last executing test programs: 1m6.966860248s ago: executing program 1 (id=2197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'geneve0\x00', 0x10}) r1 = socket$kcm(0x2, 0x3, 0x2) set_mempolicy(0x4000, &(0x7f0000000040)=0x470, 0x5) getpid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x0, 0x8}, {}, {0x0, 0x7f}, @control={0xa8, 0x0, 0x4}}], 0x38) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x600a02, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000140012000a00cfbc6ac116946cf4a5b2f81c4d07d0f20349bb73aef2838e6c63d6172a227fc3f3495b89f9c21cbbdd534ff50254e3f6f714ea2793a92a6fbc8c952b778f8e1c512e0a9d4317ef6d7072e549f7c1e7c03b6b748c291a84e800e1b81e6c7315f2c1f20c74fede8c28b7e79c1a1e0126a00c4084f8b42b00fe762b14eeeb7df333460fa77571b44c399bd72f310a0991e796d1c59ba71101000000f94f67217505b29290cf48ac9b5e72c00e40591c8b43"], 0x30}}, 0x4) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f00000001c0)=0x60) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\r\x00'/12, @ANYRES8, @ANYRESHEX=r6, @ANYRESDEC=r4], 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'veth1_macvtap\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x36) 1m6.351558856s ago: executing program 1 (id=2200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup2(r1, r2) sendmmsg$inet(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="d0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x2b8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x24, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x2, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1m5.107324604s ago: executing program 1 (id=2203): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000080)={&(0x7f0000001000)={[{&(0x7f0000000000)="f9990815ba4025bf4bcf31a3ebb3ee9e4f845d5de94f2dbe30006403549d2ba3a773b8a56ba91548f2530c85bcda27c75b4338efd2e1ea8fa034470ea7bfc4a698e255b78a7cf5a1c5b130b8329def8666f3741eb7d1c44ddf47a4fcb2b01223964d88b6c986a85df41b2b709f9790da99", 0x71}, {&(0x7f0000000100)="e8e2e020e5dc70112d2537ff2135986c8d8ecbcea94b1bdaf5e6390302bd09523ed2630f3c0b60853df67b8e1a3fd47ff0c69418231db57488db57663ba995bec556910b64562e0889449b4a794fd89b31231686dd3304b50af77425b21bdf3b673b248d9b0e441779cbde8e807d8a59d520acc8ad9f929f8527d11c3e2e3268db8066b1b0969aee49bbf4e1cf1d5a16b3b44b2b5212aee3c2", 0x99, 0x1}, {&(0x7f0000000240)="f3106cff24085dd5384cc4d3974de2f318f813cebe36c09914dbda4fca491a02fe7b33313b18217fc55916068b57912b69c969b8603b4991a766fdd6c9e876375faa9c23c49b796d72145b0fe600884eb9f944d17f9a40cf0eb59cdafe1e914af14eedbb932a41fb", 0x68, 0x1}]}, 0x3, 0x3}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 36.906539247s ago: executing program 4 (id=2256): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000180)={@loopback, 0x65}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x15, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r4, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x4c, 0x0) 36.526211657s ago: executing program 4 (id=2257): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)) ppoll(&(0x7f00000000c0)=[{r4, 0x1007}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000000)) preadv(r0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 34.323459408s ago: executing program 4 (id=2260): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_trie\x00') pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r1, 0x1000) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r1, &(0x7f0000000140)="34c7ba0884b2a8ae0073f110a152e2c015cc738b8a132f96b1b79f09971a738676c891696119442caa5d44519e25d1fa41c63dec0390bda211ecf4804be57227d5e6f3d6b2263f49ce5d2ad63f0dacb73591281c1dfb514e5e2325fadcadc7b0616b28bab6100528fe8e970b41b8dddb3dceb6bcb8686d4f39ea6dd2d4c1500d843d23421121ddce391b0a7988d82995812be86dabc1df59791ff461f43658b7e588e85eea0e58cf82d02ec81841b5196d7746237037c69725e852b7cfd3ac1c59127f64e03b09dae293bb6baf0ed09eda18fc9ce1594222c8597a33f7ea7905c7cb6f4bfd343a175634cecaff6f60bac0858d4875a049b29a4576217811111e2a8b5ed2c2d2544bc00e39f80d9c5b692702fb454b67995e31913c442f997791fbe02d9aeac9f0a4a396c1cb24c7f432876b150d42953b7e2e243e693865da342976dc975434d18b13d2b27030b28c3d277ac07949294ae702ce3d91201dcf5962383cf78c8bb01f003d8ec71ed6b002c512b7914a173ef138a1cb2ca96839a589a7762918ebe0447c00ac989d0fcb81e90bb7a2ec7b0c4cba2cb771ba2507293650d944411aed062c5f4d9c6a151146f696f7fec2839763c0e04fcae47ca1632598e3aea33a64a595c8f0d799638b73237cab8d83a5f82a9f5f7ca7a8357d258479c44587718d61bf3f19a9b20c6465bbe9c56050c06d7b68cd100b72bca9b4c53623321e5e890f6b2430341e3967ba6bcc2e3011e4cbdb1cfefd86b9c407bd1eed0692f7ea7978e49dadb623a4f6807566c6d876d319dab394ee6481fc2cbfca73ccf04d9cf52b1f0d2efdd046b6bb99711237990e9a3e7d31d97a9f5da5c105e282452cf2d74b5bf4dedfe302dee526d5c4c70abb2161d7a04725e2915d26ca577c18ab8e43e94e7cf36a517b627b6cc7937ab9d58df1307180f77d1037a168dde269c92cc4daaae503f67f67dc3dba5e6df64093694c2a525a2a4a32c573b11f51ae0fc8ac95f258ec9083c158de32dc559b1711899e8f039ac498ea7110b146bebdae61733145aad8047fd1cbff506de7700666cb0781b3a10de00ac449eda347b06ea890f04c9796284d27d6162c0c5a9469e5f5aef7bddcff08ca56c0cceb300f6b1bbead6ed769ad948962e1d51a89e7ec3a0d41d15ed1a4a19da9bd4be5b1c40db1eb6f0e825eedd4e1b7ed4558bc4190974e8f71952ea60fe164e046f744d509ee595b4cb72ae617fac7cdc30128cdadc55008dc98380e785a93d9c65470af90fb60c4f8986b6becd7c4e492df64bfaee60d720e8ce62ccf2caf8cf2485ee8ae8b60a1c4e2e2b1a90a4d5f1b28572b931314c7a8e87623144ec13f75f756f981f0b36a89b81a7801fa348a8668b19bc64eb9e537be8495f9bd67e186a8066d86f755069e3c9c38d4646c5b1b68e9ab38bbae2e5efd1b932987fb024f29b1288af46df766cf500c23f251badfe5a20a33060c50d19b627aa5ee8bfcaf0fbbfdcfce8b8b76e8957563933d793d7879b4b463455e0deb7e12e312aee75b99601159799bcc81eb0883b0060365a6104502857b2d543d1f8dd1aa7d967d24698ada9f1aa6b9b4a1ca4cdf769bd0ad752856b9d5ca76594a3ee3ab1eb8e5baca931fb8273d35a6894f5cb26eda093f8c2de783aad51459e6fdec6819968f585ed0b15ba3122c7f3c89b67386e848fe0480f8f648c9ded39e5d820f4fcc53419e6e831d6a5f70bb87c75926f333e7143abe60b5a3528a0ad0ddfc0a5e21fee102815c2a0a3708622b28d6105c38d3a81923c04314e985771f341a480b06d438fed2b2d7fd95591361f49bfb06c4b661bc20f2bcf3409749c0f99a3ee86502d93194b1d3df9bfea9bd2ce63cfdcdbdd904abd20e586d1a8f11ac2e5fd5a3efc0fc35271528958a08e6effee4ae11ff544209677724801d7f22f9e88e744ff109eec0b4ab156b79ebd347daf88194c38a7efef3bf95c99e7790a1d217353668bcdd8593717882394dc2f7d36d0e008d0044b17f59c5690f94772df1fa5c2c26eff1513a986e1ae496b8d3d1ce1f06dbe714a06149aa3384c2aee39897d7672f4043d989e650a41596fd85747cd61c9054696b1b486e733b08f4953fb4baccf93b85e94f5c16684a23753bc9d3ce42b3de46c12f43387c46944857f803c0e82a1c0702d14ba4b6ad685ad1dd24966b22fd902966c6ecc43e418a8509e9bc453aaeb7b6a2e26f5ec94f6339fa957273eb6b8bcc5a008dc5d3bc2d5225a3a4df5466e07232c9635f0c572b4a8093cc30bf57a9a76ee3c357f38824791985dfb16029066b945be41ce7ecd02e1cdbdf2f2fd6abf8f4bab7663c154e4eedc9837e43d2457ccdc24b2140860d06056654af74e0359139f7b7d69024ccd4dae51cf55b2760550bf9f591eafa9dfadef7fdc1d23635f3d7b5c6c3570324897e4e659c2a4571ef407bf064e8258cfbc30f33a814a46899935fb0c7fd60d4e1309334bbd65ae788244286a41ac5585048ae8ec40c86686c6cf9312ac1302062a3e2695d9a12aff81dd35564fc821efecb7feb08e62f9cfff91a1583894bc5dce02df1e9acc06b1347d0255c80c608e3abfc1da35a746d186b4534f9689a2c604359b67155eeece7f764379527ffe5046382db77876e89a0b546b2e9d72b8b45938c99a069be2a5b7f6c781d6b557cbf74204a95121d49f827889c7b65a8e56a6c0440e109606b5dccd456b60ff941348beb974157487d178b262f66b051333b66da0a436f70165da7628c42df7614cab888f61b4a9e31c8cd2f7a12110df486885347eecac0f7e99fed213faf2b4afe81ffe32826a94364aed5448fdb78c75f12f9469b65f129fc0b0be1e914c057a74e3f93c2bb1a0c67e2e9ab953991f2494aa4dab5b3fed8a205db1315c07904f130c3e94544afb21041c707d926aa66b796a2e61a492a0826e549be2b1987d13959b649813d162c865cb6446165745b479866c917dedf5ebc7481ae7e1cddd6f633129b694f9bb01c2b2fe17d2a6f57de07236a06938f705aec59fd605131fd696a29f7bb9df9e890226b31b75ef5da85a831668443c9d3ecda97e665cbc9e1e0ffdf782c4c942dc55d599929733d4b67d72fcaeca738baafe0ef853bbddc9cb3ce320bca9b181884406bb980ca03f02d50983a5745500ac623b14b61fee13c1061678276c576b9eba356535d54fd7938c8057d26fa6b261127faf78415e97fccc667a8ba7c9a8363f3c2e2720ee095318d6b35efea1c701761d77a9690d68cd1414866acebe8f1af58cb9e6b19e4028240965f148bb69ef28c322befffb3a629c6ca4bfabfb2c39c859610bb8bed6801cc8e721fdc259e50c9e25a5e26bdc4a4f6262ad69e464ccab6a6ac70af3d407ad99d70367cfe93cdf08094dd00496e225df32c5135308e697501dd87ab160ddd965b12a47c090d2f6147c8b17d66d98682c6d4c1f8b0e23e320f914e00f82a2539b550cd1a397c242a95efc0285841aee9b3a7525a31d970f693d85c6748212f4068d27488c67497f0b98824d547c2654e9a2e4c748e48314fc02db10ae44ba915a2498bd630d386c0f90d6356963105236046d56f7883b1375660a7d64824e5a7d0ab182b92f82bc58004c1e822ab4dba84867f8d1ce43d47dbe98ba4845c15248836316de3d1919c790a4d9664e3848223be86bece1b4dc8d1c10768c612b9220c65b0ece8aecea7667f257ce295b74160502d3ae98d8139747893f019070f48d0dcded476e951a6cabc6ce9b32e703dc3e3b5e52e0fd595f75aba88660004c4430d757b3e5673b3332cf60e7c506694dfdd50baa89069e6a5a92d25d9ae71ed4bddb3a1566d56c0e08ead2cd6ee5d38d51f9f68ca55a7540b13192f803649d254b93be1ca8cc5caf4f3298d64b18c583824706e715697032270e61ab0cc6b96b41f7216477a23c93525f97becc44b888dce952004f631df592380a1a2fe0834ee4cee0d2a2863a0bd921d8473fcf317b29b4731431739977f00cec4d84ffce6f4dbcbcf97e208ef923de76de094bd7da6fefba727ce75e7f0d75f4a109cac8a004ab8f2e4df4247bf56d6f0e893d820cbc7e24b704ca2918ad98d0611132222764f3b4aab00ee58b40b086a7cea4958af7dc7c7c626421c4435d551ec366e079dd76e6b83219b07c1e75a6d2e90c7ce103ecc283fdadb09c4efb7e4767e1cf406ffba7559f9594c4104cfebea7da49818217bfaed2123fd6c503deb6c51c8fba80b9c9efc984628e8e914629ea2933cfea5ef6b703401c7a77b9f409b4247e76bdca0797ba1b7decbd3ee4df3374f316a751723f886ad335a8426f1a511fe01d95ae8ce9c2820c6cf1a4cd9e351e7bcdb41a71fe69a1ff77919fa66a5a23c5bea27240da6db08f21fa4d616873d9d971440505a18c931c81c4347cbb98aaa60c632d52b7bad8e6ef5532ef57c15c00cd1d6b93175951798a7672d1f15cd3aa9cce3f274449b1222954bc1afb25fcda6a9f5dd582fe848c94240af8dc6910ed18ee0ebaa9957c2bc2692cc393471b992c524953c86d0ea6cc8c9502180e7b2d434c12ab5d70e824289e96b9a792ec07c45343aa302da33cec4d5f5e9f3fac67574f6f5f2e33ec7edb9d93af119dd8e8bde5ef1cbaed22d3d82a3717a63a267d74a74212dc1e4e735f49d891c9002d627c5bb97490ae5875d87f8f8c7fc64249a0f1d176e904f478dc108b1fde0024ad32179c3b324447d2cdae84acc0f2c233c76162371abac6413eaa2a75f1731fb747f5b9595633dde2a6306be86e3f3d352b6875698d53b9367ee16be34900413372e5c52d921ac8ce89175f5d0f3854aaf59bfe3e35ad935d42bc4eba01c08e5ed441314368c7d329122641099ffae45c28274c4753a38d8da072aad8f21840fb5d08a8812790e3eb39385dcddd5e0fbb9dc7e16791cc818a9c39fba38b458087e9b170d9b01799f0c1b17f07dad9c5036cc817ee5a4f133e7d9cd3f71d33c5275f33cbebb18265a0c238f2a272888e42c624cc975ec4adaee25dc119f0b2a717715169c60089ceeab24ac82009badf6dc268031f0426431c86257e4e345a0fd3cbc8a170490b44cb4defff31d4ea8fdf3dfbd17c04b6a6c6515ee4be86ea36922e1658293a6ac730b8e8ae342a15f19665120d511361b1baafd5254b1bd32253ec8ceaa4f1f826fedec140764458e06ec92172bef0242735b02dd4ed822db4126f000deca7d79d0aeed252a91435864d0146920ba11946f5235f97a98d79d455a03d3cfdd3e6c01f51e4ef5661acce4d5e8a6b603bf087d3406c17b58f296edcc8f95af8c0e3461bf11f0bfcf05ef01d4618e8c5136139c3557dcc7a2dc7b43f92ca9d9adceecba7528885a0603e20ee156dee75712dbe2819eefc85f98e11aa950f8895046d6b7a2b875fe9187beffa63940cb746e8ade77959046fb2e5b2a3c10602334cb7632f69d5740d7dd0b167133b27dfb4257a2068d18f00cfbdd33db51d088c69279a8ef098769ae8bd57ab396039343778de168a918a674447887df22e869dff6be79a3a2f6195016e2cc355cdf3d3b9e661030f59d12e7669061276556ca4f347f6f4e444caa5e054617b73c13728a77e28cbb51958442c33ecde42baafe84f7efbfd359f37f5e8babeffce15a6ca519d2d4ef0bdd83866b2d0413323a80d8b04cf00ea9fc926ede3d45478b7379096544088d84fc90dbd8ebdc46e776c418ce69a5bf9a6876c750213ec66ef01e14e6a6c7c19fd5187c8b1298df6bdef16165518e76077acc9e40949af7276771a6", &(0x7f0000000040)=""/128}, 0x20) 33.946825268s ago: executing program 4 (id=2261): io_uring_setup(0x6cfb, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') 32.983184943s ago: executing program 4 (id=2263): syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0xb, 0xd41) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xfffffffc}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB="960000", @ANYRES16=r6, @ANYBLOB="0d08000000000000000017000000000001007063690000000200303030303a30303a312e2e3000000000100003002000000008000b000000000006001600000000000500120000000000"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000004d40)={&(0x7f0000004c40), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000004b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x2, 0x100000001, 0x2, 0x9, 0x4]}, {0x1, 0x1, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x0}, {0x3, 0x1, 0x0, &(0x7f0000004600)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f00000045c0)}], 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x4, 0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003100)=""/238, 0xee}, {0x0}, {0x0}, {&(0x7f00000043c0)=""/135, 0x87}], 0x0}], 0x5) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_test', 0x42, 0x12e) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f0000000080)="03320500", 0x4}]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) 32.346330099s ago: executing program 4 (id=2265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004d00)={&(0x7f0000004d40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0xfff5, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 30.651941939s ago: executing program 1 (id=2222): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000013004f0a000200"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000800cfffecc507006c001a8054000a"], 0x94}}, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f00000002c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x102080}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x9, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000, 0x3, 0x0, r8, 0x20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8f8, 0x0) 28.590903614s ago: executing program 1 (id=2271): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000e4b9b6d763a805d78fff0357f214f1714f17a19db11b4331ff7a888ba4a54b0002b841d44f6fca5e22b4c65c0ee916894b867176ae95fad1"], 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20"], 0x48}}, 0x0) 26.631160067s ago: executing program 1 (id=2277): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f80)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_NAME={0x1e, 0x7, './cgroup.cpu/cgroup.procs\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x9, 0x4, 0xfffeffff}]}}]}}, @filter_kind_options=@f_fw={{0x7}, {0x124, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x9}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xffff}}, @TCA_FW_ACT={0xf4, 0x4, [@m_skbedit={0xf0, 0x10, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xa}}]}, {0xa9, 0x6, "f7a0554288139b6a616209de5122bc66928c3cbcd073aa6265f205a1debe43c125679df6fa198c284d4a4c66e5d44d56c4f3c0136e704db6ba4e4c4b98c481b6bfe43804c29fe3755591d754d5472c1b00d959e2025c8fef341267053db863c362215660ee3d3b34facf73b0133254af10168d7075997bf5230acdf46ec5808df6ff339e0f41930479a9bafb8bc3a2ca4a68cc0324abc50124191d3a02b1246e22d4f66b1b"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1a0}}, 0x44050) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/kexec_crash_size', 0x40102, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x1800, 0x0) 14.60750643s ago: executing program 3 (id=2293): r0 = syz_usb_connect$cdc_ecm(0x3, 0x71, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025f00010107e00e09040030030206007e0624060000fc05240009000d240f01b90000000010ec056b05241576001524120700a317a88b045e4f01a607c0ffcb7e392a0905810300003c04090905822657af5a944384a7ea81bafa02ff030c02070905030220006007b8"], &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x4, 0x9, 0x7, 0x8, 0x68}, 0x2a, &(0x7f0000000580)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "8b8526858172a492fd5ca775468cb18f"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4842}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "0603bce9d305600bbf67f9e5757b56c6c56510a367f5efb2b7b1fba59aac81a74e22d6ecf9750e24d0360f6425a89f85ca8d666e806f50ba84bd318b70c359525876708c8747aa443ed64f3220b38710b0f64cf2d1ebe094b45893d872669789e85fda645fba772c57f564e1d4093cb013224d5d465f7236748d9bc9ab0f218cd2c091e1ca17c68dbf16d15bb1b1c4f29654440dcf227605197b50bf1881a794db41908a6dc9976839284c76d5eaa80daac7cdd37d93c49cfed5e326f57260ca0d163e4ca46edc51284b08d2ee1aed27d59eb22e0c6452ea02"}}, {0xb6, &(0x7f00000007c0)=@string={0xb6, 0x3, "433d70412796f264c0ca5190f187c9c940242808f2c62385f0e0caec8fcdeae50790230f8856a4d6b53e0ea8a34d0655346188392baaf0691a4b6c77b0f2826ee7780f43c59adf272aaa24b19bfc590eec139756b9b164ec3a896f10714b8748c1af7d22953caa82a268c2dc3bc38268eaf6376bdf01aa80580e591e2682a1f90d9d177d7ac89c6b1802c5100eb601f51c6989552d7bafb2a8b7bc1c700af80c87d2bc8c31f5ab06a988a210f5516cc3cbd8b7d7"}}]}) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="2011440000004421fbec68f08d92a522017a0fd44559cccb31502ae1108b86df35ed4c72a1e8e1aebdf156f7bae497a4e4889d7d58c671216ee69c70d8f7e5381181c6254ddbfdd7e0eb"], &(0x7f0000000900)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "134f06a11cb9b4bee106110aade3503eadc1a86def178b56417358d4864a0d047f4667c2754a62ca3da841f8dd1a672755580e5caa06a65d9114b3fe25db48f3dbbb3843c9e89693cbb42e7277bb5aecab97fc5dd99f1c7c3f33d791cc86cbb7e69213f9511aed91038857b088b6b57f91a53fbbeafd3a28c9d4b0e164cdc1180bf71d4fd3637d8d1d30915acaba760bb451ae77c3b7ac2c1a7524c1cc87f22cd430a0ac0d9c4a"}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x53, 0x1, "c4353ef5", "6c487f60"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbc, 0x4, 0x5, 0x2, 0x80, 0x1, 0x987}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000a80)={0x20, 0x7, 0xaf, "df592abe061c8260a017e1171d4a05666ffa4472fc8480a4588c9e7905e8282c8f4c24fe75b40a0f2d853074f9c308ade1b574d72186e291e3a0c423b75cb91699a1cb99a31d61a34436da3e95bf305a0286e7d9a1432329e51832eefc4ddc7eb39b79df955f1728186d445a3b7f5b567365c23dc20f19715d9107afad30dcf83eb31df150293032869d2318821a3f4924c4e9ac265489112ef38e596646bd92e3d94dcf757ea481c2a6b3e7ea910c"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xb0}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000c00)=ANY=[@ANYBLOB="200008008d2323c820000f000000"], &(0x7f0000000c40)={0x40, 0x7, 0x2, 0xf5a}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0xda}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, '-4'}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x59}, &(0x7f0000000d40)={0x40, 0x13, 0x6}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "7b8e"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x46}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000160000000000000026000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, r4, 0x585e0a1aae297b39, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 12.900157363s ago: executing program 2 (id=2298): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x0, 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x8e, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11.761452175s ago: executing program 2 (id=2299): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000e4b9b6d763a805d78fff0357f214f1714f17a19db11b4331ff7a888ba4a54b0002b841d44f6fca5e22b4c65c0ee916894b867176ae95fad1"], 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20"], 0x48}}, 0x0) 9.077317666s ago: executing program 3 (id=2301): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c0780a402a1101007f9e0102030109022400010000000009040000020a6bc50009050622000000000009059232"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xfffffc8f) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x4) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24, 0x2cd5, @empty, 0x3}, 0x1c) ioctl$KVM_RUN(r6, 0xae80, 0x0) splice(r2, 0x0, r5, 0x0, 0x1801, 0x3) ioctl$KVM_CAP_VM_TYPES(r3, 0x4068aea3, &(0x7f0000000140)={0xeb, 0x0, 0x4}) 8.561835925s ago: executing program 0 (id=2302): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = epoll_create1(0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (rerun: 64) epoll_pwait2(r0, &(0x7f0000000140)=[{}, {}], 0x2, &(0x7f00000001c0)={r1, r2+10000000}, &(0x7f0000000200)={[0x8000000000000000]}, 0x8) 8.414050351s ago: executing program 0 (id=2303): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x21) open$dir(&(0x7f0000000080)='./file0\x00', 0x1a1280, 0x8) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x6) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, &(0x7f0000000100)={0x0, "fd6d44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300"}}) close_range(r1, 0xffffffffffffffff, 0x0) 7.661404348s ago: executing program 2 (id=2304): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8919, &(0x7f0000000180)={@loopback, 0x65}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x15, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000500)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x4c, 0x0) 7.338966945s ago: executing program 0 (id=2305): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d08000b000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0x103}], 0x1}, 0x0) 7.108594588s ago: executing program 0 (id=2306): r0 = syz_usb_connect$cdc_ecm(0x3, 0x71, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025f00010107e00e09040030030206007e0624060000fc05240009000d240f01b90000000010ec056b05241576001524120700a317a88b045e4f01a607c0ffcb7e392a0905810300003c04090905822657af5a944384a7ea81bafa02ff030c02070905030220006007b8"], &(0x7f0000000600)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x4, 0x9, 0x7, 0x8, 0x68}, 0x2a, &(0x7f0000000580)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x6, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "8b8526858172a492fd5ca775468cb18f"}]}, 0x3, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4842}}, {0xdb, &(0x7f00000006c0)=@string={0xdb, 0x3, "0603bce9d305600bbf67f9e5757b56c6c56510a367f5efb2b7b1fba59aac81a74e22d6ecf9750e24d0360f6425a89f85ca8d666e806f50ba84bd318b70c359525876708c8747aa443ed64f3220b38710b0f64cf2d1ebe094b45893d872669789e85fda645fba772c57f564e1d4093cb013224d5d465f7236748d9bc9ab0f218cd2c091e1ca17c68dbf16d15bb1b1c4f29654440dcf227605197b50bf1881a794db41908a6dc9976839284c76d5eaa80daac7cdd37d93c49cfed5e326f57260ca0d163e4ca46edc51284b08d2ee1aed27d59eb22e0c6452ea02"}}, {0xb6, &(0x7f00000007c0)=@string={0xb6, 0x3, "433d70412796f264c0ca5190f187c9c940242808f2c62385f0e0caec8fcdeae50790230f8856a4d6b53e0ea8a34d0655346188392baaf0691a4b6c77b0f2826ee7780f43c59adf272aaa24b19bfc590eec139756b9b164ec3a896f10714b8748c1af7d22953caa82a268c2dc3bc38268eaf6376bdf01aa80580e591e2682a1f90d9d177d7ac89c6b1802c5100eb601f51c6989552d7bafb2a8b7bc1c700af80c87d2bc8c31f5ab06a988a210f5516cc3cbd8b7d7"}}]}) syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="2011440000004421fbec68f08d92a522017a0fd44559cccb31502ae1108b86df35ed4c72a1e8e1aebdf156f7bae497a4e4889d7d58c671216ee69c70d8f7e5381181c6254ddbfdd7e0eb"], &(0x7f0000000900)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "134f06a11cb9b4bee106110aade3503eadc1a86def178b56417358d4864a0d047f4667c2754a62ca3da841f8dd1a672755580e5caa06a65d9114b3fe25db48f3dbbb3843c9e89693cbb42e7277bb5aecab97fc5dd99f1c7c3f33d791cc86cbb7e69213f9511aed91038857b088b6b57f91a53fbbeafd3a28c9d4b0e164cdc1180bf71d4fd3637d8d1d30915acaba760bb451ae77c3b7ac2c1a7524c1cc87f22cd430a0ac0d9c4a"}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x53, 0x1, "c4353ef5", "6c487f60"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbc, 0x4, 0x5, 0x2, 0x80, 0x1, 0x987}}}, &(0x7f0000000f00)={0x84, &(0x7f0000000a80)={0x20, 0x7, 0xaf, "df592abe061c8260a017e1171d4a05666ffa4472fc8480a4588c9e7905e8282c8f4c24fe75b40a0f2d853074f9c308ade1b574d72186e291e3a0c423b75cb91699a1cb99a31d61a34436da3e95bf305a0286e7d9a1432329e51832eefc4ddc7eb39b79df955f1728186d445a3b7f5b567365c23dc20f19715d9107afad30dcf83eb31df150293032869d2318821a3f4924c4e9ac265489112ef38e596646bd92e3d94dcf757ea481c2a6b3e7ea910c"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0xb0}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000c00)=ANY=[@ANYBLOB="200008008d2323c820000f000000"], &(0x7f0000000c40)={0x40, 0x7, 0x2, 0xf5a}, &(0x7f0000000c80)={0x40, 0x9, 0x1, 0xda}, &(0x7f0000000cc0)={0x40, 0xb, 0x2, '-4'}, &(0x7f0000000d00)={0x40, 0xf, 0x2, 0x59}, &(0x7f0000000d40)={0x40, 0x13, 0x6}, &(0x7f0000000d80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000dc0)={0x40, 0x19, 0x2, "7b8e"}, &(0x7f0000000e00)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000e40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000e80)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000ec0)={0x40, 0x21, 0x1, 0x46}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000160000000000000026000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, r4, 0x585e0a1aae297b39, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 5.771661674s ago: executing program 3 (id=2307): r0 = timerfd_create(0x5, 0x80800) timerfd_gettime(r0, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000001c0)=0xffffffff) 5.482747623s ago: executing program 3 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getresuid(&(0x7f0000000480), &(0x7f0000000300), &(0x7f0000000140)) getegid() getuid() lstat(&(0x7f0000002600)='./file0\x00', &(0x7f00000003c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() lchown(&(0x7f0000000200)='./file0\x00', r1, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) getuid() bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x20048840) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) fsmount(0xffffffffffffffff, 0x0, 0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={@local, @local, @initdev={0xac, 0x1e, 0x80, 0x0}}, 0xc) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="019800cbe9000000187265000c000280060003003d00"/32], 0x38}}, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 4.253221844s ago: executing program 2 (id=2309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800070001040000080005000000000008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x8e, 0x0, 0x3}]}) 4.155320412s ago: executing program 3 (id=2310): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x9}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x2, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.027993658s ago: executing program 2 (id=2311): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "9c45"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000540)={0x0, 0x0, 0x2, "c44a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, "b07b"}, 0x0, 0x0, 0x0, 0x0}) 3.331957195s ago: executing program 3 (id=2312): recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e80)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="381606000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.880462197s ago: executing program 0 (id=2313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000000)=0x9, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900"], 0x18}}], 0x1, 0x0) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x57f) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000000c0)=0x8, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0xc0405519, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r8, 0xc10c5541, &(0x7f00000004c0)={0xbc, 0x1f, 0x1}) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 1.751226488s ago: executing program 0 (id=2314): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) openat(0xffffffffffffffff, &(0x7f0000000200)='./cgroup\x00', 0x300, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000319167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x723841, 0x0) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffffff11e090780000000062ea00000004000000000000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c00048028000180080001006c6f67001c000280080006400000f08d0e0002403a0128202124292a7d0000000900010073797a30000000000900020073797a320000000014000000111e01000000000000000000000000570a"], 0x80}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d479", 0xf5) r5 = socket(0x840000000002, 0x3, 0x100) syz_emit_ethernet(0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @remote}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 0s ago: executing program 2 (id=2315): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$video(&(0x7f0000002000), 0x4, 0x40840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x0, 0xb0, "315404a28844726f60882e99c736676dc3d4f8159de01278a5a0ebda02ff613de4ab401389dfb753c2f6656a2fb4df14c691caa244710ea3ce661ea961ff5db78280ed0b265977642480b281abf0d63bce64898e03015cdbba32e5573d68c71ea564ecbe4f27216e1e0a8124f40a61f78e9fe07207314029fcd0646e86c51dfd5d595cb8591090267f38ca58deab0e680cfcf59524ecb6a635977f98c6a08aafd64e0ac221ef83a28167bce72308ab6e"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000001a00002000000000004000"], 0x24, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c000080"], 0x1d8}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.473525][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.484704][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.486568][ T5290] usb 1-1: USB disconnect, device number 111 [ 799.521336][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.535306][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.545745][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.556828][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.566911][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.579558][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.589691][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.607523][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.617691][T16409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.629107][T16409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.648319][T16409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.716529][T16409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.759761][T16409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.770664][T16409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.783060][T16409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.860387][T16428] veth0_vlan: entered promiscuous mode [ 800.168506][T16428] veth1_vlan: entered promiscuous mode [ 800.238609][T16684] FAULT_INJECTION: forcing a failure. [ 800.238609][T16684] name failslab, interval 1, probability 0, space 0, times 0 [ 800.254957][T16684] CPU: 1 UID: 0 PID: 16684 Comm: syz.0.2142 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 800.265758][T16684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 800.275841][T16684] Call Trace: [ 800.279146][T16684] [ 800.282098][T16684] dump_stack_lvl+0x241/0x360 [ 800.286811][T16684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.292044][T16684] ? __pfx__printk+0x10/0x10 [ 800.296668][T16684] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 800.302685][T16684] ? __pfx___might_resched+0x10/0x10 [ 800.308008][T16684] should_fail_ex+0x3b0/0x4e0 [ 800.312702][T16684] should_failslab+0xac/0x100 [ 800.317399][T16684] ? __alloc_skb+0x1c3/0x440 [ 800.321990][T16684] kmem_cache_alloc_node_noprof+0x71/0x320 [ 800.327792][T16684] __alloc_skb+0x1c3/0x440 [ 800.332205][T16684] ? __pfx___alloc_skb+0x10/0x10 [ 800.337135][T16684] ? netlink_autobind+0xd6/0x2f0 [ 800.342071][T16684] ? netlink_autobind+0x2b0/0x2f0 [ 800.347089][T16684] netlink_sendmsg+0x638/0xcb0 [ 800.351856][T16684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.357140][T16684] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 800.363560][T16684] ? aa_sock_msg_perm+0x91/0x160 [ 800.368492][T16684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 800.373770][T16684] ? security_socket_sendmsg+0x87/0xb0 [ 800.379224][T16684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.384498][T16684] __sock_sendmsg+0x221/0x270 [ 800.389175][T16684] ____sys_sendmsg+0x525/0x7d0 [ 800.393938][T16684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.399232][T16684] __sys_sendmsg+0x2b0/0x3a0 [ 800.403817][T16684] ? __pfx___sys_sendmsg+0x10/0x10 [ 800.408946][T16684] ? __pfx_sched_clock_cpu+0x10/0x10 [ 800.414260][T16684] ? note_interrupt+0x579/0x9c0 [ 800.419158][T16684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 800.425515][T16684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 800.431850][T16684] ? __irq_exit_rcu+0x100/0x1c0 [ 800.436705][T16684] ? do_syscall_64+0xb6/0x230 [ 800.441380][T16684] do_syscall_64+0xf3/0x230 [ 800.445879][T16684] ? clear_bhb_loop+0x35/0x90 [ 800.450554][T16684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.456453][T16684] RIP: 0033:0x7f40f417def9 [ 800.460865][T16684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.480504][T16684] RSP: 002b:00007f40f4f64038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.488920][T16684] RAX: ffffffffffffffda RBX: 00007f40f4336058 RCX: 00007f40f417def9 [ 800.496905][T16684] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 800.504889][T16684] RBP: 00007f40f4f64090 R08: 0000000000000000 R09: 0000000000000000 [ 800.512849][T16684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.520812][T16684] R13: 0000000000000000 R14: 00007f40f4336058 R15: 00007f40f445fa28 [ 800.528785][T16684] [ 800.630598][ T5236] usb 5-1: USB disconnect, device number 105 [ 800.853605][T15223] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 801.097013][T15223] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 801.111826][T16428] veth0_macvtap: entered promiscuous mode [ 801.136577][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.139620][T16428] veth1_macvtap: entered promiscuous mode [ 801.164527][T15223] usb 1-1: config 0 has no interface number 1 [ 801.196406][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.211050][T15223] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 801.250552][T15223] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 801.310941][T15223] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 801.329575][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.341824][T15223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 801.392391][T15223] usb 1-1: SerialNumber: syz [ 801.405379][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.418906][T15223] usb 1-1: config 0 descriptor?? [ 801.446300][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.449597][T15223] usb 1-1: Found UVC 0.00 device (0002:0000) [ 801.481720][T15223] usb 1-1: No valid video chain found. [ 801.503205][ T5236] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 801.516374][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.558003][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.570652][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.584874][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.596000][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.608647][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.620820][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.638175][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.701633][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.703336][ T5236] usb 2-1: Using ep0 maxpacket: 32 [ 801.722780][ T5236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.733462][ T5236] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 801.759614][ T5236] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 801.794532][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.816014][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.843830][ T5236] usb 2-1: config 0 descriptor?? [ 801.877643][ T5236] hub 2-1:0.0: bad descriptor, ignoring hub [ 801.894839][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.926750][ T5236] hub 2-1:0.0: probe with driver hub failed with error -5 [ 801.968248][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.983281][ T5236] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 802.023045][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.071919][T16428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.151380][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.180578][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.205200][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.262764][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.305838][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.337014][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.401519][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.443392][ T5236] usb 2-1: USB disconnect, device number 79 [ 802.464632][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.533664][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.553198][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.626976][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.691897][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.735705][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.784354][ T29] audit: type=1326 audit(1726377795.438:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.4.2145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc8eb7def9 code=0x0 [ 802.834387][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.863876][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.891468][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.910716][T16428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.934445][T16428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.972208][T16428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.985362][ T5236] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 803.000987][T16428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.012655][T16428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.027189][T16428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.052336][T16428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.098171][T16718] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 803.173295][ T5236] usb 2-1: Invalid ep0 maxpacket: 32 [ 803.179222][ T5290] usb 1-1: USB disconnect, device number 112 [ 803.373731][ T5236] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 803.422380][T16718] team0: Port device dummy0 added [ 803.573261][ T5236] usb 2-1: Invalid ep0 maxpacket: 32 [ 803.579072][ T5236] usb usb2-port1: attempt power cycle [ 803.696383][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.843198][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.943483][T16743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2148'. [ 804.033590][ T5236] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 804.192190][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.230048][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.264527][ T5236] usb 2-1: device not accepting address 82, error -71 [ 804.333580][T16624] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 804.535610][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.563431][T16624] usb 1-1: Using ep0 maxpacket: 16 [ 804.574540][T16624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 804.611045][T16624] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 804.634129][T16624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.656534][T16624] usb 1-1: Product: syz [ 804.664742][T16624] usb 1-1: Manufacturer: syz [ 804.672651][T16624] usb 1-1: SerialNumber: syz [ 804.687281][ T5236] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 804.696073][T16624] usb 1-1: config 0 descriptor?? [ 804.744415][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 804.783738][ T5236] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 804.813731][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.834875][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 804.934736][ T5236] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.946808][T16624] usb 1-1: Unknown endpoint type found, address 0x06 [ 