last executing test programs: 23.409893551s ago: executing program 0 (id=4730): socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) syz_open_procfs(0x0, 0x0) fchdir(0xffffffffffffffff) clock_getres(0x2, 0x0) io_uring_setup(0x1786, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) write$binfmt_script(r3, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000680)={0x1, 0xa, 0x3, "00bb0d6d8a567fd47edca71eeab90d8030d8192602a6ae8c9d0aa40bb9ef5082", 0x47425247}) writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0xa0ff, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r7, 0x5416, &(0x7f0000001100)) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r8, 0x102, {0x1, 0xf0}}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 22.08911205s ago: executing program 0 (id=4735): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x97, 0x89, 0x59, 0x20, 0x1110, 0x9000, 0xf411, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7f, 0x6, 0xb0, 0x5, [{{0x9, 0x4, 0x19, 0x9, 0x0, 0xb4, 0xa7, 0xd5}}, {{0x9, 0x4, 0x4, 0xd5, 0x0, 0x7c, 0xfc, 0x21, 0x7}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}}, 0x40) ftruncate(0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x1010, 0xffffffffffffffff, 0x0) 21.228700541s ago: executing program 0 (id=4736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x3, 0xfffff124, 0x2, 0x5}]}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 21.08079569s ago: executing program 0 (id=4737): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/52, 0x34}], 0x1, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket(0xa, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0100f3ff"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "84e5821a"}]}}, 0x0}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x0, 0x1, 0x409, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) ioctl$VT_OPENQRY(r5, 0x4b4c, &(0x7f0000000080)) sendto$inet(r3, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)={0x3}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000b40)="f30f09ba6100b8c400ef66b9eb0a00000f3266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f0066b98004000066b8532ebe1866ba0bffd3710f3066b9830500000f32", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.472178533s ago: executing program 0 (id=4738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x7, 0x0, 0xf4, 0x0, 0x0, 0x2b, 0x0, 0x2, 0x1, 0x0, 0x5, 0x0, 0xff}, 0xe) shutdown(r4, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={r6, 0x2, 0x8}, 0x8) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x2, 0x0, 0xf5, 0x9}, {0x0, 0x0, 0x1, 0x2, 0xd3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x6, 0x80000000}, {0x3f3, 0x3f, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40, 0x8}]}) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="b82f000f00d866b9800000c00f326635010000000f306766c7442400000000006766c7442402400000006766c744240600000000670f011424f020509b67660feee7c64108f9e000672e65360f01c3d16ceabaa10066b80700000066ef", 0x5d}], 0x1, 0x2c, 0x0, 0x0) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="340200000200000005f3000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e05"], 0x234) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) r10 = eventfd2(0x3, 0x80802) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r11) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r11, 0xc06864a2, &(0x7f00000003c0)={0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, "e2ff0000007103d0c19323a2600012ab00"}}) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000140)={0xccd, 0x5, 0xc533, 0x4, 0x15, "1ec67f619e7ad653"}) r14 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x2e9ec8a825f915c, 0x7, 0x80, 0x7c}}]}}}]}}]}}, 0x0) syz_usb_control_io(r14, 0x0, 0x0) syz_usb_control_io$hid(r14, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a5247d20"}]}}, 0x0}, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x3000, 0x8, r10, 0x9}) 19.490358573s ago: executing program 0 (id=4743): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x66, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/97, 0x61) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2006, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRES8=r4, @ANYBLOB, @ANYRESDEC=0x0]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_OPEN(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="69000001023775adc0cb19d28e00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000010000000000000000a74000000060a0b040000000000000000020000000900020073797a32000000000900010073797a30000000004800048044000180090001006d61737100000000340002800800014000000000080002"], 0x9c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 12.374737538s ago: executing program 1 (id=4764): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0xc40, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x1000000b, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x61000, 0xffffffff}, 0x0) socket(0x80000000000000a, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1101}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) listen(r6, 0x1ff) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000000)="1080001cab6f967a8042a369a422f16cc0a4ad1fcd428fc08e", 0x19, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 8.624472004s ago: executing program 1 (id=4783): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000000c0)="66b9a00d00000f32a9329e66b8040000000f23c80f21f866350c00a0000f23f8666a3c3e3e0f01d10f01bd0000f0294b8065360f01d1f2668098b354008fe9e802b70500", 0x44}], 0x1, 0x10, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c00000400000014000180080016000000000006000600800a00000800"], 0x1034}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x40800, 0x11, 0x12}, 0x18) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141141) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r8 = syz_io_uring_setup(0x238, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000006c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0) read$midi(r7, 0x0, 0x49) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000340)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000004c0)={0x849, 0x800c, 0x0, 0x7, 0x0}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r11, 0x8}, &(0x7f0000000480)=0x8) 7.765044052s ago: executing program 2 (id=4787): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x0, 0x10300}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 7.45551783s ago: executing program 1 (id=4788): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207f400020000002cbd700002dbdf25"], 0x10}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x8, 0x4, 0xffffffc1, 0x4}}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmdt(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x18c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x16c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0xa0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x18c}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x17, 0x0, 0x1, 0x2d, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000806010200000000000000000000000005000100070000002c13fc163c93e75cf7a053a12d5ac972d392faf090af00eb65294c6b6817762dee95be697cd2e13e15031e0fbd9ec7de44156cb8a9a22dff90e5e9421d9b6f5c5a038b2f1c14ab12be65e4f5da553776351da3e146192e250b18c6b7837e07900b14a36552fe3aafb591e58394b404a10e1798455b7005d83690202fa8f49971b184a2f75e95ea6944de0308f4561f425571d6a00179732afa9a8ca82dce3af749babe178cd8aff0c201d36dc57011662d0383182b4aa7f38a0500497af018a878bfd4c85f7af2f9e896a681c0defaf259d476e24db86787d43f5e71944a8fb9ade2182c3fba5b92c970b287c76f9fe8451c525e6814d77cc957690b866f000d375bece004fb5872a382a0656ebedd8e79d9cb94"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x58}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.04868858s ago: executing program 3 (id=4790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) epoll_create1(0x80000) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000001fc0)=""/4093, 0xffd}], 0x1, 0x19, 0x0) (fail_nth: 4) 6.611096267s ago: executing program 2 (id=4792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0xf5ff) 6.20891453s ago: executing program 2 (id=4794): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) symlink(0x0, &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) socket$inet6(0xa, 0x3, 0x103) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xfffffffffffffe3a, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYBLOB="000000e8ff07000014000300000000000000000000000080c608274e59e818b89243c8c68415749b9b7cacf912bdeb93d2ad0b4a1bc456594753650f79b94a6857af912e7deb46265a6a448e0fbc712b3727c00902a2a36df8", @ANYRES32], 0x4c}}, 0x0) rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r3, 0x9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.9635331s ago: executing program 3 (id=4796): syz_open_dev$vim2m(0x0, 0x200000000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_ima(r1, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x80, 0x1) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x1c6, &(0x7f0000000400)={@broadcast, @random="1704b45adbde", @void, {@mpls_uc={0x8847, {[{0xba0}, {0x9, 0x0, 0x1}, {}], @ipv6=@tcp={0x6, 0x6, "fe222d", 0x184, 0x6, 0x0, @private0, @loopback, {[@srh={0x6, 0x2, 0x4, 0x1, 0x5, 0x50, 0x7a02, [@local]}, @hopopts={0x33, 0xb, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}, @pad1, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x652, [0xa]}}, @hao={0xc9, 0x70, @mcast2}]}], {{0x4e20, 0x4e20, r2, r3, 0x1, 0x0, 0x10, 0x2, 0x2, 0x0, 0x6, {[@md5sig={0x13, 0x12, "406a2b614362c22631643f675b24764f"}, @sack={0x5, 0xa, [0xe, 0xfffff634]}, @fastopen={0x22, 0x3, "c5"}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"75ee0b6fe0e64802e0abd8bfb2ba760a45a7f00a4afa83bc9d613425991d30a297825fb72993363a32c0bbca2dbbe0d4589d89a62693929fa382722bf24651c2e38c8e5090d68bb86cc438f5494ade0e32aa8b1dde2c78aadc742d45fec327b507ccb299fc10b6039e5e9d98aae8ffe22b7555ecfca3c39b62eafdc2b26e7c7ad7b2d918ef629b9f755b0b83d63460dfe65359d79866670f83735168f3eaf0fb16ebfadd96e6467094e48acd2c27590dadc832fa4c29182553c26fb0035caeeec5c06905"}}}}}}}}, 0x0) syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 5.959603481s ago: executing program 1 (id=4797): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100f44676b8087909700217a801020301090212000100000000090400000009b62a00"], 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) r9 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x400020, 0x2) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000004c0)={r9, 0x1, {0x0, 0x0, 0x0, 0xf3a, 0x6, 0x0, 0x5, 0x1b, 0x0, "29a83cdd21a7fa22bd74b8c6144ed35d9396df5c5272e6a09c9e13d11a372fe70d3ff1445213f98bd8150a6856385843957a01a10b5f5c946d84b6816a6a3641", "2e821183cf54bfe143558e5f68ae3fa20728d57e5dddf2efa2726fd0cb978f9462c41e8b1cfd7225a36891b25cabe1b15e3203b829f594e8565393f26f2de2ac", "8ee1495cd7fd92e6091dda3f78f570dcc7e6a92fa2125f8eaf2ee9cf7cb97dc2", [0x4, 0xfffffffffffffff7]}}) write$FUSE_INIT(r1, &(0x7f00000006c0)={0x50, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000ef00000000000000000000850000006000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_fuse_handle_req(r1, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendto$inet6(r10, &(0x7f0000000040)='=', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xddf1}, &(0x7f0000000140)=0x8) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x90, 0x0, 0x0, {0x5, 0x0, 0x4, 0x0, 0x0, 0xd1c5, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) 5.09638988s ago: executing program 3 (id=4798): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000016010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, @sco, @nfc={0x27, r4, 0xffffffffffffffff, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000080)='bond_slave_1\x00', 0x3, 0x5, 0x14cd}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052417000005240000000d240f0100000000000000000009058103400000000009058202ee010000000905030240"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x3a, 0xd, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000140)={0x14, &(0x7f0000000300)={0x0, 0x23, 0x8d, {0x8d, 0xa, "9cdb4c7b2b25e5015ba2a0971cc0d20668005550866dc354516cdc644843c3331f13402e9abaf20a2239c037a2998310c142c708c57075a95d89f11ab73636126db4a049ea9d820bed87d1f82168ecdb99c3380e099562574f5d652d70959b905b50804e3d691cb54ac10903c93ea26ac25543677d08512b66d6c66a108908d4cdfc5b80148509ee74547e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000640)={0x34, &(0x7f0000000480)={0x40, 0x15, 0x3f, "a147277ab023f3f00a194008b956b82cddf4287b232ce849ae81f336e71834484480d08c169eab9ef78806959a910529f30066c5201718e94b5c1ac7922788"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x5c, {0x5a, "2c7dce5e6e8374f111438091557793d0866388b0239d664bbb9bcd5d9abc4d7cf2e0efc70d5d2f783183673e796132f11e701d5808be6e27ecfff337edb496bc7c1a3e36935a0bd630872a2bd0d556ee9fd69cb884310ba555de"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x40}}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'pimreg\x00', 0x2}) lseek(r0, 0xc8, 0x0) 4.974758585s ago: executing program 1 (id=4800): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000180)='0', 0x1, r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8c42, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x401}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x4, 0x92, "2f4c30511b8b015662c58b92b9e4b8c17038bf968e707f117455bb0a984af4da9cf13833044abe7d1282395ec5657ec008955579835193c6e2767ac17002ddad9a416bb46e850b1446552d924f0ceee4545a65ae77297624a5b13c6628dc8961cf6d11ea560e296d6016561b60b2ee992dde30322637cc33f891acd89627e9c29b347ee72047f697d93ad1bcd6f4bab3d299"}, 0x9a) 4.53879984s ago: executing program 1 (id=4802): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x12, 0x0, 0x9, [0x401, 0x80005, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@empty}, {@multicast1}, {@remote, 0xf39}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65a}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0xffd1fe}, {@multicast1}]}, @lsrr={0x83, 0xb, 0x81, [@broadcast, @broadcast]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0xfff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="3100ba400066ed0f1cb3f5ff2e670f01c26766c7442400000000006766c7442402030000006766c744240600000000670f011c240f00940700670f3526a567f30f098d7162"}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.652563474s ago: executing program 4 (id=4804): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='mm_page_alloc\x00', r1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x5000) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x70) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x9, 0x200, 0x3, 0x10, 0xe, "5f21cb43c89a3f7442925d7471766c9f0a6ca4"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2100000008000000090000000300000001040000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) syz_pidfd_open(r2, 0x0) 3.400469374s ago: executing program 3 (id=4805): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0xa, 0x4, 0x70000, 0xd973, {}, {0x4, 0x2, 0x9, 0x0, 0x0, 0x7, "13e4b1b3"}, 0xa, 0x4, {}, 0x7f}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x8, 0xa, 0x4, 0x70000, 0xd973, {}, {0x4, 0x2, 0x9, 0x0, 0x0, 0x7, "13e4b1b3"}, 0xa, 0x4, {0xffffffffffffffff}, 0x7f}) fcntl$getflags(r3, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv6_getroute={0x1c, 0x1a, 0xaba2493891f2befb}, 0x1c}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xc}, 0x1c) (async) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xc}, 0x1c) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) (async) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xb2, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv4={0x800, @tcp={{0x1a, 0x4, 0x1, 0x5, 0xa4, 0x64, 0x0, 0x9, 0x6, 0x0, @multicast2, @multicast1, {[@noop, @lsrr={0x83, 0xf, 0xa4, [@multicast2, @local, @loopback]}, @end, @ssrr={0x89, 0x1b, 0x50, [@multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}, @ssrr={0x89, 0x3, 0x4c}, @ssrr={0x89, 0x7, 0x78, [@loopback]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xd2, [@multicast1, @multicast1, @local, @broadcast, @private=0xa010100]}]}}, {{0x4e24, 0x4e20, r7, r8, 0x1, 0x0, 0xb, 0x1, 0x800, 0x0, 0x8, {[@fastopen={0x22, 0x8, "7dec3db7ee3b"}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa, 0x7, 0x7fff}, @eol]}}, {"13abb4e3df680668ec39d9889b7bfcad"}}}}}}, 0x0) 2.905131017s ago: executing program 4 (id=4806): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) pipe(0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800107a, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000d000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000074df000000000000856942a8f27a70ae00000083000000bf09000000000000ffffffff0000000000181000005857f616b8504b74e7da8ecb4d55c62b4ab6bc", @ANYRES32=0x1, @ANYBLOB="000000000000000085200000030000001800000009000000000000000000000003403400000000000303080000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8}, 0x8, 0x10, 0x0, 0x0, 0x19d7, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1806000000020000000100000000000000015007000000000095000000000000c3f70294b371ab5ef0a28ea5fa4647b6e5604705ffaef311ff55aef009cd2f774a09335558f957d9e31fe813a1b9856c6609ac1e8f83a64bb3fd119808c744ae5477fd92697972468c7db651cf30ff000000000000003f3e46"], 0x0, 0x0, 0x0, 0x0, 0x797915df16e47976, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x4, 0xd, 0x40003, 0xf}, 0x10, 0x0, r3, 0x3, 0x0, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x8}, {0x0, 0x8002, 0xd, 0x80356bb0200eda2}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0x1, @void, @value}, 0x94) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') write$cgroup_pid(r4, 0x0, 0x2) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000083ed55141e6200"/28], 0x48) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r5) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4/file7\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 2.63614937s ago: executing program 4 (id=4807): ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_usb_connect(0x649c72e24e1a72e0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.560072838s ago: executing program 3 (id=4808): syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003b1fe9208151403005d650102030109021200010000000c7c04560000d3a53e00"], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2}]}, 0x1, [{0x0, 0x0}]}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x0, 0x100000}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0xfffffffe}}, 0x0, 0x0}}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\n\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000100)=""/239, 0xef}, {&(0x7f00000016c0)=""/196, 0xc4}, {&(0x7f0000000600)=""/4108, 0x100c}], 0x3, 0x0, 0x0, 0xffffffc3}, 