last executing test programs: 15.885116653s ago: executing program 4 (id=2501): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x64, 0x0, 0x10, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3}, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x1, [{@broadcast, 0xcf}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@broadcast, 0x67a1}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x7f]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x5, [0x40, 0x7, 0x8, 0x5]}, @noop]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x800, 0x200}, {0x3, 0x4, 0x1}], ';'}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0xe, 0x5f, 0x61]}}, &(0x7f0000000440)=""/74, 0x57, 0x4a, 0x1, 0x3b4, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000bf3b347c00", @ANYRES32=0x1, @ANYBLOB="990900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/182, 0xb6) 15.803304326s ago: executing program 4 (id=2502): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x12}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 13.561863498s ago: executing program 4 (id=2504): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x6400, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 13.542952337s ago: executing program 4 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xa}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x4d4e720c}]}, 0x3c}}, 0x0) 11.696151532s ago: executing program 4 (id=2511): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f00000006c0)={{}, 0x0, 0x0, @unused=[0x3], @name="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"}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) 10.725487191s ago: executing program 4 (id=2515): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="a6123b26000003d6a1397ce6321b60a287a043915cfed46d979b73"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0], &(0x7f0000000040), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f00000000c0)=[r4], 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3c, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x0, 0x0, 0x3d, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7fe2d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4c533a97c7b8c5353bd31f40e7604a66c5ec48c29f065d"}, 0xd8) r6 = syz_open_dev$video4linux(&(0x7f0000000840), 0x7f, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc040563e, &(0x7f0000000300)={0xda1, 0x0, 0x4}) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x110, 0x2, 0x7, 0x4, 0x20, 0x9}, 0x54, &(0x7f0000000640)={0x5, 0xf, 0x54, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0x7, 0x2, 0x50}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xdb, 0xfb, 0x1ff}, @ssp_cap={0x24, 0x10, 0xa, 0xfc, 0x6, 0x5, 0xf00, 0x15, [0x3f00, 0xc00f, 0xff3f00, 0x0, 0xc000, 0xff0000]}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x3, 0x0, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xe2, 0x2, 0x5}]}, 0x9, [{0x27, &(0x7f00000006c0)=@string={0x27, 0x3, "d9019f912005915a4fcdd438ddf069bcce49821a96c0646d00311fb1e67729064e9f09dae7"}}, {0x28, &(0x7f0000000700)=@string={0x28, 0x3, "616b6cdff245ca8a962c0eb69222af79cc64ec79d77193b6c3627dd2e3e9b1f6c0a02696cad4"}}, {0x47, &(0x7f0000000a40)=ANY=[@ANYBLOB="4703cfc6cfb5c9d8ef754e05f738bc6b9bb49c71be4ceab4a2907c66661cd456baca4f592757b2c3900090119a82abab4160cec50ecb3655af3a546143acf892f4ce5aca31f7cb75a064e8ded8bfca5d5534a20eeaf33f319d9cb5ddd0a09c6f07f85f59efe502b482e2f0559ff30eac87a94de35fa7000000000000000000009a71458f429f21856b0108e2c160c6d811a65737d8dca0b1863a64a5d5510fbdbf0076625233cbceaffff199797a15f0da23f0ecacb7591408cdcfb911099c092bc796e397c9781da25fcc380d8b6431c17e53cee10f173a636c273d087e9a46e2f89f408d69d14291647208af30"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x34, &(0x7f0000000840)=@string={0x34, 0x3, "61d749c29ead82215a4652d70c1deae294d36fcb872b433c13b90070e1c88066d1393804a0d143309a1b95ea4c7a73485143"}}, {0x3c, &(0x7f0000000880)=ANY=[@ANYBLOB="3c03a471d9f044d89323fed029fddb4350a40c3e452203f72c276d8dc4758d5dfd5400"/45]}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1007}}]}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x1f8, 0x2e0, 0xe8, 0x2e0, 0x8000000, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@empty, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@random="07232bd01eb8"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'syzkaller0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="319f73a6d8a3", @empty, @local, @broadcast}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000240)="96", 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a2", 0x3, r10) ftruncate(r9, 0xffffffff) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast1}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000a00)=0xe8) 9.493755244s ago: executing program 2 (id=2520): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x4}]}}}]}, 0x38}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000c80)={0x90000009}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef0009", @ANYRES16=r0], 0x0) 8.469754008s ago: executing program 2 (id=2521): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x64, 0x0, 0x10, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3}, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x1, [{@broadcast, 0xcf}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@broadcast, 0x67a1}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x7f]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x5, [0x40, 0x7, 0x8, 0x5]}, @noop]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x800, 0x200}, {0x3, 0x4, 0x1}], ';'}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0xe, 0x5f, 0x61]}}, &(0x7f0000000440)=""/74, 0x57, 0x4a, 0x1, 0x3b4, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000bf3b347c00", @ANYRES32=0x1, @ANYBLOB="990900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/182, 0xb6) 8.187074073s ago: executing program 2 (id=2522): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ef17ee6000000000000109022d00010000000009040000010300020009210400000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff03425d4d50e7", 0x2b}], 0x1, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<', @ANYRES16=r4, @ANYBLOB="010000000000000000003b0000", @ANYRES32=r5], 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) getsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000000fcffffff810700000000000000c616f7994300000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x90800, 0x0) 4.179350565s ago: executing program 2 (id=2530): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x64, 0x0, 0x10, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3}, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x1, [{@broadcast, 0xcf}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@broadcast, 0x67a1}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x7f]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x5, [0x40, 0x7, 0x8, 0x5]}, @noop]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x800, 0x200}, {0x3, 0x4, 0x1}], ';'}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0xe, 0x5f, 0x61]}}, &(0x7f0000000440)=""/74, 0x57, 0x4a, 0x1, 0x3b4, 0x0, @void, @value}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000280)=""/182, 0xb6) 4.004007651s ago: executing program 2 (id=2531): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000006780), 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r3, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x4000000000002b1, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff000000000000200012800c0001006d6163766c616e00100002800a000900aaaaaaaaaa00000008000500", @ANYRES32=r1, @ANYBLOB="01a87a86e065f9d5eeda36148c4d707ba14213c65f3c49c314ee8044eb930655132247794a9924a45184ea5205cdbce2ac68fe40ba516a4e0a869ab45b29748e17d97c07c6871bfd35ac177dfb3f8ca79d557086eb07dca0657a36991023fddfe66ee86f53f2550e"], 0x48}}, 0x0) r5 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x400400, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x8000, 0x0, 0x3, 0x1}, 0x8) 2.958426935s ago: executing program 1 (id=2534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x17, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181002e00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, {{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000340)=""/93, 0x5d}], 0x2, &(0x7f00000003c0)=""/78, 0x4e}}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000500)={0x1, r4}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c0a4001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x1, 0x1, 0x0, &(0x7f00000015c0)=""/101, &(0x7f0000001540)=""/72, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) socket$alg(0x26, 0x5, 0x0) syz_usbip_server_init(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000000c0)={0x40, 0x453, 0x100, 0x70bd2b, 0x25dfdbfe, "2b0fb75b3089b58e93833e12503381edabd83c7941dfd80b7e6d06ad81fb7a8104bbc95d44d45f155c925a110b"}, 0x40}, 0x1, 0x0, 0x0, 0x70939d02ef4d2197}, 0x8800) 2.706644065s ago: executing program 2 (id=2537): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/4108, 0x100c}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) preadv(r1, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/188, 0xbc}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2c000000210007010000000000000000017c000004000900140002"], 0x2c}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r4, 0x80045113, &(0x7f00000005c0)) dup(0xffffffffffffffff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 1.973165978s ago: executing program 0 (id=2539): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x74, 0x0, 0x0, 0x7fff0000}]}) shutdown(r1, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000040)=""/41, &(0x7f0000001400)=0x29) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x9d, 0xaf, 0x49, 0x20, 0x10cf, 0x8067, 0x2c27, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xc3, 0x58, 0xf5, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2}}]}}]}}]}}, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r3 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x410002, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r4, 0x8000000) sendto$inet(r1, &(0x7f0000000780)='+', 0x1, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000480), 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000340)={{}, {0x5}, 0xc0, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)="7b1a8179faab4c3d06babdab787b534a217a68ad3f0b3b1da0b89be7104a8a55505c82a52ea61d03453e5e754c68ba2d23633792b31b53c2bee50412408690c57315e59d5b6008a88ffc8baab0db92ff251e595ce908dd8fe7ed61ac409f0b3a47483f8d618a117141d3f289dad9f375905a127e87a874d23c6146a3168c24fa1cd2ed8f050b8fc43b9bb6015f473b1f49d1be033242f1c8887be9552c1eeb3c064d723ec2f0fad2bee8efbbee1ab9f6ccafa5d1c2f583c9748b95f2ffe52da45cac2f6cb79b0151913240cff1482b3f80b294c31344bc50a04997798cbede0472e759c845ae52e2ff746d6dfbc21c20722d", 0xf2, 0x0, &(0x7f0000001440)={0x2, 0x28, {0x0, 0xc, 0x1b, "d1d50c3b9fd99c553033d65168803ed4740112016cc10960c7361c"}, 0xc4, "3c8bcae851dd7ba8c4157dcedcfc7b41c78d14022f9bdf524330c69a03317e17f19d40cd6491d15cdc831b68ce554e6c2b02755c80f728e61c90246c186fb65e57b71c05b7562bbe58264bc5e249eba2469ba4416d7bb955283b7e0fd4ff52bf758946caf80b641020dca85bef220055bdceac4441433e7f227d02ebc401a5e6ea29d3dbf5689bc668037946e48d90b0e3ff53aa2a7bf70f99c18be7ae45e5612ac559b87c7de099ef89208189b53172f9eebec0f2cf3e3bea344d7e00e43ab12fd32fe5"}, 0xf8}) 1.870333168s ago: executing program 3 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) lsm_get_self_attr(0x0, &(0x7f0000000000)={0x0, 0x0, 0xb8, 0x98, ""/152}, &(0x7f00000000c0)=0xb8, 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4b}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000}]}}}]}, 0x60}}, 0x0) 1.685979879s ago: executing program 3 (id=2541): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x64, 0x0, 0x10, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3}, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x1, [{@broadcast, 0xcf}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@broadcast, 0x67a1}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x7f]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x5, [0x40, 0x7, 0x8, 0x5]}, @noop]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x35, 0x35, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x800, 0x200}, {0x3, 0x4, 0x1}], ';'}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0xe, 0x5f, 0x61]}}, &(0x7f0000000440)=""/74, 0x57, 0x4a, 0x1, 0x3b4, 0x0, @void, @value}, 0x28) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000280)=""/182, 0xb6) 1.513995117s ago: executing program 3 (id=2542): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8302, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x3000000, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.411066902s ago: executing program 3 (id=2543): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="787a921db1f55b43e2e03b9aecf42de7acb15f41c2d4baea30eda9a9b4d756ddf13d1d9fc4f97c8dbc", 0x29}], 0x1}], 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/67, 0x43}], 0x1}, 0x0) sendmmsg(r1, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001100)='f\aDf', 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x851) accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000140)=0x80) connect$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000080)=0x1e) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000004000000800200121f", 0x2e}], 0x1}, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000000c0)={0xc0, 0x60b, 0x7, 0x0, 0x7fffffff, 0x1, "5c01cc4148ca03deb1bebebc1e5728e0", 0xd8, 0x0, 0x8, 0xc9, 0xb, 0x7, 0x3}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000680)={0x3}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1b0000001a005f0214f9f4070009040081000000fd000002000000", 0x1b) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x144, 0x65, 0x400, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_ACT={0x4}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xa0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_nat={0x2c, 0x39, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x64, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x35, 0x6, "567da88e4713987a015cfbdc64955ee6ba3e5539fa4e98f11965227b8691c93fd88d90e49158b9dc1838e1a2e3d4b29a8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x144}}, 0x40001) r5 = socket(0x10, 0x803, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/236, 0xec}], 0x1, 0x0, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582"], 0x0) accept4(r3, &(0x7f0000000880)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80, 0x800) 1.260607073s ago: executing program 0 (id=2544): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f00000002c0), 0x4) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800000000000000000000000000000001ff0000aafc010000000000000000000000000000dcf19c23c21c4a7026ab165a161da7fe21aa61792917eab9a36833ad6068540d977eb81ebe8390c20f1e8eeccea84ee2c55be79cb676"], 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x0, 0x27, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5c, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x90) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYRES64=r5, @ANYRES32=r1, @ANYRES8=r5, @ANYRES32=r4], 0x119) writev(r5, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) write$UHID_CREATE2(r5, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xf7, 0x9, 0x1, 0x4, 0x4e, 0x4, "35f83620df980bb1db2ecb9b6001914f8b384367a4807f2e96b74502e0e40fb4edbd00992eb2dbd0cdeee482746c58c21fbe0ea2c31d3e67bd84c21da6bba35de4de446f9a2c8030e4b8536436d5a34efe65864d110ed738fccff6d909b6739e818d0d5908a300abdfd92e9d90294853ca3cb82eb63dfebe57b209afa38c26b21e4115e494e69710b00a561017465b0086cc5885e1cd0eaf38f8a99b413bf17d9b232ca56eb35e530337620144153c7d8146443cdc405cd3f21d58541eddabfa655eb4324bc847c24e33f55d0ebb6a384551c4305a77f5f42bd78cdcc66edc5aba108ce521e8d88ed9cd8623bfa9d44ee7bb3b7026726e"}}, 0x20f) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@private1, @dev={0xac, 0x14, 0x14, 0x13}, 0xb, 0x1b}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r1, 0x2}, 0xc) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000240)=0x2) 1.126779308s ago: executing program 1 (id=2545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000001fa40)={0xa, 0x4e26, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xf, 0x0, "0c9e8100000001860b479037073d223b3c1b324debec40e57a050000007eb48821996aff367154e746be4d76062e2700c425a7519cc275d04e6205abd307a0c4fa381300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x31, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d27efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x204000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x0, @private1, 0x1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioprio_set$pid(0x1, 0x0, 0x6000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.125972895s ago: executing program 0 (id=2546): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x15, &(0x7f0000000240), 0x4) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) linkat(0xffffffffffffffff, 0x0, r2, 0x0, 0x400) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x5a34a7) ioctl$SNDRV_PCM_IOCTL_DROP(r6, 