804.969981][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.984015][T16331] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 804.984573][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 804.992848][T16331] Bluetooth: hci7: Injecting HCI hardware error event [ 804.996379][T16331] Bluetooth: hci7: hardware error 0x00 [ 805.031031][T16624] usb 1-1: Not enough endpoints found in device, aborting! [ 805.092021][ T5236] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 805.113925][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.142272][ T5236] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.206159][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 805.217457][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 805.238196][ T5236] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 805.245975][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 805.258780][ T5236] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.273981][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 805.286279][ T5236] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 805.331624][ T5236] usb 2-1: string descriptor 0 read error: -22 [ 805.346007][ T5236] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.378570][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.432965][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.510737][ T5236] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.562607][T16779] xt_NFQUEUE: number of total queues is 0 [ 805.665259][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.785485][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 805.794587][T15448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 805.814210][T15448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 805.824342][T15448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 805.833401][T16753] fuse: Bad value for 'fd' [ 805.842581][T15448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 805.850424][T15448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 805.859633][T15448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 806.027657][ T8] usb 2-1: USB disconnect, device number 83 [ 806.212331][ T52] bridge_slave_1: left allmulticast mode [ 806.221145][ T52] bridge_slave_1: left promiscuous mode [ 806.227232][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.258409][ T52] bridge_slave_0: left allmulticast mode [ 806.288349][ T52] bridge_slave_0: left promiscuous mode [ 806.328710][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.994248][T15223] usb 1-1: USB disconnect, device number 113 [ 807.076901][T16331] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 807.953435][T16331] Bluetooth: hci0: command tx timeout [ 808.341649][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.385194][T16828] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 808.433506][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.455529][ T52] bond0 (unregistering): Released all slaves [ 808.532087][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 808.543846][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 808.990685][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.998421][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.191452][ T52] hsr_slave_0: left promiscuous mode [ 809.270331][ T52] hsr_slave_1: left promiscuous mode [ 809.337306][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.394546][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.426674][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.464063][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.554874][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 809.805133][ T52] veth1_macvtap: left promiscuous mode [ 809.894346][ T52] veth0_macvtap: left promiscuous mode [ 809.983314][ T52] veth1_vlan: left promiscuous mode [ 810.003246][ T52] veth0_vlan: left promiscuous mode [ 810.023490][T16331] Bluetooth: hci0: command tx timeout [ 811.513253][T16858] binder: BINDER_SET_CONTEXT_MGR already set [ 811.523004][T16858] binder: 16856:16858 ioctl 4018620d 20000040 returned -16 [ 812.085206][ T52] team0 (unregistering): Port device team_slave_1 removed [ 812.113540][T16331] Bluetooth: hci0: command tx timeout [ 812.191677][ T52] team0 (unregistering): Port device team_slave_0 removed [ 813.229936][T16860] mac80211_hwsim hwsim122 wlan0: entered promiscuous mode [ 813.306568][T16860] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 813.325986][T16860] mac80211_hwsim hwsim122 wlan0: left promiscuous mode [ 813.908839][T16791] chnl_net:caif_netlink_parms(): no params data found [ 813.990705][T16876] geneve3: entered promiscuous mode [ 814.021565][T16876] geneve3: entered allmulticast mode [ 814.183740][T16331] Bluetooth: hci0: command tx timeout [ 814.641733][T16791] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.668597][T16791] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.695386][T16791] bridge_slave_0: entered allmulticast mode [ 814.718441][T16791] bridge_slave_0: entered promiscuous mode [ 814.744986][ T8] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 814.756643][T16791] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.780324][T16791] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.804602][T16791] bridge_slave_1: entered allmulticast mode [ 814.840831][T16791] bridge_slave_1: entered promiscuous mode [ 814.953232][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 814.967487][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.971902][T16791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.993596][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.012486][T16791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.071847][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 815.102495][T16791] team0: Port device team_slave_0 added [ 815.119252][T16791] team0: Port device team_slave_1 added [ 815.145292][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 815.162575][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.212300][ T8] usb 2-1: config 0 descriptor?? [ 815.229871][T16791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.261860][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.319351][T16791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.335152][T16791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.346954][T16791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.374789][T16791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.685433][T16791] hsr_slave_0: entered promiscuous mode [ 815.692564][ T8] sony 0003:054C:0268.002D: item fetching failed at offset 6/70 [ 815.714035][T16791] hsr_slave_1: entered promiscuous mode [ 815.731921][ T8] sony 0003:054C:0268.002D: parse failed [ 815.739789][T16791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.764340][ T8] sony 0003:054C:0268.002D: probe with driver sony failed with error -22 [ 815.789998][T16791] Cannot create hsr debugfs directory [ 816.174097][ T5236] usb 2-1: USB disconnect, device number 84 [ 816.190049][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.263912][T16624] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 817.734449][T16624] usb 1-1: Invalid ep0 maxpacket: 16 [ 817.783770][T16791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 817.827999][T16791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 817.883186][ T5236] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 817.903260][T16624] usb 1-1: new low-speed USB device number 115 using dummy_hcd [ 817.915243][T16791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.004141][T16791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.084201][ T5236] usb 3-1: Using ep0 maxpacket: 32 [ 818.118998][ T5236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.133231][T16624] usb 1-1: Invalid ep0 maxpacket: 16 [ 818.155117][ T5236] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 818.176311][T16624] usb usb1-port1: attempt power cycle [ 818.256780][T15448] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 818.259762][ T5236] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 818.277408][T15448] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 818.287619][T15448] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 818.296973][T15448] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 818.304920][T15448] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 818.312334][T15448] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 818.373741][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.384799][ T5236] usb 3-1: config 0 descriptor?? [ 818.402061][ T5236] hub 3-1:0.0: bad descriptor, ignoring hub [ 818.411383][ T5236] hub 3-1:0.0: probe with driver hub failed with error -5 [ 818.465518][ T5236] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 818.623510][T16624] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 818.685672][T16624] usb 1-1: Invalid ep0 maxpacket: 16 [ 818.702163][T16791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.783930][ T5236] usb 3-1: USB disconnect, device number 96 [ 818.874429][T16624] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 818.920769][T16791] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.972272][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.979473][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.983946][T16624] usb 1-1: Invalid ep0 maxpacket: 16 [ 819.012006][T16624] usb usb1-port1: unable to enumerate USB device [ 819.051489][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.058630][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.184537][ T5236] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 819.411383][T16791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.423729][ T5236] usb 3-1: Invalid ep0 maxpacket: 32 [ 819.438022][T15223] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 819.603386][ T5236] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 819.655641][T15223] usb 2-1: Using ep0 maxpacket: 8 [ 819.711586][T16791] veth0_vlan: entered promiscuous mode [ 819.718297][T15223] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 819.733722][T15223] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.747698][T15223] usb 2-1: config 0 descriptor?? [ 819.758892][T16979] chnl_net:caif_netlink_parms(): no params data found [ 819.820188][T16791] veth1_vlan: entered promiscuous mode [ 819.833210][ T5236] usb 3-1: Invalid ep0 maxpacket: 32 [ 819.847977][ T5236] usb usb3-port1: attempt power cycle [ 819.970241][T15223] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 820.002464][T15223] asix 2-1:0.0: probe with driver asix failed with error -32 [ 820.306077][T16979] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.343381][T15448] Bluetooth: hci8: command tx timeout [ 820.385937][T16979] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.400007][T16979] bridge_slave_0: entered allmulticast mode [ 820.437905][T16979] bridge_slave_0: entered promiscuous mode [ 820.477164][T16979] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.540819][T16979] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.592249][T16979] bridge_slave_1: entered allmulticast mode [ 820.611567][T16979] bridge_slave_1: entered promiscuous mode [ 820.638994][T16791] veth0_macvtap: entered promiscuous mode [ 820.697967][T16791] veth1_macvtap: entered promiscuous mode [ 820.748949][T16979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.819133][T17003] bridge0: entered allmulticast mode [ 820.865090][T16979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.824845][T17003] bridge0: left allmulticast mode [ 821.902334][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.913918][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.923887][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 821.957873][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 821.989489][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.002602][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.014167][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.038879][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.051482][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.065059][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.076830][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.088019][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.099363][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.117423][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.128058][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.143410][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.188881][T16791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.266384][T16979] team0: Port device team_slave_0 added [ 822.348196][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.428222][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.441117][T15448] Bluetooth: hci8: command tx timeout [ 822.457136][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.472815][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.497429][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.544678][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.578669][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 822.611515][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.683191][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.719590][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.761403][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.817493][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.828823][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.839892][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.851666][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.862578][T16791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.928973][T16791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.988703][T11676] usb 2-1: USB disconnect, device number 85 [ 823.018181][T16791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.101305][T16979] team0: Port device team_slave_1 added [ 823.219871][T17020] syz.0.2196 (17020) used greatest stack depth: 19192 bytes left [ 823.290072][T16979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.320457][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.375403][T16979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.400297][T16791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.423169][T16791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.431996][T16791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.443199][T16791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.444464][T17038] input: syz0 as /devices/virtual/input/input68 [ 823.458175][T16979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.467028][T16979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.499960][T16979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.521324][T17032] veth1_macvtap: entered allmulticast mode [ 823.595229][T17041] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2199'. [ 823.595269][T17041] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 823.851276][T16979] hsr_slave_0: entered promiscuous mode [ 823.865636][T16979] hsr_slave_1: entered promiscuous mode [ 823.896861][T16979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.936953][T16979] Cannot create hsr debugfs directory [ 824.191257][T14116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.256993][T14116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.504886][T15448] Bluetooth: hci8: command tx timeout [ 824.561079][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.585280][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.037437][T16979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.156331][T17068] binder: 17055:17068 ioctl c0306201 0 returned -14 [ 825.233827][T10317] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 825.408340][T16979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.423600][T10317] usb 3-1: Using ep0 maxpacket: 32 [ 825.443984][T10317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.455573][T10317] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 825.470735][T10317] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 825.480687][T10317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.530215][T10317] usb 3-1: config 0 descriptor?? [ 825.550790][T10317] hub 3-1:0.0: bad descriptor, ignoring hub [ 825.585749][T10317] hub 3-1:0.0: probe with driver hub failed with error -5 [ 825.601201][T10317] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 825.739829][T16979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.061730][T16979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.093846][ T5289] usb 3-1: USB disconnect, device number 100 [ 826.513261][ T5289] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 826.529716][T16979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 826.571229][T16979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 826.583347][T15448] Bluetooth: hci8: command tx timeout [ 826.608935][T16979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 826.656949][T16979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 826.713747][ T5289] usb 3-1: Invalid ep0 maxpacket: 32 [ 826.907026][ T5289] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 827.059365][T16979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.113329][ T5289] usb 3-1: Invalid ep0 maxpacket: 32 [ 827.119320][ T5289] usb usb3-port1: attempt power cycle [ 827.194458][T16979] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.231421][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.238641][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.309299][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.316812][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.533431][ T5289] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 827.624055][ T5289] usb 3-1: device descriptor read/8, error -71 [ 827.747981][T16979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.970964][T16979] veth0_vlan: entered promiscuous mode [ 828.115293][T16979] veth1_vlan: entered promiscuous mode [ 828.210852][T16979] veth0_macvtap: entered promiscuous mode [ 828.241813][T16979] veth1_macvtap: entered promiscuous mode [ 828.296327][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.312616][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.344740][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.368608][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.407897][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.441564][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.453524][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.464460][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.483003][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.495109][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.509323][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.523223][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.565078][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.586730][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.622964][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.643203][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.657855][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.669509][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.681901][T16979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.790625][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.899260][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.935726][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.958817][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.970089][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.983118][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.003222][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.023657][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.040026][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.052322][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.073782][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.128195][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.140836][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.176864][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.240345][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.251090][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.261017][T16979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 