0x0) recvmsg$kcm(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000017c0)=""/197, 0xc5}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f00000018c0)=""/85, 0x55}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f0000001b80)=""/162, 0xa2}, {&(0x7f0000001c40)=""/219, 0xdb}], 0xa}, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="e24bce1df61efc9635dfb7b8ed8dad96ae6a8ba070e45803acb7588887d038de1cb19a7d1384", 0x26}, {&(0x7f0000000040)="64080de086af5a254f25ae7053152908511c2402d60d1cd5f40803d9668fd42dd34e350574d0554cb39954b2fecb9ed0f13937df52ac2ab36cd2802189ca4b817f653eae33dc9d4d0e3bd5ead4527934db5f1c8a71af89605baf3bf37eb25a72c45658c995ab70b3fe8a1c7aa2218f1016b0bde9908e06e3c9a210c4fc27eec30facccc1e0be221baa105982b8b4592bee96f979157304fdfbbbcd48ae786bfb0ba73bf6addb3f5db9cbd6da12cc2697fc77df511ee8b8b4c9e05b4d2b83d78082f49166f801714827c878a47f9428", 0xcf}, {&(0x7f0000000ec0)="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", 0x1000}], 0x3}, 0x1) 2.559000124s ago: executing program 2 (id=4809): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0xe, 0x0, 0x0, 0x84}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000580)={0x0, 'bond0\x00'}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000003c0)="0f20e035200000000f22e0273ef30f019e0e0000000f3566b897008ee0f30fc772fd66baf80cb8e4f95289ef66bafc0cb804000000ef66baf80cb890bd8b8bef66bafc0cb808000000ef8fc818cf0a0dc4c3997c840800f0ffff00", 0x5b}], 0x1, 0x1b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0, 0x55}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r8, 0x8004ae98, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_clone(0x1801280, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) 1.941050801s ago: executing program 4 (id=4810): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x7) unshare(0x22000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') pread64(r0, 0x0, 0x0, 0x0) 1.712599804s ago: executing program 4 (id=4811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x900}, 0x0) 1.711668326s ago: executing program 2 (id=4812): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="0207f400020000002cbd700002dbdf25"], 0x10}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x8, 0x4, 0xffffffc1, 0x4}}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmdt(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x18c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x16c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0xa0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x18c}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x17, 0x0, 0x1, 0x2d, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES32=r0], 0x58}}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.374441956s ago: executing program 3 (id=4813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0xfffffff7}}}}]}, 0x48}}, 0x0) socket(0x11, 0xa, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000402f1700050000000000010902240001000000000904000001030000000921000000012207000905810300000000006fb9192772d12f4ffb98bb38c2ed40d6a66220ce2ff1b4dcb8062a6f11554b735e1871d2c6dbc98258321e621d0f5547424a010400003a47b0790087f656fcfe2b07cece0cf258de248799385a3ef0a89db00c1898aab477e0372f6685211a0eb5298df4", @ANYRES64=r4], 0x0) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f00000004c0), 0xfffffcdd) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000300)={0xbe, 0x0, 0xf7fffffffffffffe}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000080)=ANY=[]) 58.638603ms ago: executing program 4 (id=4814): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0xfffffe01) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)) r3 = syz_open_pts(r2, 0x101040) ioctl$TCSETS(r3, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x20000, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x90) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) userfaultfd(0x80801) 0s ago: executing program 2 (id=4815): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000081000040"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40, 0xff, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x5, '\x00', 0x0, 0x750}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"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"}) kernel console output (not intermixed with test programs): tx timeout [ 1449.607572][T28761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.615197][T28761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.644150][T28761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.726268][T28761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.735843][T28761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.763026][T28761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.922921][T28761] hsr_slave_0: entered promiscuous mode [ 1449.930066][T28761] hsr_slave_1: entered promiscuous mode [ 1449.958038][T28761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.965759][T28761] Cannot create hsr debugfs directory [ 1450.109081][ T12] bridge_slave_1: left allmulticast mode [ 1450.114789][ T12] bridge_slave_1: left promiscuous mode [ 1450.141389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.160167][ T12] bridge_slave_0: left allmulticast mode [ 1450.163155][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.172324][ T12] bridge_slave_0: left promiscuous mode [ 1450.191354][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.203481][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.240196][T28874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.255186][T28874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.858196][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.867762][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.016437][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1451.031364][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.044575][ T12] bond0 (unregistering): Released all slaves [ 1451.198047][T10843] Bluetooth: hci2: command tx timeout [ 1451.231598][T28886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1451.272397][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.276732][ T12] tipc: Left network mode [ 1451.310170][T28675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1451.317211][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.374561][T28675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1451.415752][T28675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1451.448194][T28675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1451.561553][T28861] chnl_net:caif_netlink_parms(): no params data found [ 1451.589356][T10843] Bluetooth: hci9: command tx timeout [ 1451.628843][ T12] hsr_slave_0: left promiscuous mode [ 1451.634974][ T12] hsr_slave_1: left promiscuous mode [ 1451.648841][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.656412][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.665491][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.673544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.700783][ T12] veth1_macvtap: left promiscuous mode [ 1451.706371][ T12] veth0_macvtap: left promiscuous mode [ 1451.712662][ T12] veth1_vlan: left promiscuous mode [ 1451.718223][ T12] veth0_vlan: left promiscuous mode [ 1452.481171][T28901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.541074][T28901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.722990][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1452.814061][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1453.270030][T10843] Bluetooth: hci2: command tx timeout [ 1453.792326][T28761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.958750][T28761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.028385][T28861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.036026][T28861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.049133][T28861] bridge_slave_0: entered allmulticast mode [ 1454.056595][T28861] bridge_slave_0: entered promiscuous mode [ 1454.133151][T28761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.158656][T28861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.166051][T28861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.174170][T28861] bridge_slave_1: entered allmulticast mode [ 1454.184558][T28861] bridge_slave_1: entered promiscuous mode [ 1454.273044][T28761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.400382][T28861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.415675][T28861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.432156][T28675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.561486][T28861] team0: Port device team_slave_0 added [ 1454.580897][T28861] team0: Port device team_slave_1 added [ 1454.836416][T28861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.866866][T28861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1455.023485][T28861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1455.129472][T28675] 8021q: adding VLAN 0 to HW filter on device team0 [ 1455.263716][ T12] bridge_slave_1: left allmulticast mode [ 1455.291126][ T12] bridge_slave_1: left promiscuous mode [ 1455.311478][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.338818][T10843] Bluetooth: hci2: command tx timeout [ 1455.353302][ T12] bridge_slave_0: left allmulticast mode [ 1455.374790][ T12] bridge_slave_0: left promiscuous mode [ 1455.463284][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.771526][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1457.256253][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.270433][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.289743][ T12] bond0 (unregistering): Released all slaves [ 1457.337375][T28861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1457.356931][T28861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1457.404335][T28861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.437094][T10843] Bluetooth: hci2: command tx timeout [ 1457.517434][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.524613][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.571809][T27838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.579020][T27838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.663677][T28761] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1457.751896][T28861] hsr_slave_0: entered promiscuous mode [ 1457.760417][T28861] hsr_slave_1: entered promiscuous mode [ 1457.768522][T28861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1457.776470][T28861] Cannot create hsr debugfs directory [ 1457.800630][T28761] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1457.853145][T28761] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1457.865134][T28761] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1457.883277][T29004] FAULT_INJECTION: forcing a failure. [ 1457.883277][T29004] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.908115][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.0.4611 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1457.918946][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1457.929036][T29004] Call Trace: [ 1457.932335][T29004] [ 1457.935280][T29004] dump_stack_lvl+0x241/0x360 [ 1457.939976][T29004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1457.945179][T29004] ? __pfx__printk+0x10/0x10 [ 1457.949810][T29004] ? fs_reclaim_acquire+0x93/0x130 [ 1457.954970][T29004] ? __pfx___might_resched+0x10/0x10 [ 1457.960310][T29004] should_fail_ex+0x3b0/0x4e0 [ 1457.965038][T29004] ? tomoyo_encode+0x26f/0x540 [ 1457.969844][T29004] should_failslab+0xac/0x100 [ 1457.974560][T29004] ? tomoyo_encode+0x26f/0x540 [ 1457.979360][T29004] __kmalloc_noprof+0xd8/0x400 [ 1457.984150][T29004] tomoyo_encode+0x26f/0x540 [ 1457.988785][T29004] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1457.994449][T29004] tomoyo_path_number_perm+0x23a/0x880 [ 1457.999962][T29004] ? tomoyo_path_number_perm+0x208/0x880 [ 1458.005648][T29004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1458.011716][T29004] ? __fget_files+0x29/0x470 [ 1458.016432][T29004] ? __fget_files+0x3f3/0x470 [ 1458.021145][T29004] security_file_ioctl+0xc6/0x2a0 [ 1458.026217][T29004] __se_sys_ioctl+0x47/0x170 [ 1458.030867][T29004] do_syscall_64+0xf3/0x230 [ 1458.035396][T29004] ? clear_bhb_loop+0x35/0x90 [ 1458.040115][T29004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.046028][T29004] RIP: 0033:0x7f0d2437dff9 [ 1458.050480][T29004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1458.070126][T29004] RSP: 002b:00007f0d251cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.078580][T29004] RAX: ffffffffffffffda RBX: 00007f0d24535f80 RCX: 00007f0d2437dff9 [ 1458.086594][T29004] RDX: 0000000020000040 RSI: 00000000c4c85513 RDI: 0000000000000006 [ 1458.094597][T29004] RBP: 00007f0d251cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.102609][T29004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.110619][T29004] R13: 0000000000000000 R14: 00007f0d24535f80 R15: 00007f0d2465fa28 [ 1458.118637][T29004] [ 1458.124782][T29004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1458.395461][ T12] hsr_slave_0: left promiscuous mode [ 1458.419317][ T12] hsr_slave_1: left promiscuous mode [ 1458.435900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.449439][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.468494][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.476550][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1458.528160][ T12] veth1_macvtap: left promiscuous mode [ 1458.541758][ T12] veth0_macvtap: left promiscuous mode [ 1458.558004][ T12] veth1_vlan: left promiscuous mode [ 1458.563401][ T12] veth0_vlan: left promiscuous mode [ 1458.602278][T29024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.612444][T29024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.605431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1459.719898][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1461.576392][T28675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.663590][T28761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.916898][T29055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.971664][T29055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.992060][T28761] 8021q: adding VLAN 0 to HW filter on device team0 [ 1462.156942][T29058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4617'. [ 1462.178037][T29058] netlink: 'syz.0.4617': attribute type 18 has an invalid length. [ 1462.216544][T29058] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.226371][T29058] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.235809][T29058] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.245378][T29058] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.323261][T29058] vxlan0: entered promiscuous mode [ 1462.360626][ T9832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.367762][ T9832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.371124][ T12] IPVS: stop unused estimator thread 0... [ 1462.442494][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.449730][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1462.483775][T28675] veth0_vlan: entered promiscuous mode [ 1462.531493][T28675] veth1_vlan: entered promiscuous mode [ 1462.706459][T28861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1462.732057][T28861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1462.767278][T28675] veth0_macvtap: entered promiscuous mode [ 1462.767346][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1462.767358][ T29] audit: type=1326 audit(1728768526.758:32301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29074 comm="syz.2.4620" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x0 [ 1462.780887][T28861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1462.849398][T28861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1462.884564][T28675] veth1_macvtap: entered promiscuous mode [ 1462.896630][T28761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.983792][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.008846][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.031340][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.053604][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.075410][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.100295][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.110897][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.121938][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.134291][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.156377][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.176872][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.197297][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.211848][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.233519][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.255732][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.273649][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.286104][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1463.307060][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.356552][T28675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.438354][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.454202][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.465926][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.476802][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.486984][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.499969][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.517862][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.547919][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.577735][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.596100][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.617161][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.628295][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.638230][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.650790][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.674764][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.689989][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.710367][T28675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1463.731865][T28675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1463.755829][T28675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.790187][T28675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.799892][T28675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.809933][T28675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.838069][T28675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.973572][T29110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.052121][T29110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.159380][T28761] veth0_vlan: entered promiscuous mode [ 1464.188988][T27838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.198377][T28761] veth1_vlan: entered promiscuous mode [ 1464.212084][T27838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.270756][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.274639][T28861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.287258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.373022][T28861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.416955][T27838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.424202][T27838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.442223][T27838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.449474][T27838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.481805][T28761] veth0_macvtap: entered promiscuous mode [ 1464.531089][T28761] veth1_macvtap: entered promiscuous mode [ 1464.573118][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.585301][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.596349][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.607628][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.618560][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.629766][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.640372][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.652605][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.662823][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.673601][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.683908][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.695616][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.706136][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.716844][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.727326][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.738119][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.750276][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.762492][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.772804][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1464.784147][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.797404][T28761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.836435][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.857649][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.879744][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.902809][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.914068][T29122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.923964][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.935036][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.945513][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.956415][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.966533][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1464.977190][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1464.989263][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.001038][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.011245][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.026810][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.037040][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.047677][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.057986][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.068699][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.078937][T28761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1465.090584][T28761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1465.104610][T29122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.120938][T28761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.135854][T28761] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.145815][T28761] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.154843][T28761] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.164019][T28761] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.205917][T29124] syzkaller0: entered promiscuous mode [ 1465.215210][T29124] syzkaller0: entered allmulticast mode [ 1469.534492][T28861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.662162][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.683829][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.759555][T29139] kvm: user requested TSC rate below hardware speed [ 1469.772145][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.777278][T28861] veth0_vlan: entered promiscuous mode [ 1469.795950][T29139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.795988][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.839260][T28861] veth1_vlan: entered promiscuous mode [ 1469.847072][T29139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.931011][T28861] veth0_macvtap: entered promiscuous mode [ 1469.960136][T28861] veth1_macvtap: entered promiscuous mode [ 1469.969986][T29144] binder: 29143:29144 ioctl 40046205 0 returned -22 [ 1469.984897][T29144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.994734][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.016214][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.027723][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.039381][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.051077][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.061763][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.071823][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.083114][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.093087][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.113967][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.124677][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.135758][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.146443][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.160619][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.170603][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.181118][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.191784][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.202354][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.212286][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.224876][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.235002][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1470.245532][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.257299][T28861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.258557][T29144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.275235][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.286286][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.296834][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.310025][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.351320][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.380598][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.398586][T29145] netlink: 'syz.4.4574': attribute type 3 has an invalid length. [ 1470.409936][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.429334][T29145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1470.431593][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.450313][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.461942][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.472152][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.483096][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.494124][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.543578][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.587181][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.606453][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.622874][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.636906][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.648888][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.677894][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.689605][T28861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1470.700515][T28861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1470.712499][T28861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.726624][T29145] netlink: 'syz.4.4574': attribute type 4 has an invalid length. [ 1470.755290][T29146] netlink: 'syz.4.4574': attribute type 4 has an invalid length. [ 1470.793928][T28861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.804894][T28861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.814535][T28861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.823693][T28861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.965063][T29159] tun0: tun_chr_ioctl cmd 1074025677 [ 1470.976723][T29159] tun0: linktype set to 769 [ 1471.072203][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.097527][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.212861][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.223709][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.276492][ T29] audit: type=1326 audit(1728768538.268:32302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.441559][ T29] audit: type=1326 audit(1728768538.298:32303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.609833][ T29] audit: type=1326 audit(1728768538.298:32304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.685537][T29234] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4646'. [ 1474.707550][ T29] audit: type=1326 audit(1728768538.318:32305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.865165][ T29] audit: type=1326 audit(1728768538.318:32306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.890275][ T29] audit: type=1326 audit(1728768538.318:32307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.912917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.929018][ T29] audit: type=1326 audit(1728768538.328:32308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.951574][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.968653][ T29] audit: type=1326 audit(1728768538.328:32309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1474.992088][ T29] audit: type=1326 audit(1728768538.328:32310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1475.015058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.044235][ T29] audit: type=1326 audit(1728768538.328:32311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29227 comm="syz.1.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1475.067685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.254469][T10843] Bluetooth: Wrong link type (-71) [ 1475.263043][T10843] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 1475.270204][T10843] Bluetooth: Wrong link type (-22) [ 1475.519028][T29254] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1475.643555][T29252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.688314][T29252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.765119][T29265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.774244][T29265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.786993][T29262] syzkaller0: entered promiscuous mode [ 1475.792861][T29262] syzkaller0: entered allmulticast mode [ 1475.984429][T29263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1475.996913][T29263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.801874][T29304] batadv_slave_1: entered promiscuous mode [ 1482.026173][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.088660][T29307] batadv_slave_1: left promiscuous mode [ 1482.445777][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.699554][T29325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.752078][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.768344][T29325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.790443][T21280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1482.814433][T21280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1482.818473][T29325] usb usb9: usbfs: process 29325 (syz.1.4675) did not claim interface 0 before use [ 1482.833709][T21280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1482.878956][T27740] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1482.888635][T27740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1482.921912][T27740] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1482.931896][T27740] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1482.945055][T27740] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1482.952904][T27740] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1482.960406][T27740] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1482.999118][T27740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1483.008259][T27740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1483.347002][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.646239][T29329] chnl_net:caif_netlink_parms(): no params data found [ 1483.678616][T29341] netlink: 'syz.2.4676': attribute type 16 has an invalid length. [ 1483.686491][T29341] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4676'. [ 1483.792133][ T63] bridge_slave_1: left allmulticast mode [ 1483.805599][ T63] bridge_slave_1: left promiscuous mode [ 1483.821496][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.866561][ T63] bridge_slave_0: left allmulticast mode [ 1483.876096][ T63] bridge_slave_0: left promiscuous mode [ 1483.896557][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.126270][T29359] kvm: pic: non byte write [ 1484.501270][T29376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.519342][T29376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.865261][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.871830][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.991662][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.003369][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.031875][ T63] bond0 (unregistering): Released all slaves [ 1485.077913][T29382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.094840][T29383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1485.096171][T29382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.117993][T29328] Bluetooth: hci8: command tx timeout [ 1485.179670][T29383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1485.180414][T29328] Bluetooth: hci0: command tx timeout [ 1485.196947][T29332] chnl_net:caif_netlink_parms(): no params data found [ 1485.256589][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1485.256607][ T29] audit: type=1326 audit(1728768549.248:32351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.289805][ T29] audit: type=1326 audit(1728768549.278:32352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.313934][ T29] audit: type=1326 audit(1728768549.278:32353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.353400][ T29] audit: type=1326 audit(1728768549.278:32354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.378216][ T29] audit: type=1326 audit(1728768549.278:32355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.401289][ T29] audit: type=1326 audit(1728768549.278:32356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.442219][ T29] audit: type=1326 audit(1728768549.278:32357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.465862][ T29] audit: type=1326 audit(1728768549.278:32358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.508381][ T29] audit: type=1326 audit(1728768549.278:32359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.510464][T29329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.541443][T29329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.548921][T29329] bridge_slave_0: entered allmulticast mode [ 1485.554866][ T29] audit: type=1326 audit(1728768549.288:32360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29386 comm="syz.1.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cfb7dff9 code=0x7ffc0000 [ 1485.556096][T29329] bridge_slave_0: entered promiscuous mode [ 1485.628134][T29329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.635584][T29329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.644016][T29329] bridge_slave_1: entered allmulticast mode [ 1485.652286][T29329] bridge_slave_1: entered promiscuous mode [ 1485.767334][T29329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1485.802088][T29329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1485.889465][ T63] hsr_slave_0: left promiscuous mode [ 1485.910034][ T63] hsr_slave_1: left promiscuous mode [ 1485.919442][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.926997][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.950824][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.963052][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1486.024561][ T63] veth1_macvtap: left promiscuous mode [ 1486.038147][ T63] veth0_macvtap: left promiscuous mode [ 1486.050601][ T63] veth1_vlan: left promiscuous mode [ 1486.059560][ T63] veth0_vlan: left promiscuous mode [ 1487.178178][T29328] Bluetooth: hci8: command tx timeout [ 1487.264366][T29328] Bluetooth: hci0: command tx timeout [ 1487.550585][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1487.624766][T29421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.653296][T29421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.669044][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1488.691234][T29415] pim6reg: entered allmulticast mode [ 1488.707987][T29416] pim6reg: left allmulticast mode [ 1488.735024][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1488.753277][T29422] macsec0: entered promiscuous mode [ 1488.808517][T29329] team0: Port device team_slave_0 added [ 1488.852471][T29332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.866696][T29332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.888451][T29332] bridge_slave_0: entered allmulticast mode [ 1488.899495][T29332] bridge_slave_0: entered promiscuous mode [ 1488.921661][T29329] team0: Port device team_slave_1 added [ 1488.934498][T29434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.964160][T29434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.016323][T29332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.029832][T29430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.068947][T29332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.076301][T29332] bridge_slave_1: entered allmulticast mode [ 1489.087124][T29430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.110510][T29332] bridge_slave_1: entered promiscuous mode [ 1489.241451][T29329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.268028][T29328] Bluetooth: hci8: command tx timeout [ 1489.277924][T29329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.304237][T29329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.349621][ T5243] Bluetooth: hci0: command tx timeout [ 1489.487536][T29440] syzkaller0: entered