654.951042][T30307] ? do_syscall_64+0x100/0x230 [ 1654.955810][T30307] ? do_syscall_64+0xb6/0x230 [ 1654.960487][T30307] do_syscall_64+0xf3/0x230 [ 1654.964993][T30307] ? clear_bhb_loop+0x35/0x90 [ 1654.969670][T30307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.975568][T30307] RIP: 0033:0x7f7b7bb7ca3c [ 1654.979981][T30307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1654.999591][T30307] RSP: 002b:00007f7b7c9df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1655.008011][T30307] RAX: ffffffffffffffda RBX: 00007f7b7bd35f80 RCX: 00007f7b7bb7ca3c [ 1655.015979][T30307] RDX: 000000000000000f RSI: 00007f7b7c9df0a0 RDI: 0000000000000004 [ 1655.023946][T30307] RBP: 00007f7b7c9df090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.031919][T30307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.039890][T30307] R13: 0000000000000000 R14: 00007f7b7bd35f80 R15: 00007f7b7be5fa28 [ 1655.047871][T30307] [ 1655.051033][ C1] vkms_vblank_simulate: vblank timer overrun [ 1655.183526][T24588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.316376][T30299] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 1655.317602][T30312] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1655.331614][T30312] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1655.700814][T24588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.715142][T29178] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1655.731287][T29178] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1655.739777][T29178] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1655.748805][T29178] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1655.763178][T29178] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1655.774573][T29178] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1656.461086][T24588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.574981][T30324] netlink: 'syz.1.5150': attribute type 27 has an invalid length. [ 1656.823750][T30324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.831285][T30324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.329486][T30327] fuse: Bad value for 'fd' [ 1657.345498][T30324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.345529][T30327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1657.380999][T30324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.399136][T30327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1657.624329][T30324] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.634933][T30324] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.645700][T30324] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.655629][T30324] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.790246][T24588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.819051][T30326] tipc: Started in network mode [ 1657.824092][T30326] tipc: Node identity 7f000001, cluster identity 4711 [ 1657.857011][T30326] tipc: Enabled bearer , priority 10 [ 1657.924110][ T5234] Bluetooth: hci10: command tx timeout [ 1658.173793][T24588] bridge_slave_1: left allmulticast mode [ 1658.183733][T24588] bridge_slave_1: left promiscuous mode [ 1658.204077][T24588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.231883][T24588] bridge_slave_0: left allmulticast mode [ 1658.259585][T24588] bridge_slave_0: left promiscuous mode [ 1658.285757][T24588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.487526][T17953] usbhid 5-1:0.0: can't add hid device: -32 [ 1658.497222][T17953] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1658.675340][T30341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1658.727519][T30341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1658.769518][T30339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1658.988111][T14666] tipc: Node number set to 2130706433 [ 1659.874492][T24588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.900932][T24588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.913842][T24588] bond0 (unregistering): Released all slaves [ 1659.982527][T30341] hsr0: entered promiscuous mode [ 1660.007150][ T5234] Bluetooth: hci10: command tx timeout [ 1660.011378][T30341] hsr0: left promiscuous mode [ 1660.301431][T30321] chnl_net:caif_netlink_parms(): no params data found [ 1660.698372][T30321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.709220][T30321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.727128][T30321] bridge_slave_0: entered allmulticast mode [ 1660.735783][T30321] bridge_slave_0: entered promiscuous mode [ 1660.788331][T30321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.797906][T30321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.805394][T30321] bridge_slave_1: entered allmulticast mode [ 1660.897600][T30321] bridge_slave_1: entered promiscuous mode [ 1661.023407][T24588] hsr_slave_0: left promiscuous mode [ 1661.030358][T24588] hsr_slave_1: left promiscuous mode [ 1661.037189][T24588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1661.044668][T24588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.106506][T24588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1661.140282][T24588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.213695][T24588] veth1_macvtap: left promiscuous mode [ 1661.263195][T24588] veth0_macvtap: left promiscuous mode [ 1661.286353][T24588] veth1_vlan: left promiscuous mode [ 1661.291703][T24588] veth0_vlan: left promiscuous mode [ 1661.520539][T30389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1661.903040][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1661.903060][ T29] audit: type=1326 audit(1728711180.387:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1661.947945][ T29] audit: type=1326 audit(1728711180.437:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1661.970395][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.059776][ T29] audit: type=1326 audit(1728711180.437:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.076517][ T5234] Bluetooth: hci10: command tx timeout [ 1662.161076][ T29] audit: type=1326 audit(1728711180.437:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.183443][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.208889][ T29] audit: type=1326 audit(1728711180.437:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.370805][ T29] audit: type=1326 audit(1728711180.437:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.437474][T30402] FAULT_INJECTION: forcing a failure. [ 1662.437474][T30402] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.513578][T30402] CPU: 1 UID: 0 PID: 30402 Comm: syz.2.5170 Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1662.524410][T30402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1662.534495][T30402] Call Trace: [ 