829.271630][T16979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 829.286040][T16979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.316183][T16979] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.326138][T16979] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.344042][T16979] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.353988][T16979] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.567901][T14116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.586216][T14116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.738370][T14116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 829.793327][T14116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.844120][T11676] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 831.073567][T11676] usb 5-1: Using ep0 maxpacket: 32 [ 831.109427][T11676] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 831.153144][T11676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.161242][T11676] usb 5-1: Product: syz [ 831.173147][T11676] usb 5-1: Manufacturer: syz [ 831.177855][T11676] usb 5-1: SerialNumber: syz [ 831.245843][T11676] usb 5-1: config 0 descriptor?? [ 831.265238][T11676] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 831.562890][T16331] Bluetooth: hci2: command 0x0406 tx timeout [ 831.684632][T10317] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 831.906363][T10317] usb 3-1: Using ep0 maxpacket: 16 [ 831.926686][T10317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 831.955180][T10317] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 832.004262][T10317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.065137][T10317] usb 3-1: config 0 descriptor?? [ 832.317740][T11676] gspca_ov534_9: reg_w failed -71 [ 832.485797][T17101] netlink: 'syz.2.2213': attribute type 10 has an invalid length. [ 832.504456][T17101] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2213'. [ 832.515984][T17101] bridge0: port 3(hsr_slave_1) entered blocking state [ 832.545642][T17101] bridge0: port 3(hsr_slave_1) entered disabled state [ 832.552696][T17101] hsr_slave_1: entered allmulticast mode [ 832.597500][T17101] hsr_slave_1: left allmulticast mode [ 832.613956][T17101] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 832.763168][T11676] gspca_ov534_9: Unknown sensor 0000 [ 832.763265][T11676] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 832.782627][T11676] usb 5-1: USB disconnect, device number 106 [ 833.027222][T10317] usbhid 3-1:0.0: can't add hid device: -71 [ 833.043389][T10317] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 833.066078][T10317] usb 3-1: USB disconnect, device number 105 [ 833.339094][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 834.258191][ T1056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.578287][ T1056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.694343][T17110] syz.3.2215 (17110) used greatest stack depth: 18432 bytes left [ 834.767481][ T1056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.773332][ T5288] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 834.939253][ T1056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.001695][T15448] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.024075][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 835.043929][T15448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.054484][T15448] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.069207][T15448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.079634][T15448] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 835.087813][T15448] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.102294][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.114650][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.124874][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 835.140192][ T5288] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 835.151117][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.162922][ T5288] usb 5-1: config 0 descriptor?? [ 835.617700][ T5288] sony 0003:054C:0268.002E: item fetching failed at offset 6/70 [ 835.635205][ T5288] sony 0003:054C:0268.002E: parse failed [ 835.640964][ T5288] sony 0003:054C:0268.002E: probe with driver sony failed with error -22 [ 835.665999][T17128] fuse: Unknown parameter 'grou00000000000000000000' [ 835.681317][T15448] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 835.695506][T15448] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 835.707783][T15448] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 835.718447][T15448] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 835.732033][T15448] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 835.735843][ T1056] bridge_slave_1: left allmulticast mode [ 835.754967][T15448] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 835.772833][ T1056] bridge_slave_1: left promiscuous mode [ 835.802374][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.835226][T17132] FAULT_INJECTION: forcing a failure. [ 835.835226][T17132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.849207][T17132] CPU: 1 UID: 0 PID: 17132 Comm: syz.3.2224 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 835.860009][T17132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 835.870093][T17132] Call Trace: [ 835.873396][T17132] [ 835.876348][T17132] dump_stack_lvl+0x241/0x360 [ 835.881059][T17132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 835.886290][T17132] ? __pfx__printk+0x10/0x10 [ 835.890916][T17132] ? __pfx_lock_release+0x10/0x10 [ 835.895985][T17132] should_fail_ex+0x3b0/0x4e0 [ 835.900697][T17132] _copy_from_user+0x2f/0xe0 [ 835.905321][T17132] input_event_from_user+0x1e2/0x4a0 [ 835.910737][T17132] ? __pfx_input_event_from_user+0x10/0x10 [ 835.916595][T17132] ? input_inject_event+0xd6/0x340 [ 835.921751][T17132] evdev_write+0x4f2/0x7c0 [ 835.926207][T17132] ? __pfx_evdev_write+0x10/0x10 [ 835.931266][T17132] ? bpf_lsm_file_permission+0x9/0x10 [ 835.936698][T17132] ? security_file_permission+0x7f/0xa0 [ 835.942277][T17132] ? rw_verify_area+0x1d2/0x6b0 [ 835.947171][T17132] ? __pfx_evdev_write+0x10/0x10 [ 835.952157][T17132] vfs_write+0x2a2/0xc90 [ 835.956452][T17132] ? __pfx_vfs_write+0x10/0x10 [ 835.961266][T17132] ? __fget_files+0x29/0x470 [ 835.965962][T17132] ? __fget_files+0x3f6/0x470 [ 835.970672][T17132] ? __fget_files+0x29/0x470 [ 835.975406][T17132] ksys_write+0x1a0/0x2c0 [ 835.979771][T17132] ? __pfx_ksys_write+0x10/0x10 [ 835.984653][T17132] ? do_syscall_64+0x100/0x230 [ 835.989457][T17132] ? do_syscall_64+0xb6/0x230 [ 835.994183][T17132] do_syscall_64+0xf3/0x230 [ 835.998734][T17132] ? clear_bhb_loop+0x35/0x90 [ 836.003461][T17132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.009475][T17132] RIP: 0033:0x7fa71fd7def9 [ 836.013917][T17132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.033567][T17132] RSP: 002b:00007fa720bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 836.042030][T17132] RAX: ffffffffffffffda RBX: 00007fa71ff35f80 RCX: 00007fa71fd7def9 [ 836.050035][T17132] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000005 [ 836.058043][T17132] RBP: 00007fa720bca090 R08: 0000000000000000 R09: 0000000000000000 [ 836.066044][T17132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.074479][T17132] R13: 0000000000000000 R14: 00007fa71ff35f80 R15: 00007fa72005fa28 [ 836.082508][T17132] [ 836.125096][ T1056] bridge_slave_0: left allmulticast mode [ 836.130792][ T1056] bridge_slave_0: left promiscuous mode [ 836.140820][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.855449][T15448] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 836.866324][T15448] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 836.880340][T15448] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 836.911560][T15448] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 836.924912][T15448] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 836.933972][T15448] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 837.233684][T16331] Bluetooth: hci1: command tx timeout [ 837.457248][ T1056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.484886][ T1056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.507061][ T1056] bond0 (unregistering): Released all slaves [ 837.627043][T17145] FAULT_INJECTION: forcing a failure. [ 837.627043][T17145] name failslab, interval 1, probability 0, space 0, times 0 [ 837.641629][T17145] CPU: 0 UID: 0 PID: 17145 Comm: syz.3.2226 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 837.652514][T17145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 837.662599][T17145] Call Trace: [ 837.665886][T17145] [ 837.668825][T17145] dump_stack_lvl+0x241/0x360 [ 837.673506][T17145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.678715][T17145] ? __pfx__printk+0x10/0x10 [ 837.683325][T17145] ? ref_tracker_alloc+0x332/0x490 [ 837.688432][T17145] should_fail_ex+0x3b0/0x4e0 [ 837.693139][T17145] ? skb_clone+0x20c/0x390 [ 837.697550][T17145] should_failslab+0xac/0x100 [ 837.702234][T17145] ? skb_clone+0x20c/0x390 [ 837.706645][T17145] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 837.712016][T17145] skb_clone+0x20c/0x390 [ 837.716256][T17145] __netlink_deliver_tap+0x3cc/0x7c0 [ 837.721713][T17145] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.727003][T17145] netlink_deliver_tap+0x19d/0x1b0 [ 837.732193][T17145] netlink_sendskb+0x68/0x140 [ 837.737327][T17145] netlink_unicast+0x39d/0x990 [ 837.742109][T17145] ? __asan_memcpy+0x40/0x70 [ 837.746805][T17145] ? __pfx_netlink_unicast+0x10/0x10 [ 837.752283][T17145] netlink_rcv_skb+0x262/0x430 [ 837.757061][T17145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 837.762631][T17145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 837.767940][T17145] ? netlink_deliver_tap+0x2e/0x1b0 [ 837.773246][T17145] netlink_unicast+0x7f6/0x990 [ 837.778031][T17145] ? __pfx_netlink_unicast+0x10/0x10 [ 837.783430][T17145] ? __virt_addr_valid+0x183/0x530 [ 837.788570][T17145] ? __check_object_size+0x49c/0x900 [ 837.793855][T17145] ? bpf_lsm_netlink_send+0x9/0x10 [ 837.799009][T17145] netlink_sendmsg+0x8e4/0xcb0 [ 837.803778][T17145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.809055][T17145] ? __import_iovec+0x536/0x820 [ 837.813900][T17145] ? aa_sock_msg_perm+0x91/0x160 [ 837.818852][T17145] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 837.824148][T17145] ? security_socket_sendmsg+0x87/0xb0 [ 837.829608][T17145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 837.834890][T17145] __sock_sendmsg+0x221/0x270 [ 837.839571][T17145] ____sys_sendmsg+0x525/0x7d0 [ 837.844351][T17145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 837.849640][T17145] ? __might_fault+0xaa/0x120 [ 837.854408][T17145] __sys_sendmmsg+0x3b2/0x740 [ 837.859085][T17145] ? __pfx___sys_sendmmsg+0x10/0x10 [ 837.864303][T17145] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 837.870193][T17145] ? ksys_write+0x23e/0x2c0 [ 837.874692][T17145] ? __pfx_lock_release+0x10/0x10 [ 837.879716][T17145] ? vfs_write+0x7c4/0xc90 [ 837.884130][T17145] ? __mutex_unlock_slowpath+0x21d/0x750 [ 837.889757][T17145] ? __pfx_vfs_write+0x10/0x10 [ 837.894530][T17145] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 837.900505][T17145] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 837.906827][T17145] ? do_syscall_64+0x100/0x230 [ 837.911616][T17145] __x64_sys_sendmmsg+0xa0/0xb0 [ 837.916579][T17145] do_syscall_64+0xf3/0x230 [ 837.921095][T17145] ? clear_bhb_loop+0x35/0x90 [ 837.925796][T17145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.931724][T17145] RIP: 0033:0x7fa71fd7def9 [ 837.936151][T17145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.956125][T17145] RSP: 002b:00007fa720bca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 837.964555][T17145] RAX: ffffffffffffffda RBX: 00007fa71ff35f80 RCX: 00007fa71fd7def9 [ 837.972545][T17145] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 837.980526][T17145] RBP: 00007fa720bca090 R08: 0000000000000000 R09: 0000000000000000 [ 837.988500][T17145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.996468][T17145] R13: 0000000000000000 R14: 00007fa71ff35f80 R15: 00007fa72005fa28 [ 838.004476][T17145] [ 838.053239][T16331] Bluetooth: hci9: command tx timeout [ 838.180871][T10317] usb 5-1: USB disconnect, device number 107 [ 838.207267][T17157] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'. [ 838.328928][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.457288][T17124] chnl_net:caif_netlink_parms(): no params data found [ 838.510015][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 838.683408][T16624] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 838.716986][ T1056] hsr_slave_0: left promiscuous mode [ 838.738694][ T1056] hsr_slave_1: left promiscuous mode [ 838.756500][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 838.764528][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.775955][ T1056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 838.823728][ T1056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.873563][T16624] usb 4-1: Using ep0 maxpacket: 8 [ 838.892646][T16624] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 838.910950][ T1056] veth1_macvtap: left promiscuous mode [ 838.916576][T16624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 838.927881][ T1056] veth0_macvtap: left promiscuous mode [ 838.933758][T16624] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 838.945343][T16624] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 838.945630][ T1056] veth1_vlan: left promiscuous mode [ 838.961783][T16624] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 838.975861][T16624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.984437][T16331] Bluetooth: hci10: command tx timeout [ 839.009614][ T1056] veth0_vlan: left promiscuous mode [ 839.225344][T16624] usb 4-1: GET_CAPABILITIES returned 0 [ 839.242172][T16624] usbtmc 4-1:16.0: can't read capabilities [ 839.303696][T16331] Bluetooth: hci1: command tx timeout [ 839.427618][T17188] FAULT_INJECTION: forcing a failure. [ 839.427618][T17188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.441888][T17188] CPU: 0 UID: 0 PID: 17188 Comm: syz.4.2232 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 839.452691][T17188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 839.462775][T17188] Call Trace: [ 839.466083][T17188] [ 839.469041][T17188] dump_stack_lvl+0x241/0x360 [ 839.473755][T17188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 839.478993][T17188] ? __pfx__printk+0x10/0x10 [ 839.483617][T17188] ? snprintf+0xda/0x120 [ 839.487892][T17188] should_fail_ex+0x3b0/0x4e0 [ 839.492598][T17188] _copy_to_user+0x2f/0xb0 [ 839.497044][T17188] simple_read_from_buffer+0xca/0x150 [ 839.502549][T17188] proc_fail_nth_read+0x1ec/0x260 [ 839.507570][T17188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.513119][T17188] ? rw_verify_area+0x520/0x6b0 [ 839.518001][T17188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 839.523572][T17188] vfs_read+0x204/0xbc0 [ 839.527760][T17188] ? __pfx_vfs_read+0x10/0x10 [ 839.532460][T17188] ? __might_fault+0xc6/0x120 [ 839.537181][T17188] ? iommufd_fops_ioctl+0x4d9/0x5a0 [ 839.542413][T17188] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 839.547999][T17188] ksys_read+0x1a0/0x2c0 [ 839.552276][T17188] ? __pfx_ksys_read+0x10/0x10 [ 839.557072][T17188] ? do_syscall_64+0x100/0x230 [ 839.561861][T17188] ? do_syscall_64+0xb6/0x230 [ 839.566571][T17188] do_syscall_64+0xf3/0x230 [ 839.571103][T17188] ? clear_bhb_loop+0x35/0x90 [ 839.575812][T17188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.581742][T17188] RIP: 0033:0x7fb410f7c93c [ 839.586185][T17188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 839.605860][T17188] RSP: 002b:00007fb411dde030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 839.614400][T17188] RAX: ffffffffffffffda RBX: 00007fb411135f80 RCX: 00007fb410f7c93c [ 839.622410][T17188] RDX: 000000000000000f RSI: 00007fb411dde0a0 RDI: 0000000000000004 [ 839.630411][T17188] RBP: 00007fb411dde090 R08: 0000000000000000 R09: 0000000000000000 [ 839.638408][T17188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.646407][T17188] R13: 0000000000000000 R14: 00007fb411135f80 R15: 00007fb41125fa28 [ 839.654428][T17188] [ 840.109090][T15448] Bluetooth: hci9: command tx timeout [ 840.521708][ T1056] team0 (unregistering): Port device team_slave_1 removed [ 840.635585][ T1056] team0 (unregistering): Port device team_slave_0 removed [ 841.065244][T15448] Bluetooth: hci10: command tx timeout [ 841.384783][T15448] Bluetooth: hci1: command tx timeout [ 841.785460][T15448] Bluetooth: hci5: command 0x0406 tx timeout [ 841.880456][T16624] usb 4-1: USB disconnect, device number 98 [ 842.074142][T17124] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.122472][T17124] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.144411][T17124] bridge_slave_0: entered allmulticast mode [ 842.156483][ T8] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 842.178851][T17124] bridge_slave_0: entered promiscuous mode [ 842.186939][T15448] Bluetooth: hci9: command tx timeout [ 842.248932][T17124] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.261054][T17124] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.279370][T17124] bridge_slave_1: entered allmulticast mode [ 842.290446][T17124] bridge_slave_1: entered promiscuous mode [ 842.375644][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 842.421935][ T8] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 842.436983][ T8] usb 5-1: config 7 has no interface number 0 [ 842.454904][ T8] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 842.465264][ T8] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 842.477144][ T8] usb 5-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 842.526514][ T8] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 842.546043][ T8] usb 5-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 842.564723][ T8] usb 5-1: Product: syz [ 842.581364][ T8] usb 5-1: Manufacturer: syz [ 842.601739][ T8] usb 5-1: SerialNumber: syz [ 842.622160][ T8] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 842.694097][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2236'. [ 842.928463][T17124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.008821][T17133] chnl_net:caif_netlink_parms(): no params data found [ 843.016462][ T5236] usb 5-1: USB disconnect, device number 108 [ 843.131573][T17124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.144524][T15448] Bluetooth: hci10: command tx timeout [ 843.465454][T15448] Bluetooth: hci1: command tx timeout [ 843.612524][T17124] team0: Port device team_slave_0 added [ 843.700741][T17154] chnl_net:caif_netlink_parms(): no params data found [ 843.759608][T17124] team0: Port device team_slave_1 added [ 843.873030][T15448] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 843.882597][T15448] Bluetooth: hci8: Injecting HCI hardware error event [ 843.893476][T15448] Bluetooth: hci8: hardware error 0x00 [ 844.052842][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.080075][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 