promiscuous mode [ 1489.495532][T29440] syzkaller0: entered allmulticast mode [ 1489.513209][T29329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.561784][T29329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.657307][T29329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.711433][T29332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.750667][T29332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.317902][T29467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.809369][T29467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.005311][T29468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1491.018702][T29468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1491.343802][T29328] Bluetooth: hci8: command tx timeout [ 1491.438767][T29328] Bluetooth: hci0: command tx timeout [ 1494.655385][T29481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.679833][T29481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.772954][T29483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.839367][T29483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.407137][T29332] team0: Port device team_slave_0 added [ 1496.460747][T29329] hsr_slave_0: entered promiscuous mode [ 1496.479659][T29329] hsr_slave_1: entered promiscuous mode [ 1496.500583][T29329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1496.517728][T29329] Cannot create hsr debugfs directory [ 1496.530092][T29332] team0: Port device team_slave_1 added [ 1496.642533][T29332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1496.654295][T29332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.723373][T29332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1496.793693][T29332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1496.808330][T29332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1496.854187][T29332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.157143][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.206597][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.283638][T29332] hsr_slave_0: entered promiscuous mode [ 1497.305122][T29332] hsr_slave_1: entered promiscuous mode [ 1497.328125][T29332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1497.338419][T29332] Cannot create hsr debugfs directory [ 1497.456427][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.470442][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.586503][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.613069][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.778670][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1497.799352][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.526861][ T63] bridge_slave_1: left allmulticast mode [ 1498.539129][ T63] bridge_slave_1: left promiscuous mode [ 1498.544929][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.568667][ T63] bridge_slave_0: left allmulticast mode [ 1498.587995][ T63] bridge_slave_0: left promiscuous mode [ 1498.593787][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.714540][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1499.747703][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1499.773006][ T63] bond0 (unregistering): Released all slaves [ 1500.297838][ T63] hsr_slave_0: left promiscuous mode [ 1500.315230][ T63] hsr_slave_1: left promiscuous mode [ 1500.332399][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1500.348279][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1500.370713][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1500.387960][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.441226][ T63] veth1_macvtap: left promiscuous mode [ 1500.446796][ T63] veth0_macvtap: left promiscuous mode [ 1500.462393][ T63] veth1_vlan: left promiscuous mode [ 1500.479756][ T63] veth0_vlan: left promiscuous mode [ 1501.950200][T29551] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1502.083716][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1502.214250][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1502.963385][T29564] ptrace attach of "./syz-executor exec"[29565] was attempted by ""[29564] [ 1503.934150][T29329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1504.190371][T29329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1504.277350][T29329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1504.379321][T29329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1504.871948][T29329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.900610][T29582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.095880][T29583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 1505.162250][T29583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.530159][T29583] bridge_slave_0 (unregistering): left allmulticast mode [ 1505.537272][T29583] bridge_slave_0 (unregistering): left promiscuous mode [ 1505.628006][T29583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.697083][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1505.729967][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1505.748131][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1505.768824][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1505.778848][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1505.786380][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1506.000505][T29329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.089799][T29332] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1506.130270][T29332] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1506.451803][T29615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1506.470690][ T9832] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.561684][T29332] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1506.573889][T27838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.581070][T27838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.606927][T27838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.614449][T27838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.649426][T29332] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1506.854794][ T9832] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.015121][ T9832] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.028568][T29328] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1507.041817][T29328] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1507.051247][T29328] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1507.068234][T29328] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1507.080657][T29328] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1507.088741][T29328] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1507.161430][T29329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1507.172113][T29329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1507.302014][ T9832] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.484561][T29606] chnl_net:caif_netlink_parms(): no params data found [ 1507.542968][T29630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1507.565748][T29329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.898773][ T5243] Bluetooth: hci10: command tx timeout [ 1507.936251][T29332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.945504][ T9832] bridge_slave_1: left allmulticast mode [ 1507.957930][ T9832] bridge_slave_1: left promiscuous mode [ 1507.963792][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.980889][ T9832] bridge_slave_0: left allmulticast mode [ 1507.986631][ T9832] bridge_slave_0: left promiscuous mode [ 1507.998243][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.778659][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1508.792736][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1508.805093][ T9832] bond0 (unregistering): Released all slaves [ 1508.989514][T29623] chnl_net:caif_netlink_parms(): no params data found [ 1509.003126][T29606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.013087][T29606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.021262][T29606] bridge_slave_0: entered allmulticast mode [ 1509.029467][T29606] bridge_slave_0: entered promiscuous mode [ 1509.037381][T29606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.045440][T29606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.053261][T29606] bridge_slave_1: entered allmulticast mode [ 1509.061205][T29606] bridge_slave_1: entered promiscuous mode [ 1509.076421][T29332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.096731][T29329] veth0_vlan: entered promiscuous mode [ 1509.179344][ T5243] Bluetooth: hci9: command tx timeout [ 1509.273360][T29606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.301438][T29606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.317990][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.325185][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.357297][T29329] veth1_vlan: entered promiscuous mode [ 1509.415618][ T9832] hsr_slave_0: left promiscuous mode [ 1509.428552][ T9832] hsr_slave_1: left promiscuous mode [ 1509.441514][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.457580][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.476349][ T9832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.488177][ T9832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.540030][ T9832] veth1_macvtap: left promiscuous mode [ 1509.545637][ T9832] veth0_macvtap: left promiscuous mode [ 1509.568674][ T9832] veth1_vlan: left promiscuous mode [ 1509.574159][ T9832] veth0_vlan: left promiscuous mode [ 1509.983133][ T5243] Bluetooth: hci10: command tx timeout [ 1510.419143][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 1510.506894][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 1511.265885][ T5243] Bluetooth: hci9: command tx timeout [ 1511.530227][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.537362][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1511.572359][T29606] team0: Port device team_slave_0 added [ 1511.581946][T29606] team0: Port device team_slave_1 added [ 1511.669088][T29623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.676500][T29623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.684338][T29623] bridge_slave_0: entered allmulticast mode [ 1511.692074][T29623] bridge_slave_0: entered promiscuous mode [ 1511.747454][T29623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.771492][T29623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.779928][T29623] bridge_slave_1: entered allmulticast mode [ 1511.789697][T29623] bridge_slave_1: entered promiscuous mode [ 1511.825876][T29606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1511.833557][T29606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.860143][T29606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1511.904235][T29623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.916244][T29606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1511.942563][T29606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1511.986105][T29606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.029509][T29623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.058797][ T5243] Bluetooth: hci10: command tx timeout [ 1512.087196][T29329] veth0_macvtap: entered promiscuous mode [ 1512.103062][T29329] veth1_macvtap: entered promiscuous mode [ 1512.169123][T29623] team0: Port device team_slave_0 added [ 1512.192133][T29623] team0: Port device team_slave_1 added [ 1512.273987][T29606] hsr_slave_0: entered promiscuous mode [ 1512.290324][T29606] hsr_slave_1: entered promiscuous mode [ 1512.304667][T29606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1512.315768][T29606] Cannot create hsr debugfs directory [ 1512.390028][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.417914][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.437894][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.458108][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.478240][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.490220][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.500666][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.512011][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.522360][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.533330][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.557937][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.577987][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.588216][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.607869][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.627885][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.651878][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.664131][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1512.678962][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.691273][T29329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.715199][T29623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.727330][T29623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.764676][T29623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.815402][T29623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.828279][T29623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.887248][T29623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.950974][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1512.972051][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1512.992353][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.019227][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.039739][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.066167][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.085042][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.107727][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.131430][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.152369][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.172721][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.197954][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.218653][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.252850][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.274064][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.298195][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.317965][T29329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.338973][T29329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.351912][ T5243] Bluetooth: hci9: command tx timeout [ 1513.375977][T29329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.456149][T29332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1513.494159][T29329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.509836][T29329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.521931][T29329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.536860][T29329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.553338][T29623] hsr_slave_0: entered promiscuous mode [ 1513.568892][T29623] hsr_slave_1: entered promiscuous mode [ 1513.584801][T29623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.601134][T29623] Cannot create hsr debugfs directory [ 1513.791513][T29606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.876144][T29332] veth0_vlan: entered promiscuous mode [ 1513.927040][T29606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.003107][T29332] veth1_vlan: entered promiscuous mode [ 1514.105391][T29606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.120669][T29737] netlink: 'syz.2.4717': attribute type 10 has an invalid length. [ 1514.143991][T29737] team0: Cannot enslave team device to itself [ 1514.156736][ T5243] Bluetooth: hci10: command tx timeout [ 1514.225236][T29606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.245854][ T9832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.255044][ T9832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.350813][T29332] veth0_macvtap: entered promiscuous mode [ 1514.383131][T29332] veth1_macvtap: entered promiscuous mode [ 1514.390165][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.398184][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.440144][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.451123][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.467528][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.478991][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.489789][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.512396][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.522931][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.537157][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.547928][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.578068][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.592158][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.607472][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.623670][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.634589][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.645919][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.657377][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.667993][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.678907][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.692507][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1514.704046][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.740173][T29332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.811367][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.848151][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.885039][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.895835][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.905747][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.916391][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.926772][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.941027][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.961418][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1514.973865][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1514.988757][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.005830][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1515.005849][ T29] audit: type=1326 audit(1728768578.998:32387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.036804][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.048284][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.071517][T29758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.080001][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.092268][ T29] audit: type=1326 audit(1728768579.028:32388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.118725][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.129548][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.139608][ T29] audit: type=1326 audit(1728768579.028:32389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.162734][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.174000][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.184392][T29332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1515.195478][ T29] audit: type=1326 audit(1728768579.028:32390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.221896][T29332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1515.232754][T29758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.243028][T29332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1515.250458][ T29] audit: type=1326 audit(1728768579.038:32391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e68d7c990 code=0x7ffc0000 [ 1515.277367][T29332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.300009][T29332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.310247][ T29] audit: type=1326 audit(1728768579.038:32392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.336642][T29332] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.346280][T29332] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.356963][ T29] audit: type=1326 audit(1728768579.038:32393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e68d7dff9 code=0x7ffc0000 [ 1515.418486][ T5243] Bluetooth: hci9: command tx timeout [ 1515.435688][ T29] audit: type=1326 audit(1728768579.058:32394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e68d7c990 code=0x7ffc0000 [ 1515.461652][ T29] audit: type=1326 audit(1728768579.058:32395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e68d7dbfb code=0x7ffc0000 [ 1515.485533][ T29] audit: type=1326 audit(1728768579.058:32396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29754 comm="syz.3.