1662.537792][T30402] [ 1662.540743][T30402] dump_stack_lvl+0x241/0x360 [ 1662.545447][T30402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1662.550675][T30402] ? __pfx__printk+0x10/0x10 [ 1662.555294][T30402] ? fs_reclaim_acquire+0x93/0x130 [ 1662.556075][ T29] audit: type=1326 audit(1728711180.437:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.560406][T30402] ? __pfx___might_resched+0x10/0x10 [ 1662.560438][T30402] should_fail_ex+0x3b0/0x4e0 [ 1662.560469][T30402] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1662.586313][ T29] audit: type=1326 audit(1728711180.437:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.588025][T30402] should_failslab+0xac/0x100 [ 1662.588056][T30402] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1662.592770][ T29] audit: type=1326 audit(1728711180.437:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30394 comm="syz.0.5169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f7b7bb7dff9 code=0x7ffc0000 [ 1662.598403][T30402] __kmalloc_noprof+0xd8/0x400 [ 1662.598435][T30402] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1662.598468][T30402] tomoyo_path_number_perm+0x23a/0x880 [ 1662.669266][T30402] ? tomoyo_path_number_perm+0x208/0x880 [ 1662.674912][T30402] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1662.680918][T30402] ? __fget_files+0x29/0x470 [ 1662.685505][T30402] ? __fget_files+0x3f3/0x470 [ 1662.690188][T30402] security_file_ioctl+0xc6/0x2a0 [ 1662.695216][T30402] __se_sys_ioctl+0x47/0x170 [ 1662.699816][T30402] do_syscall_64+0xf3/0x230 [ 1662.704325][T30402] ? clear_bhb_loop+0x35/0x90 [ 1662.708998][T30402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.714898][T30402] RIP: 0033:0x7f43ec97dff9 [ 1662.719329][T30402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1662.738935][T30402] RSP: 002b:00007f43ed6f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1662.747350][T30402] RAX: ffffffffffffffda RBX: 00007f43ecb35f80 RCX: 00007f43ec97dff9 [ 1662.755317][T30402] RDX: 0000000020000140 RSI: 00000000c0e85667 RDI: 0000000000000003 [ 1662.763283][T30402] RBP: 00007f43ed6f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.771251][T30402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1662.779218][T30402] R13: 0000000000000000 R14: 00007f43ecb35f80 R15: 00007f43ecc5fa28 [ 1662.787198][T30402] [ 1662.790231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1662.807089][T30402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1663.333450][T30408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1663.397316][T30408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1663.715163][T29178] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1663.727046][T29178] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1663.736767][T29178] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1663.747999][T29178] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1663.757885][T29178] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1663.765165][T29178] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1664.156322][ T5234] Bluetooth: hci10: command tx timeout [ 1664.274093][T30414] program syz.2.5175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1665.119410][T24588] team0 (unregistering): Port device team_slave_1 removed [ 1665.195910][T30422] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1665.278895][T24588] team0 (unregistering): Port device team_slave_0 removed [ 1665.393993][T30423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'. [ 1665.930544][ T5234] Bluetooth: hci11: command tx timeout [ 1666.004522][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 1667.039309][T30321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.204174][T30321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.433143][T30321] team0: Port device team_slave_0 added [ 1667.469969][T30321] team0: Port device team_slave_1 added [ 1667.650264][T30321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.658907][T30321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.690177][T30321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.723621][T30321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.798686][T30321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.971879][T30321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.997329][T29178] Bluetooth: hci11: command tx timeout [ 1668.290249][T30446] netlink: 'syz.1.5181': attribute type 4 has an invalid length. [ 1668.299512][T30446] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5181'. [ 1668.337367][T30446] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1668.548731][T30321] hsr_slave_0: entered promiscuous mode [ 1668.569056][T30321] hsr_slave_1: entered promiscuous mode [ 1668.599201][T30321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.610031][T30321] Cannot create hsr debugfs directory [ 1668.969034][T24588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.006143][T30410] chnl_net:caif_netlink_parms(): no params data found [ 1669.057406][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.067995][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.329403][T24588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.399456][T30458] macvlan2: entered allmulticast mode [ 1669.404879][T30458] mac80211_hwsim hwsim343 wlan0: entered allmulticast mode [ 1669.432428][T30458] mac80211_hwsim hwsim343 wlan0: left allmulticast mode [ 1669.488952][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1669.500924][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1669.530152][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1669.557041][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1669.564623][ T5234] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1669.578456][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1669.730409][T24588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.886129][T24588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.989389][T30410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.026898][T30410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.037078][T30410] bridge_slave_0: entered allmulticast mode [ 1670.061073][T30410] bridge_slave_0: entered promiscuous mode [ 1670.081460][ T5234] Bluetooth: hci11: command tx timeout [ 1670.203006][T30410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.212419][T30410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.225196][T30410] bridge_slave_1: entered allmulticast mode [ 1670.232624][T30410] bridge_slave_1: entered promiscuous mode [ 1670.431724][T30410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.511200][T30410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.192618][T30410] team0: Port device team_slave_0 