844.112411][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.128422][T17133] bridge_slave_0: entered allmulticast mode [ 844.147513][T17133] bridge_slave_0: entered promiscuous mode [ 844.258782][T17124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.265975][T16331] Bluetooth: hci9: command tx timeout [ 844.310183][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.464311][T17124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.492278][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.527710][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.554132][T17133] bridge_slave_1: entered allmulticast mode [ 844.567564][T17133] bridge_slave_1: entered promiscuous mode [ 844.599179][T17124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.625069][T17124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.661469][T17124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.836886][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.108491][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.149679][T17124] hsr_slave_0: entered promiscuous mode [ 845.174568][T17124] hsr_slave_1: entered promiscuous mode [ 845.189999][T17124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.198402][T17124] Cannot create hsr debugfs directory [ 845.233257][T16331] Bluetooth: hci10: command tx timeout [ 845.299697][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.331841][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.357985][T17154] bridge_slave_0: entered allmulticast mode [ 845.402391][T17154] bridge_slave_0: entered promiscuous mode [ 845.578794][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.590345][T17154] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.598311][T17154] bridge_slave_1: entered allmulticast mode [ 845.606471][T17154] bridge_slave_1: entered promiscuous mode [ 845.701386][T17133] team0: Port device team_slave_0 added [ 845.798092][T17154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.826835][T17133] team0: Port device team_slave_1 added [ 845.836954][T17154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.033562][T15448] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 846.072162][T17286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2244'. [ 846.084391][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.091372][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.119749][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.167933][T17290] kAFS: unparsable volume name [ 846.174796][T17290] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2246'. [ 846.191296][T17154] team0: Port device team_slave_0 added [ 846.206361][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.213791][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.241636][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.258777][T17154] team0: Port device team_slave_1 added [ 846.423191][T16624] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 846.496484][T17297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2247'. [ 846.613155][T16624] usb 4-1: Using ep0 maxpacket: 16 [ 846.620352][T16624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 846.631003][T16624] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 846.655962][T17133] hsr_slave_0: entered promiscuous mode [ 846.663579][T16624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.681489][T17133] hsr_slave_1: entered promiscuous mode [ 846.681792][T16624] usb 4-1: config 0 descriptor?? [ 846.708567][T16624] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 846.741427][T17133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.752821][T17133] Cannot create hsr debugfs directory [ 846.763618][T17154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.770774][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.797571][T17154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.832708][T17154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.851369][T17154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.879209][T17154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.305052][ T5236] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 847.504565][ T5236] usb 5-1: Using ep0 maxpacket: 16 [ 847.533016][ T5236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.537510][ T8] usb 4-1: USB disconnect, device number 99 [ 847.548323][ T5236] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.581804][T17154] hsr_slave_0: entered promiscuous mode [ 847.602955][ T5236] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 847.606081][T17154] hsr_slave_1: entered promiscuous mode [ 847.613283][ T5236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.638780][T17154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 847.660434][ T5236] usb 5-1: config 0 descriptor?? [ 847.665629][T17154] Cannot create hsr debugfs directory [ 848.100985][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.124374][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.133264][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.140564][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.163215][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.175522][ T5236] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 848.189413][ T5236] microsoft 0003:045E:07DA.002F: No inputs registered, leaving [ 848.203658][ T5236] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 848.233263][ T5236] microsoft 0003:045E:07DA.002F: no inputs found [ 848.239692][ T5236] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 848.332795][ T5236] usb 5-1: USB disconnect, device number 109 [ 848.715544][T17124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 848.741202][T17124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 848.870309][T17133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.888035][T17133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 848.937659][T17124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 849.055207][T17133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.094861][T17133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 849.135835][T17124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 849.313357][ T5289] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 849.331457][T17133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.400294][T17133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 849.528440][T17133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.546587][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.578693][T17133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 849.590501][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.633488][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.681539][ T5289] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 849.719367][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.779625][ T5289] usb 5-1: config 0 descriptor?? [ 850.075089][T17124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.229702][ T5289] hid-alps 0003:044E:120B.0030: unknown main item tag 0x0 [ 850.260033][ T5289] hid-alps 0003:044E:120B.0030: item fetching failed at offset 3/5 [ 850.274148][ T5289] hid-alps 0003:044E:120B.0030: parse failed [ 850.282357][ T5289] hid-alps 0003:044E:120B.0030: probe with driver hid-alps failed with error -22 [ 850.362645][T17124] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.417755][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.424975][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.465386][ T5289] usb 5-1: USB disconnect, device number 110 [ 850.472474][T17133] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.687915][T17154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.808833][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.816047][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.884511][T17133] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.928502][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 850.943730][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2253'. [ 850.987253][T17343] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 850.996798][T17343] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.025257][T17343] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.040748][T17343] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 851.050330][T17343] geneve2: entered promiscuous mode [ 851.057163][T17343] geneve2: entered allmulticast mode [ 851.156781][T17154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.196837][T17133] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 851.375877][T17154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.442249][T17133] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.578283][T17154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.258661][T17124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.477824][T17154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 852.557715][T17154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 852.625406][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.642086][T17154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 852.725340][T17154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 852.892534][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.012588][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.019989][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.091941][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.099401][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.153523][T17124] veth0_vlan: entered promiscuous mode [ 853.266592][T17124] veth1_vlan: entered promiscuous mode [ 853.626974][T17124] veth0_macvtap: entered promiscuous mode [ 853.678165][T17124] veth1_macvtap: entered promiscuous mode [ 853.724554][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.808856][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.834037][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.861412][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.886433][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.896816][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.915176][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.925524][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.937283][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.948998][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.960670][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 853.970410][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.982340][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.996913][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.009502][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.021813][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.032428][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.063222][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.073344][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.085862][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.097913][T17124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.119033][T17154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.151384][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.173626][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.207937][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.239379][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.267626][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.293608][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.343048][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.403607][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.429894][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.525957][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.608201][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.653378][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.713339][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.740072][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.757002][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.786895][T17413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.803252][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.816092][T17124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.836718][T17124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.850405][T17124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.870746][T17124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.881839][T17124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.891550][T17124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.904450][T17124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.007172][T17154] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.104141][ T5289] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 855.129847][T17133] veth0_vlan: entered promiscuous mode [ 855.147945][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.155212][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.200001][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.207260][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.229552][T17133] veth1_vlan: entered promiscuous mode [ 855.313226][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 855.338936][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 855.375297][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 855.387715][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 855.399284][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 855.409735][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 855.419849][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 855.436090][ T5289] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 855.451192][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.459646][ T5289] usb 4-1: Product: syz [ 855.473281][ T5289] usb 4-1: Manufacturer: syz [ 855.483384][ T5289] usb 4-1: SerialNumber: syz [ 855.495909][ T5289] usb 4-1: config 0 descriptor?? [ 855.510086][T17415] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 855.517547][T17133] veth0_macvtap: entered promiscuous mode [ 855.521431][ T5289] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 855.739688][ T5289] usb 4-1: USB disconnect, device number 100 [ 855.775439][T17133] veth1_macvtap: entered promiscuous mode [ 855.807975][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.847383][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.905011][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.916195][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.932767][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.955162][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.966064][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.976832][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.987635][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.999680][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.010739][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.022587][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.034471][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.045403][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.058163][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.071488][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.121215][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.161504][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.185173][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.198441][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.209493][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.233668][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.247361][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.312920][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.326925][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.353684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.382159][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.417848][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.469198][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.517134][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.547559][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.596361][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.724311][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.739576][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.756011][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.767254][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.783996][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.797704][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.816500][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.830080][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.843585][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.856113][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.868703][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.882395][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.893804][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.995784][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.104701][T17133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.141285][T17133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.151502][T17133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.162120][T17133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.273543][T17154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.026331][ T2930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.239026][ T2930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.368317][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.400345][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.629559][ T2930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.891153][ T2930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.986498][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.032910][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.053494][T17154] veth0_vlan: entered promiscuous mode [ 859.091580][T16331] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 859.105699][T16331] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 859.116952][T16331] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 859.132114][T16331] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 859.141659][T16331] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 859.154341][T16331] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 859.208694][T17154] veth1_vlan: entered promiscuous mode [ 859.532000][T17154] veth0_macvtap: entered promiscuous mode [ 859.641132][ T29] audit: type=1326 audit(1726377852.308:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17474 comm="syz.2.2268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63dc57def9 code=0x0 [ 859.666310][T17154] veth1_macvtap: entered promiscuous mode [ 859.738048][ T2930] bridge_slave_1: left allmulticast mode [ 859.815603][ T2930] bridge_slave_1: left promiscuous mode [ 859.826702][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.849242][ T2930] bridge_slave_0: left allmulticast mode [ 859.869917][ T2930] bridge_slave_0: left promiscuous mode [ 859.925672][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.225543][T15448] Bluetooth: hci8: command tx timeout [ 861.297291][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.311701][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.331785][ T2930] bond0 (unregistering): Released all slaves [ 861.367696][T17479] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2222'. [ 