last executing test programs: 3.396609062s ago: executing program 1 (id=2): ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x2004}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = dup2(r3, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.362170258s ago: executing program 3 (id=4): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000003c0)={0x18, 0x0, {0x6, @local, 'wg1\x00'}}, 0x1e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x1, 0x6, 0x40, @rand_addr=' \x01\x00', @remote, 0x7, 0x1, 0x8, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffffffffd90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) inotify_init() r3 = openat$audio1(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) inotify_init1(0xc00) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8eee62cfb940892d}, {r2, 0x8}, {r3, 0x6cc3b7f4522135f}], 0x3, &(0x7f00000002c0)={r4, r5+10000000}, &(0x7f0000000300)={[0x3, 0x80]}, 0x8) dup(r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 3.121591414s ago: executing program 3 (id=6): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) 2.750196444s ago: executing program 3 (id=7): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@dev}}, 0xe8) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="c270f25406db9eb18b148f5cf1c7179f9c9dfe44430ca37f40cb4ee785703aa44cd721dc00b087196ed01d06ed49ac987759c89d765b1281e74e4a620358afb2e596c68483a6559661508f91b8cf23e78c0a3bddc2151471e2e243282a1894513681917fb8d5f7ef4f31f3f11dbe9e8d757e6171fd87bb70ba861508600154d2c9e0e9029d31d02e0051016e80b2431ed5dbf2e99eb20c6efc0c97faa3e07d", 0x9f}], 0x1}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r2], 0x18}, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) 2.566376618s ago: executing program 3 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) socket$packet(0x11, 0x3, 0x300) r3 = memfd_create(&(0x7f0000000680)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#Y`\x1f\x05Gx\x86\xb4\xc9s\xf7\\\xa0\xadR\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xe4\xcc\xb8]\'@V\x97.\xcf\x93\x13g\x8f', 0x8) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0xfffffda5) fcntl$addseals(r3, 0x409, 0x8) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4020aed2, 0x0) 2.310063216s ago: executing program 1 (id=9): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x200, 0x10000, 0xa0022}) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) 1.884245734s ago: executing program 1 (id=10): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0xcb000000, 0x0}}], 0x28000, 0x0) 1.855427546s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f", 0x11}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000210001002cbd7000fedbdf2502149402800000000013001f00000000000b003f00000000000c40000000000000000600000c40000000000000000900000b0fed074ce49fb1144000000000000003"], 0x60}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.272824696s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) rmdir(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) 1.234569582s ago: executing program 4 (id=11): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 1.23343455s ago: executing program 1 (id=12): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)) fcntl$lock(r1, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) fcntl$lock(r1, 0x6, &(0x7f0000000380)={0x1, 0x0, 0x101, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 1.066797208s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 793.536298ms ago: executing program 4 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000100000000000", @ANYBLOB="00000000000000001400126ac4c593"], 0x34}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 630.614019ms ago: executing program 2 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) getpid() mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000780)="cb"}) 462.564523ms ago: executing program 2 (id=15): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x20, 0xfffffffd}, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000bc0)={0x1, 0x0, [{0x0, 0xd3, &(0x7f0000000780)=""/211}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5f, {0x5f, 0x0, "a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810ac55fbda3e39fcbe111cc28def45137dd52b615507901e312253d859be5cdac84dd1ab0ebff44827"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 88.214745ms ago: executing program 1 (id=16): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=17): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 69.492395][ T5225] cgroup: Unknown subsys name 'net' [ 69.634778][ T5225] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.255977][ T5225] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.578487][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.585183][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.057425][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.072629][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.080800][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.088733][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.097122][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.104241][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.105572][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.112407][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.119019][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.126096][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.134339][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.140676][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.147151][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.153946][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.160565][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.167434][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.174438][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.190567][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.199502][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.199917][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.215135][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.222400][ T5247] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.230699][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.256591][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.261541][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.274978][ T4627] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.282362][ T4627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.294062][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.308948][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.317662][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.888588][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 75.916138][ T5256] chnl_net:caif_netlink_parms(): no params data found [ 75.992299][ T5255] chnl_net:caif_netlink_parms(): no params data found [ 76.149869][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 76.221389][ T5256] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.228987][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.236936][ T5256] bridge_slave_0: entered allmulticast mode [ 76.244074][ T5256] bridge_slave_0: entered promiscuous mode [ 76.252139][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 76.279642][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.287037][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.294308][ T5252] bridge_slave_0: entered allmulticast mode [ 76.301186][ T5252] bridge_slave_0: entered promiscuous mode [ 76.308769][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.316153][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.323381][ T5256] bridge_slave_1: entered allmulticast mode [ 76.330832][ T5256] bridge_slave_1: entered promiscuous mode [ 76.377953][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.386381][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.393546][ T5252] bridge_slave_1: entered allmulticast mode [ 76.401400][ T5252] bridge_slave_1: entered promiscuous mode [ 76.442991][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.450305][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.457693][ T5255] bridge_slave_0: entered allmulticast mode [ 76.465155][ T5255] bridge_slave_0: entered promiscuous mode [ 76.498691][ T5256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.525247][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.532517][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.539905][ T5255] bridge_slave_1: entered allmulticast mode [ 76.548313][ T5255] bridge_slave_1: entered promiscuous mode [ 76.557272][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.570027][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.581487][ T5256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.721534][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.729121][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.736405][ T5254] bridge_slave_0: entered allmulticast mode [ 76.743276][ T5254] bridge_slave_0: entered promiscuous mode [ 76.754666][ T5255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.766158][ T5255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.778790][ T5252] team0: Port device team_slave_0 added [ 76.793520][ T5256] team0: Port device team_slave_0 added [ 76.811371][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.820137][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.830327][ T5254] bridge_slave_1: entered allmulticast mode [ 76.838372][ T5254] bridge_slave_1: entered promiscuous mode [ 76.880441][ T5252] team0: Port device team_slave_1 added [ 76.901447][ T5256] team0: Port device team_slave_1 added [ 76.921488][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.928789][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.936327][ T5253] bridge_slave_0: entered allmulticast mode [ 76.943257][ T5253] bridge_slave_0: entered promiscuous mode [ 76.966226][ T5255] team0: Port device team_slave_0 added [ 76.975280][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.006688][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.015080][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.022228][ T5253] bridge_slave_1: entered allmulticast mode [ 77.029670][ T5253] bridge_slave_1: entered promiscuous mode [ 77.038784][ T5255] team0: Port device team_slave_1 added [ 77.059295][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.081221][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.090995][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.117425][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.130058][ T5256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.140981][ T5256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.167587][ T5256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.216674][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.227704][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.254656][ T5243] Bluetooth: hci2: command tx timeout [ 77.260389][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.272528][ T5256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.280129][ T5256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.306077][ T5256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.331423][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.333905][ T5241] Bluetooth: hci0: command tx timeout [ 77.341649][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.346215][ T5246] Bluetooth: hci1: command tx timeout [ 77.355690][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.363753][ T5243] Bluetooth: hci4: command tx timeout [ 77.384853][ T5255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.404576][ T5255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.411530][ T5255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.413989][ T5243] Bluetooth: hci3: command tx timeout [ 77.443486][ T5255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.458948][ T5254] team0: Port device team_slave_0 added [ 77.492432][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.522903][ T5254] team0: Port device team_slave_1 added [ 77.576019][ T5256] hsr_slave_0: entered promiscuous mode [ 77.582376][ T5256] hsr_slave_1: entered promiscuous mode [ 77.609545][ T5253] team0: Port device team_slave_0 added [ 77.629277][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.636722][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.662719][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.675901][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.682875][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.708807][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.743521][ T5253] team0: Port device team_slave_1 added [ 77.817743][ T5252] hsr_slave_0: entered promiscuous mode [ 77.825457][ T5252] hsr_slave_1: entered promiscuous mode [ 77.831676][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.843430][ T5252] Cannot create hsr debugfs directory [ 77.871632][ T5254] hsr_slave_0: entered promiscuous mode [ 77.878590][ T5254] hsr_slave_1: entered promiscuous mode [ 77.885230][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.892792][ T5254] Cannot create hsr debugfs directory [ 77.939621][ T5255] hsr_slave_0: entered promiscuous mode [ 77.948839][ T5255] hsr_slave_1: entered promiscuous mode [ 77.955285][ T5255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.962841][ T5255] Cannot create hsr debugfs directory [ 77.989390][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.996509][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.023175][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.074541][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.081509][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.108524][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.219280][ T5253] hsr_slave_0: entered promiscuous mode [ 78.228951][ T5253] hsr_slave_1: entered promiscuous mode [ 78.235448][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.243018][ T5253] Cannot create hsr debugfs directory [ 78.634145][ T5254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.648026][ T5254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.670975][ T5254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.687514][ T5254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.726417][ T5256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.757306][ T5256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.769101][ T5256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.780153][ T5256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.867724][ T5252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.880506][ T5252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.917507][ T5252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.942353][ T5252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.011723][ T5255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.022608][ T5255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.046269][ T5255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.057682][ T5255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.163225][ T5253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.187798][ T5253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.199742][ T5253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.212155][ T5253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.246074][ T5256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.259824][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.306090][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.334006][ T5243] Bluetooth: hci2: command tx timeout [ 79.365722][ T5256] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.392629][ T2515] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.400044][ T2515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.414417][ T5243] Bluetooth: hci4: command tx timeout [ 79.414635][ T5241] Bluetooth: hci0: command tx timeout [ 79.419840][ T5243] Bluetooth: hci1: command tx timeout [ 79.438372][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.445559][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.494274][ T5243] Bluetooth: hci3: command tx timeout [ 79.516105][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.523270][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.602776][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.609979][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.626252][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.734791][ T5255] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.746460][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.790923][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.818913][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.826234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.838389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.845584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.879301][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.915942][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.923096][ T2515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.933416][ T2515] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.940570][ T2515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.953125][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.011976][ T5256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.038313][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.101031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.108312][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.136555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.143809][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.259909][ T5254] veth0_vlan: entered promiscuous mode [ 80.317735][ T5256] veth0_vlan: entered promiscuous mode [ 80.336362][ T5254] veth1_vlan: entered promiscuous mode [ 80.364950][ T5256] veth1_vlan: entered promiscuous mode [ 80.379401][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.432536][ T5254] veth0_macvtap: entered promiscuous mode [ 80.450335][ T5255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.466064][ T5254] veth1_macvtap: entered promiscuous mode [ 80.538511][ T5252] veth0_vlan: entered promiscuous mode [ 80.557171][ T5256] veth0_macvtap: entered promiscuous mode [ 80.570881][ T5256] veth1_macvtap: entered promiscuous mode [ 80.582104][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.602993][ T5252] veth1_vlan: entered promiscuous mode [ 80.630151][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.663092][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.672566][ T5256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.683537][ T5256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.697942][ T5256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.710483][ T5256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.721465][ T5256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.733090][ T5256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.751027][ T5254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.760674][ T5254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.770685][ T5254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.780017][ T5254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.807506][ T5256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.816438][ T5256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.826301][ T5256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.836186][ T5256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.936514][ T5255] veth0_vlan: entered promiscuous mode [ 81.016622][ T5252] veth0_macvtap: entered promiscuous mode [ 81.022767][ T2491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.040976][ T2491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.068215][ T5253] veth0_vlan: entered promiscuous mode [ 81.082621][ T5253] veth1_vlan: entered promiscuous mode [ 81.103309][ T5255] veth1_vlan: entered promiscuous mode [ 81.118595][ T5252] veth1_macvtap: entered promiscuous mode [ 81.192068][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.203881][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.217758][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.228342][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.243062][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.269702][ T2515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.272563][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.283882][ T2515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.288796][ T2491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.305297][ T2491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.316857][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.327466][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.338704][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.350601][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.382001][ T5252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.396728][ T5252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406745][ T5252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.415910][ T5243] Bluetooth: hci2: command tx timeout [ 81.424821][ T5252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.493977][ T5243] Bluetooth: hci1: command tx timeout [ 81.494034][ T5246] Bluetooth: hci0: command tx timeout [ 81.499537][ T5241] Bluetooth: hci4: command tx timeout [ 81.517742][ T5253] veth0_macvtap: entered promiscuous mode [ 81.528537][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.543890][ T5255] veth0_macvtap: entered promiscuous mode [ 81.562619][ T5253] veth1_macvtap: entered promiscuous mode [ 81.568627][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.576209][ T5241] Bluetooth: hci3: command tx timeout [ 81.601373][ T5255] veth1_macvtap: entered promiscuous mode [ 81.679436][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.733683][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.743552][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.774092][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.791417][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.809893][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.846942][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.850536][ T5298] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.876341][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.914005][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.933730][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.972691][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.005898][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.023672][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.054608][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.091311][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.119324][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.180733][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.220382][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.237419][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.249991][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.260408][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.271457][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.288951][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.324658][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.355665][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.388641][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.411518][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.426462][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.443734][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.463112][ T5255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.475116][ T5255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.487169][ T5304] Zero length message leads to an empty skb [ 82.492691][ T5255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.547531][ T5253] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.583822][ T5253] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.592681][ T5253] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.622615][ T5253] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.655790][ T5255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.665402][ T5255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.680726][ T5255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.689996][ T5255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711396][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.735680][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.907294][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.938278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.991752][ T5310] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.065214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.109297][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.207241][ T2515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.245105][ T2515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.254285][ T5290] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.379824][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.391249][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.474724][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 83.494489][ T5241] Bluetooth: hci2: command tx timeout [ 83.497075][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 83.532513][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.565914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.574342][ T5241] Bluetooth: hci0: command tx timeout [ 83.584446][ T5241] Bluetooth: hci4: command tx timeout [ 83.589914][ T5241] Bluetooth: hci1: command tx timeout [ 83.603179][ T5290] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 83.614134][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.653935][ T5241] Bluetooth: hci3: command tx timeout [ 83.694914][ T5290] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 83.782068][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.863944][ T5290] usb 4-1: Product: syz [ 83.868263][ T5290] usb 4-1: Manufacturer: syz [ 83.892616][ T5290] usb 4-1: SerialNumber: syz [ 83.926455][ T5290] usb 4-1: config 0 descriptor?? [ 84.393773][ T5289] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.671135][ T5287] usb 4-1: USB disconnect, device number 2 [ 84.680884][ T5289] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 84.691142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.709829][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.733769][ T5289] usb 1-1: config 0 descriptor?? [ 84.787822][ T5289] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 85.084475][ T5290] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.152895][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 85.212337][ T5346] ------------[ cut here ]------------ [ 85.218347][ T5346] name '8237' [ 85.232961][ T5346] WARNING: CPU: 0 PID: 5346 at fs/proc/generic.c:711 remove_proc_entry+0x2e7/0x5d0 [ 85.243031][ T5346] Modules linked in: [ 85.247360][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.1.16 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 85.258686][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.269246][ T5346] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 85.275558][ T5346] Code: ff eb 05 e8 5b 20 5e ff 48 8b 5c 24 10 48 c7 c7 20 f8 aa 8e e8 1a 68 8e 09 90 48 c7 c7 a0 3a 1b 8c 48 89 de e8 6a 44 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 85.295666][ T5346] RSP: 0018:ffffc900040d7b80 EFLAGS: 00010246 [ 85.301786][ T5346] RAX: 4aff34cf3c889600 RBX: ffff88802510c548 RCX: 0000000000040000 [ 85.311263][ T5346] RDX: ffffc9000a16a000 RSI: 00000000000070d8 RDI: 00000000000070d9 [ 85.320286][ T5346] RBP: ffffc900040d7c68 R08: ffffffff8155b372 R09: 1ffff1101712519a [ 85.328760][ T5346] R10: dffffc0000000000 R11: ffffed101712519b R12: ffff88802c3c8780 [ 85.337696][ T5346] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 85.345814][ T5346] FS: 0000000000000000(0000) GS:ffff8880b8800000(0063) knlGS:00000000f56b5b40 [ 85.354862][ T5346] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 