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e68d7dbfb code=0x7ffc0000 [ 1515.715197][T29606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1515.738786][T29606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1515.777312][T29606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1515.897893][T29606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1515.929818][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.949891][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.117003][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.132027][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.424460][T29623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1516.454812][T29623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1516.483571][T29623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1516.505454][T29623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1516.577109][T29606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.642193][T29606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.668296][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.675405][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.733491][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.740747][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.035083][T29606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.123126][T29623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1517.249337][T29623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1517.310606][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.317860][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.416440][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.423664][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.573464][T29606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1517.825034][T29623] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1517.888620][T29623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.960992][T29795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1517.967536][T29795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1517.976288][T29795] vhci_hcd vhci_hcd.0: Device attached [ 1518.147889][T29623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.218813][ T51] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 1518.226422][T29797] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1518.232546][T29796] vhci_hcd: connection closed [ 1518.239355][T29606] veth0_vlan: entered promiscuous mode [ 1518.250212][T27838] vhci_hcd: stop threads [ 1518.254517][T27838] vhci_hcd: release socket [ 1518.274430][T27838] vhci_hcd: disconnect device [ 1518.315784][T29606] veth1_vlan: entered promiscuous mode [ 1518.341438][T29804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.372514][T29623] veth0_vlan: entered promiscuous mode [ 1518.380936][T29804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.417358][T29623] veth1_vlan: entered promiscuous mode [ 1518.435133][T29606] veth0_macvtap: entered promiscuous mode [ 1518.447561][T29606] veth1_macvtap: entered promiscuous mode [ 1518.486993][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.508243][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.539199][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.558019][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.577876][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.589074][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.599453][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.611227][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.627398][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.657269][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.677988][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.699473][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.718820][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.756416][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.777422][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.800249][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.820536][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.834892][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.845320][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.856561][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.868791][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1518.887226][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1518.897013][T29822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4723'. [ 1518.899721][T29606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1518.924408][T29808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1518.981056][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.007925][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.027913][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.048569][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.061170][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.078165][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.097950][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.118070][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.135247][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.146334][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.156947][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.168732][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.180755][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.191329][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.201302][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.211822][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.221854][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.234364][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.244394][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.254908][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.267170][T29606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1519.277726][T29606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.290353][T29606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.340249][T29623] veth0_macvtap: entered promiscuous mode [ 1519.370440][T29623] veth1_macvtap: entered promiscuous mode [ 1519.386388][T29606] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.408007][T29606] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.416781][T29606] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.448702][T29606] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.514257][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.527722][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.540057][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.551503][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.562535][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.574881][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.587289][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.597956][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.607936][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.618561][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.628693][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.639215][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.649118][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.660241][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.670984][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.702708][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.721452][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.742584][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.761141][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.779701][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.796952][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.810844][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.832401][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1519.854107][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1519.879662][T29623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.972586][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.001416][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.022446][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.043726][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.069491][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.103599][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.123749][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.156850][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.176219][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.207838][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.230123][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.256340][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.276309][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.289385][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.311181][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.337868][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.347837][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.367870][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.379975][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.397863][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.417844][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.428412][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.447906][T29623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1520.463056][T29623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1520.479729][T29623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1520.498406][T29623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.507166][T29623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.527884][T29623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.536662][T29623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.629435][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.654683][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.888276][ T9832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.896153][ T9832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.969346][T27838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.977244][T27838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.083260][T21994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1521.092613][T21994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.221680][T29844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 1521.278203][T29847] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1521.383791][T29837] usb usb8: usbfs: process 29837 (syz.2.4726) did not claim interface 0 before use [ 1521.417322][T29854] netlink: 'syz.4.4713': attribute type 7 has an invalid length. [ 1521.501792][T29854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.539741][T29858] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1521.546304][T29858] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1521.566186][T29858] vhci_hcd vhci_hcd.0: Device attached [ 1521.598109][T29854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.691183][T29859] vhci_hcd: connection closed [ 1521.708212][ T2546] vhci_hcd: stop threads [ 1521.717249][ T2546] vhci_hcd: release socket [ 1521.739145][ T2546] vhci_hcd: disconnect device [ 1521.797958][ T6267] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 1521.805486][ T6267] usb 11-1: enqueue for inactive port 0 [ 1521.908576][ T6267] vhci_hcd: vhci_device speed not set [ 1522.277271][T29867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4733'. [ 1522.684548][T29873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.696058][T29873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1523.328525][ T51] vhci_hcd: vhci_device speed not set [ 1523.691237][T29878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1523.706824][T29878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.347540][T29882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.357351][T29882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.491369][T29880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.508306][T29880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.505777][T29900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.535836][T29900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.623003][T29328] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1525.629932][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1525.629951][ T29] audit: type=1326 audit(1728768589.618:32406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1525.669589][T29906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.688463][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.716490][ T29] audit: type=1326 audit(1728768589.658:32407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1525.742242][T29328] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1525.753379][T29328] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1525.758191][T29906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.778103][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.790005][T29328] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1525.813754][T29328] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1525.851565][T29328] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1525.914771][ T29] audit: type=1326 audit(1728768589.658:32408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1526.046725][ T29] audit: type=1326 audit(1728768589.678:32409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff23537c990 code=0x7ffc0000 [ 1526.135214][ T29] audit: type=1326 audit(1728768589.678:32410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff23537dbfb code=0x7ffc0000 [ 1526.179584][T29891] usb usb8: usbfs: process 29891 (syz.4.4742) did not claim interface 0 before use [ 1526.182676][ T29] audit: type=1326 audit(1728768589.678:32411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff23537dbfb code=0x7ffc0000 [ 1526.237145][ T29] audit: type=1326 audit(1728768589.808:32412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1526.285688][ T29] audit: type=1326 audit(1728768589.808:32413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff23537c990 code=0x7ffc0000 [ 1526.337420][ T29] audit: type=1326 audit(1728768589.808:32414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1526.363721][T29910] chnl_net:caif_netlink_parms(): no params data found [ 1526.483044][ T29] audit: type=1326 audit(1728768589.808:32415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29902 comm="syz.1.4744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff23537dff9 code=0x7ffc0000 [ 1526.653295][T29923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.664985][T29923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.870389][T29910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1526.885978][T29910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.903329][T29910] bridge_slave_0: entered allmulticast mode [ 1526.921723][T29910] bridge_slave_0: entered promiscuous mode [ 1526.936350][T29910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1526.961033][T29910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.975436][T29910] bridge_slave_1: entered allmulticast mode [ 1526.983300][T29910] bridge_slave_1: entered promiscuous mode [ 1527.041414][T29910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.067036][T29910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.174139][T29910] team0: Port device team_slave_0 added [ 1527.197110][T29910] team0: Port device team_slave_1 added [ 1527.279544][T29910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.327970][T29910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.395919][T29910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.423202][T29910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.433176][T29910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.562467][T29910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.763053][T29948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.882916][T29948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.898461][T29328] Bluetooth: hci11: command tx timeout [ 1527.940327][T29910] hsr_slave_0: entered promiscuous mode [ 1527.950756][T29910] hsr_slave_1: entered promiscuous mode [ 1527.975335][T29910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1528.014565][T29910] Cannot create hsr debugfs directory [ 1528.504044][T29910] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.564543][T29955] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1528.596795][T29955] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4752'. [ 1528.612040][T29955] openvswitch: netlink: Tunnel attr 0 has unexpected len 3052 expected 8 [ 1528.652087][T29910] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.681308][T29955] netlink: 