861.563457][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.605037][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.672649][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.745964][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.786441][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.825709][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.889602][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.912151][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 861.956979][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.020932][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.073861][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.110722][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.133866][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.196021][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.245134][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.289922][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.366674][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.451195][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.517289][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.566297][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.626139][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.656205][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.720282][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.771590][T17154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.854682][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.871974][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.882592][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.900879][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.913449][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.927429][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.937811][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.948844][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.959313][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.971398][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.981405][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.002566][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.012854][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.026771][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.037514][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.048754][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.059216][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.070631][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.080996][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.092199][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.102698][T17154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.127990][T17154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.140892][T17154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.303255][T15448] Bluetooth: hci8: command tx timeout [ 863.415356][T17154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.450185][T17154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.505770][T17154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.551909][T17154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.608830][T17524] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.643335][T17524] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 863.757678][T17524] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 863.768607][T17524] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 863.849073][T17524] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 863.856983][T17524] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 863.882579][T17524] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 863.897564][T17524] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 864.033296][T17524] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 864.039892][T17524] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 864.096663][T17524] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 864.111369][T17524] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 864.298127][T17524] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 864.334403][T17524] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 864.462344][T17524] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 864.478128][T17524] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 864.539195][T17471] chnl_net:caif_netlink_parms(): no params data found [ 864.895596][ T2930] hsr_slave_0: left promiscuous mode [ 864.928302][ T2930] hsr_slave_1: left promiscuous mode [ 864.978345][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.021436][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.077051][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.112160][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.183965][ T58] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 865.242864][ T2930] veth1_macvtap: left promiscuous mode [ 865.248715][ T2930] veth0_macvtap: left promiscuous mode [ 865.254807][ T2930] veth1_vlan: left promiscuous mode [ 865.260341][ T2930] veth0_vlan: left promiscuous mode [ 865.283277][T15223] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 865.312390][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 865.364346][T16331] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 865.380744][T16331] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 865.387076][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 865.401553][T16331] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 865.408046][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.420931][T16331] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 865.428784][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.453370][T16331] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 865.460368][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 865.476476][T16331] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 865.495922][T15223] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 865.505811][T15223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.526395][ T58] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 865.537115][T15223] usb 4-1: config 0 descriptor?? [ 865.587541][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.639560][ T58] usb 3-1: config 0 descriptor?? [ 865.759510][T15223] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 865.802563][T15223] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 865.835704][T15223] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 865.853192][T15223] [drm] Initialized udl on minor 2 [ 866.042176][T15223] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.063752][T15223] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 866.098450][ T58] sony 0003:054C:0268.0031: item fetching failed at offset 6/70 [ 866.105325][T15223] usb 4-1: USB disconnect, device number 101 [ 866.115892][ T58] sony 0003:054C:0268.0031: parse failed [ 866.122102][ T58] sony 0003:054C:0268.0031: probe with driver sony failed with error -22 [ 866.125598][ T5289] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 866.180036][ T5289] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 866.989071][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 867.078946][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 867.573350][T15448] Bluetooth: hci9: command tx timeout [ 868.312339][T15223] usb 3-1: USB disconnect, device number 106 [ 868.477849][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.604983][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.612252][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.636682][T17471] bridge_slave_0: entered allmulticast mode [ 868.655744][T17471] bridge_slave_0: entered promiscuous mode [ 868.673307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.681236][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.790989][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.805186][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.826294][T17471] bridge_slave_1: entered allmulticast mode [ 868.871094][T17471] bridge_slave_1: entered promiscuous mode [ 869.181955][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.261652][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.309608][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 869.318667][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.326221][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 869.521377][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.631106][T17471] team0: Port device team_slave_0 added [ 869.634442][T15448] Bluetooth: hci9: command tx timeout [ 869.725566][T17471] team0: Port device team_slave_1 added [ 869.823645][T15223] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 870.037232][T15223] usb 3-1: Using ep0 maxpacket: 32 [ 870.067501][T15223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.096101][T15223] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.126921][T15223] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 870.143794][ T2930] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.161819][T15223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.192468][T15223] usb 3-1: config 0 descriptor?? [ 870.203215][T15223] hub 3-1:0.0: bad descriptor, ignoring hub [ 870.215167][T15223] hub 3-1:0.0: probe with driver hub failed with error -5 [ 870.239329][T15223] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 870.251018][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.309055][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.313357][T16624] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 870.337499][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.387878][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.443708][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.453982][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.488666][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.523697][T15223] usb 3-1: USB disconnect, device number 107 [ 870.573955][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.693389][T16624] usb 1-1: Using ep0 maxpacket: 8 [ 870.754543][T16624] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 870.791723][T16624] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 870.823559][ T2930] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.888131][T16624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.925607][T16624] usb 1-1: Product: syz [ 870.942320][T16624] usb 1-1: Manufacturer: syz [ 870.961983][T16624] usb 1-1: SerialNumber: syz [ 871.005334][T11676] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 871.021438][T16624] usb 1-1: config 0 descriptor?? [ 871.050924][T16624] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 871.158823][ T2930] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.213410][T11676] usb 3-1: Invalid ep0 maxpacket: 32 [ 871.386297][T11676] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 871.569006][ T2930] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.605805][T16624] gspca_zc3xx: reg_w_i err -110 [ 871.614026][T11676] usb 3-1: Invalid ep0 maxpacket: 32 [ 871.639416][T11676] usb usb3-port1: attempt power cycle [ 871.710824][T15448] Bluetooth: hci9: command tx timeout [ 871.876111][T17471] hsr_slave_0: entered promiscuous mode [ 872.025340][T17471] hsr_slave_1: entered promiscuous mode [ 872.082617][T17471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.099442][T17471] Cannot create hsr debugfs directory [ 872.150100][T11676] usb 3-1: new low-speed USB device number 110 using dummy_hcd [ 872.234625][T16624] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 872.241169][T16624] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 872.309254][T11676] usb 3-1: device descriptor read/8, error -71 [ 872.664985][T17557] chnl_net:caif_netlink_parms(): no params data found [ 872.680612][ T29] audit: type=1326 audit(1726377865.348:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 872.837351][ T29] audit: type=1326 audit(1726377865.378:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 872.968949][ T29] audit: type=1326 audit(1726377865.378:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.049260][ T29] audit: type=1326 audit(1726377865.378:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.148640][ T29] audit: type=1326 audit(1726377865.378:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.335060][ T29] audit: type=1326 audit(1726377865.378:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.369305][ T29] audit: type=1326 audit(1726377865.378:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.393240][ T29] audit: type=1326 audit(1726377865.378:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.417821][ T29] audit: type=1326 audit(1726377865.378:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.435299][ T2930] bridge_slave_1: left allmulticast mode [ 873.443529][ T29] audit: type=1326 audit(1726377865.378:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17609 comm="syz.3.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71fd7def9 code=0x50000 [ 873.568049][ T2930] bridge_slave_1: left promiscuous mode [ 873.579871][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.633833][T11676] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 873.688946][ T2930] bridge_slave_0: left allmulticast mode [ 873.704593][T11676] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 873.748027][ T2930] bridge_slave_0: left promiscuous mode [ 873.783649][T15448] Bluetooth: hci9: command tx timeout [ 873.819477][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.820582][T11676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.928215][T11676] usb 3-1: config 0 descriptor?? [ 874.175322][T11676] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 874.225731][T11676] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 874.294436][T11676] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 874.303260][T11676] [drm] Initialized udl on minor 2 [ 874.376438][T16624] usb 1-1: USB disconnect, device number 118 [ 874.510310][T11676] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 874.537652][T11676] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 874.548031][ T58] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 874.644101][T11676] usb 3-1: USB disconnect, device number 111 [ 874.650575][ T58] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 874.661830][ T58] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 875.783880][T10317] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 875.831583][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.845733][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.876722][ T2930] bond0 (unregistering): Released all slaves [ 875.983014][T10317] usb 4-1: config 1 has an invalid descriptor of length 132, skipping remainder of the config [ 876.010442][T10317] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 876.033311][T10317] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.044793][T10317] usb 4-1: config 1 interface 0 altsetting 48 endpoint 0x82 has invalid maxpacket 44887, setting to 1024 [ 876.056526][T10317] usb 4-1: config 1 interface 0 altsetting 48 bulk endpoint 0x82 has invalid maxpacket 1024 [ 876.067892][T10317] usb 4-1: config 1 interface 0 altsetting 48 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.081909][T10317] usb 4-1: config 1 interface 0 has no altsetting 0 [ 876.091724][T10317] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.111927][T10317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.126847][T10317] usb 4-1: Product: 㵃䅰阧擲쫀遑蟱짉⑀ࠨ웲蔣춏逇༣嚈횤㺵ꠎ䶣唆愴㦈ꨫ槰䬚睬溂磧䌏髅⟟ꨪ네ﲛ๙Ꮼ嚗놹褺ၯ䭱䢇꿁≽㲕芪梢쌻梂欷ǟ肪๘ṙ舦說鴍紗졺殜ȘჅ똎検喉笭늯램᲼ੰ೸튇貼ګ袩Ⴂ凵썬ힷ [ 876.154510][T10317] usb 4-1: Manufacturer: ̆דୠ枿筵왖旅ꌐ닯놷ꗻ겚ꞁ≎痹␎㛐搏ꠥ薟跊湦澀멐분謱썰剙癘豰䞇䒪혾㉏댠ႇ铠墴晲覗忨據멟ⱷ৔뀼∓嵍彆㙲赴즛ྫ谡샒៊跆ᚿ寑놱咖ൄ⋏ն笙뽐脘钧䇛誐쥭梗⠹癌ඨ잪폍鍽鳄헾⛣狵쩠ᘍ䰾溤凜䬨툈᫮⟭黕⺲搌 [ 876.189285][T10317] usb 4-1: SerialNumber: syz [ 876.208070][T17647] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 876.468510][T17557] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.484291][T17557] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.492019][T17557] bridge_slave_0: entered allmulticast mode [ 876.517153][T17557] bridge_slave_0: entered promiscuous mode [ 876.682539][T17557] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.753821][T17557] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.778530][T17557] bridge_slave_1: entered allmulticast mode [ 876.786029][T17557] bridge_slave_1: entered promiscuous mode [ 877.450004][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 880.563495][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 880.574264][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 880.658388][T17679] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.704486][T17679] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.745484][T17679] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.756022][T17679] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 880.765907][T17679] geneve2: entered promiscuous mode [ 880.771920][T17679] geneve2: entered allmulticast mode [ 880.917230][T10317] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 880.941061][T10317] usb 4-1: USB disconnect, device number 102 [ 881.177979][T17557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.236272][ T2930] hsr_slave_0: left promiscuous mode [ 881.298987][ T2930] hsr_slave_1: left promiscuous mode [ 881.336965][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.349361][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.361777][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.376622][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.413394][T10317] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 881.446399][ T2930] veth1_macvtap: left promiscuous mode [ 881.453843][ T2930] veth0_macvtap: left promiscuous mode [ 881.459495][ T2930] veth1_vlan: left promiscuous mode [ 881.465524][ T2930] veth0_vlan: left promiscuous mode [ 881.636559][T10317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 881.680542][T10317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 881.732534][T10317] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 881.744886][T10317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.754794][T10317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 881.771370][T10317] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 881.789911][T10317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.799008][T10317] usb 4-1: Product: syz [ 881.803584][T10317] usb 4-1: Manufacturer: syz [ 881.808176][T10317] usb 4-1: SerialNumber: syz [ 881.815980][T10317] usb 4-1: config 0 descriptor?? [ 881.846785][T10317] redrat3 4-1:0.0: Couldn't find all endpoints [ 883.293842][ T5291] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 883.408326][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 883.486645][ T5291] usb 1-1: config 1 has an invalid descriptor of length 132, skipping remainder of the config [ 883.502711][ T5291] usb 1-1: config 1 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 883.515356][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 883.516551][ T5291] usb 1-1: config 1 interface 0 altsetting 48 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.567455][ T5291] usb 1-1: config 1 interface 0 altsetting 48 endpoint 0x82 has invalid maxpacket 44887, setting to 1024 [ 883.581632][ T5291] usb 1-1: config 1 interface 0 altsetting 48 bulk endpoint 0x82 has invalid maxpacket 1024 [ 883.597307][ T5291] usb 1-1: config 1 interface 0 altsetting 48 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.613781][ T5291] usb 1-1: config 1 interface 0 has no altsetting 0 [ 883.637476][ T5291] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 883.647845][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.663418][ T5291] usb 1-1: Product: 㵃䅰阧擲쫀遑蟱짉⑀ࠨ웲蔣춏逇༣嚈횤㺵ꠎ䶣唆愴㦈ꨫ槰䬚睬溂磧䌏髅⟟ꨪ네ﲛ๙Ꮼ嚗놹褺ၯ䭱䢇꿁≽㲕芪梢쌻梂欷ǟ肪๘ṙ舦說鴍紗졺殜ȘჅ똎検喉笭늯램᲼ੰ೸튇貼ګ袩Ⴂ凵썬ힷ [ 883.691298][ T5291] usb 1-1: Manufacturer: ̆דୠ枿筵왖旅ꌐ닯놷ꗻ겚ꞁ≎痹␎㛐搏ꠥ薟跊湦澀멐분謱썰剙癘豰䞇䒪혾㉏댠ႇ铠墴晲覗忨據멟ⱷ৔뀼∓嵍彆㙲赴즛ྫ谡샒៊跆ᚿ寑놱咖ൄ⋏ն笙뽐脘钧䇛誐쥭梗⠹癌ඨ잪폍鍽鳄헾⛣狵쩠ᘍ䰾溤凜䬨툈᫮⟭黕⺲搌 [ 883.728127][ T5291] usb 1-1: SerialNumber: syz [ 883.748833][T17705] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 884.189269][T10317] usb 4-1: USB disconnect, device number 103 [ 884.422151][T17709] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.2307' sets config #-1 [ 885.677071][T17557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.697166][T17718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2308'. [ 886.020003][T17557] team0: Port device team_slave_0 added [ 886.066516][T17557] team0: Port device team_slave_1 added [ 886.167409][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 886.334722][T17557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.386590][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.413784][T17557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.429369][T17557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.438770][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.474437][ T5321] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 886.544346][T17557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.715508][ T5321] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 886.738753][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.809648][ T5321] usb 3-1: config 0 descriptor?? [ 887.078153][T17557] hsr_slave_0: entered promiscuous mode [ 887.105793][T17557] hsr_slave_1: entered promiscuous mode [ 887.113371][T17557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.121749][T17557] Cannot create hsr debugfs directory [ 887.133560][T10317] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 887.146858][ T5291] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 887.171890][ T5291] usb 1-1: USB disconnect, device number 119 [ 887.312975][T17471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 887.353471][T10317] usb 4-1: Using ep0 maxpacket: 8 [ 887.365201][T17471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 887.397306][T10317] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 887.474146][T10317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.482249][T10317] usb 4-1: Product: syz [ 887.489016][T10317] usb 4-1: Manufacturer: syz [ 887.498186][T10317] usb 4-1: SerialNumber: syz [ 887.528271][T10317] usb 4-1: config 0 descriptor?? [ 887.607353][T17471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 887.660500][T17471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 887.771887][T10317] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 888.429912][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.510873][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.595059][ T5236] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 888.607717][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.615011][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.642689][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.650103][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.817606][ T5236] usb 1-1: Using ep0 maxpacket: 32 [ 888.853880][ T5236] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 888.874069][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.883862][ T5236] usb 1-1: Product: syz [ 888.889207][ T5236] usb 1-1: Manufacturer: syz [ 888.897131][ T5236] usb 1-1: SerialNumber: syz [ 888.908956][ T5236] usb 1-1: config 0 descriptor?? [ 888.919160][ T5236] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 889.270332][T17557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.307120][T17557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.329784][T17557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 889.362075][T17557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 889.374819][ T5321] usb 3-1: Cannot set autoneg [ 889.396986][ T5321] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 889.467212][ T5321] usb 3-1: USB disconnect, device number 112 [ 889.569620][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.644129][ T5236] gspca_stk1135: reg_w 0x0 err -110 [ 889.651857][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.660789][ T5236] gspca_stk1135: Sensor write failed [ 889.674115][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.681173][ T5236] gspca_stk1135: Sensor write failed [ 889.705862][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.734618][ T5236] gspca_stk1135: Sensor read failed [ 889.759072][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.783030][ T5236] gspca_stk1135: Sensor read failed [ 889.807258][ T5236] gspca_stk1135: Detected sensor type unknown (0x0) [ 889.823352][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.829828][ T5236] gspca_stk1135: Sensor read failed [ 889.837295][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.844620][ T5236] gspca_stk1135: Sensor read failed [ 889.857578][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.865256][ T5236] gspca_stk1135: Sensor write failed [ 889.870753][ T5236] gspca_stk1135: serial bus timeout: status=0x00 [ 889.886516][ T5236] gspca_stk1135: Sensor write failed [ 889.887476][T17471] veth0_vlan: entered promiscuous mode [ 889.915019][ T5236] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 890.001231][T17471] veth1_vlan: entered promiscuous mode [ 890.240272][T10317] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 890.305832][T10317] usb 4-1: USB disconnect, device number 104 [ 890.329867][T17557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.391081][T17471] veth0_macvtap: entered promiscuous mode [ 890.450887][T17471] veth1_macvtap: entered promiscuous mode [ 890.485823][T17761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2315'. [ 890.506825][T17557] 8021q: adding VLAN 0 to HW filter on device team0 [ 890.526546][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.539006][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.549437][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.560083][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.572387][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.583674][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.593904][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.605155][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.615281][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.625971][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.638041][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.649148][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.659500][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.672609][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.683462][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.697719][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.710677][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.721527][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.733544][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.744618][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 890.758049][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 890.839326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.846588][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.901427][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 890.916446][ T30] INFO: task syz.0.2006:15884 blocked for more than 143 seconds. [ 890.961490][ T30] Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 891.011438][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 891.026264][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.036770][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.047799][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.081852][ T30] task:syz.0.2006 state:D stack:25632 pid:15884 tgid:15884 ppid:15450 flags:0x00000004 [ 891.083988][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.109217][ T30] Call Trace: [ 891.112605][ T30] [ 891.119445][ T30] __schedule+0x1800/0x4a60 [ 891.149881][ T30] ? __pfx___schedule+0x10/0x10 [ 891.173877][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.190720][ T30] ? __pfx_lock_release+0x10/0x10 [ 891.196678][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 891.202880][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 891.228895][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.246285][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 891.286806][ T30] ? schedule+0x90/0x320 [ 891.304997][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.315895][ T30] schedule+0x14b/0x320 [ 891.334443][ T30] ? down_read+0x6a5/0xa40 [ 891.391980][ T30] schedule_preempt_disabled+0x13/0x30 [ 891.458019][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.478333][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.510935][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.539665][ T30] down_read+0x705/0xa40 [ 891.605188][ T30] ? __pfx_down_read+0x10/0x10 [ 891.611533][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.638042][ T30] ? release_fault_lock+0xa6/0x230 [ 891.644709][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 891.653317][ T30] ? count_memcg_event_mm+0x90/0x420 [ 891.658675][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 891.664157][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.664181][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.664200][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.664214][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.664234][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.664248][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.664296][T17471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.664311][T17471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.666041][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.684600][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 891.774120][T17471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.790189][T17471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.806747][T17471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.825488][T17471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.888867][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.896114][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 891.911265][ T30] ? count_memcg_event_mm+0x90/0x420 [ 891.929006][ T30] ? __filemap_get_folio+0x984/0xc10 [ 891.985934][ T30] filemap_fault+0x828/0x1760 [ 892.005876][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.031359][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 892.047508][ T30] ? pte_alloc_one+0x443/0x5d0 [ 892.068624][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 892.081906][ T30] ? __pfx_validate_chain+0x10/0x10 [ 892.103997][ T30] ? __pfx_validate_chain+0x10/0x10 [ 892.122711][ T30] __do_fault+0x135/0x460 [ 892.134644][ T30] handle_pte_fault+0x1176/0x6fc0 [ 892.154873][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.184738][ T30] ? mark_lock+0x9a/0x350 [ 892.189315][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 892.208268][ T30] ? __lock_acquire+0x137a/0x2040 [ 892.235723][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 892.253787][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 892.281191][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 892.291959][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 892.298121][ T30] handle_mm_fault+0x1109/0x1bc0 [ 892.305935][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 892.312264][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 892.319677][ T30] ? exc_page_fault+0x113/0x8c0 [ 892.325074][ T30] exc_page_fault+0x459/0x8c0 [ 892.330322][ T30] asm_exc_page_fault+0x26/0x30 [ 892.335719][ T30] RIP: 0033:0x7f013fb45998 [ 892.340330][ T30] RSP: 002b:00007f013fe5fb88 EFLAGS: 00010206 [ 892.349476][ T30] RAX: 0000000020000040 RBX: 0000000000000004 RCX: 00756d6d6f692f76 [ 892.358284][ T30] RDX: 000000000000000b RSI: 6d6f692f7665642f RDI: 0000000020000040 [ 892.367670][ T30] RBP: 00007f013fd37a80 R08: 00007f013fa00000 R09: 0000000000000001 [ 892.376325][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000000b4c81 [ 892.384513][ T30] R13: 00007f013fe5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 892.392744][ T30] [ 892.396179][ T30] INFO: task syz.0.2006:15885 blocked for more than 144 seconds. [ 892.411636][ T30] Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 892.424237][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 892.433252][ T30] task:syz.0.2006 state:D stack:25368 pid:15885 tgid:15884 ppid:15450 flags:0x00004006 [ 892.444056][ T30] Call Trace: [ 892.447791][ T30] [ 892.451126][ T30] __schedule+0x1800/0x4a60 [ 892.455941][ T30] ? __pfx___schedule+0x10/0x10 [ 892.461364][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.467242][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 892.474315][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.481218][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 892.487226][ T30] ? schedule+0x90/0x320 [ 892.492477][ T30] schedule+0x14b/0x320 [ 892.498051][ T30] ? down_read+0x6a5/0xa40 [ 892.502743][ T30] schedule_preempt_disabled+0x13/0x30 [ 892.511316][ T30] down_read+0x705/0xa40 [ 892.516980][ T30] ? __lock_acquire+0x137a/0x2040 [ 892.522452][ T30] ? __pfx_down_read+0x10/0x10 [ 892.528197][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 892.533967][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 892.539991][ T30] ? __pfx___up_read+0x10/0x10 [ 892.545951][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 892.555797][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 892.561874][ T30] ? count_memcg_event_mm+0x90/0x420 [ 892.568508][ T30] ? __filemap_get_folio+0x984/0xc10 [ 892.583872][ T30] filemap_fault+0x828/0x1760 [ 892.598972][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 892.619762][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 892.625232][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.630440][ T30] ? pte_alloc_one+0x443/0x5d0 [ 892.635806][ T30] __do_fault+0x135/0x460 [ 892.640556][ T30] handle_pte_fault+0x321f/0x6fc0 [ 892.646193][ T30] ? mark_lock+0x9a/0x350 [ 892.651306][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 892.657719][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 892.665607][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 892.672180][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 892.678299][ T30] ? mark_lock+0x9a/0x350 [ 892.682875][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 892.690801][ T30] ? __lock_acquire+0x137a/0x2040 [ 892.696496][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 892.702842][ T30] ? mt_find+0x226/0x850 [ 892.707780][ T30] ? __pfx_lock_release+0x10/0x10 [ 892.754197][ T30] handle_mm_fault+0x1109/0x1bc0 [ 892.759225][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 892.785564][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 892.801767][ T30] exc_page_fault+0x2b9/0x8c0 [ 892.831470][ T30] asm_exc_page_fault+0x26/0x30 [ 892.854970][ T30] RIP: 0010:fault_in_readable+0x165/0x2b0 [ 892.860754][ T30] Code: b4 ff 4c 8d b3 ff 0f 00 00 48 89 d8 4d 01 e6 49 81 e6 00 f0 ff ff 49 39 c6 72 6b e8 b5 e4 b4 ff 4c 39 f3 74 6e 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 2f 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 893.010315][ T30] RSP: 0018:ffffc9000414fa20 EFLAGS: 00050246 [ 893.018889][ T30] RAX: ffffffff81dea827 RBX: 000000002079d000 RCX: 0000000000040000 [ 893.043305][ T30] RDX: ffffc9000cd91000 RSI: 000000000003ffff RDI: 0000000000040000 [ 893.065399][ T30] RBP: ffffc9000414fad8 R08: ffffffff81dea798 R09: ffffffff84b01329 [ 893.094932][ T30] R10: 0000000000000002 R11: ffff888030f3da00 R12: 00000000000a3000 [ 893.103053][ T30] R13: dffffc0000000000 R14: 0000000020800000 R15: 1ffff92000829f4c [ 893.143524][ T30] ? fault_in_iov_iter_readable+0x49/0x280 [ 893.149787][ T30] ? fault_in_readable+0xf8/0x2b0 [ 893.154948][ T30] ? fault_in_readable+0x187/0x2b0 [ 893.161512][ T30] ? __pfx_fault_in_readable+0x10/0x10 [ 893.170007][ T30] ? folio_unlock+0x126/0x2f0 [ 893.175984][ T30] ? inode_to_bdi+0x69/0xf0 [ 893.181561][ T30] fault_in_iov_iter_readable+0x229/0x280 [ 893.187418][ T30] generic_perform_write+0x29f/0x840 [ 893.192754][ T30] ? __pfx_generic_perform_write+0x10/0x10 [ 893.199080][ T30] ? __pfx_generic_write_checks+0x10/0x10 [ 893.205285][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 893.211168][ T30] ? file_update_time+0x2a6/0x430 [ 893.216714][ T30] shmem_file_write_iter+0xfc/0x120 [ 893.222348][ T30] vfs_write+0xa72/0xc90 [ 893.229709][ T30] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 893.235882][ T30] ? __pfx_vfs_write+0x10/0x10 [ 893.240690][ T30] ? do_futex+0x33b/0x560 [ 893.245314][ T30] ksys_write+0x1a0/0x2c0 [ 893.249709][ T30] ? __pfx_ksys_write+0x10/0x10 [ 893.254700][ T30] ? do_syscall_64+0x100/0x230 [ 893.259504][ T30] ? do_syscall_64+0xb6/0x230 [ 893.264700][ T30] do_syscall_64+0xf3/0x230 [ 893.269642][ T30] ? clear_bhb_loop+0x35/0x90 [ 893.274479][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.280854][ T30] RIP: 0033:0x7f013fb7def9 [ 893.285790][ T30] RSP: 002b:00007f0140917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 893.294714][ T30] RAX: ffffffffffffffda RBX: 00007f013fd35f80 RCX: 00007f013fb7def9 [ 893.303667][ T30] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000008 [ 893.312073][ T30] RBP: 00007f013fbf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 893.320574][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.330559][ T30] R13: 0000000000000000 R14: 00007f013fd35f80 R15: 00007f013fe5fa28 [ 893.338655][ T30] [ 893.341724][ T30] INFO: task syz.0.2006:15887 blocked for more than 145 seconds. [ 893.364336][ T30] Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 893.372022][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 893.375466][ T58] usb 1-1: USB disconnect, device number 120 [ 893.387191][ T30] task:syz.0.2006 state:D stack:23952 pid:15887 tgid:15884 ppid:15450 flags:0x00004006 [ 893.387241][ T30] Call Trace: [ 893.387249][ T30] [ 893.387262][ T30] __schedule+0x1800/0x4a60 [ 893.408932][ T30] ? __pfx___schedule+0x10/0x10 [ 893.414005][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.419063][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 893.425191][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 893.454091][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 893.459283][ T30] ? schedule+0x90/0x320 [ 893.491987][ T30] schedule+0x14b/0x320 [ 893.505993][ T30] ? down_read+0x6a5/0xa40 [ 893.523680][ T30] schedule_preempt_disabled+0x13/0x30 [ 893.530182][ T30] down_read+0x705/0xa40 [ 893.536980][ T30] ? __lock_acquire+0x137a/0x2040 [ 893.542075][ T30] ? __pfx_down_read+0x10/0x10 [ 893.573528][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 893.579208][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 893.584950][ T30] ? __pfx___up_read+0x10/0x10 [ 893.589776][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 893.595623][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 893.601602][ T30] ? count_memcg_event_mm+0x90/0x420 [ 893.607239][ T30] ? __filemap_get_folio+0x984/0xc10 [ 893.633612][ T30] filemap_fault+0x828/0x1760 [ 893.644483][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 893.652439][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 893.673213][ T30] ? pte_alloc_one+0x443/0x5d0 [ 893.678072][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 893.703888][ T30] ? __pfx_validate_chain+0x10/0x10 [ 893.713027][ T30] __do_fault+0x135/0x460 [ 893.717516][ T30] handle_pte_fault+0x1176/0x6fc0 [ 893.722583][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 893.743192][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 893.749953][ T30] ? mark_lock+0x9a/0x350 [ 893.754875][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 893.760283][ T30] ? __lock_acquire+0x137a/0x2040 [ 893.765840][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 893.771791][ T30] ? mt_find+0x226/0x850 [ 893.776529][ T30] ? __pfx_lock_release+0x10/0x10 [ 893.782049][ T30] handle_mm_fault+0x1109/0x1bc0 [ 893.787792][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 893.793667][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 893.801038][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 893.806715][ T30] exc_page_fault+0x2b9/0x8c0 [ 893.811444][ T30] asm_exc_page_fault+0x26/0x30 [ 893.816508][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 893.822351][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 893.844628][ T30] RSP: 0018:ffffc90003dc77f8 EFLAGS: 00050206 [ 893.851160][ T30] RAX: ffff888053c80001 RBX: 0000000020261078 RCX: 0000000000000078 [ 893.859787][ T30] RDX: 0000000000000000 RSI: ffff888053c80f88 RDI: 0000000020261000 [ 893.869018][ T30] RBP: ffffc90003dc7978 R08: ffff888053c80fff R09: 1ffff1100a7901ff [ 893.877510][ T30] R10: dffffc0000000000 R11: ffffed100a790200 R12: dffffc0000000000 [ 893.886252][ T30] R13: 1ffff920007b8f14 R14: 0000000000001000 R15: ffff888053c80000 [ 893.894715][ T30] _copy_to_iter+0x4c0/0x1960 [ 893.899958][ T30] ? __pfx__copy_to_iter+0x10/0x10 [ 893.905799][ T30] ? folio_mark_accessed+0x32b/0x1ca0 [ 893.913130][ T30] ? __pfx_folio_mark_accessed+0x10/0x10 [ 893.918822][ T30] ? page_copy_sane+0x46/0x260 [ 893.930799][ T30] copy_page_to_iter+0xb1/0x160 [ 893.935829][ T30] shmem_file_read_iter+0x4cb/0xa50 [ 893.943289][ T30] ? __pfx_shmem_file_read_iter+0x10/0x10 [ 893.949597][ T30] ? iovec_from_user+0x87/0x240 [ 893.963153][ T30] ? iovec_from_user+0x87/0x240 [ 893.968462][ T30] ? iovec_from_user+0x87/0x240 [ 893.980015][ T30] ? __kmalloc_noprof+0x21a/0x400 [ 893.990949][ T30] do_iter_readv_writev+0x60a/0x890 [ 893.996830][ T30] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 894.002987][ T30] ? rw_verify_area+0x520/0x6b0 [ 894.008426][ T30] vfs_readv+0x2b6/0xa90 [ 894.013225][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 894.018435][ T30] ? __fget_files+0x29/0x470 [ 894.032507][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 894.038015][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 894.046363][ T30] ? do_syscall_64+0x100/0x230 [ 894.053180][ T30] ? do_syscall_64+0xb6/0x230 [ 894.057923][ T30] do_syscall_64+0xf3/0x230 [ 894.062497][ T30] ? clear_bhb_loop+0x35/0x90 [ 894.067303][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.073670][ T30] RIP: 0033:0x7f013fb7def9 [ 894.078130][ T30] RSP: 002b:00007f01408f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 894.087062][ T30] RAX: ffffffffffffffda RBX: 00007f013fd36058 RCX: 00007f013fb7def9 [ 894.095541][ T30] RDX: 0000000000000018 RSI: 00000000200015c0 RDI: 0000000000000008 [ 894.105583][ T30] RBP: 00007f013fbf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 894.114085][ T30] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 894.122465][ T30] R13: 0000000000000000 R14: 00007f013fd36058 R15: 00007f013fe5fa28 [ 894.130978][ T30] [ 894.134476][ T30] INFO: task syz.0.2006:15890 blocked for more than 146 seconds. [ 894.166881][ T30] Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 894.174652][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 894.184044][ T30] task:syz.0.2006 state:D stack:24816 pid:15890 tgid:15884 ppid:15450 flags:0x00004006 [ 894.194752][ T30] Call Trace: [ 894.198492][ T30] [ 894.201786][ T30] __schedule+0x1800/0x4a60 [ 894.206795][ T30] ? __pfx___schedule+0x10/0x10 [ 894.212103][ T30] ? __pfx_lock_release+0x10/0x10 [ 894.217302][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 894.223771][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 894.233154][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 894.238334][ T30] ? schedule+0x90/0x320 [ 894.242608][ T30] schedule+0x14b/0x320 [ 894.246942][ T30] ? down_read+0x6a5/0xa40 [ 894.253490][ T30] schedule_preempt_disabled+0x13/0x30 [ 894.258998][ T30] down_read+0x705/0xa40 [ 894.280151][ T30] ? __lock_acquire+0x137a/0x2040 [ 894.299786][ T30] ? __pfx_down_read+0x10/0x10 [ 894.312181][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 894.325214][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 894.335224][ T30] ? __pfx___up_read+0x10/0x10 [ 894.346694][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 894.353394][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 894.359347][ T30] ? count_memcg_event_mm+0x90/0x420 [ 894.366007][ T30] ? __filemap_get_folio+0x984/0xc10 [ 894.371362][ T30] filemap_fault+0x828/0x1760 [ 894.376165][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 894.381350][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 894.387049][ T30] ? __pfx_lock_release+0x10/0x10 [ 894.392115][ T30] ? pte_alloc_one+0x443/0x5d0 [ 894.397174][ T30] ? validate_chain+0x11e/0x5900 [ 894.402999][ T30] __do_fault+0x135/0x460 [ 894.407633][ T30] handle_pte_fault+0x321f/0x6fc0 [ 894.413736][ T30] ? __pfx_validate_chain+0x10/0x10 [ 894.419074][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 894.424969][ T30] ? __pfx_validate_chain+0x10/0x10 [ 894.430794][ T30] ? validate_chain+0x11e/0x5900 [ 894.436230][ T30] ? __lock_acquire+0x137a/0x2040 [ 894.441706][ T30] ? validate_chain+0x11e/0x5900 [ 894.447177][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 894.452982][ T30] ? mark_lock+0x9a/0x350 [ 894.459649][ T30] ? __lock_acquire+0x137a/0x2040 [ 894.465038][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 894.471014][ T30] handle_mm_fault+0x1109/0x1bc0 [ 894.476292][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 894.481894][ T30] ? __pfx_find_vma+0x10/0x10 [ 894.487121][ T30] ? vma_is_secretmem+0xd/0x50 [ 894.492483][ T30] ? check_vma_flags+0x500/0x5a0 [ 894.497888][ T30] __get_user_pages+0x6ec/0x16a0 [ 894.506067][ T30] ? __pfx___get_user_pages+0x10/0x10 [ 894.511873][ T30] populate_vma_page_range+0x264/0x330 [ 894.517908][ T30] ? __pfx_populate_vma_page_range+0x10/0x10 [ 894.524431][ T30] ? userfaultfd_unmap_complete+0x30c/0x360 [ 894.530375][ T30] __mm_populate+0x27a/0x460 [ 894.535083][ T30] ? __pfx___mm_populate+0x10/0x10 [ 894.540255][ T30] vm_mmap_pgoff+0x2c3/0x3d0 [ 894.544973][ T30] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 894.550468][ T30] ? __fget_files+0x29/0x470 [ 894.557739][ T30] ? __fget_files+0x3f6/0x470 [ 894.562881][ T30] ksys_mmap_pgoff+0x4f1/0x720 [ 894.567848][ T30] ? __x64_sys_mmap+0x7f/0x140 [ 894.573177][ T30] do_syscall_64+0xf3/0x230 [ 894.578112][ T30] ? clear_bhb_loop+0x35/0x90 [ 894.584113][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.590149][ T30] RIP: 0033:0x7f013fb7def9 [ 894.595009][ T30] RSP: 002b:00007f01408d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 894.604265][ T30] RAX: ffffffffffffffda RBX: 00007f013fd36130 RCX: 00007f013fb7def9 [ 894.612621][ T30] RDX: 0000000003000006 RSI: 0000000000b36000 RDI: 0000000020000000 [ 894.620723][ T30] RBP: 00007f013fbf0b76 R08: 000000000000000c R09: 0000000000000000 [ 894.628896][ T30] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 894.637391][ T30] R13: 0000000000000000 R14: 00007f013fd36130 R15: 00007f013fe5fa28 [ 894.645906][ T30] [ 894.649388][ T30] [ 894.649388][ T30] Showing all locks held in the system: [ 894.723030][T17557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.756834][T17557] veth0_vlan: entered promiscuous mode [ 894.816821][ T30] 3 locks held by kworker/u8:1/12: [ 894.841231][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 894.905898][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 894.926305][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 894.936314][ T30] 1 lock held by khungtaskd/30: [ 894.941194][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 894.951630][ T30] 3 locks held by kworker/u8:3/52: [ 894.957430][ T30] #0: ffff88802fa94148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 894.979467][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 894.993389][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 895.002908][ T30] 3 locks held by kworker/u8:8/2930: [ 895.008573][ T30] 2 locks held by getty/4990: [ 895.013432][ T30] #0: ffff8880304fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 895.023653][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 895.034087][ T30] 3 locks held by kworker/0:7/5291: [ 895.039312][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 895.051097][ T30] #1: ffffc900045c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 895.062647][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 895.075481][ T30] 3 locks held by kworker/1:0/15223: [ 895.081205][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 895.092697][ T30] #1: ffffc90008f17d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 895.105993][ T30] #2: ffff888022f73240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 895.116664][ T30] 1 lock held by syz.4.1956/15512: [ 895.122195][ T30] 1 lock held by syz.0.2006/15884: [ 895.127432][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.148573][ T30] 4 locks held by syz.0.2006/15885: [ 895.155774][ T30] #0: ffff8880303940c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 895.165655][ T30] #1: ffff888060122420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 895.177016][ T30] #2: ffff888061063080 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x83/0x120 [ 895.188912][ T30] #3: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.200662][ T30] 1 lock held by syz.0.2006/15887: [ 895.206231][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.217511][ T30] 1 lock held by syz.0.2006/15890: [ 895.222650][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.234618][ T30] 1 lock held by syz.4.2040/16182: [ 895.239770][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.251775][ T30] 1 lock held by syz.4.2040/16183: [ 895.257578][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.269151][ T30] 1 lock held by syz.4.2040/16184: [ 895.276611][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.288604][ T30] 1 lock held by syz.4.2040/16185: [ 895.295077][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.314067][ T30] 1 lock held by syz.4.2040/16186: [ 895.319240][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.337677][ T30] 1 lock held by syz.4.2040/16187: [ 895.342885][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.354219][ T30] 1 lock held by syz.4.2040/16190: [ 895.359747][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.371679][ T30] 1 lock held by syz.4.2040/16192: [ 895.379060][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.391148][ T30] 1 lock held by syz.4.2040/16194: [ 895.396775][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.408569][ T30] 1 lock held by syz.4.2040/16197: [ 895.414185][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.425930][ T30] 1 lock held by syz.4.2161/16812: [ 895.431077][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x1618/0x2410 [ 895.442245][ T30] 1 lock held by syz.1.2203/17061: [ 895.447522][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.458798][ T30] 1 lock held by syz.0.2205/17074: [ 895.464771][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.476579][ T30] 1 lock held by syz.0.2205/17075: [ 895.484126][ T30] #0: ffff888023156540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 895.495823][ T30] 3 locks held by syz-executor/17471: [ 895.501727][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 895.511673][ T30] #1: ffff888061545428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 895.521970][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 895.533475][ T30] 1 lock held by syz-executor/17557: [ 895.539213][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 895.549082][ T30] 2 locks held by cmp/17815: [ 895.553807][ T30] [ 895.560549][ T30] ============================================= [ 895.560549][ T30] [ 895.591479][T17557] veth1_vlan: entered promiscuous mode [ 895.609673][ T30] NMI backtrace for cpu 0 [ 895.614068][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 895.624601][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 895.634687][ T30] Call Trace: [ 895.637996][ T30] [ 895.640967][ T30] dump_stack_lvl+0x241/0x360 [ 895.645689][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.650926][ T30] ? __pfx__printk+0x10/0x10 [ 895.655569][ T30] ? vprintk_emit+0x667/0x7c0 [ 895.656932][T17557] veth0_macvtap: entered promiscuous mode [ 895.660254][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 895.671008][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 895.675989][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 895.681478][ T30] ? _printk+0xd5/0x120 [ 895.685674][ T30] ? __pfx__printk+0x10/0x10 [ 895.690293][ T30] ? __wake_up_klogd+0xcc/0x110 [ 895.695176][ T30] ? __pfx__printk+0x10/0x10 [ 895.699797][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 895.701605][T17557] veth1_macvtap: entered promiscuous mode [ 895.704846][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 895.704875][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 895.704903][ T30] watchdog+0xff4/0x1040 [ 895.726818][ T30] ? watchdog+0x1ea/0x1040 [ 895.731247][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.735959][ T30] kthread+0x2f0/0x390 [ 895.740019][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.744690][ T30] ? __pfx_kthread+0x10/0x10 [ 895.749271][ T30] ret_from_fork+0x4b/0x80 [ 895.753688][ T30] ? __pfx_kthread+0x10/0x10 [ 895.758268][ T30] ret_from_fork_asm+0x1a/0x30 [ 895.763043][ T30] [ 895.768146][ T30] Sending NMI from CPU 0 to CPUs 1: [ 895.774609][ C1] NMI backtrace for cpu 1 [ 895.774626][ C1] CPU: 1 UID: 0 PID: 17557 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 895.774646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 895.774656][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 895.774690][ C1] Code: 8b 3d 6c 76 96 0c 48 89 de 5b e9 b3 9a 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d7 03 00 65 8b 15 40 4a 70 7e 81 e2 00 01 ff 00 [ 895.774704][ C1] RSP: 0018:ffffc900041177e0 EFLAGS: 00000246 [ 895.774720][ C1] RAX: ffffffff8141289b RBX: 0000000000000000 RCX: dffffc0000000000 [ 895.774733][ C1] RDX: ffff88802e25da00 RSI: 0000000000000001 RDI: ffffffff81412811 [ 895.774745][ C1] RBP: ffffc900041178c0 R08: ffffffff814127f1 R09: ffffc900041179b0 [ 895.774757][ C1] R10: 0000000000000003 R11: ffffffff817f2f80 R12: ffff88802e25da00 [ 895.774769][ C1] R13: ffffc90004117910 R14: 0000000000000001 R15: ffffffff81fa9a1f [ 895.774781][ C1] FS: 0000555574e25500(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 895.774796][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 895.774809][ C1] CR2: 00007fb24b934440 CR3: 0000000074d82000 CR4: 00000000003526f0 [ 895.774823][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 895.774833][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 895.774844][ C1] Call Trace: [ 895.774851][ C1] [ 895.774858][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 895.774878][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 895.774900][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 895.774919][ C1] ? nmi_handle+0x2a/0x5a0 [ 895.774943][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 895.774961][ C1] ? nmi_handle+0x14f/0x5a0 [ 895.774977][ C1] ? nmi_handle+0x2a/0x5a0 [ 895.774993][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 895.775012][ C1] ? default_do_nmi+0x63/0x160 [ 895.775032][ C1] ? exc_nmi+0x123/0x1f0 [ 895.775050][ C1] ? end_repeat_nmi+0xf/0x53 [ 895.775069][ C1] ? kasan_save_track+0x3f/0x80 [ 895.775090][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 895.775109][ C1] ? unwind_next_frame+0xa1/0x2a00 [ 895.775129][ C1] ? unwind_next_frame+0x14b/0x2a00 [ 895.775150][ C1] ? unwind_next_frame+0xc1/0x2a00 [ 895.775169][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 895.775188][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 895.775208][ C1] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 895.775227][ C1] [ 895.775233][ C1] [ 895.775239][ C1] unwind_next_frame+0x14b/0x2a00 [ 895.775264][ C1] ? stack_trace_save+0x118/0x1d0 [ 895.775282][ C1] ? kasan_save_track+0x3f/0x80 [ 895.775301][ C1] ? __kernel_text_address+0xd/0x40 [ 895.775317][ C1] ? kasan_save_track+0x3f/0x80 [ 895.775334][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 895.775353][ C1] arch_stack_walk+0x151/0x1b0 [ 895.775372][ C1] ? kasan_save_track+0x3f/0x80 [ 895.775393][ C1] stack_trace_save+0x118/0x1d0 [ 895.775413][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 895.775434][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 895.775455][ C1] kasan_save_track+0x3f/0x80 [ 895.775473][ C1] ? kasan_save_track+0x3f/0x80 [ 895.775518][ C1] __kasan_slab_alloc+0x66/0x80 [ 895.775538][ C1] ? security_inode_alloc+0x28/0x120 [ 895.775557][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 895.775577][ C1] security_inode_alloc+0x28/0x120 [ 895.775596][ C1] inode_init_always+0x966/0xc90 [ 895.775615][ C1] ? __pfx_sock_alloc_inode+0x10/0x10 [ 895.775638][ C1] new_inode_pseudo+0x9e/0x1a0 [ 895.775658][ C1] __sock_create+0x123/0x920 [ 895.775683][ C1] __sys_socket+0x150/0x3c0 [ 895.775700][ C1] ? __pfx___sys_socket+0x10/0x10 [ 895.775716][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 895.775737][ C1] ? do_syscall_64+0x100/0x230 [ 895.775756][ C1] __x64_sys_socket+0x7a/0x90 [ 895.775773][ C1] do_syscall_64+0xf3/0x230 [ 895.775789][ C1] ? clear_bhb_loop+0x35/0x90 [ 895.775808][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.775826][ C1] RIP: 0033:0x7f3fdc77fe17 [ 895.775840][ C1] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.775853][ C1] RSP: 002b:00007f3fdca5f678 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 895.775869][ C1] RAX: ffffffffffffffda RBX: 00007f3fdc7f1b20 RCX: 00007f3fdc77fe17 [ 895.775881][ C1] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 895.775892][ C1] RBP: 00007f3fdca5f690 R08: 0000000000000000 R09: 007664617461625f [ 895.775903][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f3fdca5f71c [ 895.775914][ C1] R13: 00007f3fdc7f1b20 R14: 00007f3fdd464620 R15: 00007f3fdc7f1b20 [ 895.775934][ C1] [ 895.783846][T17471] ieee80211 phy148: Selected rate control algorithm 'minstrel_ht' [ 895.839266][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 895.839285][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0 [ 895.839306][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 895.839317][ T30] Call Trace: [ 895.839326][ T30] [ 895.839335][ T30] dump_stack_lvl+0x241/0x360 [ 895.839363][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 895.839383][ T30] ? __pfx__printk+0x10/0x10 [ 895.839398][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 895.839425][ T30] ? vscnprintf+0x5d/0x90 [ 895.839448][ T30] panic+0x349/0x860 [ 895.839468][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 895.839490][ T30] ? __pfx_panic+0x10/0x10 [ 895.839505][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 895.839525][ T30] ? __irq_work_queue_local+0x137/0x410 [ 895.839549][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 895.839568][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 895.839588][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 895.839611][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 895.839635][ T30] watchdog+0x1033/0x1040 [ 895.839659][ T30] ? watchdog+0x1ea/0x1040 [ 895.839686][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.839707][ T30] kthread+0x2f0/0x390 [ 895.839724][ T30] ? __pfx_watchdog+0x10/0x10 [ 895.839745][ T30] ? __pfx_kthread+0x10/0x10 [ 895.839762][ T30] ret_from_fork+0x4b/0x80 [ 895.839784][ T30] ? __pfx_kthread+0x10/0x10 [ 895.839801][ T30] ret_from_fork_asm+0x1a/0x30 [ 895.839835][ T30] [ 895.843129][ T30] Kernel Offset: disabled