85.361484][ T5346] CR2: 00000000f56b5da4 CR3: 0000000025998000 CR4: 00000000003506f0 [ 85.369866][ T5346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.378225][ T5346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.386300][ T5346] Call Trace: [ 85.389619][ T5346] [ 85.392592][ T5346] ? __warn+0x163/0x4e0 [ 85.396877][ T5346] ? remove_proc_entry+0x2e7/0x5d0 [ 85.402050][ T5346] ? report_bug+0x2b3/0x500 [ 85.407830][ T5346] ? remove_proc_entry+0x2e7/0x5d0 [ 85.413183][ T5346] ? handle_bug+0x3e/0x70 [ 85.419465][ T5346] ? exc_invalid_op+0x1a/0x50 [ 85.424249][ T5346] ? asm_exc_invalid_op+0x1a/0x20 [ 85.429345][ T5346] ? __warn_printk+0x292/0x360 [ 85.434259][ T5346] ? remove_proc_entry+0x2e7/0x5d0 [ 85.439445][ T5346] ? __local_bh_enable_ip+0x168/0x200 [ 85.444942][ T5346] ? __pfx_remove_proc_entry+0x10/0x10 [ 85.450452][ T5346] ? bcm_release+0x1ec/0x880 [ 85.455171][ T5346] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 85.460951][ T5346] ? do_raw_spin_unlock+0x13c/0x8b0 [ 85.466266][ T5346] bcm_release+0x250/0x880 [ 85.470753][ T5346] sock_close+0xbc/0x240 [ 85.475152][ T5346] ? __pfx_sock_close+0x10/0x10 [ 85.480061][ T5346] __fput+0x24a/0x8a0 [ 85.484191][ T5346] task_work_run+0x24f/0x310 [ 85.488841][ T5346] ? __pfx_task_work_run+0x10/0x10 [ 85.495993][ T5346] ? syscall_exit_to_user_mode+0xa3/0x370 [ 85.501781][ T5346] syscall_exit_to_user_mode+0x168/0x370 [ 85.507703][ T5346] __do_fast_syscall_32+0xc4/0x110 [ 85.513923][ T5346] ? ret_from_fork_asm+0x1a/0x30 [ 85.518921][ T5346] ? lockdep_hardirqs_on+0x99/0x150 [ 85.525181][ T5346] do_fast_syscall_32+0x34/0x80 [ 85.530117][ T5346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.536635][ T5346] RIP: 0023:0xf73dd579 [ 85.540759][ T5346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 85.560538][ T5346] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 85.569043][ T5346] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 85.578100][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.586203][ T5346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.594312][ T5346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.602316][ T5346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.610415][ T5346] [ 85.614532][ T5346] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.621842][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.1.16 Not tainted 6.11.0-rc6-syzkaller-00355-g5dadc1be8fc5 #0 [ 85.632352][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.642417][ T5346] Call Trace: [ 85.645737][ T5346] [ 85.648678][ T5346] dump_stack_lvl+0x241/0x360 [ 85.653379][ T5346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.658588][ T5346] ? __pfx__printk+0x10/0x10 [ 85.663224][ T5346] ? vscnprintf+0x5d/0x90 [ 85.667581][ T5346] panic+0x349/0x860 [ 85.671487][ T5346] ? __warn+0x172/0x4e0 [ 85.675656][ T5346] ? __pfx_panic+0x10/0x10 [ 85.680100][ T5346] __warn+0x346/0x4e0 [ 85.684087][ T5346] ? remove_proc_entry+0x2e7/0x5d0 [ 85.689212][ T5346] report_bug+0x2b3/0x500 [ 85.693575][ T5346] ? remove_proc_entry+0x2e7/0x5d0 [ 85.698706][ T5346] handle_bug+0x3e/0x70 [ 85.702891][ T5346] exc_invalid_op+0x1a/0x50 [ 85.707406][ T5346] asm_exc_invalid_op+0x1a/0x20 [ 85.712279][ T5346] RIP: 0010:remove_proc_entry+0x2e7/0x5d0 [ 85.718023][ T5346] Code: ff eb 05 e8 5b 20 5e ff 48 8b 5c 24 10 48 c7 c7 20 f8 aa 8e e8 1a 68 8e 09 90 48 c7 c7 a0 3a 1b 8c 48 89 de e8 6a 44 20 ff 90 <0f> 0b 90 90 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 [ 85.737645][ T5346] RSP: 0018:ffffc900040d7b80 EFLAGS: 00010246 [ 85.743722][ T5346] RAX: 4aff34cf3c889600 RBX: ffff88802510c548 RCX: 0000000000040000 [ 85.751694][ T5346] RDX: ffffc9000a16a000 RSI: 00000000000070d8 RDI: 00000000000070d9 [ 85.759665][ T5346] RBP: ffffc900040d7c68 R08: ffffffff8155b372 R09: 1ffff1101712519a [ 85.767642][ T5346] R10: dffffc0000000000 R11: ffffed101712519b R12: ffff88802c3c8780 [ 85.775626][ T5346] R13: 0000000000000004 R14: 0000000000000000 R15: dffffc0000000000 [ 85.783625][ T5346] ? __warn_printk+0x292/0x360 [ 85.788412][ T5346] ? __local_bh_enable_ip+0x168/0x200 [ 85.793806][ T5346] ? __pfx_remove_proc_entry+0x10/0x10 [ 85.799286][ T5346] ? bcm_release+0x1ec/0x880 [ 85.803902][ T5346] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 85.809638][ T5346] ? do_raw_spin_unlock+0x13c/0x8b0 [ 85.814856][ T5346] bcm_release+0x250/0x880 [ 85.819298][ T5346] sock_close+0xbc/0x240 [ 85.823564][ T5346] ? __pfx_sock_close+0x10/0x10 [ 85.828438][ T5346] __fput+0x24a/0x8a0 [ 85.832451][ T5346] task_work_run+0x24f/0x310 [ 85.837055][ T5346] ? __pfx_task_work_run+0x10/0x10 [ 85.842197][ T5346] ? syscall_exit_to_user_mode+0xa3/0x370 [ 85.847924][ T5346] syscall_exit_to_user_mode+0x168/0x370 [ 85.853566][ T5346] __do_fast_syscall_32+0xc4/0x110 [ 85.858862][ T5346] ? ret_from_fork_asm+0x1a/0x30 [ 85.863817][ T5346] ? lockdep_hardirqs_on+0x99/0x150 [ 85.869039][ T5346] do_fast_syscall_32+0x34/0x80 [ 85.873902][ T5346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 85.880267][ T5346] RIP: 0023:0xf73dd579 [ 85.884337][ T5346] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 85.903942][ T5346] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 85.912367][ T5346] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000ffffffff [ 85.920365][ T5346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.928350][ T5346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 85.936349][ T5346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 85.944338][ T5346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 85.952347][ T5346] [ 85.955735][ T5346] Kernel Offset: disabled [ 85.960151][ T5346] Rebooting in 86400 seconds..