'syz.4.4752': attribute type 10 has an invalid length. [ 1528.707664][T29955] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1528.771372][T29910] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.934874][T29910] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.598330][T29976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1529.604983][T29976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1529.615269][T29976] vhci_hcd vhci_hcd.0: Device attached [ 1529.623135][T29977] vhci_hcd: connection closed [ 1529.624948][ T9832] vhci_hcd: stop threads [ 1529.642260][ T9832] vhci_hcd: release socket [ 1529.682830][ T9832] vhci_hcd: disconnect device [ 1529.731614][T29910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1529.920031][T29910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1529.940933][T29910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1529.979186][T29328] Bluetooth: hci11: command tx timeout [ 1529.999277][T29910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1530.109971][T29910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.172074][T29910] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.203644][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.210876][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.241850][ T9832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.249023][ T9832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.460740][T29910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.581758][T29910] veth0_vlan: entered promiscuous mode [ 1530.619232][T29974] usb usb8: usbfs: process 29974 (syz.4.4756) did not claim interface 0 before use [ 1530.639999][T29910] veth1_vlan: entered promiscuous mode [ 1530.713298][T29910] veth0_macvtap: entered promiscuous mode [ 1530.741447][T29910] veth1_macvtap: entered promiscuous mode [ 1530.766505][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.777509][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.790539][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.809050][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.832033][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.861595][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.889828][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.920277][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.946116][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.981496][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.010720][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.051412][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.084418][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.126909][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.156236][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.185490][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.214964][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.252766][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.267851][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.286645][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.317503][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.357971][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.388214][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.460858][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.506313][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1531.536506][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.559565][T29910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1531.694125][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.718378][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.745003][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.768163][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.779752][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.790934][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.803474][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.819633][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.843556][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.856858][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.868935][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.880958][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.893667][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.904626][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.915912][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.926826][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.937619][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.950824][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.961083][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.973354][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.984147][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1531.995205][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.005602][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.016656][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.028739][T29910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1532.049473][T29910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1532.060554][T29328] Bluetooth: hci11: command tx timeout [ 1532.083294][T29910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.114927][T29910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.124486][T29910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.134115][T29910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.143273][T29910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.173341][T30003] vlan2: entered promiscuous mode [ 1532.180818][T30003] vlan2: entered allmulticast mode [ 1532.203567][T30003] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1532.213555][T30003] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1532.231292][T30003] team0: Port device vlan2 added [ 1532.527580][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.581309][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.657173][ T2546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1532.683729][ T2546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1532.905647][T30021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.976070][T30021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.015130][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1533.015149][ T29] audit: type=1326 audit(1728768597.008:32435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.074089][ T29] audit: type=1326 audit(1728768597.008:32436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.143207][ T29] audit: type=1326 audit(1728768597.048:32437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.224096][ T29] audit: type=1326 audit(1728768597.048:32438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.288992][ T29] audit: type=1326 audit(1728768597.048:32439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.315205][ T29] audit: type=1326 audit(1728768597.048:32440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.413654][ T29] audit: type=1326 audit(1728768597.048:32441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.444318][T30028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.458637][T30028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.466799][ T29] audit: type=1326 audit(1728768597.048:32442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.519287][T30028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1533.547903][ T29] audit: type=1326 audit(1728768597.048:32443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.583751][ T29] audit: type=1326 audit(1728768597.048:32444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30022 comm="syz.2.4766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1533.632934][T30030] netlink: 'syz.3.4769': attribute type 21 has an invalid length. [ 1533.641820][T30030] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4769'. [ 1534.046262][T30038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4772'. [ 1534.150896][T29328] Bluetooth: hci11: command tx timeout [ 1534.230496][T30044] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1535.125760][T30058] FAULT_INJECTION: forcing a failure. [ 1535.125760][T30058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.159280][T30058] CPU: 1 UID: 0 PID: 30058 Comm: syz.3.4777 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1535.170076][T30058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1535.180162][T30058] Call Trace: [ 1535.183449][T30058] [ 1535.186371][T30058] dump_stack_lvl+0x241/0x360 [ 1535.191138][T30058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1535.196395][T30058] ? __pfx__printk+0x10/0x10 [ 1535.200995][T30058] ? __pfx_lock_release+0x10/0x10 [ 1535.206030][T30058] should_fail_ex+0x3b0/0x4e0 [ 1535.210716][T30058] _copy_to_iter+0x434/0x1d60 [ 1535.215384][T30058] ? __virt_addr_valid+0x183/0x530 [ 1535.220493][T30058] ? __pfx_lock_release+0x10/0x10 [ 1535.225512][T30058] ? __pfx__copy_to_iter+0x10/0x10 [ 1535.230615][T30058] ? __virt_addr_valid+0x183/0x530 [ 1535.235711][T30058] ? __virt_addr_valid+0x183/0x530 [ 1535.240844][T30058] ? __virt_addr_valid+0x45f/0x530 [ 1535.246083][T30058] ? __phys_addr_symbol+0x2f/0x70 [ 1535.251102][T30058] ? __check_object_size+0x48e/0x900 [ 1535.256379][T30058] seq_read_iter+0xb80/0xd70 [ 1535.260986][T30058] seq_read+0x3a9/0x4f0 [ 1535.265159][T30058] ? __pfx_seq_read+0x10/0x10 [ 1535.269848][T30058] ? get_pid_task+0x23/0x1f0 [ 1535.274437][T30058] ? __pfx_seq_read+0x10/0x10 [ 1535.279111][T30058] proc_reg_read+0x201/0x2f0 [ 1535.283693][T30058] vfs_readv+0x6bc/0xa80 [ 1535.287936][T30058] ? __pfx_proc_reg_read+0x10/0x10 [ 1535.293072][T30058] ? __pfx_vfs_readv+0x10/0x10 [ 1535.297850][T30058] ? vfs_write+0x7bf/0xc90 [ 1535.302275][T30058] ? __fget_files+0x29/0x470 [ 1535.306872][T30058] ? __fget_files+0x29/0x470 [ 1535.311455][T30058] __x64_sys_preadv+0x1c7/0x2d0 [ 1535.316294][T30058] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1535.321690][T30058] ? do_syscall_64+0x100/0x230 [ 1535.326451][T30058] ? do_syscall_64+0xb6/0x230 [ 1535.331137][T30058] do_syscall_64+0xf3/0x230 [ 1535.335629][T30058] ? clear_bhb_loop+0x35/0x90 [ 1535.340300][T30058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.346289][T30058] RIP: 0033:0x7f787ef7dff9 [ 1535.350702][T30058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1535.370304][T30058] RSP: 002b:00007f787fce8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1535.378712][T30058] RAX: ffffffffffffffda RBX: 00007f787f135f80 RCX: 00007f787ef7dff9 [ 1535.386675][T30058] RDX: 0000000000000001 RSI: 00000000200026c0 RDI: 0000000000000005 [ 1535.394738][T30058] RBP: 00007f787fce8090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.402699][T30058] R10: 000000000000015f R11: 0000000000000246 R12: 0000000000000001 [ 1535.410664][T30058] R13: 0000000000000000 R14: 00007f787f135f80 R15: 00007f787f25fa28 [ 1535.419002][T30058] [ 1535.543481][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1535.605096][T30061] wireguard0: entered promiscuous mode [ 1535.637990][T30061] wireguard0: entered allmulticast mode [ 1535.925301][ T5243] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1535.949628][ T5243] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1535.993750][ T5243] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1536.019243][ T5243] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1536.030335][ T5243] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1536.040554][ T5243] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1536.156991][T30074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1536.297394][T30080] netlink: 4056 bytes leftover after parsing attributes in process `syz.1.4783'. [ 1536.311977][T30075] chnl_net:caif_netlink_parms(): no params data found [ 1536.336262][T30080] openvswitch: netlink: Actions may not be safe on all matching packets [ 1536.452120][T30085] team0: Port device team_slave_0 removed [ 1536.478713][T30085] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1536.595386][T30093] lo: Caught tx_queue_len zero misconfig [ 1536.736515][T30075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.773379][T30075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.799556][T30075] bridge_slave_0: entered allmulticast mode [ 1536.821911][T30075] bridge_slave_0: entered promiscuous mode [ 1536.843987][T30075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.891480][T30075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.942675][T30075] bridge_slave_1: entered allmulticast mode [ 1536.998422][T30075] bridge_slave_1: entered promiscuous mode [ 1537.076955][T30075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.092866][T30075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.141666][T30075] team0: Port device team_slave_0 added [ 1537.155137][T30075] team0: Port device team_slave_1 added [ 1537.406528][T30075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.454365][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.574169][T30113] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1537.584544][T30075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.604703][T30075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.624931][T30075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.830765][T30075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.017032][T30121] FAULT_INJECTION: forcing a failure. [ 1538.017032][T30121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1538.137983][ T5243] Bluetooth: hci12: command tx timeout [ 1538.177286][T30075] hsr_slave_0: entered promiscuous mode [ 1538.246978][T30121] CPU: 0 UID: 0 PID: 30121 Comm: syz.3.4790 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1538.257822][T30121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1538.267930][T30121] Call Trace: [ 1538.271239][T30121] [ 1538.274203][T30121] dump_stack_lvl+0x241/0x360 [ 1538.278929][T30121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.284204][T30121] ? __pfx__printk+0x10/0x10 [ 1538.288863][T30121] ? __pfx_lock_release+0x10/0x10 [ 1538.293910][T30121] should_fail_ex+0x3b0/0x4e0 [ 1538.298606][T30121] _copy_to_user+0x2f/0xb0 [ 1538.303058][T30121] kvm_stats_read+0x2f0/0x510 [ 1538.307782][T30121] kvm_vm_stats_read+0x70/0x80 [ 1538.312585][T30121] vfs_readv+0x6bc/0xa80 [ 1538.316876][T30121] ? __pfx_kvm_vm_stats_read+0x10/0x10 [ 1538.322382][T30121] ? __pfx_vfs_readv+0x10/0x10 [ 1538.327183][T30121] ? vfs_write+0x7bf/0xc90 [ 1538.331629][T30121] ? __fget_files+0x29/0x470 [ 1538.336245][T30121] ? __fget_files+0x29/0x470 [ 1538.340849][T30121] __x64_sys_preadv+0x1c7/0x2d0 [ 1538.345737][T30121] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1538.351157][T30121] ? do_syscall_64+0x100/0x230 [ 1538.355925][T30121] ? do_syscall_64+0xb6/0x230 [ 1538.360605][T30121] do_syscall_64+0xf3/0x230 [ 1538.365097][T30121] ? clear_bhb_loop+0x35/0x90 [ 1538.369784][T30121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.375753][T30121] RIP: 0033:0x7f787ef7dff9 [ 1538.380158][T30121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1538.400032][T30121] RSP: 002b:00007f787fcc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1538.408447][T30121] RAX: ffffffffffffffda RBX: 00007f787f136058 RCX: 00007f787ef7dff9 [ 1538.416507][T30121] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000007 [ 1538.424759][T30121] RBP: 00007f787fcc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1538.432968][T30121] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 1538.441833][T30121] R13: 0000000000000000 R14: 00007f787f136058 R15: 00007f787f25fa28 [ 1538.450013][T30121] [ 1538.495636][T30131] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1538.536236][T30075] hsr_slave_1: entered promiscuous mode [ 1538.547570][T30075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1538.587511][T30075] Cannot create hsr debugfs directory [ 1538.757720][T30136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.784845][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 1538.784871][ T29] audit: type=1326 audit(1728768602.768:32477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1538.851186][T30136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.908296][T30141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.948115][T30136] binder: 30135:30136 ioctl c018ae85 20000080 returned -22 [ 1538.948441][ T29] audit: type=1326 audit(1728768602.818:32478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1538.958101][T30141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.159833][ T29] audit: type=1326 audit(1728768602.818:32479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1539.335920][ T29] audit: type=1326 audit(1728768602.818:32480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1539.508522][ T29] audit: type=1326 audit(1728768602.818:32481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742f57c990 code=0x7ffc0000 [ 1539.551217][T30075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.615515][ T29] audit: type=1326 audit(1728768602.818:32482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1539.774013][ T29] audit: type=1326 audit(1728768602.818:32483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742f57dff9 code=0x7ffc0000 [ 1539.805376][T30075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.841195][T30151] netlink: 'syz.3.4798': attribute type 4 has an invalid length. [ 1539.964483][T30153] netlink: 'syz.3.4798': attribute type 4 has an invalid length. [ 1540.093851][T30158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.113079][ T29] audit: type=1326 audit(1728768602.818:32484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742f57c990 code=0x7ffc0000 [ 1540.152551][T30075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.179215][T30158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.218157][ T5243] Bluetooth: hci12: command tx timeout [ 1540.272692][ T29] audit: type=1326 audit(1728768602.818:32485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742f57dbfb code=0x7ffc0000 [ 1540.352700][ T9832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.418954][T30151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.452610][ T29] audit: type=1326 audit(1728768602.818:32486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30132 comm="syz.2.