added [ 1671.210260][T30410] team0: Port device team_slave_1 added [ 1671.427839][T30410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.434847][T30410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.464814][T30410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.482210][T30410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.489376][T30410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.515293][ C1] vkms_vblank_simulate: vblank timer overrun [ 1671.525609][T30410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.540381][T24588] bridge_slave_1: left allmulticast mode [ 1671.546052][T24588] bridge_slave_1: left promiscuous mode [ 1671.553841][T24588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.565508][T24588] bridge_slave_0: left allmulticast mode [ 1671.573298][T24588] bridge_slave_0: left promiscuous mode [ 1671.581152][T24588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.688225][ T5234] Bluetooth: hci9: command tx timeout [ 1671.832800][T30503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.855234][T30503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1672.156457][ T5234] Bluetooth: hci11: command tx timeout [ 1672.268683][T24588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1672.294993][T24588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1672.313369][T24588] bond0 (unregistering): Released all slaves [ 1672.350169][T24588] bond1 (unregistering): Released all slaves [ 1672.382855][T30463] chnl_net:caif_netlink_parms(): no params data found [ 1672.569186][T24588] tipc: Disabling bearer [ 1672.588045][T24588] tipc: Left network mode [ 1672.995958][T30321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1673.075866][T30410] hsr_slave_0: entered promiscuous mode [ 1673.095210][T30519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5191'. [ 1673.117669][T30410] hsr_slave_1: entered promiscuous mode [ 1673.138004][T30410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1673.149385][T30410] Cannot create hsr debugfs directory [ 1673.259153][T30321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1673.451262][T30463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.459826][T30463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.515192][T30463] bridge_slave_0: entered allmulticast mode [ 1673.542802][T30463] bridge_slave_0: entered promiscuous mode [ 1673.583363][T30321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1673.664198][T30463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.753989][T30463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.761840][ T5234] Bluetooth: hci9: command tx timeout [ 1673.797830][T30463] bridge_slave_1: entered allmulticast mode [ 1673.848249][T30463] bridge_slave_1: entered promiscuous mode [ 1673.945973][T30321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1674.078349][T24588] hsr_slave_0: left promiscuous mode [ 1674.110523][T24588] hsr_slave_1: left promiscuous mode [ 1674.152534][T24588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.289622][T24588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.377672][T24588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.386356][T24588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.534609][T24588] veth1_macvtap: left promiscuous mode [ 1674.551773][T24588] veth0_macvtap: left promiscuous mode [ 1674.568636][T24588] veth1_vlan: left promiscuous mode [ 1674.584130][T24588] veth0_vlan: left promiscuous mode [ 1675.846038][T29178] Bluetooth: hci9: command tx timeout [ 1675.988607][T24588] team0 (unregistering): Port device team_slave_1 removed [ 1676.068563][T24588] team0 (unregistering): Port device team_slave_0 removed [ 1676.236488][T29178] Bluetooth: hci5: command 0x0406 tx timeout [ 1677.158359][T30463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.199114][T30463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.373387][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1677.392987][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1677.405833][T30463] team0: Port device team_slave_0 added [ 1677.449373][T30463] team0: Port device team_slave_1 added [ 1677.659043][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1677.670593][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1677.733328][T30463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.748219][T30463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1677.917233][ T5234] Bluetooth: hci9: command tx timeout [ 1677.933712][T30463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1678.053603][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1678.168993][T30548] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5197'. [ 1678.356057][T30410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.480652][T30463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1678.521455][T30463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1678.547428][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.605285][T30463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1678.711854][T30321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1678.940863][T30410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.141899][T30410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.185664][T30463] hsr_slave_0: entered promiscuous mode [ 1679.227930][T30463] hsr_slave_1: entered promiscuous mode [ 1679.256481][T30463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1679.267248][T30463] Cannot create hsr debugfs directory [ 1679.275770][T30321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1679.360750][T30410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.450478][T16613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.457599][T16613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1679.545624][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.552750][T16613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.952944][T30321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1680.588836][T30410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1680.628610][T30410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1680.729309][T30410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1680.788478][T30410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1681.013371][T30321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.321698][T30410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1681.490004][T30321] veth0_vlan: entered promiscuous mode [ 1681.569209][T30410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1681.615459][T24586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.622644][T24586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1681.665461][T30321] veth1_vlan: entered