0x4143, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000000)) landlock_restrict_self(r1, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, r8, 0x0, 0x5) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfdfdffff}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="208b32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) 873.0544ms ago: executing program 1 (id=2547): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="009689"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000200)={0x0, 0x3, 0x73, {0x73, 0x5, "924f6b4c5dfd3244ddda7aee35368ea7f806b913d353b798bb96461a56418d441e31dce60bdb4cee4a73fb39a5422739ddb5fab8f72568ba5f20162cb102286f30d0d2584121ff6e442fa3b7a990ab987a7aa41955cd392ad50a8429b718277f286d87da92c9abfdf8163d57e422e116ca"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0x30, 0xde, "ed0ccfd0e2b980fd65cd49b9251b8dd1d6953b52cd361cc45954f5d62a62a66a059959599feef4387214ca8a2b4525d7fc855c9a37e661b5fc7e5bba977d7f66739eba5e6e3736f4720e1b24939c7197c9da280c70bfd0fd30bf369bec86e49fedc16d85126e6d8d744e478fd11d6cd1099bc77b74f2088751409c694a9d8956de3ddc3af8550a6816bc3166beb7d05f1370c0e8d1efdb72a1dfab912521820e5b6a0d5ee64251b6458eef29fac26a1ce2450a2c6db956c5b69064c28b85b00f8e43b3bf0e250399d50802228c7481a7c3cb062dc8e2692708f8777a8f17"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000004c0)={0x20, 0x81, 0x2, "a4ea"}, &(0x7f0000000500)={0x20, 0x82, 0x1, '\"'}, &(0x7f0000000540)={0x20, 0x83, 0x1, "b3"}, &(0x7f0000000580)={0x20, 0x84, 0x2, '/O'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "6f8379"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 744.665201ms ago: executing program 3 (id=2548): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r1, 0x20e878d63cec80e0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000100)) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12ac054002400001020301090224000101000000090400000203010200092100000001220000090581030000000000"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x7]}, 0x8) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 477.025697ms ago: executing program 0 (id=2550): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xfffffffe, 0x32314142, 0x280, 0x168, 0x0, @stepwise={{}, {}, {0x0, 0x3}}}) socket$unix(0x1, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000002380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r3) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "78e114100985a79874342a70e113343972d01f"}) r6 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa, 0x0, {r8}}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT(r1, &(0x7f00000043c0)={0xd, {"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", 0x1000}}, 0x971) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8000000000000001}}, {@allow_other}], [{@audit}, {@euid_lt={'euid<', r2}}]}}, 0x1, 0x0, &(0x7f0000000300)="740cffeb04d83e761c216bf0c3caee3327a85170d364ff40043358e090085fb2174c262b7c86fef9725282a8a2ec6dc75aa514f0c06d816d2c9b47a85962e2ed8324d4353b76edfcdabb693091deeb10c31b9a3cbbd903351c53198c9fa22213810174990c67e385cdce7e095e760faf6380145d899cbafe6b9479") r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x67250}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x35, 0x4, 0x2, 0x5, 0xf8, 0x66, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010102, @multicast1, {[@rr={0x7, 0x1f, 0x2f, [@local, @rand_addr=0x64010100, @multicast2, @broadcast, @remote, @multicast1, @rand_addr=0x64010102]}, @generic={0x7, 0x3, '?'}, @lsrr={0x83, 0x13, 0x9d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @loopback]}, @timestamp_addr={0x44, 0x4c, 0xb6, 0x1, 0x8, [{@remote, 0x6}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@broadcast, 0x3c}, {@loopback, 0x9}, {@rand_addr=0x64010101, 0x41d4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}]}, @lsrr={0x83, 0xb, 0x51, [@multicast2, @empty]}, @timestamp={0x44, 0x1c, 0x8, 0x0, 0xd, [0x8, 0xfffffff6, 0xc, 0x7, 0x10, 0x5]}, @timestamp={0x44, 0xc, 0x4c, 0x0, 0x5, [0xfffffff8, 0x7fffffff]}, @lsrr={0x83, 0xb, 0x92, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}]}]}}, {0x12, 0x35, 0x0, @multicast1, "7c005efaf3e74a1bab6182a0fbe21ed50b750bace7af342820c4d4db"}}}}}, 0x0) 257.997053ms ago: executing program 0 (id=2551): bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-ce\x00'}, 0xfffffffffffffdb4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x5, &(0x7f00000000c0)) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000002800018014000400fe880000000000000000000000000001060001000a0000000800060001000000"], 0x3c}}, 0x11) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8, @ANYRESDEC=r0, @ANYBLOB="0100000000000003000004000000"], 0x14}, 0x1, 0xfcffffff00000000, 0x0, 0x20000011}, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="b5b9dffa387124f52de60db12e16822ca6acdf77f506b172b88f138fe6ac2c9d0820aeee2dcc2ad5a855b7a0bd5e", 0x2e}, {&(0x7f00000005c0)="ff2fe5143f8a81c634b427a00ce2e01d43273a374121b85678571fcaff23d9e55f3054b7dfa7004da0ce3e2722c8447e16d4fde010fff5dc1c9bdfc0dee741620d992b3f9e9ccdd7b878bd5f01007bed7dc7baf227143309047e328798ce2a97e7052c71ea2bbe9fb91b9467d8dfd686098c9b035b1e3715d757c10513db7144b08296d424c10508de6126341a4534588a290a856a7b1ce6646518ac147edf", 0x9f}, {&(0x7f0000000280)="0692772e67906593e8d821c2e15462572e6b281a005bd1cb3767465b6b123372489317ea8ad90f530ddf4a5361bc7e5312aac8b1513e6086109d806a5af5854260cf03553464ca0d6aefe659eaf9518e39e320a3621feef00b60d421", 0x5c}, {&(0x7f0000000740)="8a9cb7969c70c9f21ac75b14dc6b52cbfa0e4fef4b9dcf8c0562e1afa30659e22838a9ae54e61e086e2ff668c6986ec4fae4d45d292d03985e980456ca6579218953dfdb4395d075421a6d45dda363a5b601d2322fa9b693000000000000000000000000000041d7dabdf22d71737ff875227d869d8f5b36c8d5bb9499103856284d8718fc8893438c7f4605ff32e589de2ccde44a1326d68add", 0x9a}], 0x4) socket$packet(0x11, 0xa, 0x300) r6 = timerfd_create(0x8, 0x100000) timerfd_settime(r6, 0x3, &(0x7f0000000140), 0x0) ioctl$TFD_IOC_SET_TICKS(r6, 0x40085400, &(0x7f0000000080)=0x6) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000300)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) 201.276068ms ago: executing program 1 (id=2552): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x80, 0x8000, 0x7, 0x8, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x64, 0x0, 0x10, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3}, {[@timestamp_prespec={0x44, 0x34, 0x79, 0x3, 0x1, [{@broadcast, 0xcf}, {@broadcast, 0x2}, {@broadcast, 0x9}, {@local}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@broadcast, 0x67a1}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x5, [0x7f]}, @timestamp={0x44, 0x14, 0x44, 0x0, 0x5, [0x40, 0x7, 0x8, 0x5]}, @noop]}}}}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getdents(r0, &(0x7f0000000280)=""/182, 0xb6) 85.975975ms ago: executing program 1 (id=2553): r0 = syz_io_uring_setup(0x6908, 0x0, &(0x7f0000000140), &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x1, 0x4, 0x8, 0x1, 0x15, "d872675bde0518c329abd29edfebc65fd10bf7"}) r1 = io_uring_setup(0x7058, &(0x7f0000000040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000000, r2) 23.664838ms ago: executing program 3 (id=2554): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 333.625µs ago: executing program 0 (id=2555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaa8aaaaaaaaaaaa0d00480000340000000200069078ac1414bbc61414aa440c0a01ac1414000000000000004e221fb58781e58533703e07ae0b7143e67e4de6019ffd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaf368656e065b0800451c001000000001080009000000e00000011200907800000002"], 0x0) r2 = userfaultfd(0x80001) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) sched_setaffinity(r3, 0x8, &(0x7f0000000140)=0x2cc) syz_clone3(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffcef) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xda, &(0x7f0000000100), &(0x7f0000000040)=0x4) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) 0s ago: executing program 1 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0xfc, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}]}}}, @IFLA_MTU={0x8, 0x4, 0x570}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ts. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.449702][ T5232] IPVS: starting estimator thread 0... [ 597.455664][T15355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.543195][T15402] IPVS: using max 32 ests per chain, 76800 per kthread [ 597.894700][T15409] netlink: 'syz.3.2289': attribute type 20 has an invalid length. [ 597.895014][T15412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.917668][T15412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.962255][ T54] Bluetooth: hci12: command tx timeout [ 597.979334][T15355] hsr_slave_0: entered promiscuous mode [ 598.041891][ T54] Bluetooth: hci13: command tx timeout [ 598.048308][T15355] hsr_slave_1: entered promiscuous mode [ 598.126676][T15355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.141881][T15355] Cannot create hsr debugfs directory [ 598.233008][T15393] chnl_net:caif_netlink_parms(): no params data found [ 598.259739][ T2523] bridge_slave_1: left allmulticast mode [ 598.277234][ T2523] bridge_slave_1: left promiscuous mode [ 598.285285][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.320764][ T2523] bridge_slave_0: left allmulticast mode [ 598.333556][ T2523] bridge_slave_0: left promiscuous mode [ 598.340495][T15423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.351109][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.364210][T15424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.382179][T15423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.382209][T15424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.767989][ T54] Bluetooth: hci9: command tx timeout [ 599.015956][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.049310][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.085518][ T2523] bond0 (unregistering): Released all slaves [ 599.159332][T15433] FAULT_INJECTION: forcing a failure. [ 599.159332][T15433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.195917][T15433] CPU: 1 UID: 0 PID: 15433 Comm: syz.3.2297 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 599.206736][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.217163][T15433] Call Trace: [ 599.220463][T15433] [ 599.223404][T15433] dump_stack_lvl+0x241/0x360 [ 599.228105][T15433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.233324][T15433] ? __pfx__printk+0x10/0x10 [ 599.237941][T15433] ? __pfx_lock_release+0x10/0x10 [ 599.242993][T15433] ? __lock_acquire+0x1384/0x2050 [ 599.248033][T15433] should_fail_ex+0x3b0/0x4e0 [ 599.252721][T15433] _copy_from_user+0x2f/0xe0 [ 599.257315][T15433] kstrtouint_from_user+0xc6/0x190 [ 599.262429][T15433] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 599.268148][T15433] ? __pfx_lock_acquire+0x10/0x10 [ 599.273181][T15433] proc_fail_nth_write+0xaa/0x2d0 [ 599.278216][T15433] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 599.284117][T15433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.289756][T15433] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 599.295393][T15433] vfs_write+0x29c/0xc90 [ 599.299636][T15433] ? __pfx_vfs_write+0x10/0x10 [ 599.304397][T15433] ? __fget_files+0x3f3/0x470 [ 599.309073][T15433] ? fdget_pos+0x24e/0x320 [ 599.313488][T15433] ksys_write+0x183/0x2b0 [ 599.317818][T15433] ? __pfx_ksys_write+0x10/0x10 [ 599.322668][T15433] ? do_syscall_64+0x100/0x230 [ 599.327430][T15433] ? do_syscall_64+0xb6/0x230 [ 599.332109][T15433] do_syscall_64+0xf3/0x230 [ 599.336615][T15433] ? clear_bhb_loop+0x35/0x90 [ 599.341285][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.347184][T15433] RIP: 0033:0x7f8e3d37cadf [ 599.351599][T15433] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 599.371218][T15433] RSP: 002b:00007f8e3e180030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 599.379640][T15433] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e3d37cadf [ 599.387614][T15433] RDX: 0000000000000001 RSI: 00007f8e3e1800a0 RDI: 0000000000000004 [ 599.395581][T15433] RBP: 00007f8e3e180090 R08: 0000000000000000 R09: 0000000000000000 [ 599.403554][T15433] R10: 0000000000000800 R11: 0000000000000293 R12: 0000000000000002 [ 599.411518][T15433] R13: 0000000000000000 R14: 00007f8e3d535f80 R15: 00007f8e3d65fa28 [ 599.419498][T15433] [ 599.448986][T15436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.453049][T15431] netlink: 'syz.4.2296': attribute type 20 has an invalid length. [ 599.497258][T15436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.875950][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.887725][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.921530][T15393] bridge_slave_0: entered allmulticast mode [ 599.932936][T15393] bridge_slave_0: entered promiscuous mode [ 600.053713][ T2523] hsr_slave_0: left promiscuous mode [ 600.083375][ T2523] hsr_slave_1: left promiscuous mode [ 600.107507][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.125896][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.131860][ T54] Bluetooth: hci13: command tx timeout [ 600.163270][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.183534][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.197145][T15462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.209466][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.234560][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.263339][T15462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.298897][ T2523] veth1_macvtap: left promiscuous mode [ 600.304615][ T2523] veth0_macvtap: left promiscuous mode [ 600.310629][ T2523] veth1_vlan: left promiscuous mode [ 600.316399][ T2523] veth0_vlan: left promiscuous mode [ 600.841874][ T5242] Bluetooth: hci9: command tx timeout [ 601.533204][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 601.635951][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 602.112195][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.132663][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.201889][ T5242] Bluetooth: hci13: command tx timeout [ 602.658276][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.667384][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.674840][T15393] bridge_slave_1: entered allmulticast mode [ 602.690868][T15393] bridge_slave_1: entered promiscuous mode [ 602.754346][T15355] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.811500][T15482] netlink: 'syz.3.2307': attribute type 39 has an invalid length. [ 602.873673][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.926940][ T5242] Bluetooth: hci9: command tx timeout [ 602.973164][T15355] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.003260][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.091475][T15393] team0: Port device team_slave_0 added [ 603.145826][T15355] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.163541][T15393] team0: Port device team_slave_1 added [ 603.249099][T15355] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.268543][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.281307][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.310167][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.360395][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.405150][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.469648][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.659245][T15393] hsr_slave_0: entered promiscuous mode [ 603.683610][T15393] hsr_slave_1: entered promiscuous mode [ 603.702864][T15393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.714832][T15393] Cannot create hsr debugfs directory [ 603.862120][T15514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.875045][T15514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.917917][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.959233][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.978358][T15355] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 604.024518][T15355] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 604.054870][T15355] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 604.092256][T15355] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 604.369745][T15355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.566565][T15355] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.608732][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.615893][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.655841][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.663002][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.944641][T15355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.972718][T15393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.005505][T15393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.014386][ T5242] Bluetooth: hci9: command tx timeout [ 605.027271][T15393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.046939][T15393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.073727][T15355] veth0_vlan: entered promiscuous mode [ 605.135487][T15355] veth1_vlan: entered promiscuous mode [ 605.306471][T15355] veth0_macvtap: entered promiscuous mode [ 605.329675][T15355] veth1_macvtap: entered promiscuous mode [ 