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f742f57dbfb code=0x7ffc0000 [ 1540.490230][T30151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1540.605427][T30075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.824963][ T9832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.325331][ T9832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1541.692813][T29328] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1541.703627][T29328] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1541.717033][T29328] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1541.729681][T29328] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1541.756822][T29328] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1541.764467][T29328] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1541.783674][ T9832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.058546][T30075] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1542.110795][T30075] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1542.173804][T30075] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1542.239327][T30075] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1542.288762][T30180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.298362][T29328] Bluetooth: hci12: command tx timeout [ 1542.383451][T30180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1542.758101][ T9832] bridge_slave_1: left allmulticast mode [ 1542.807925][ T9832] bridge_slave_1: left promiscuous mode [ 1542.813756][ T9832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.864260][ T9832] bridge_slave_0: left allmulticast mode [ 1542.910801][ T9832] bridge_slave_0: left promiscuous mode [ 1542.931319][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.551713][T30220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.593787][T30220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.701547][T30220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.751026][T30220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.828672][T29328] Bluetooth: hci10: command tx timeout [ 1544.385843][T29328] Bluetooth: hci12: command tx timeout [ 1544.506981][ T9832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.528490][ T9832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.541936][ T9832] bond0 (unregistering): Released all slaves [ 1544.575569][T30202] team0: Port device macvlan2 added [ 1544.662881][T30171] chnl_net:caif_netlink_parms(): no params data found [ 1545.021272][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 1545.038431][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1545.077957][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1545.086954][ T30] task:kworker/0:0 state:D stack:19056 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 1545.097621][ T30] Workqueue: usb_hub_wq hub_event [ 1545.104539][ T30] Call Trace: [ 1545.108172][ T30] [ 1545.111244][ T30] __schedule+0x1895/0x4b30 [ 1545.115904][ T30] ? __pfx___schedule+0x10/0x10 [ 1545.121115][ T30] ? __pfx_lock_release+0x10/0x10 [ 1545.126346][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1545.132710][ T30] ? kthread_data+0x52/0xd0 [ 1545.137356][ T30] ? schedule+0x90/0x320 [ 1545.141843][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1545.147507][ T30] ? schedule+0x90/0x320 [ 1545.151981][ T30] schedule+0x14b/0x320 [ 1545.157946][ T30] schedule_preempt_disabled+0x13/0x30 [ 1545.163572][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1545.170101][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1545.177152][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1545.184167][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1545.189519][ T30] ? __kmalloc_noprof+0x1fc/0x400 [ 1545.195162][ T30] down_write+0x1d7/0x220 [ 1545.199764][ T30] ? __pfx_down_write+0x10/0x10 [ 1545.204836][ T30] usb_register_dev+0x13a/0x5a0 [ 1545.214214][ T30] ? __pfx_usb_register_dev+0x10/0x10 [ 1545.236149][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1545.246094][ T30] ? wdm_create+0x7af/0x16d0 [ 1545.288009][ T30] ? __kmalloc_noprof+0x21a/0x400 [ 1545.301636][ T30] wdm_create+0x11cf/0x16d0 [ 1545.312994][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 1545.323181][ T30] wdm_probe+0x21e/0x300 [ 1545.356079][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1545.385020][ T30] ? __pfx_wdm_probe+0x10/0x10 [ 1545.390817][ T30] ? usb_disable_lpm+0x77/0x380 [ 1545.395986][ T30] usb_probe_interface+0x645/0xbb0 [ 1545.402774][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 1545.411260][ T30] really_probe+0x2b8/0xad0 [ 1545.417287][ T30] __driver_probe_device+0x1a2/0x390 [ 1545.423411][ T30] driver_probe_device+0x50/0x430 [ 1545.429507][ T30] __device_attach_driver+0x2d6/0x530 [ 1545.435085][ T30] bus_for_each_drv+0x24e/0x2e0 [ 1545.441285][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1545.447467][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1545.454381][ T30] __device_attach+0x333/0x520 [ 1545.460806][ T30] ? __pfx_lock_release+0x10/0x10 [ 1545.466179][ T30] ? __pfx___device_attach+0x10/0x10 [ 1545.473054][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1545.488873][ T30] bus_probe_device+0x189/0x260 [ 1545.523944][ T30] device_add+0x856/0xbf0 [ 1545.537008][ T30] usb_set_configuration+0x1976/0x1fb0 [ 1545.566408][ T30] usb_generic_driver_probe+0x88/0x140 [ 1545.585191][ T30] usb_probe_device+0x1b8/0x380 [ 1545.609019][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 1545.618226][ T30] really_probe+0x2b8/0xad0 [ 1545.627210][ T30] __driver_probe_device+0x1a2/0x390 [ 1545.636479][ T30] driver_probe_device+0x50/0x430 [ 1545.645064][ T30] __device_attach_driver+0x2d6/0x530 [ 1545.661415][ T30] bus_for_each_drv+0x24e/0x2e0 [ 1545.677913][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1545.696071][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1545.720239][ T30] __device_attach+0x333/0x520 [ 1545.725178][ T30] ? __pfx___device_attach+0x10/0x10 [ 1545.730904][ T30] bus_probe_device+0x189/0x260 [ 1545.735887][ T30] device_add+0x856/0xbf0 [ 1545.741387][ T30] usb_new_device+0x104a/0x19a0 [ 1545.746378][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 1545.752049][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.757485][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1545.762917][ T30] hub_event+0x2d6d/0x5150 [ 1545.767703][ T30] ? __pfx_hub_event+0x10/0x10 [ 1545.772822][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1545.778074][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1545.784401][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1545.792493][ T30] ? process_scheduled_works+0x976/0x1850 [ 1545.799429][ T30] process_scheduled_works+0xa63/0x1850 [ 1545.805260][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1545.811508][ T30] ? assign_work+0x364/0x3d0 [ 1545.816458][ T30] worker_thread+0x870/0xd30 [ 1545.821987][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1545.827460][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1545.832961][ T30] kthread+0x2f0/0x390 [ 1545.837156][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1545.842550][ T30] ? __pfx_kthread+0x10/0x10 [ 1545.847559][ T30] ret_from_fork+0x4b/0x80 [ 1545.853287][ T30] ? __pfx_kthread+0x10/0x10 [ 1545.858199][ T30] ret_from_fork_asm+0x1a/0x30 [ 1545.863275][ T30] [ 1545.867127][ T30] INFO: task kworker/1:5:5289 blocked for more than 144 seconds. [ 1545.875311][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1545.883507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1545.897097][ T30] task:kworker/1:5 state:D stack:19952 pid:5289 tgid:5289 ppid:2 flags:0x00004000 [ 1545.917441][T29328] Bluetooth: hci10: command tx timeout [ 1545.928867][ T30] Workqueue: usb_hub_wq hub_event [ 1545.934041][ T30] Call Trace: [ 1545.937448][ T30] [ 1545.947794][ T30] __schedule+0x1895/0x4b30 [ 1545.952391][ T30] ? __pfx___schedule+0x10/0x10 [ 1545.957281][ T30] ? __pfx_lock_release+0x10/0x10 [ 1545.963666][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1545.969878][ T30] ? kthread_data+0x52/0xd0 [ 1545.974610][ T30] ? schedule+0x90/0x320 [ 1545.979636][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1545.985121][ T30] ? schedule+0x90/0x320 [ 1545.989697][ T30] schedule+0x14b/0x320 [ 1545.995002][ T30] schedule_preempt_disabled+0x13/0x30 [ 1546.000662][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 1546.006752][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 1546.012780][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 1546.020492][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1546.025590][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1546.032143][ T30] down_write+0x1d7/0x220 [ 1546.036876][ T30] ? __pfx_down_write+0x10/0x10 [ 1546.041930][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1546.047554][ T30] usb_register_dev+0x13a/0x5a0 [ 1546.052520][ T30] ? __pfx_usb_register_dev+0x10/0x10 [ 1546.059106][ T30] ? iowarrior_probe+0x989/0x1180 [ 1546.064376][ T30] ? rcu_is_watching+0x15/0xb0 [ 1546.069928][ T30] ? iowarrior_probe+0x989/0x1180 [ 1546.075017][ T30] ? trace_kmalloc+0x1f/0xd0 [ 1546.079883][ T30] ? __kmalloc_noprof+0x21a/0x400 [ 1546.084960][ T30] iowarrior_probe+0xc33/0x1180 [ 1546.090221][ T30] usb_probe_interface+0x645/0xbb0 [ 1546.096619][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 1546.102469][ T30] really_probe+0x2b8/0xad0 [ 1546.107041][ T30] __driver_probe_device+0x1a2/0x390 [ 1546.112456][ T30] driver_probe_device+0x50/0x430 [ 1546.117577][ T30] __device_attach_driver+0x2d6/0x530 [ 1546.123218][ T30] bus_for_each_drv+0x24e/0x2e0 [ 1546.129115][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1546.135062][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1546.140988][ T30] __device_attach+0x333/0x520 [ 1546.146010][ T30] ? __pfx_lock_release+0x10/0x10 [ 1546.151300][ T30] ? __pfx___device_attach+0x10/0x10 [ 1546.156649][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1546.162121][ T30] bus_probe_device+0x189/0x260 [ 1546.167147][ T30] device_add+0x856/0xbf0 [ 1546.171587][ T30] usb_set_configuration+0x1976/0x1fb0 [ 1546.177131][ T30] usb_generic_driver_probe+0x88/0x140 [ 1546.183565][ T30] usb_probe_device+0x1b8/0x380 [ 1546.188563][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 1546.193991][ T30] really_probe+0x2b8/0xad0 [ 1546.199859][ T30] __driver_probe_device+0x1a2/0x390 [ 1546.205212][ T30] driver_probe_device+0x50/0x430 [ 1546.210411][ T30] __device_attach_driver+0x2d6/0x530 [ 1546.215923][ T30] bus_for_each_drv+0x24e/0x2e0 [ 1546.221140][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 1546.227099][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1546.232729][ T30] __device_attach+0x333/0x520 [ 1546.237626][ T30] ? __pfx___device_attach+0x10/0x10 [ 1546.245459][ T30] bus_probe_device+0x189/0x260 [ 1546.250607][ T30] device_add+0x856/0xbf0 [ 1546.255075][ T30] usb_new_device+0x104a/0x19a0 [ 1546.260298][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 1546.265600][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.271139][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1546.276404][ T30] hub_event+0x2d6d/0x5150 [ 1546.281265][ T30] ? __pfx_hub_event+0x10/0x10 [ 1546.286261][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1546.292370][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1546.308808][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.315167][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.318613][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1546.329357][ T30] ? process_scheduled_works+0x976/0x1850 [ 1546.335333][ T30] process_scheduled_works+0xa63/0x1850 [ 1546.341634][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1546.347706][ T30] ? assign_work+0x364/0x3d0 [ 1546.353666][ T30] worker_thread+0x870/0xd30 [ 1546.358578][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1546.364619][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1546.370340][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1546.376047][ T30] kthread+0x2f0/0x390 [ 1546.380649][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1546.385997][ T30] ? __pfx_kthread+0x10/0x10 [ 1546.391123][ T30] ret_from_fork+0x4b/0x80 [ 1546.395869][ T30] ? __pfx_kthread+0x10/0x10 [ 1546.404656][ T30] ret_from_fork_asm+0x1a/0x30 [ 1546.409766][ T30] [ 1546.412936][ T30] INFO: task syz.1.4365:27456 blocked for more than 144 seconds. [ 1546.439891][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1546.448569][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.459111][ T30] task:syz.1.4365 state:D stack:23568 pid:27456 tgid:27451 ppid:26826 flags:0x00004006 [ 1546.470669][ T30] Call Trace: [ 1546.474014][ T30] [ 1546.477397][ T30] __schedule+0x1895/0x4b30 [ 1546.482384][ T30] ? __pfx___schedule+0x10/0x10 [ 1546.487308][ T30] ? __pfx_lock_release+0x10/0x10 [ 1546.492876][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1546.499197][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1546.507377][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1546.514348][ T30] ? schedule+0x90/0x320 [ 1546.518916][ T30] schedule+0x14b/0x320 [ 1546.523138][ T30] rpm_resume+0x504/0x1670 [ 1546.527708][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1546.539225][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 1546.544166][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1546.550779][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1546.556203][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1546.561800][ T30] rpm_resume+0x8fe/0x1670 [ 1546.566319][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 1546.577133][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1546.582966][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1546.589296][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1546.595328][ T30] __pm_runtime_resume+0x120/0x180 [ 1546.600784][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 1546.607436][ T30] usb_autopm_get_interface+0x22/0xf0 [ 1546.613692][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 1546.620561][ T30] wdm_manage_power+0x1c/0xa0 [ 1546.625300][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 1546.630995][ T30] wdm_release+0x20f/0x460 [ 1546.635611][ T30] ? __pfx_wdm_release+0x10/0x10 [ 1546.640929][ T30] __fput+0x23f/0x880 [ 1546.645065][ T30] task_work_run+0x24f/0x310 [ 1546.650017][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1546.655360][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1546.661298][ T30] do_exit+0xa2f/0x28e0 [ 1546.665644][ T30] ? __pfx_do_exit+0x10/0x10 [ 1546.670810][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1546.676352][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1546.683674][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1546.690352][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1546.695519][ T30] do_group_exit+0x207/0x2c0 [ 1546.700747][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.706171][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1546.722517][ T30] get_signal+0x16a3/0x1740 [ 1546.727178][ T30] ? __pfx_get_signal+0x10/0x10 [ 1546.733731][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1546.740181][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1546.746486][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1546.752749][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1546.758562][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1546.764255][ T30] do_syscall_64+0x100/0x230 [ 1546.769057][ T30] ? clear_bhb_loop+0x35/0x90 [ 1546.773783][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.780097][ T30] RIP: 0033:0x7f133f77dff9 [ 1546.784632][ T30] RSP: 002b:00007f13405c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1546.798004][ T30] RAX: 0000000000010106 RBX: 00007f133f936058 RCX: 00007f133f77dff9 [ 1546.807238][ T30] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1546.816382][ T30] RBP: 00007f133f7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1546.824510][ T30] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1546.832785][ T30] R13: 0000000000000001 R14: 00007f133f936058 R15: 00007f133fa5fa28 [ 1546.841064][ T30] [ 1546.848971][ T30] INFO: task syz.0.4387:27603 blocked for more than 145 seconds. [ 1546.856895][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1546.870942][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.880638][ T30] task:syz.0.4387 state:D stack:24752 pid:27603 tgid:27599 ppid:23537 flags:0x00004004 [ 1546.891303][ T30] Call Trace: [ 1546.894742][ T30] [ 1546.898350][ T30] __schedule+0x1895/0x4b30 [ 1546.903076][ T30] ? __pfx___schedule+0x10/0x10 [ 1546.908106][ T30] ? __pfx_lock_release+0x10/0x10 [ 1546.914392][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1546.920429][ T30] ? schedule+0x90/0x320 [ 1546.925189][ T30] schedule+0x14b/0x320 [ 1546.929593][ T30] schedule_preempt_disabled+0x13/0x30 [ 1546.935297][ T30] __mutex_lock+0x6a7/0xd70 [ 1546.942129][ T30] ? __mutex_lock+0x52a/0xd70 [ 1546.947646][ T30] ? wdm_open+0x56/0x550 [ 1546.958031][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1546.963287][ T30] ? __pfx_down_read+0x10/0x10 [ 1546.968463][ T30] ? chrdev_open+0xfb/0x600 [ 1546.973119][ T30] ? __pfx_lock_release+0x10/0x10 [ 1546.979422][ T30] wdm_open+0x56/0x550 [ 1546.983571][ T30] ? __pfx_wdm_open+0x10/0x10 [ 1546.989288][ T30] usb_open+0x14b/0x1d0 [ 1546.993499][ T30] chrdev_open+0x521/0x600 [ 1546.998363][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.003364][ T30] ? security_file_open+0x1d5/0x990 [ 1547.009896][ T30] ? security_file_open+0x513/0x990 [ 1547.015809][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.021870][ T30] do_dentry_open+0x978/0x1460 [ 1547.026779][ T30] vfs_open+0x3e/0x330 [ 1547.031412][ T30] path_openat+0x2c84/0x3590 [ 1547.036194][ T30] ? __pfx_path_openat+0x10/0x10 [ 1547.041664][ T30] do_filp_open+0x235/0x490 [ 1547.047632][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1547.053025][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1547.058365][ T30] ? alloc_fd+0x5a1/0x640 [ 1547.062868][ T30] do_sys_openat2+0x13e/0x1d0 [ 1547.067673][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.073560][ T30] __x64_sys_openat+0x247/0x2a0 [ 1547.078579][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1547.084204][ T30] ? __secure_computing+0x125/0x370 [ 1547.090404][ T30] do_syscall_64+0xf3/0x230 [ 1547.095192][ T30] ? clear_bhb_loop+0x35/0x90 [ 1547.101227][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.107197][ T30] RIP: 0033:0x7f740457c990 [ 1547.111871][ T30] RSP: 002b:00007f7403ffeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1547.121997][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f740457c990 [ 1547.130336][ T30] RDX: 0000000000000002 RSI: 00007f7403ffec10 RDI: 00000000ffffff9c [ 1547.138581][ T30] RBP: 00007f7403ffec10 R08: 0000000000000000 R09: 00007f7403ffe987 [ 1547.146765][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1547.155481][ T30] R13: 0000000000000000 R14: 00007f7404736130 R15: 00007f740485fa28 [ 1547.164083][ T30] [ 1547.167227][ T30] INFO: task syz.2.4389:27609 blocked for more than 145 seconds. [ 