promiscuous mode [ 1681.759351][T16613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.766488][T16613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.829771][T30463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1681.881251][T30463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1681.963314][T30463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1682.029999][T30463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1682.062949][T30321] veth0_macvtap: entered promiscuous mode [ 1682.098325][T30321] veth1_macvtap: entered promiscuous mode [ 1682.192710][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.216363][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.238256][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.266221][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.296387][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.336400][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.349589][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.352779][T30621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.377043][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.397164][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.408255][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.418513][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.436998][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.456770][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.487305][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.506319][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.526375][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.545901][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.563557][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.616658][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.645841][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.666134][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.700436][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.743283][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.760711][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.797335][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.817184][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.849923][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.889615][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.906334][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1682.918541][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.934791][T30621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1682.948531][T30321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.033959][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.055788][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.080532][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.118108][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.129213][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.140923][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.152323][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.163310][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.173830][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.184437][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.198881][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.210277][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.221002][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.231867][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.242125][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.253981][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.279866][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.306395][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.329796][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340773][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.340795][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340813][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.340830][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340845][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.340862][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340877][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.340899][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340914][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.340931][T30321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1683.340946][T30321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1683.343003][T30321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.478881][T30321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.478907][T30321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.478925][T30321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.478941][T30321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.741361][T30463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.918345][T30463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.004545][T30410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.098009][T24586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.105083][T24586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.215815][T22425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.222936][T22425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1684.235231][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.245436][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.557505][T16613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.609053][T16613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.960597][T30410] veth0_vlan: entered promiscuous mode [ 1684.981829][T30463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1685.015466][T30410] veth1_vlan: entered promiscuous mode [ 1685.112272][T30463] veth0_vlan: entered promiscuous mode [ 1685.192072][T30463] veth1_vlan: entered promiscuous mode [ 1685.229867][T30410] veth0_macvtap: entered promiscuous mode [ 1685.239404][T30410] veth1_macvtap: entered promiscuous mode [ 