605.434277][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.452452][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.463454][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.491789][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.503149][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.513617][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.524643][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.535449][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.545758][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.556724][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.569119][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.581966][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.592938][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.603668][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.614593][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.625550][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.636473][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.648338][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.658572][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.669257][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.680101][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.692446][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.703032][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.713744][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.744762][T15355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.782566][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.793758][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.811820][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.822534][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.832705][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.859885][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.880929][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.909158][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.919572][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.930579][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.940968][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.952226][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.967360][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.978864][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.991365][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.002279][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.012791][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.023855][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.033975][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.045350][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.055267][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.066617][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.076551][T15355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.087276][T15355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.125607][T15355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.159864][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.217126][T15556] netlink: 'syz.0.2320': attribute type 5 has an invalid length. [ 606.230115][T15355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.252937][T15355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.271756][T15355] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.280500][T15355] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.350107][T15393] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.404755][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.411945][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.457529][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.464692][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.605135][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.621829][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.736249][ T2523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.750128][ T2523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.816733][T15393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.940918][T15571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2271'. [ 607.050976][T15393] veth0_vlan: entered promiscuous mode [ 607.096845][T15393] veth1_vlan: entered promiscuous mode [ 607.126987][T15575] netlink: 'syz.0.2324': attribute type 19 has an invalid length. [ 607.202796][T15393] veth0_macvtap: entered promiscuous mode [ 607.236277][T15393] veth1_macvtap: entered promiscuous mode [ 607.285440][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.334114][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.371713][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.411798][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.441012][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.472095][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.501871][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.521728][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.534813][T15590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.549238][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.559968][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.570272][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.580934][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.588615][T15596] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 607.590815][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.608677][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.618550][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.630512][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.639404][T15596] vhci_hcd: invalid port number 16 [ 607.641326][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.656359][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.666273][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.672088][T15596] vhci_hcd: invalid port number 16 [ 607.676765][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.692057][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.702609][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.712490][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.723245][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.734632][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.746262][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.756583][T15590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.757696][T15393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.774872][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.785424][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.795281][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.807378][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.817813][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.828325][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.839559][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.851064][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.860923][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.871412][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.881365][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.892091][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.901999][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.912502][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.922355][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.923206][T15573] dccp_close: ABORT with 32 bytes unread [ 607.932798][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.932819][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.932835][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.932857][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.932871][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.932889][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.932902][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.932919][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.932931][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.932948][T15393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.045288][T15393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.057687][T15393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.076349][T15393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.085369][T15393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.094225][T15393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.102976][T15393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.309380][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.324907][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.340443][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.358267][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.416588][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.440872][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.298028][T15648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.327633][T15648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.962824][T15668] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2341'. [ 610.076669][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2341'. [ 610.102097][T15668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2341'. [ 610.175896][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 610.190182][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 610.198627][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 610.215589][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 610.223885][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 610.231440][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 610.467098][ T2523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.619748][ T2523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.772309][ T2523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.979902][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 610.990980][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 611.005014][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 611.008115][ T2523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.032941][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 611.044121][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 611.052639][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 611.224292][T15699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.261222][T15699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.444108][T15676] chnl_net:caif_netlink_parms(): no params data found [ 611.505826][ T2523] bridge_slave_1: left allmulticast mode [ 611.511533][ T2523] bridge_slave_1: left promiscuous mode [ 611.533039][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.551759][ T2523] bridge_slave_0: left allmulticast mode [ 611.557445][ T2523] bridge_slave_0: left promiscuous mode [ 611.575763][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.143426][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.155521][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.168344][ T2523] bond0 (unregistering): Released all slaves [ 612.358447][T15695] chnl_net:caif_netlink_parms(): no params data found [ 612.367157][ T5242] Bluetooth: hci13: command tx timeout [ 612.376732][T15711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.395735][T15711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.434115][T15676] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.463226][T15676] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.470552][T15676] bridge_slave_0: entered allmulticast mode [ 612.477848][T15676] bridge_slave_0: entered promiscuous mode [ 612.500359][T15676] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.514774][T15676] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.531859][T15676] bridge_slave_1: entered allmulticast mode [ 612.539480][T15676] bridge_slave_1: entered promiscuous mode [ 612.725376][T15676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.796053][ T2523] hsr_slave_0: left promiscuous mode [ 612.834073][ T2523] hsr_slave_1: left promiscuous mode [ 612.851292][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.874363][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.893211][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.906012][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.011566][ T2523] veth1_macvtap: left promiscuous mode [ 613.051747][ T2523] veth0_macvtap: left promiscuous mode [ 613.082393][ T2523] veth1_vlan: left promiscuous mode [ 613.084806][ T5242] Bluetooth: hci9: command tx timeout [ 613.087713][ T2523] veth0_vlan: left promiscuous mode [ 613.612908][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 613.629594][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 613.638561][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 613.662347][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 613.677524][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 613.685366][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 613.720440][T15737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.755894][T15737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.117138][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 614.198586][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 614.442084][ T5242] Bluetooth: hci13: command tx timeout [ 614.776499][T15752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.795410][T15752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.087544][T15676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.130180][T15736] netlink: 'syz.3.2353': attribute type 20 has an invalid length. [ 615.162415][ T5242] Bluetooth: hci9: command tx timeout [ 615.222018][T15676] team0: Port device team_slave_0 added [ 615.275938][T15676] team0: Port device team_slave_1 added [ 615.311156][T15695] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.328869][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.362290][T15695] bridge_slave_0: entered allmulticast mode [ 615.402560][T15695] bridge_slave_0: entered promiscuous mode [ 615.493113][T15695] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.512793][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.520258][T15695] bridge_slave_1: entered allmulticast mode [ 615.553450][T15695] bridge_slave_1: entered promiscuous mode [ 615.592675][T15676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.599679][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.686507][T15676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.722352][ T5242] Bluetooth: hci14: command tx timeout [ 615.873853][T15676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.880829][T15676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.969653][T15676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.247649][T15695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.283863][ T5242] Bluetooth: hci2: command 0x0406 tx timeout [ 616.356782][T15695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.522198][ T54] Bluetooth: hci13: command tx timeout [ 616.580570][T15780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.627039][T15780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.736166][T15676] hsr_slave_0: entered promiscuous mode [ 616.765183][T15676] hsr_slave_1: entered promiscuous mode [ 616.783652][T15676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.791236][T15676] Cannot create hsr debugfs directory [ 616.856625][T15695] team0: Port device team_slave_0 added [ 616.896599][T15695] team0: Port device team_slave_1 added [ 617.026267][T15695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.050885][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.081259][T15695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.120231][T15695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.137539][T15695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.242708][ T54] Bluetooth: hci9: command tx timeout [ 617.271778][T15695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.367320][ T2523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.412872][T15739] chnl_net:caif_netlink_parms(): no params data found [ 617.528284][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.547506][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.562946][ T2523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.802174][ T54] Bluetooth: hci14: command tx timeout [ 618.014730][ T2523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.164079][ T2523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.240196][T15695] hsr_slave_0: entered promiscuous mode [ 618.262549][T15695] hsr_slave_1: entered promiscuous mode [ 618.292934][T15695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.311964][T15695] Cannot create hsr debugfs directory [ 618.415592][T15739] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.424290][T15739] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.431873][T15739] bridge_slave_0: entered allmulticast mode [ 618.439422][T15739] bridge_slave_0: entered promiscuous mode [ 