1685.261827][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.275998][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.291311][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.301946][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.311998][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.323458][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.333858][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.345892][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.357000][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.368127][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.378236][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.388804][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.398761][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.414181][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.424145][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.434758][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.444985][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.457067][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.468481][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.479090][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.489056][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.499576][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.509444][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.520324][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.530245][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.544291][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.586372][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.617057][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.627064][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.637857][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.649414][T30410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.662575][T30410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.675320][T30410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.737483][T30463] veth0_macvtap: entered promiscuous mode [ 1685.747314][T30463] veth1_macvtap: entered promiscuous mode [ 1685.785647][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.807572][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.833689][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.872294][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.912814][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.948681][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.950809][T18692] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1685.961835][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.004757][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.035736][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.049055][T18692] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1686.063161][T18692] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1686.086429][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.086464][T18692] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1686.107911][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.120390][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.131744][T18692] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1686.138997][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.153443][T18692] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1686.162237][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.175017][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.185950][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.197166][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.208177][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.220885][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.233180][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.244603][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.256284][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.269762][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.282280][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.292320][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.302942][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.313952][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.326816][ T30] INFO: task syz.1.4798:28594 blocked for more than 143 seconds. [ 1686.339982][ T30] Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1686.374895][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.397960][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1686.477165][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.488265][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.508229][T18692] Bluetooth: hci1: command 0x0406 tx timeout [ 1686.517473][ T30] task:syz.1.4798 state:D stack:23168 pid:28594 tgid:28592 ppid:28366 flags:0x00000004 [ 1686.530249][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.540946][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.577206][ T30] Call Trace: [ 1686.580561][ T30] [ 1686.583515][ T30] __schedule+0x1895/0x4b30 [ 1686.599215][T30463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1686.636528][ T30] ? __pfx___schedule+0x10/0x10 [ 1686.638443][T30463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.655712][ T30] ? __pfx_lock_release+0x10/0x10 [ 1686.658590][T30463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1686.692914][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1686.714396][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1686.766418][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1686.771611][ T30] ? schedule+0x90/0x320 [ 1686.785916][ T30] schedule+0x14b/0x320 [ 1686.792804][ T30] schedule_preempt_disabled+0x13/0x30 [ 1686.817848][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1686.824655][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1686.866624][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1686.875737][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1686.884730][ T30] ? __might_fault+0xaa/0x120 [ 1686.891917][ T30] ? __pfx_lock_release+0x10/0x10 [ 1686.897440][ T30] down_write+0x1d7/0x220 [ 1686.901815][ T30] ? __pfx_down_write+0x10/0x10 [ 1686.906881][ T30] ? __might_fault+0xc6/0x120 [ 1686.911592][ T30] blkdev_common_ioctl+0x150b/0x2480 [ 1686.917313][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1686.922988][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1686.929943][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1686.937499][ T30] ? file_to_blk_mode+0xcc/0x140 [ 1686.947063][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 1686.959061][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1686.964177][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1686.969485][ T30] __se_sys_ioctl+0xf9/0x170 [ 1686.975120][ T30] do_syscall_64+0xf3/0x230 [ 1686.985162][ T30] ? clear_bhb_loop+0x35/0x90 [ 1686.991772][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.000018][ T30] RIP: 0033:0x7fa7b697dff9 [ 1687.007212][ T30] RSP: 002b:00007fa7b7845038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.015696][ T30] RAX: ffffffffffffffda RBX: 00007fa7b6b35f80 RCX: 00007fa7b697dff9 [ 1687.023780][ T30] RDX: 0000000020000240 RSI: 000000000000127f RDI: 0000000000000004 [ 1687.032956][ T30] RBP: 00007fa7b69f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1687.042792][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.053893][ T30] R13: 0000000000000000 R14: 00007fa7b6b35f80 R15: 00007fa7b6c5fa28 [ 1687.066637][ T30] [ 1687.077468][ T30] [ 1687.077468][ T30] Showing all locks held in the system: [ 1687.115129][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 1687.194315][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1687.256990][ T30] 1 lock held by khungtaskd/30: [ 1687.264540][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1687.294744][ T30] 3 locks held by kworker/u8:6/1117: [ 1687.338556][ T30] 3 locks held by kworker/u8:7/2482: [ 1687.343893][ T30] #0: ffff88802dbce148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1687.362847][ T30] #1: ffffc90008fc7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1687.397392][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1687.410689][ T30] 2 locks held by getty/4988: [ 1687.417447][ T30] #0: ffff8880322500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1687.427666][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1687.438570][ T30] 2 locks held by kworker/1:2/12042: [ 1687.444810][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1687.459331][ T30] #1: ffffc900048dfd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1687.470693][ T30] 2 locks held by syz.0.4732/28082: [ 1687.476928][ T30] 1 lock held by syz.1.4798/28594: [ 1687.482061][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 1687.499035][ T30] 1 lock held by syz.2.4892/28900: [ 1687.505180][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.523824][ T30] 1 lock held by syz.1.4967/29312: [ 1687.529097][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.540465][ T30] 1 lock held by syz.2.4925/29430: [ 1687.545593][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.557989][ T30] 1 lock held by syz.3.4978/29507: [ 1687.563121][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.575407][ T30] 1 lock held by syz.3.4978/29508: [ 1687.581529][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.593840][ T30] 1 lock held by syz.4.5134/30265: [ 1687.605492][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.621394][ T30] 3 locks held by syz-executor/30410: [ 1687.640869][ T30] #0: ffff88803dc70d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1687.652831][ T30] #1: ffff88803dc70078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1687.664024][ T30] #2: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1687.676064][ T30] 3 locks held by syz-executor/30463: [ 1687.682663][ T30] #0: ffff888085a78d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1687.711565][ T30] #1: ffff888085a78078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1687.724794][ T30] #2: ffffffff8fe3e9e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1687.738428][ T30] 1 lock held by syz.0.5196/30543: [ 1687.744337][ T30] #0: ffff888148c87c40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1687.771538][ T30] 1 lock held by syz.3.5146/30663: [ 1687.778560][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1687.791510][ T30] 1 lock held by syz.1.5205/30682: [ 1687.797723][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1687.814610][ T30] 2 locks held by syz-executor/30686: [ 1687.820345][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1687.830232][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 1687.856675][ T30] [ 1687.978725][ T30] ============================================= [ 1687.978725][ T30] [ 1688.022914][ T30] NMI backtrace for cpu 1 [ 1688.027296][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1688.037786][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1688.047830][ T30] Call Trace: [ 1688.051101][ T30] [ 1688.054022][ T30] dump_stack_lvl+0x241/0x360 [ 1688.058694][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.063880][ T30] ? __pfx__printk+0x10/0x10 [ 1688.068466][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1688.073393][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1688.078848][ T30] ? _printk+0xd5/0x120 [ 1688.083007][ T30] ? __pfx__printk+0x10/0x10 [ 1688.087600][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1688.092448][ T30] ? __pfx__printk+0x10/0x10 [ 1688.097037][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1688.102063][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1688.108040][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1688.114020][ T30] watchdog+0xff4/0x1040 [ 1688.118272][ T30] ? watchdog+0x1ea/0x1040 [ 1688.122692][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.127372][ T30] kthread+0x2f0/0x390 [ 1688.131438][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.136110][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.140696][ T30] ret_from_fork+0x4b/0x80 [ 1688.145112][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.149694][ T30] ret_from_fork_asm+0x1a/0x30 [ 1688.154469][ T30] [ 1688.157558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1688.164930][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1688.171057][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1688.184533][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1688.191399][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00260-g9e4c6c1ad9a1 #0 [ 1688.201914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1688.211984][ T30] Call Trace: [ 1688.215276][ T30] [ 1688.218218][ T30] dump_stack_lvl+0x241/0x360 [ 1688.222905][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1688.228100][ T30] ? __pfx__printk+0x10/0x10 [ 1688.232689][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1688.238678][ T30] ? vscnprintf+0x5d/0x90 [ 1688.243009][ T30] panic+0x349/0x880 [ 1688.246904][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1688.253054][ T30] ? __pfx_panic+0x10/0x10 [ 1688.257465][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1688.262832][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1688.268374][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1688.273739][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1688.279891][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1688.286040][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1688.292194][ T30] watchdog+0x1033/0x1040 [ 1688.296527][ T30] ? watchdog+0x1ea/0x1040 [ 1688.300943][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.305616][ T30] kthread+0x2f0/0x390 [ 1688.309685][ T30] ? __pfx_watchdog+0x10/0x10 [ 1688.314367][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.318966][ T30] ret_from_fork+0x4b/0x80 [ 1688.323386][ T30] ? __pfx_kthread+0x10/0x10 [ 1688.327972][ T30] ret_from_fork_asm+0x1a/0x30 [ 1688.332743][ T30] [ 1688.336114][ T30] Kernel Offset: disabled [ 1688.340462][ T30] Rebooting in 86400 seconds..