618.507499][T15739] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.522572][T15739] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.529863][T15739] bridge_slave_1: entered allmulticast mode [ 618.531171][T15811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.537152][T15739] bridge_slave_1: entered promiscuous mode [ 618.602812][ T54] Bluetooth: hci13: command tx timeout [ 618.604678][T15811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.713055][T15739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.729623][T15739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.880042][T15816] netlink: 'syz.3.2367': attribute type 39 has an invalid length. [ 618.950728][T15739] team0: Port device team_slave_0 added [ 618.972356][T15739] team0: Port device team_slave_1 added [ 618.979484][T15818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.025862][T15818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.123488][ T2523] bridge_slave_1: left allmulticast mode [ 619.140032][ T2523] bridge_slave_1: left promiscuous mode [ 619.158666][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.193940][ T2523] bridge_slave_0: left allmulticast mode [ 619.206308][ T2523] bridge_slave_0: left promiscuous mode [ 619.221706][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.327754][ T54] Bluetooth: hci9: command tx timeout [ 619.655145][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.680943][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.704334][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.738840][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.771316][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.794960][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.837056][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.863541][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.888525][ T54] Bluetooth: hci14: command tx timeout [ 619.931928][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.950427][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.959454][T15841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.983072][T15841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.102278][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.125089][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.141475][ T2523] bond0 (unregistering): Released all slaves [ 620.474073][T15739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.481048][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.507486][T15739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.569316][T15739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.576660][T15739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.605708][T15739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.829739][T15739] hsr_slave_0: entered promiscuous mode [ 620.853026][T15739] hsr_slave_1: entered promiscuous mode [ 620.863651][T15739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.871287][T15739] Cannot create hsr debugfs directory [ 620.909767][ T2523] hsr_slave_0: left promiscuous mode [ 620.916397][ T2523] hsr_slave_1: left promiscuous mode [ 620.927446][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.939069][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.939642][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.971568][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.980620][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.991124][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.028109][ T2523] veth1_macvtap: left promiscuous mode [ 621.045477][ T2523] veth0_macvtap: left promiscuous mode [ 621.051525][ T2523] veth1_vlan: left promiscuous mode [ 621.059992][ T2523] veth0_vlan: left promiscuous mode [ 621.411180][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 621.766769][T15854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.795063][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 621.804597][T15854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.910957][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 621.965137][ T5242] Bluetooth: hci14: command tx timeout [ 622.934710][T15676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 622.973086][T15676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 623.311047][T15676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 623.423137][T15676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 623.480550][T15882] kvm_pr_unimpl_wrmsr: 62 callbacks suppressed [ 623.480572][T15882] kvm: kvm [15881]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 623.746027][T15676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.811358][T15676] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.927164][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.970475][T15739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 623.981983][T15739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.993036][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.027267][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.034434][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.071868][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.079033][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.151811][T15739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 624.172186][T15739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.284174][T15739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 624.305723][T15739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.429975][T15739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 624.440671][T15739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.458246][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.464758][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.515939][T15676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.688947][T15907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.716384][T15676] veth0_vlan: entered promiscuous mode [ 624.757302][T15907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.818475][T15676] veth1_vlan: entered promiscuous mode [ 625.019260][T15739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 625.052543][T15739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 625.078971][T15739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 625.105366][T15676] veth0_macvtap: entered promiscuous mode [ 625.107374][T15915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.135130][T15676] veth1_macvtap: entered promiscuous mode [ 625.153132][T15739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 625.248010][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.270826][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.300638][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.321764][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.331600][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.366818][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.387278][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.400698][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.410661][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.427081][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.451890][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.472051][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.505225][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.519144][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.548427][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.559612][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.570968][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.582155][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.593031][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.603294][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.616139][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.627188][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.639084][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.651764][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.663221][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.673759][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.689328][T15676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.700298][T15925] trusted_key: encrypted_key: insufficient parameters specified [ 625.743966][T15921] netlink: 'syz.3.2385': attribute type 5 has an invalid length. [ 625.765702][T15695] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.783742][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.795984][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.807750][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.819133][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.829443][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.875368][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.897858][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.920430][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.940762][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.961400][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.976776][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.988477][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.010394][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.023150][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.033677][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.046284][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.063125][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.087573][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.097875][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.109313][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.119630][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.134224][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.144484][T15676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.155418][T15676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.169433][T15676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.186071][T15695] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 626.214167][T15695] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 626.244496][T15695] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 626.276978][T15676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.300506][T15676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.310086][T15676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.321726][T15676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.439840][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.465513][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.620396][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.638256][T15739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.656044][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.743034][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.750637][T15739] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.750928][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.783841][T15695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.816759][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.823938][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.889613][T15695] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.919308][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.926481][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.993993][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.001148][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.056594][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.063770][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.110430][T15965] FAULT_INJECTION: forcing a failure. [ 627.110430][T15965] name failslab, interval 1, probability 0, space 0, times 0 [ 627.152028][T15965] CPU: 1 UID: 0 PID: 15965 Comm: syz.3.2388 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 627.162841][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.172919][T15965] Call Trace: [ 627.176202][T15965] [ 627.179141][T15965] dump_stack_lvl+0x241/0x360 [ 627.183825][T15965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.189034][T15965] ? __pfx__printk+0x10/0x10 [ 627.193625][T15965] ? ref_tracker_alloc+0x332/0x490 [ 627.198745][T15965] should_fail_ex+0x3b0/0x4e0 [ 627.203421][T15965] ? skb_clone+0x20c/0x390 [ 627.207838][T15965] should_failslab+0xac/0x100 [ 627.212525][T15965] ? skb_clone+0x20c/0x390 [ 627.216932][T15965] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 627.222302][T15965] skb_clone+0x20c/0x390 [ 627.226551][T15965] __netlink_deliver_tap+0x3cc/0x7c0 [ 627.231852][T15965] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.237068][T15965] netlink_deliver_tap+0x19d/0x1b0 [ 627.242208][T15965] __netlink_sendskb+0x60/0xd0 [ 627.247001][T15965] netlink_dump+0x97d/0xd80 [ 627.251514][T15965] ? __pfx_netlink_dump+0x10/0x10 [ 627.256558][T15965] ? __asan_memset+0x23/0x50 [ 627.261144][T15965] ? genl_start+0x4a8/0x6d0 [ 627.265667][T15965] __netlink_dump_start+0x5a2/0x790 [ 627.270897][T15965] genl_rcv_msg+0x88c/0xec0 [ 627.275429][T15965] ? mark_lock+0x9a/0x360 [ 627.279796][T15965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.284855][T15965] ? __pfx_genl_start+0x10/0x10 [ 627.289722][T15965] ? __pfx_genl_dumpit+0x10/0x10 [ 627.294662][T15965] ? __pfx_genl_done+0x10/0x10 [ 627.299444][T15965] ? __pfx_lock_acquire+0x10/0x10 [ 627.304477][T15965] ? __pfx_batadv_hardif_neigh_dump+0x10/0x10 [ 627.310687][T15965] ? __pfx___might_resched+0x10/0x10 [ 627.316015][T15965] netlink_rcv_skb+0x1e3/0x430 [ 627.320788][T15965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 627.325825][T15965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.331122][T15965] ? __netlink_deliver_tap+0x77e/0x7c0 [ 627.336596][T15965] genl_rcv+0x28/0x40 [ 627.340576][T15965] netlink_unicast+0x7f6/0x990 [ 627.345344][T15965] ? __pfx_netlink_unicast+0x10/0x10 [ 627.350630][T15965] ? __virt_addr_valid+0x183/0x530 [ 627.355749][T15965] ? __check_object_size+0x48e/0x900 [ 627.361050][T15965] netlink_sendmsg+0x8e4/0xcb0 [ 627.365817][T15965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.371108][T15965] ? aa_sock_msg_perm+0x91/0x160 [ 627.376068][T15965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.381348][T15965] __sock_sendmsg+0x221/0x270 [ 627.386050][T15965] ____sys_sendmsg+0x52a/0x7e0 [ 627.390927][T15965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.396235][T15965] __sys_sendmsg+0x292/0x380 [ 627.400839][T15965] ? __pfx___sys_sendmsg+0x10/0x10 [ 627.405974][T15965] ? __pfx_vfs_write+0x10/0x10 [ 627.410846][T15965] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 627.417172][T15965] ? do_syscall_64+0x100/0x230 [ 627.421956][T15965] ? do_syscall_64+0xb6/0x230 [ 627.426634][T15965] do_syscall_64+0xf3/0x230 [ 627.431143][T15965] ? clear_bhb_loop+0x35/0x90 [ 627.435836][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.441747][T15965] RIP: 0033:0x7f8e3d37dff9 [ 627.446179][T15965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.465793][T15965] RSP: 002b:00007f8e3e180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.474229][T15965] RAX: ffffffffffffffda RBX: 00007f8e3d535f80 RCX: 00007f8e3d37dff9 [ 627.482201][T15965] RDX: 0000000000000000 RSI: 0000000020004340 RDI: 0000000000000003 [ 627.490184][T15965] RBP: 00007f8e3e180090 R08: 0000000000000000 R09: 0000000000000000 [ 627.498175][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.506167][T15965] R13: 0000000000000000 R14: 00007f8e3d535f80 R15: 00007f8e3d65fa28 [ 627.514171][T15965] [ 627.557906][T15739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.591783][T15739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.691241][T15972] FAULT_INJECTION: forcing a failure. [ 627.691241][T15972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.727094][T15695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.737662][T15972] CPU: 1 UID: 0 PID: 15972 Comm: syz.3.2389 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 627.748455][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 627.758618][T15972] Call Trace: [ 627.761919][T15972] [ 627.764868][T15972] dump_stack_lvl+0x241/0x360 [ 627.769592][T15972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.774816][T15972] ? __pfx__printk+0x10/0x10 [ 627.779419][T15972] ? __pfx_lock_release+0x10/0x10 [ 627.784481][T15972] should_fail_ex+0x3b0/0x4e0 [ 627.787645][T15739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.789169][T15972] _copy_from_user+0x2f/0xe0 [ 627.789203][T15972] copy_msghdr_from_user+0xae/0x680 [ 627.805736][T15972] ? __pfx___might_resched+0x10/0x10 [ 627.811030][T15972] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 627.816861][T15972] ? rcu_is_watching+0x15/0xb0 [ 627.821628][T15972] ? __might_fault+0xaa/0x120 [ 627.826320][T15972] do_recvmmsg+0x3f9/0xad0 [ 627.830746][T15972] ? __pfx_do_recvmmsg+0x10/0x10 [ 627.835697][T15972] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 627.841614][T15972] ? ksys_write+0x229/0x2b0 [ 627.846134][T15972] ? __pfx_lock_release+0x10/0x10 [ 627.851176][T15972] ? vfs_write+0x7bf/0xc90 [ 627.855596][T15972] ? kmem_cache_free+0x1a2/0x420 [ 627.860545][T15972] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.866547][T15972] __x64_sys_recvmmsg+0x199/0x250 [ 627.871606][T15972] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 627.877170][T15972] ? do_syscall_64+0x100/0x230 [ 627.881950][T15972] ? do_syscall_64+0xb6/0x230 [ 627.886644][T15972] do_syscall_64+0xf3/0x230 [ 627.891150][T15972] ? clear_bhb_loop+0x35/0x90 [ 627.895831][T15972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.901736][T15972] RIP: 0033:0x7f8e3d37dff9 [ 627.906176][T15972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.925819][T15972] RSP: 002b:00007f8e3e180038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 627.934252][T15972] RAX: ffffffffffffffda RBX: 00007f8e3d535f80 RCX: 00007f8e3d37dff9 [ 627.942226][T15972] RDX: 0000000000000700 RSI: 0000000020001140 RDI: 0000000000000004 [ 627.950204][T15972] RBP: 00007f8e3e180090 R08: 0000000000000000 R09: 0000000000000000 [ 627.958189][T15972] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 627.966178][T15972] R13: 0000000000000000 R14: 00007f8e3d535f80 R15: 00007f8e3d65fa28 [ 627.974181][T15972] [ 628.236523][T15695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.306283][T15739] veth0_vlan: entered promiscuous mode [ 628.320411][T15739] veth1_vlan: entered promiscuous mode [ 628.353704][T15739] veth0_macvtap: entered promiscuous mode [ 628.363103][T15739] veth1_macvtap: entered promiscuous mode [ 628.378825][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.389327][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.399243][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.409843][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.420927][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.433362][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.443370][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.454059][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.463934][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.481775][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.491674][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.502182][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.514284][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.526108][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.536819][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.547361][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.561775][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.572320][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.582189][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.593100][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.603861][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.619147][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.629994][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.640519][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.650415][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.660915][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.676016][T15739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.732868][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.750191][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.813428][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.827171][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.861901][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.877092][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.894854][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.920728][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.945706][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.960853][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.983822][T15985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.994048][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.016378][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.051830][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.134420][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.151768][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.162736][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.172654][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.191855][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.231761][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.275017][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.302291][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.331671][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.355708][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.375113][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.440114][T15739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.501361][T15739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.555453][T15739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.614950][T15739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.652245][T15985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.719728][T15994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.783595][T15739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.792470][T15739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.801244][T15739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.816560][T15695] veth0_vlan: entered promiscuous mode [ 629.831067][T15695] veth1_vlan: entered promiscuous mode [ 629.838247][T15994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.861219][T15985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.874145][T15695] veth0_macvtap: entered promiscuous mode [ 629.885100][T15695] veth1_macvtap: entered promiscuous mode [ 629.907199][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.917715][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.920708][ T5242] Bluetooth: hci13: unexpected event 0x04 length: 14 > 10 [ 629.927700][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927723][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927738][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927752][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927767][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927781][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927797][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927840][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927855][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927869][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927885][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927899][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927913][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927928][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927943][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.927984][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.927997][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.112281][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.122375][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.132957][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.142876][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.153400][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.163898][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.175000][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.184910][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.195431][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.207668][T15985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.213197][T15695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.331045][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.342175][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.352116][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.363308][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.373707][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.384271][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.394147][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.404658][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.414599][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.425147][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.435134][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.445794][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.455730][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.466872][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.477346][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.487929][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.498116][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.509020][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.518986][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.529734][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.539952][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.550504][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.560377][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.571500][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.582011][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.592567][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.602762][T15695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.613355][T15695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.624957][T15695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.680650][T15695] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.697226][T15695] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.706083][T15695] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.718333][T15695] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.956726][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.021382][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.132033][T16012] netlink: 'syz.2.2396': attribute type 11 has an invalid length. [ 631.146646][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.176565][T16017] netlink: 'syz.2.2396': attribute type 11 has an invalid length. [ 631.207815][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.259568][T16017] debugfs: Directory 'netdev:' with parent 'phy108' already present! [ 631.362709][T13302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.393816][T13302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.440093][T16020] netlink: 616 bytes leftover after parsing attributes in process `syz.0.2397'. [ 631.618856][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.712017][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.821512][T13302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.834700][T13302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.904343][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.972904][ T5242] Bluetooth: hci13: command tx timeout [ 631.982866][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.358605][T16052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.414739][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.464367][T16052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.502199][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.563449][T16062] netlink: 'syz.2.2403': attribute type 10 has an invalid length. [ 632.581831][T16062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2403'. [ 632.792929][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.805464][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.894832][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.904825][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.324333][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.345237][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.570842][T16084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.590881][T16084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.233856][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.313095][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.428943][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.459450][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.586788][T16113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.613537][T16113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.677906][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.714543][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.739928][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.760246][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.192702][T16132] netlink: 'syz.0.2425': attribute type 30 has an invalid length. [ 635.224293][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.242365][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.251529][T16130] netlink: 'syz.4.2426': attribute type 39 has an invalid length. [ 635.298678][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.331200][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.944956][T16153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.974529][T16153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.689426][T16170] FAULT_INJECTION: forcing a failure. [ 636.689426][T16170] name failslab, interval 1, probability 0, space 0, times 0 [ 636.738897][T16170] CPU: 1 UID: 0 PID: 16170 Comm: syz.3.2437 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 636.749711][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.759785][T16170] Call Trace: [ 636.763082][T16170] [ 636.766023][T16170] dump_stack_lvl+0x241/0x360 [ 636.770721][T16170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.775933][T16170] ? __pfx__printk+0x10/0x10 [ 636.780548][T16170] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 636.786549][T16170] ? __pfx___might_resched+0x10/0x10 [ 636.791852][T16170] ? aa_label_sk_perm+0x4f3/0x6c0 [ 636.796896][T16170] should_fail_ex+0x3b0/0x4e0 [ 636.801595][T16170] should_failslab+0xac/0x100 [ 636.806369][T16170] ? __alloc_skb+0x1c3/0x440 [ 636.810978][T16170] kmem_cache_alloc_node_noprof+0x71/0x320 [ 636.816840][T16170] __alloc_skb+0x1c3/0x440 [ 636.821278][T16170] ? __pfx___alloc_skb+0x10/0x10 [ 636.826237][T16170] netlink_sendmsg+0x638/0xcb0 [ 636.831028][T16170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.836327][T16170] ? aa_sock_msg_perm+0x91/0x160 [ 636.841281][T16170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.846582][T16170] __sock_sendmsg+0x221/0x270 [ 636.851285][T16170] ____sys_sendmsg+0x52a/0x7e0 [ 636.856074][T16170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.861393][T16170] __sys_sendmsg+0x292/0x380 [ 636.865998][T16170] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.871132][T16170] ? __pfx_vfs_write+0x10/0x10 [ 636.875937][T16170] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 636.882287][T16170] ? do_syscall_64+0x100/0x230 [ 636.887065][T16170] ? do_syscall_64+0xb6/0x230 [ 636.891753][T16170] do_syscall_64+0xf3/0x230 [ 636.896271][T16170] ? clear_bhb_loop+0x35/0x90 [ 636.900957][T16170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.906873][T16170] RIP: 0033:0x7f8e3d37dff9 [ 636.911301][T16170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.930927][T16170] RSP: 002b:00007f8e3e180038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.939360][T16170] RAX: ffffffffffffffda RBX: 00007f8e3d535f80 RCX: 00007f8e3d37dff9 [ 636.947347][T16170] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 636.955332][T16170] RBP: 00007f8e3e180090 R08: 0000000000000000 R09: 0000000000000000 [ 636.963315][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.971294][T16170] R13: 0000000000000000 R14: 00007f8e3d535f80 R15: 00007f8e3d65fa28 [ 636.979295][T16170] [ 637.192218][T16174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.215758][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.226800][T16174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.242211][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.791765][T16193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.801879][T16193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.880177][ T5282] hid-generic 0004:0005:0004.0029: unknown main item tag 0xe [ 637.923995][ T5282] hid-generic 0004:0005:0004.0029: item fetching failed at offset 2/5 [ 637.943236][ T5282] hid-generic 0004:0005:0004.0029: probe with driver hid-generic failed with error -22 [ 638.030944][T16208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.054408][T16208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.067091][T16207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.104034][T16207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.167416][T16210] sit2: entered promiscuous mode [ 638.172782][T16210] sit2: entered allmulticast mode [ 638.709174][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.716270][T16219] netlink: 'syz.4.2454': attribute type 39 has an invalid length. [ 638.730898][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.764479][T16219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.800831][T16219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.837629][T16229] tmpfs: Unknown parameter ',2ºtmode' [ 638.845346][T16229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.855013][T16229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.798503][ T2523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.858567][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.885425][T16249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.935384][T16249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.935437][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.029933][ T2523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.185542][ T2523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.299634][T16253] bridge0: port 3(gretap0) entered blocking state [ 640.323061][T16253] bridge0: port 3(gretap0) entered disabled state [ 640.338052][T16256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.352501][T16253] gretap0: entered allmulticast mode [ 640.364111][T16256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.370227][T16253] gretap0: entered promiscuous mode [ 640.381431][T16253] bridge0: port 3(gretap0) entered blocking state [ 640.388496][T16253] bridge0: port 3(gretap0) entered forwarding state [ 640.536517][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 640.563659][ T2523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.574205][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 640.584681][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 640.587184][T16264] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 640.622392][T16264] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 640.633415][T16264] ALSA: mixer_oss: invalid OSS volume '' [ 640.639203][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 640.650797][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 640.658513][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 640.922074][ T2523] bridge_slave_1: left allmulticast mode [ 640.927808][ T2523] bridge_slave_1: left promiscuous mode [ 640.934762][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.959629][ T2523] bridge_slave_0: left allmulticast mode [ 640.966527][ T2523] bridge_slave_0: left promiscuous mode [ 640.973401][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.991381][T16273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.039225][T16277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.064440][T16273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.075397][T16277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.427655][T16282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.816720][T16289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.865319][T16289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.004575][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.018483][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.039325][ T2523] bond0 (unregistering): Released all slaves [ 642.054634][ T2523] bond1 (unregistering): Released all slaves [ 642.075946][T16280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2475'. [ 642.216065][T16266] chnl_net:caif_netlink_parms(): no params data found [ 642.267864][T16299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.283014][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 642.333747][T16299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.429363][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 642.429384][ T29] audit: type=1800 audit(1728008252.801:294): pid=16304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2481" name="/" dev="fuse" ino=1 res=0 errno=0 [ 642.581511][T16266] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.589619][T16266] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.605285][T16266] bridge_slave_0: entered allmulticast mode [ 642.618767][T16266] bridge_slave_0: entered promiscuous mode [ 642.742900][T16266] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.761884][ T5242] Bluetooth: hci12: command tx timeout [ 642.781934][T16266] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.789255][T16266] bridge_slave_1: entered allmulticast mode [ 642.818894][T16325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.822222][T16266] bridge_slave_1: entered promiscuous mode [ 642.862127][T16325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.878837][ T2523] hsr_slave_0: left promiscuous mode [ 642.913903][ T2523] hsr_slave_1: left promiscuous mode [ 642.931928][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.939449][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.971934][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.979931][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.049869][ T2523] veth1_macvtap: left promiscuous mode [ 643.071838][ T2523] veth0_macvtap: left promiscuous mode [ 643.077505][ T2523] veth1_vlan: left promiscuous mode [ 643.092646][ T2523] veth0_vlan: left promiscuous mode [ 643.279946][ T29] audit: type=1326 audit(1728008253.651:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.305448][ T29] audit: type=1326 audit(1728008253.681:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.366826][ T29] audit: type=1326 audit(1728008253.681:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.389545][ T29] audit: type=1326 audit(1728008253.681:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.412542][ T29] audit: type=1326 audit(1728008253.681:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.436067][ T29] audit: type=1326 audit(1728008253.681:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16327 comm="syz.4.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fb3b897dff9 code=0x7ffc0000 [ 643.615460][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.644165][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.994600][T16337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.016869][T16337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.207715][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 644.273654][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 644.851898][ T5242] Bluetooth: hci12: command tx timeout [ 644.871807][T16341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.885867][T16341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.126583][T16332] netlink: 'syz.3.2485': attribute type 20 has an invalid length. [ 645.178150][T16266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.209393][T16266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.320381][T16266] team0: Port device team_slave_0 added [ 645.363884][T16266] team0: Port device team_slave_1 added [ 645.424636][T16266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.444026][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.473539][T16266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.498085][T16266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.518197][T16266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.545149][T16266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.831380][T16266] hsr_slave_0: entered promiscuous mode [ 645.850028][T16344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.912665][T16344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.921021][T16266] hsr_slave_1: entered promiscuous mode [ 645.962422][T16266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 645.980157][T16266] Cannot create hsr debugfs directory [ 646.015041][ T2523] IPVS: stop unused estimator thread 0... [ 646.300627][ T29] audit: type=1326 audit(1728008256.671:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16364 comm="syz.3.2493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e3d37dff9 code=0x0 [ 646.414166][ T2523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.586644][ T2523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.773153][ T2523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.922188][ T5242] Bluetooth: hci12: command tx timeout [ 646.934843][ T2523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.983135][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 646.994488][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 647.011987][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 647.058920][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 647.089364][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 647.101670][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 647.455180][T16376] team0: Port device veth0_to_team added [ 647.520526][T16393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.560504][T16393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.583733][T16379] team0: Port device veth0_to_team removed [ 647.617894][T16379] team0: Port device team_slave_0 removed [ 647.863907][T16401] FAULT_INJECTION: forcing a failure. [ 647.863907][T16401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.884774][T16401] CPU: 0 UID: 0 PID: 16401 Comm: syz.4.2499 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 647.895579][T16401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 647.905652][T16401] Call Trace: [ 647.908945][T16401] [ 647.911892][T16401] dump_stack_lvl+0x241/0x360 [ 647.916585][T16401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.921788][T16401] ? __pfx__printk+0x10/0x10 [ 647.926377][T16401] ? snprintf+0xda/0x120 [ 647.930609][T16401] should_fail_ex+0x3b0/0x4e0 [ 647.935283][T16401] _copy_to_user+0x2f/0xb0 [ 647.939690][T16401] simple_read_from_buffer+0xca/0x150 [ 647.945074][T16401] proc_fail_nth_read+0x1e9/0x250 [ 647.950131][T16401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.955708][T16401] ? rw_verify_area+0x55e/0x6f0 [ 647.960582][T16401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.966157][T16401] vfs_read+0x201/0xbc0 [ 647.970335][T16401] ? __pfx_lock_release+0x10/0x10 [ 647.975388][T16401] ? __pfx_vfs_read+0x10/0x10 [ 647.980094][T16401] ? __fget_files+0x3f3/0x470 [ 647.984784][T16401] ? fdget_pos+0x24e/0x320 [ 647.989191][T16401] ksys_read+0x183/0x2b0 [ 647.993438][T16401] ? __pfx_ksys_read+0x10/0x10 [ 647.998220][T16401] ? do_syscall_64+0x100/0x230 [ 648.003003][T16401] ? do_syscall_64+0xb6/0x230 [ 648.007694][T16401] do_syscall_64+0xf3/0x230 [ 648.012201][T16401] ? clear_bhb_loop+0x35/0x90 [ 648.016873][T16401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.022755][T16401] RIP: 0033:0x7fb3b897ca3c [ 648.027158][T16401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 648.046768][T16401] RSP: 002b:00007fb3b9782030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.055203][T16401] RAX: ffffffffffffffda RBX: 00007fb3b8b35f80 RCX: 00007fb3b897ca3c [ 648.063182][T16401] RDX: 000000000000000f RSI: 00007fb3b97820a0 RDI: 0000000000000006 [ 648.071151][T16401] RBP: 00007fb3b9782090 R08: 0000000000000000 R09: 0000000000000000 [ 648.079126][T16401] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 648.087090][T16401] R13: 0000000000000000 R14: 00007fb3b8b35f80 R15: 00007fb3b8c5fa28 [ 648.095081][T16401] [ 648.104770][ T2523] bridge_slave_1: left allmulticast mode [ 648.112420][ T2523] bridge_slave_1: left promiscuous mode [ 648.120426][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.140997][ T2523] bridge_slave_0: left allmulticast mode [ 648.160863][ T2523] bridge_slave_0: left promiscuous mode [ 648.167501][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.188537][T16406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.244291][T16406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.002443][ T54] Bluetooth: hci12: command tx timeout [ 649.061019][ T2523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.076394][ T2523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.096628][ T2523] bond0 (unregistering): Released all slaves [ 649.127648][T16403] netlink: 'syz.2.2500': attribute type 20 has an invalid length. [ 649.252520][ T54] Bluetooth: hci9: command tx timeout [ 650.056250][T16266] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.164422][T16386] chnl_net:caif_netlink_parms(): no params data found [ 650.176722][T16266] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.207892][T16266] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.252249][T16266] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.371943][ T54] Bluetooth: hci11: Controller not accepting commands anymore: ncmd = 0 [ 650.380778][ T54] Bluetooth: hci11: Injecting HCI hardware error event [ 650.389268][ T54] Bluetooth: hci11: hardware error 0x00 [ 650.475990][ T2523] hsr_slave_0: left promiscuous mode [ 650.505147][ T2523] hsr_slave_1: left promiscuous mode [ 650.571956][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.579988][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.622735][ T2523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.630438][ T2523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.670632][ T2523] veth1_macvtap: left promiscuous mode [ 650.676615][ T2523] veth0_macvtap: left promiscuous mode [ 650.685482][ T2523] veth1_vlan: left promiscuous mode [ 650.691111][ T2523] veth0_vlan: left promiscuous mode [ 651.026452][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.043502][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.329874][ T5242] Bluetooth: hci9: command tx timeout [ 651.496215][ T2523] team0 (unregistering): Port device team_slave_1 removed [ 651.566945][ T2523] team0 (unregistering): Port device team_slave_0 removed [ 652.397903][T16451] netlink: 'syz.4.2511': attribute type 20 has an invalid length. [ 652.492688][T16451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.522115][ T54] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 652.533894][T16266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.565204][T16451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.605061][T16462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.657717][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.665090][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.674793][T16386] bridge_slave_0: entered allmulticast mode [ 652.687185][T16462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.695180][T16386] bridge_slave_0: entered promiscuous mode [ 652.721082][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.751732][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.759033][T16386] bridge_slave_1: entered allmulticast mode [ 652.767450][T16386] bridge_slave_1: entered promiscuous mode [ 652.791019][T16266] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.812791][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.819943][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.839492][T16464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.854343][T16464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.863008][T13302] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.870109][T13302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.895697][T16386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.909961][T16386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.994059][T16386] team0: Port device team_slave_0 added [ 653.029493][T16386] team0: Port device team_slave_1 added [ 653.072515][T16386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.079496][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.107231][T16386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.149263][T16386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.156574][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.184784][T16386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.344662][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.367675][T16386] hsr_slave_0: entered promiscuous mode [ 653.379835][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.401926][ T54] Bluetooth: hci9: command tx timeout [ 653.408280][T16386] hsr_slave_1: entered promiscuous mode [ 653.448379][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.472638][T16386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.480248][T16386] Cannot create hsr debugfs directory [ 653.517476][T16483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.549031][T16483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.570918][T16478] CIFS: VFS: Malformed UNC in devname [ 653.591988][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.606462][T16266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.839533][T16266] veth0_vlan: entered promiscuous mode [ 653.851523][T16266] veth1_vlan: entered promiscuous mode [ 653.875421][T16266] veth0_macvtap: entered promiscuous mode [ 653.902723][T16266] veth1_macvtap: entered promiscuous mode [ 654.047522][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.065174][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.075950][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.086884][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.097414][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.109698][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.123328][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.134277][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.145754][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.156836][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.184879][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.203705][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.215905][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.230580][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.241322][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.257115][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.267806][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.278763][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.291278][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.302826][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.313559][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.329220][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.339626][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.362154][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.375018][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.385664][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.434716][T16266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.510707][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.540651][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.563744][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.586625][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.607990][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.633383][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.646969][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.658878][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.680609][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.704646][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.714856][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.737201][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.741676][T16500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.748080][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.777113][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.787841][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.809955][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.827551][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.841143][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.863168][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.875044][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.885317][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.897137][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.907301][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.918145][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.929481][T16266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.944624][T16266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.957068][T16500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.970263][T16266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.275514][T16266] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.301738][T16266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.327147][T16266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.347099][T16266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.482565][T11304] Bluetooth: hci9: command tx timeout [ 655.768211][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.806273][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.917546][T16386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 655.946434][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.947221][T16386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 655.990384][T16518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.004569][T16386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.035413][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.047189][T16518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.080969][T16386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.400984][T16386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.483333][T16386] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.517069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.524242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.579965][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.587145][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.830050][T16386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.900381][T16536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.917509][T16536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.980362][T16386] veth0_vlan: entered promiscuous mode [ 657.079961][T16386] veth1_vlan: entered promiscuous mode [ 657.138429][T16543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.154883][T16386] veth0_macvtap: entered promiscuous mode [ 657.171007][T16543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.177272][T16386] veth1_macvtap: entered promiscuous mode [ 657.219937][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.241771][T11304] Bluetooth: hci7: command 0x0406 tx timeout [ 657.253450][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.253839][T11304] Bluetooth: hci5: command 0x0406 tx timeout [ 657.282394][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.295724][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.305988][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.317958][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.328577][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.345101][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.361774][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.383255][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.413956][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.437817][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.458041][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.478734][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.502763][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.524862][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.546801][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.574491][T16554] FAULT_INJECTION: forcing a failure. [ 657.574491][T16554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.576117][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.602364][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.614695][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.624986][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.635882][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.645689][T16554] CPU: 0 UID: 0 PID: 16554 Comm: syz.0.2526 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 657.645724][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 657.645736][T16554] Call Trace: [ 657.645744][T16554] [ 657.645753][T16554] dump_stack_lvl+0x241/0x360 [ 657.645781][T16554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.645799][T16554] ? __pfx__printk+0x10/0x10 [ 657.645826][T16554] ? __pfx_lock_release+0x10/0x10 [ 657.645860][T16554] should_fail_ex+0x3b0/0x4e0 [ 657.645898][T16554] _copy_from_user+0x2f/0xe0 [ 657.645924][T16554] copy_msghdr_from_user+0xae/0x680 [ 657.645955][T16554] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 657.645993][T16554] __sys_sendmsg+0x22d/0x380 [ 657.646017][T16554] ? __pfx___sys_sendmsg+0x10/0x10 [ 657.646048][T16554] ? __pfx_vfs_write+0x10/0x10 [ 657.646088][T16554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 657.646116][T16554] ? do_syscall_64+0x100/0x230 [ 657.646137][T16554] ? do_syscall_64+0xb6/0x230 [ 657.646158][T16554] do_syscall_64+0xf3/0x230 [ 657.646177][T16554] ? clear_bhb_loop+0x35/0x90 [ 657.646199][T16554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.646224][T16554] RIP: 0033:0x7f1e7fd7dff9 [ 657.646241][T16554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.646258][T16554] RSP: 002b:00007f1e80adc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.646281][T16554] RAX: ffffffffffffffda RBX: 00007f1e7ff35f80 RCX: 00007f1e7fd7dff9 [ 657.646296][T16554] RDX: 0000000000000060 RSI: 0000000020000380 RDI: 0000000000000003 [ 657.646309][T16554] RBP: 00007f1e80adc090 R08: 0000000000000000 R09: 0000000000000000 [ 657.646321][T16554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.646333][T16554] R13: 0000000000000000 R14: 00007f1e7ff35f80 R15: 00007f1e8005fa28 [ 657.646358][T16554] [ 657.912931][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.927704][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.938406][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.950504][T16559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.973016][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.004067][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.022785][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.049528][T16559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.054504][T16386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.085094][T16562] kAFS: unable to lookup cell '×­àé6Wêáâ6ß¾—™äé%¾$ɆJJ¼÷=1 ©üU–¿Çxƒì' [ 658.098366][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.147583][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.184067][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.198847][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.207916][T16518] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 658.213618][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 658.217401][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.230363][T16518] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 658.261856][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.291462][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.311730][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.325155][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.335595][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.346703][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.357069][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.372067][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.382514][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.393407][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.403967][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.419214][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.429631][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.440568][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.451800][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.463011][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.473588][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.484590][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.494973][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.505953][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.516380][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.547370][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.568920][T16386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.591629][T16386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.624469][T16386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.633332][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.670668][T16386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.692500][T16386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.701270][T16386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.714645][T16386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.936518][T16518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 658.951969][T16518] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 658.999004][T16518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 659.011931][T16518] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 659.043767][T16518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 659.061783][T16518] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 659.094421][T16518] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 659.121866][T16518] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 659.157042][T16518] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 659.192274][T16518] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 659.254447][T16518] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 659.279642][T16518] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 659.349442][T16518] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 659.373589][T16518] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 659.407258][T16518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 659.413339][T16518] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 659.427958][T16518] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 659.438364][T16518] Bluetooth: hci10: Error when powering off device on rfkill (-4) [ 659.470831][T16518] Bluetooth: hci13: Opcode 0x0c1a failed: -4 [ 659.487273][T16518] Bluetooth: hci13: Error when powering off device on rfkill (-4) [ 659.517895][T16518] Bluetooth: hci14: Opcode 0x0c1a failed: -4 [ 659.530038][T16518] Bluetooth: hci14: Error when powering off device on rfkill (-4) [ 659.573293][T16518] Bluetooth: hci12: Opcode 0x0c1a failed: -4 [ 659.589920][T16518] Bluetooth: hci12: Error when powering off device on rfkill (-4) [ 659.613265][T16518] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 659.624788][T16518] Bluetooth: hci9: Error when powering off device on rfkill (-4) [ 659.668197][T16580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.683836][T16580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.813116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.820996][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.937452][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.954667][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.197809][T16596] netlink: 'syz.1.2495': attribute type 39 has an invalid length. [ 660.254332][T16596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.275952][T16602] netlink: 'syz.2.2531': attribute type 9 has an invalid length. [ 660.303890][T16602] bond_slave_0: entered promiscuous mode [ 660.310149][T16602] bond_slave_1: entered promiscuous mode [ 660.318879][T16602] macvlan2: entered promiscuous mode [ 660.326578][T16596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.352357][T16602] bond0: entered promiscuous mode [ 660.374058][T16602] macvlan2: entered allmulticast mode [ 660.396829][T16602] bond0: entered allmulticast mode [ 660.416296][T16602] bond_slave_0: entered allmulticast mode [ 660.434219][T16602] bond_slave_1: entered allmulticast mode [ 660.451562][T16602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 661.158419][T16622] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 661.333546][T16627] fuse: blksize only supported for fuseblk [ 661.350830][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.359678][T16632] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 661.378042][T16634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.387930][T16632] netlink: 'syz.1.2534': attribute type 7 has an invalid length. [ 661.419312][T16636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.428658][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.431759][T16632] netlink: 198024 bytes leftover after parsing attributes in process `syz.1.2534'. [ 661.451990][T16634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.468818][T16636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.494764][T16639] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 661.501404][T16639] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.533430][T16622] hsr_slave_0 (unregistering): left promiscuous mode [ 661.541106][T16639] vhci_hcd vhci_hcd.0: Device attached [ 661.782797][T12628] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 661.979239][T16640] vhci_hcd: connection reset by peer [ 661.994031][ T35] vhci_hcd: stop threads [ 662.011979][ T35] vhci_hcd: release socket [ 662.039306][ T35] vhci_hcd: disconnect device [ 662.158389][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.170563][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.708598][T16669] netlink: 'syz.3.2543': attribute type 39 has an invalid length. [ 662.731260][T16669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.741778][T16669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.797157][ T5282] hid (null): unknown global tag 0xe [ 662.803604][ T5282] hid (null): unknown global tag 0xe [ 662.809275][ T5282] hid (null): report_id 4429 is invalid [ 662.823033][ T5282] hid-generic 0009:0001:0004.002A: unknown main item tag 0x0 [ 662.830732][ T5282] hid-generic 0009:0001:0004.002A: unknown global tag 0xe [ 662.839287][ T5282] hid-generic 0009:0001:0004.002A: item 0 0 1 14 parsing failed [ 662.850386][ T5282] hid-generic 0009:0001:0004.002A: probe with driver hid-generic failed with error -22 [ 662.942943][T16674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.972228][T16674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.180071][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.190439][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.363797][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.383114][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.402999][T16682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.417346][T16682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.605531][ T5242] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 663.615551][ T5242] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 663.625201][ T5242] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 663.647659][ T5242] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 663.656161][ T5242] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 663.664445][ T5242] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 663.937404][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 664.054540][T16686] chnl_net:caif_netlink_parms(): no params data found [ 664.122641][ T30] INFO: task syz.1.2018:14056 blocked for more than 143 seconds. [ 664.130427][ T30] Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 664.157096][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 664.198881][ T30] task:syz.1.2018 state:D stack:26816 pid:14056 tgid:14055 ppid:13803 flags:0x00000004 [ 664.241929][ T30] Call Trace: [ 664.245273][ T30] [ 664.248229][ T30] __schedule+0x1895/0x4b30 [ 664.302560][ T30] ? __pfx___schedule+0x10/0x10 [ 664.307489][ T30] ? __pfx_lock_release+0x10/0x10 [ 664.357954][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 664.364540][ T30] ? schedule+0x90/0x320 [ 664.368830][ T30] schedule+0x14b/0x320 [ 664.397794][ T30] schedule_preempt_disabled+0x13/0x30 [ 664.422421][ T30] __mutex_lock+0x6a7/0xd70 [ 664.427005][ T30] ? __mutex_lock+0x52a/0xd70 [ 664.471798][ T30] ? chaoskey_open+0xb1/0x1b0 [ 664.476548][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 664.512708][ T30] ? usb_find_interface+0xf7/0x160 [ 664.517921][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 664.551759][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 664.557448][ T30] chaoskey_open+0xb1/0x1b0 [ 664.581724][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 664.586896][ T30] usb_open+0x14b/0x1d0 [ 664.591061][ T30] chrdev_open+0x521/0x600 [ 664.608495][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 664.620137][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 664.631781][ T30] ? security_file_open+0x513/0x990 [ 664.637027][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 664.651956][ T30] do_dentry_open+0x978/0x1460 [ 664.656792][ T30] vfs_open+0x3e/0x330 [ 664.660886][ T30] path_openat+0x2c84/0x3590 [ 664.684141][ T30] ? __pfx_path_openat+0x10/0x10 [ 664.689136][ T30] do_filp_open+0x235/0x490 [ 664.701683][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 664.706788][ T30] ? _raw_spin_unlock+0x28/0x50 [ 664.721640][ T30] ? alloc_fd+0x5a1/0x640 [ 664.726026][ T30] do_sys_openat2+0x13e/0x1d0 [ 664.730714][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.741917][ T30] __x64_sys_openat+0x247/0x2a0 [ 664.747065][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.752591][ T30] ? do_syscall_64+0x100/0x230 [ 664.757388][ T30] ? do_syscall_64+0xb6/0x230 [ 664.764905][ T30] do_syscall_64+0xf3/0x230 [ 664.772345][ T30] ? clear_bhb_loop+0x35/0x90 [ 664.777077][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.783654][ T30] RIP: 0033:0x7fd91977c990 [ 664.788102][ T30] RSP: 002b:00007fd91a495b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 664.797054][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd91977c990 [ 664.805156][ T30] RDX: 0000000000000002 RSI: 00007fd91a495c10 RDI: 00000000ffffff9c [ 664.813388][ T30] RBP: 00007fd91a495c10 R08: 0000000000000000 R09: 00007fd91a495987 [ 664.821385][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 664.830072][ T30] R13: 0000000000000000 R14: 00007fd919935f80 R15: 00007fd919a5fa28 [ 664.838162][ T30] [ 664.841431][ T30] [ 664.841431][ T30] Showing all locks held in the system: [ 664.850610][ T30] 3 locks held by kworker/u8:0/11: [ 664.855955][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 664.870992][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 664.883665][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 664.893089][ T30] 6 locks held by kworker/1:0/25: [ 664.898129][ T30] #0: ffff888143ef0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 664.910058][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 664.922883][ T30] #2: ffff8881447c7190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 664.932246][ T30] #3: ffff88804edeb190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 664.941528][ T30] #4: ffff888143bf1160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 664.951146][ T30] #5: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 664.963102][ T30] 1 lock held by khungtaskd/30: [ 664.967976][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 664.980615][ T30] 2 locks held by kworker/u8:3/52: [ 664.986069][ T30] 2 locks held by getty/4985: [ 664.990760][ T30] #0: ffff88802eb4d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 665.001767][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 665.012640][ T30] 6 locks held by kworker/0:4/5233: [ 665.017942][ T30] #0: ffff888143ef0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 665.029758][ T30] #1: ffffc9000393fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 665.041840][ T30] #2: ffff88802871f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 665.050937][ T30] #3: ffff888047f96190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 665.060325][ T30] #4: ffff88807c3c3160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 665.070467][ T30] #5: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 665.083409][ T30] 6 locks held by kworker/1:4/5283: [ 665.088645][ T30] #0: ffff888143ef0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 665.100108][ T30] #1: ffffc90003e87d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 665.113692][ T30] #2: ffff88802879f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 665.122713][ T30] #3: ffff88804e887190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 665.132186][ T30] #4: ffff88804eeaf160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 665.141465][ T30] #5: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 665.151139][ T30] 4 locks held by udevd/11293: [ 665.156159][ T30] #0: ffff88806df36b08 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 665.166414][ T30] #1: ffff88802ebe1088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 665.179416][ T30] #2: ffff88806345d5a8 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 665.189111][ T30] #3: ffff888047f96190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 665.198842][ T30] 4 locks held by udevd/11586: [ 665.203737][ T30] #0: ffff88806384b8b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 665.212813][ T30] #1: ffff888028b6b088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 665.223775][ T30] #2: ffff88807de00d28 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 665.233432][ T30] #3: ffff88804e887190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 665.243181][ T30] 5 locks held by kworker/0:6/12628: [ 665.248479][ T30] #0: ffff888143ef0948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 665.259946][ T30] #1: ffffc90004e37d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 665.272143][ T30] #2: ffff888028ae1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 665.284254][ T30] #3: ffff888028ae4510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 665.294494][ T30] #4: ffff888027c7a568 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 665.304511][ T30] 1 lock held by syz.3.2017/14054: [ 665.309646][ T30] #0: ffff8880128ba078 (&dev->lock#2){+.+.}-{3:3}, at: chaoskey_read+0x127/0x590 [ 665.319028][ T30] 2 locks held by syz.1.2018/14056: [ 665.324510][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.335002][ T30] #1: ffff8880128ba078 (&dev->lock#2){+.+.}-{3:3}, at: chaoskey_open+0xb1/0x1b0 [ 665.344321][ T30] 1 lock held by syz.4.2040/14120: [ 665.349443][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.358615][ T30] 1 lock held by syz.2.2056/14197: [ 665.363864][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.372905][ T30] 1 lock held by syz.1.2157/14724: [ 665.378202][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.390010][ T30] 1 lock held by syz.4.2180/14857: [ 665.396081][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.414431][ T30] 1 lock held by syz.3.2212/15139: [ 665.419572][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.428749][ T30] 1 lock held by syz.0.2222/15185: [ 665.433950][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.444154][ T30] 1 lock held by syz.2.2248/15264: [ 665.449286][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.458189][ T30] 1 lock held by syz.4.2309/15489: [ 665.463352][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.472245][ T30] 1 lock held by syz-executor/16386: [ 665.477539][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 665.492211][ T30] 1 lock held by syz.4.2515/16474: [ 665.497359][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.507232][ T30] 1 lock held by syz.2.2537/16636: [ 665.512487][ T30] #0: ffffffff8f5ab390 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 665.521337][ T30] 1 lock held by syz-executor/16686: [ 665.526807][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 665.536366][ T30] 1 lock held by syz.3.2554/16707: [ 665.541480][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 665.552733][T16707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 665.591656][ T30] [ 665.594032][ T30] ============================================= [ 665.594032][ T30] [ 665.622397][ T30] NMI backtrace for cpu 1 [ 665.626772][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 665.637297][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.647378][ T30] Call Trace: [ 665.650673][ T30] [ 665.653616][ T30] dump_stack_lvl+0x241/0x360 [ 665.658315][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.663527][ T30] ? __pfx__printk+0x10/0x10 [ 665.668149][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 665.673109][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 665.678584][ T30] ? _printk+0xd5/0x120 [ 665.682765][ T30] ? __pfx__printk+0x10/0x10 [ 665.687463][ T30] ? __wake_up_klogd+0xcc/0x110 [ 665.692332][ T30] ? __pfx__printk+0x10/0x10 [ 665.696945][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 665.701987][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 665.707984][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 665.713985][ T30] watchdog+0xff4/0x1040 [ 665.718250][ T30] ? watchdog+0x1ea/0x1040 [ 665.722688][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.727389][ T30] kthread+0x2f0/0x390 [ 665.731470][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.736165][ T30] ? __pfx_kthread+0x10/0x10 [ 665.740771][ T30] ret_from_fork+0x4b/0x80 [ 665.745207][ T30] ? __pfx_kthread+0x10/0x10 [ 665.749810][ T30] ret_from_fork_asm+0x1a/0x30 [ 665.754612][ T30] [ 665.759694][ T30] Sending NMI from CPU 1 to CPUs 0: [ 665.766228][ C0] NMI backtrace for cpu 0 [ 665.766243][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 665.766264][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.766275][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 665.766299][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 665.766323][ C0] Code: e8 eb 9f 4a 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 ca 31 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c c8 83 00 48 c7 c3 98 7e 03 00 49 03 1e 48 89 [ 665.766337][ C0] RSP: 0018:ffffc90000bd6da0 EFLAGS: 00000246 [ 665.766351][ C0] RAX: 1ffffffff1c6394a RBX: 0000000000000000 RCX: ffff888020ae3c00 [ 665.766364][ C0] RDX: 0000000000000000 RSI: ffffffff8c60f840 RDI: ffffffff8c60f800 [ 665.766376][ C0] RBP: ffffc90000bd6f50 R08: ffffffff8b306308 R09: 1ffff1100f912f1b [ 665.766389][ C0] R10: dffffc0000000000 R11: ffffed100f912f1c R12: ffff88807c897908 [ 665.766402][ C0] R13: ffff888061f63000 R14: ffffffff8e31ca50 R15: dffffc0000000000 [ 665.766415][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 665.766429][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 665.766442][ C0] CR2: 0000000000000008 CR3: 000000000e734000 CR4: 00000000003526f0 [ 665.766456][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 665.766467][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 665.766478][ C0] Call Trace: [ 665.766485][ C0] [ 665.766492][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 665.766512][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 665.766536][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 665.766554][ C0] ? nmi_handle+0x2a/0x5a0 [ 665.766578][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 665.766599][ C0] ? nmi_handle+0x14f/0x5a0 [ 665.766616][ C0] ? nmi_handle+0x2a/0x5a0 [ 665.766633][ C0] ? rcu_is_watching+0x3a/0xb0 [ 665.766649][ C0] ? default_do_nmi+0x63/0x160 [ 665.766669][ C0] ? exc_nmi+0x123/0x1f0 [ 665.766687][ C0] ? end_repeat_nmi+0xf/0x53 [ 665.766706][ C0] ? ieee80211_inform_bss+0xa78/0x1080 [ 665.766727][ C0] ? rcu_is_watching+0x3a/0xb0 [ 665.766746][ C0] ? rcu_is_watching+0x3a/0xb0 [ 665.766763][ C0] ? rcu_is_watching+0x3a/0xb0 [ 665.766781][ C0] [ 665.766787][ C0] [ 665.766793][ C0] ? ieee80211_inform_bss+0xbb2/0x1080 [ 665.766812][ C0] kfree+0x4e/0x440 [ 665.766831][ C0] ? ieee80211_inform_bss+0x5fb/0x1080 [ 665.766853][ C0] ieee80211_inform_bss+0xbb2/0x1080 [ 665.766875][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 665.766898][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 665.766920][ C0] ? cfg80211_inform_single_bss_data+0xb2d/0x2090 [ 665.766942][ C0] ? cfg80211_inform_single_bss_data+0xd6e/0x2090 [ 665.766965][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 665.766991][ C0] cfg80211_inform_single_bss_data+0xec1/0x2090 [ 665.767018][ C0] ? deref_stack_reg+0x17c/0x210 [ 665.767034][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 665.767066][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 665.767089][ C0] ? cfg80211_inform_bss_data+0x3b6/0x5e70 [ 665.767113][ C0] cfg80211_inform_bss_data+0x3ce/0x5e70 [ 665.767146][ C0] ? __pfx_validate_chain+0x10/0x10 [ 665.767174][ C0] ? __pfx_validate_chain+0x10/0x10 [ 665.767193][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 665.767219][ C0] ? mark_lock+0x9a/0x360 [ 665.767236][ C0] ? __lock_acquire+0x1384/0x2050 [ 665.767270][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 665.767292][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 665.767314][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 665.767342][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 665.767362][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 665.767384][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 665.767405][ C0] ? __pfx_lock_release+0x10/0x10 [ 665.767433][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 665.767460][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 665.767480][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 665.767505][ C0] ? mark_lock+0x9a/0x360 [ 665.767522][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 665.767546][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 665.767568][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 665.767595][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 665.767635][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 665.767654][ C0] ? process_scheduled_works+0x976/0x1850 [ 665.767676][ C0] process_scheduled_works+0xa63/0x1850 [ 665.767709][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 665.767734][ C0] ? assign_work+0x364/0x3d0 [ 665.767756][ C0] worker_thread+0x870/0xd30 [ 665.767783][ C0] ? __kthread_parkme+0x169/0x1d0 [ 665.767806][ C0] ? __pfx_worker_thread+0x10/0x10 [ 665.767827][ C0] kthread+0x2f0/0x390 [ 665.767842][ C0] ? __pfx_worker_thread+0x10/0x10 [ 665.767863][ C0] ? __pfx_kthread+0x10/0x10 [ 665.767878][ C0] ret_from_fork+0x4b/0x80 [ 665.767900][ C0] ? __pfx_kthread+0x10/0x10 [ 665.767915][ C0] ret_from_fork_asm+0x1a/0x30 [ 665.767942][ C0] [ 665.811257][ T5242] Bluetooth: hci15: command tx timeout [ 665.900984][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 665.901004][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00113-g8c245fe7dde3 #0 [ 665.901026][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 665.901038][ T30] Call Trace: [ 665.901046][ T30] [ 665.901054][ T30] dump_stack_lvl+0x241/0x360 [ 665.901080][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.901098][ T30] ? __pfx__printk+0x10/0x10 [ 665.901120][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 665.901152][ T30] ? vscnprintf+0x5d/0x90 [ 665.901173][ T30] panic+0x349/0x880 [ 665.901198][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 665.901220][ T30] ? __pfx_panic+0x10/0x10 [ 665.901241][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 665.901262][ T30] ? __irq_work_queue_local+0x137/0x410 [ 665.901285][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 665.901304][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 665.901324][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 665.901346][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 665.901369][ T30] watchdog+0x1033/0x1040 [ 665.901393][ T30] ? watchdog+0x1ea/0x1040 [ 665.901419][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.901440][ T30] kthread+0x2f0/0x390 [ 665.901458][ T30] ? __pfx_watchdog+0x10/0x10 [ 665.901479][ T30] ? __pfx_kthread+0x10/0x10 [ 665.901498][ T30] ret_from_fork+0x4b/0x80 [ 665.901520][ T30] ? __pfx_kthread+0x10/0x10 [ 665.901538][ T30] ret_from_fork_asm+0x1a/0x30 [ 665.901571][ T30] [ 665.908240][ T30] Kernel Offset: disabled