1547.179143][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1547.186841][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.195712][ T30] task:syz.2.4389 state:D stack:23072 pid:27609 tgid:27608 ppid:27195 flags:0x00024004 [ 1547.206678][ T30] Call Trace: [ 1547.210804][ T30] [ 1547.214406][ T30] __schedule+0x1895/0x4b30 [ 1547.219372][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.225148][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.230622][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1547.236752][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1547.254898][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1547.264369][ T30] ? schedule+0x90/0x320 [ 1547.269050][ T30] schedule+0x14b/0x320 [ 1547.273319][ T30] ? down_read+0x6a5/0xa40 [ 1547.278101][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.283622][ T30] down_read+0x705/0xa40 [ 1547.288112][ T30] ? __pfx_down_read+0x10/0x10 [ 1547.293039][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.298207][ T30] usb_open+0x30/0x1d0 [ 1547.302314][ T30] chrdev_open+0x521/0x600 [ 1547.306762][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 1547.313492][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.319369][ T30] ? security_file_open+0x513/0x990 [ 1547.325263][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.330352][ T30] do_dentry_open+0x978/0x1460 [ 1547.335433][ T30] vfs_open+0x3e/0x330 [ 1547.340170][ T30] path_openat+0x2c84/0x3590 [ 1547.344850][ T30] ? __pfx_path_openat+0x10/0x10 [ 1547.350216][ T30] do_filp_open+0x235/0x490 [ 1547.354777][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1547.360482][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1547.365390][ T30] ? alloc_fd+0x5a1/0x640 [ 1547.369888][ T30] do_sys_openat2+0x13e/0x1d0 [ 1547.374995][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.380575][ T30] __x64_sys_openat+0x247/0x2a0 [ 1547.385638][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1547.391286][ T30] ? do_syscall_64+0x100/0x230 [ 1547.396330][ T30] ? do_syscall_64+0xb6/0x230 [ 1547.401194][ T30] do_syscall_64+0xf3/0x230 [ 1547.405925][ T30] ? clear_bhb_loop+0x35/0x90 [ 1547.410774][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.416914][ T30] RIP: 0033:0x7fa386d7c990 [ 1547.422558][ T30] RSP: 002b:00007fa387aeab70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1547.432846][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa386d7c990 [ 1547.441024][ T30] RDX: 0000000000000002 RSI: 00007fa387aeac10 RDI: 00000000ffffff9c [ 1547.449433][ T30] RBP: 00007fa387aeac10 R08: 0000000000000000 R09: 00007fa387aea987 [ 1547.457620][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1547.465820][ T30] R13: 0000000000000000 R14: 00007fa386f35f80 R15: 00007fa38705fa28 [ 1547.474108][ T30] [ 1547.477250][ T30] INFO: task syz.3.4395:27643 blocked for more than 145 seconds. [ 1547.485417][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1547.493570][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.502769][ T30] task:syz.3.4395 state:D stack:27360 pid:27643 tgid:27635 ppid:26498 flags:0x00000004 [ 1547.513098][ T30] Call Trace: [ 1547.516578][ T30] [ 1547.520196][T30075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.529401][ T30] __schedule+0x1895/0x4b30 [ 1547.534003][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.542973][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.548513][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1547.554646][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1547.561565][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1547.566719][ T30] ? schedule+0x90/0x320 [ 1547.571422][ T30] schedule+0x14b/0x320 [ 1547.575948][ T30] ? down_read+0x6a5/0xa40 [ 1547.582924][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.588774][ T30] down_read+0x705/0xa40 [ 1547.593272][ T30] ? __pfx_down_read+0x10/0x10 [ 1547.598359][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.603739][ T30] usb_open+0x30/0x1d0 [ 1547.608095][ T30] chrdev_open+0x521/0x600 [ 1547.612688][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 1547.618421][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.623578][ T30] ? security_file_open+0x513/0x990 [ 1547.628901][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.634851][ T30] do_dentry_open+0x978/0x1460 [ 1547.640698][ T30] vfs_open+0x3e/0x330 [ 1547.644825][ T30] path_openat+0x2c84/0x3590 [ 1547.650193][ T30] ? __pfx_path_openat+0x10/0x10 [ 1547.655403][ T30] do_filp_open+0x235/0x490 [ 1547.660741][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1547.665849][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1547.670818][ T30] ? alloc_fd+0x5a1/0x640 [ 1547.675328][ T30] do_sys_openat2+0x13e/0x1d0 [ 1547.680151][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.685410][ T30] __x64_sys_openat+0x247/0x2a0 [ 1547.690626][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1547.696050][ T30] ? exc_page_fault+0x590/0x8c0 [ 1547.701079][ T30] ? do_syscall_64+0xb6/0x230 [ 1547.705974][ T30] do_syscall_64+0xf3/0x230 [ 1547.710799][ T30] ? clear_bhb_loop+0x35/0x90 [ 1547.715717][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.721837][ T30] RIP: 0033:0x7f0f73f7c990 [ 1547.726482][ T30] RSP: 002b:00007f0f74ceeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1547.735938][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0f73f7c990 [ 1547.748790][ T30] RDX: 0000000000000002 RSI: 00007f0f74ceec10 RDI: 00000000ffffff9c [ 1547.756866][ T30] RBP: 00007f0f74ceec10 R08: 0000000000000000 R09: 00007f0f74cee987 [ 1547.766281][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1547.774998][ T30] R13: 0000000000000001 R14: 00007f0f74136058 R15: 00007f0f7425fa28 [ 1547.783480][ T30] [ 1547.786660][ T30] INFO: task syz.4.4434:27890 blocked for more than 146 seconds. [ 1547.794830][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1547.802899][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.812058][ T30] task:syz.4.4434 state:D stack:24560 pid:27890 tgid:27882 ppid:27003 flags:0x00004004 [ 1547.822721][ T30] Call Trace: [ 1547.826025][ T30] [ 1547.829354][ T30] __schedule+0x1895/0x4b30 [ 1547.835387][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.840649][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.845742][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1547.851876][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1547.859200][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1547.864375][ T30] ? schedule+0x90/0x320 [ 1547.869845][ T30] schedule+0x14b/0x320 [ 1547.874053][ T30] ? down_read+0x6a5/0xa40 [ 1547.878860][ T30] schedule_preempt_disabled+0x13/0x30 [ 1547.884567][ T30] down_read+0x705/0xa40 [ 1547.888946][ T30] ? __pfx_down_read+0x10/0x10 [ 1547.893758][ T30] ? __pfx_lock_release+0x10/0x10 [ 1547.898967][ T30] usb_open+0x30/0x1d0 [ 1547.903080][ T30] chrdev_open+0x521/0x600 [ 1547.907525][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.912634][ T30] ? security_file_open+0x513/0x990 [ 1547.918009][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1547.922996][ T30] do_dentry_open+0x978/0x1460 [ 1547.927963][ T30] vfs_open+0x3e/0x330 [ 1547.932081][ T30] path_openat+0x2c84/0x3590 [ 1547.938363][ T30] ? __pfx_path_openat+0x10/0x10 [ 1547.943387][ T30] ? __pfx___schedule+0x10/0x10 [ 1547.948541][ T30] do_filp_open+0x235/0x490 [ 1547.953092][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1547.958351][ T30] ? preempt_schedule_common+0x84/0xd0 [ 1547.963880][ T30] ? _raw_spin_unlock+0x3e/0x50 [ 1547.969682][ T30] ? alloc_fd+0x5a1/0x640 [ 1547.974168][ T30] do_sys_openat2+0x13e/0x1d0 [ 1547.980429][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1547.985770][ T30] __x64_sys_openat+0x247/0x2a0 [ 1547.988432][T29328] Bluetooth: hci10: command tx timeout [ 1547.990862][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1548.007924][ T30] ? __secure_computing+0x125/0x370 [ 1548.013318][ T30] do_syscall_64+0xf3/0x230 [ 1548.018917][ T30] ? clear_bhb_loop+0x35/0x90 [ 1548.023796][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.030339][ T30] RIP: 0033:0x7fba2b57c990 [ 1548.034895][ T30] RSP: 002b:00007fba2c3f1b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1548.046095][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fba2b57c990 [ 1548.054621][ T30] RDX: 0000000000000002 RSI: 00007fba2c3f1c10 RDI: 00000000ffffff9c [ 1548.063780][ T30] RBP: 00007fba2c3f1c10 R08: 0000000000000000 R09: 00007fba2c3f1987 [ 1548.072296][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1548.081554][ T30] R13: 0000000000000000 R14: 00007fba2b736130 R15: 00007fba2b85fa28 [ 1548.089943][ T30] [ 1548.096936][ T30] [ 1548.096936][ T30] Showing all locks held in the system: [ 1548.113720][ T30] 6 locks held by kworker/0:0/8: [ 1548.126016][ T30] #0: ffff88801e2b4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.138074][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.151262][ T30] #2: ffff888028311190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1548.160440][ T30] #3: ffff888021b50190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.169843][ T30] #4: ffff88806a3e4160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.179279][ T30] #5: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 1548.189863][ T30] 3 locks held by kworker/u8:1/12: [ 1548.195021][ T30] #0: ffff88802dbcc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.207417][ T30] #1: ffffc90000117d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.223928][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 1548.234080][ T30] 6 locks held by kworker/1:0/25: [ 1548.245198][ T30] #0: ffff88801e2b4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.256754][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.269080][ T30] #2: ffff888144f31190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1548.278426][ T30] #3: ffff88806c536190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.288673][ T30] #4: ffff88806a361160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.298898][ T30] #5: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 1548.309524][ T30] 1 lock held by khungtaskd/30: [ 1548.314423][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1548.324649][ T30] 3 locks held by kworker/u8:2/35: [ 1548.330113][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.342180][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.354718][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1548.364133][ T30] 2 locks held by kworker/u8:3/52: [ 1548.369571][ T30] 3 locks held by kworker/u8:4/63: [ 1548.374716][ T30] #0: ffff888022eec948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.386144][ T30] #1: ffffc900015e7d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.400707][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 1548.412461][ T30] 2 locks held by syslogd/4667: [ 1548.417352][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1548.428275][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 1548.439874][ T30] 2 locks held by dhcpcd/4898: [ 1548.444665][ T30] #0: ffffffff8fd37e30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 1548.453822][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 1548.463414][ T30] 2 locks held by getty/4989: [ 1548.468291][ T30] #0: ffff88802e2be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1548.478268][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1548.488697][ T30] 6 locks held by kworker/1:5/5289: [ 1548.493936][ T30] #0: ffff88801e2b4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.505642][ T30] #1: ffffc900042d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.517651][ T30] #2: ffff888028329190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1548.527627][ T30] #3: ffff8881442b8190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.537334][ T30] #4: ffff888143aea160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1548.547358][ T30] #5: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 1548.558907][ T30] 4 locks held by kworker/u8:9/9832: [ 1548.564238][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.575570][ T30] #1: ffffc90005257d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.586372][ T30] #2: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1548.595920][ T30] #3: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 1548.605470][ T30] 4 locks held by kworker/0:1/12049: [ 1548.610973][ T30] #0: ffff88801e2b4948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.622501][ T30] #1: ffffc90003987d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.635225][ T30] #2: ffff888028289190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1548.648452][ T30] #3: ffff88802828c510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 1548.667898][ T30] 2 locks held by kworker/u8:0/16345: [ 1548.673342][ T30] #0: ffff8881452b4148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1548.684924][ T30] #1: ffffc90003c37d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1548.697434][ T30] 4 locks held by udevd/24938: [ 1548.702874][ T30] #0: ffff888045fd08b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 1548.712102][ T30] #1: ffff888064ce1488 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 1548.721844][ T30] #2: ffff8880276594b8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1548.731655][ T30] #3: ffff888021b50190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 1548.742247][ T30] 1 lock held by syz.1.4365/27456: [ 1548.747401][ T30] #0: ffffffff8f633a88 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 1548.758905][ T30] 2 locks held by syz.0.4387/27603: [ 1548.764152][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.773311][ T30] #1: ffffffff8f633a88 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 1548.787144][ T30] 1 lock held by syz.2.4389/27609: [ 1548.797777][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.806755][ T30] 1 lock held by syz.3.4395/27643: [ 1548.812385][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.821856][ T30] 1 lock held by syz.4.4434/27890: [ 1548.827048][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.836386][ T30] 1 lock held by syz.0.4458/28101: [ 1548.841602][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.851860][ T30] 1 lock held by syz.4.4542/28540: [ 1548.857286][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.870920][ T30] 1 lock held by syz.1.4694/29481: [ 1548.876101][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.885088][ T30] 1 lock held by syz.3.4670/29758: [ 1548.890303][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.899244][ T30] 1 lock held by syz.0.4743/29900: [ 1548.904388][ T30] #0: ffffffff8f5abd10 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1548.913437][ T30] 1 lock held by syz-executor/30075: [ 1548.918853][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1548.928444][ T30] 2 locks held by syz-executor/30171: [ 1548.933939][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 1548.944070][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1548.955456][ T30] [ 1548.961804][ T30] ============================================= [ 1548.961804][ T30] [ 1548.972065][T30171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.980302][ T30] NMI backtrace for cpu 1 [ 1548.984674][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1548.995203][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1549.005289][ T30] Call Trace: [ 1549.008597][ T30] [ 1549.011550][ T30] dump_stack_lvl+0x241/0x360 [ 1549.016246][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.018799][T30171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.021605][ T30] ? __pfx__printk+0x10/0x10 [ 1549.030651][T30171] bridge_slave_0: entered allmulticast mode [ 1549.033287][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1549.044143][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1549.044270][T30171] bridge_slave_0: entered promiscuous mode [ 1549.049631][ T30] ? _printk+0xd5/0x120 [ 1549.049657][ T30] ? __pfx__printk+0x10/0x10 [ 1549.049678][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1549.049701][ T30] ? __pfx__printk+0x10/0x10 [ 1549.049725][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1549.049750][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1549.049774][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1549.090942][ T30] watchdog+0xff4/0x1040 [ 1549.095198][ T30] ? watchdog+0x1ea/0x1040 [ 1549.099621][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.104294][ T30] kthread+0x2f0/0x390 [ 1549.108360][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.113068][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.117671][ T30] ret_from_fork+0x4b/0x80 [ 1549.122107][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.126701][ T30] ret_from_fork_asm+0x1a/0x30 [ 1549.133898][ T30] [ 1549.138534][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1549.143805][ C0] NMI backtrace for cpu 0 [ 1549.143819][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1549.143839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1549.143851][ C0] Workqueue: bat_events batadv_nc_worker [ 1549.143877][ C0] RIP: 0010:lock_release+0x2a7/0xa30 [ 1549.143899][ C0] Code: 74 24 18 e8 eb 2d 55 0a 89 5c 24 44 89 da 85 c0 0f 84 f0 01 00 00 4d 85 f6 0f 84 1b 03 00 00 49 8d 5e 24 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 2a 05 00 00 83 3b 00 0f 85 2d 04 00 00 [ 1549.143913][ C0] RSP: 0018:ffffc90000bd7a20 EFLAGS: 00000803 [ 1549.143927][ C0] RAX: 1ffff110045d052a RBX: ffff888022e82954 RCX: ffffc90000bd7a03 [ 1549.143940][ C0] RDX: 0000000000000002 RSI: ffffffff8e937de0 RDI: ffff888022e82930 [ 1549.143952][ C0] RBP: ffffc90000bd7b48 R08: ffffffff901cf2af R09: 1ffffffff2039e55 [ 1549.143966][ C0] R10: dffffc0000000000 R11: fffffbfff2039e56 R12: 000000000000000a [ 1549.143978][ C0] R13: 0000000000000002 R14: ffff888022e82930 R15: dffffc0000000000 [ 1549.143990][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1549.144005][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1549.144017][ C0] CR2: 0000558385592000 CR3: 0000000049cfc000 CR4: 00000000003526f0 [ 1549.144033][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: fffffffffffffffd [ 1549.144044][ C0] DR3: 000000000000fd16 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1549.144055][ C0] Call Trace: [ 1549.144062][ C0] [ 1549.144069][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1549.144094][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1549.144114][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1549.144138][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1549.144158][ C0] ? nmi_handle+0x14f/0x5a0 [ 1549.144175][ C0] ? nmi_handle+0x2a/0x5a0 [ 1549.144191][ C0] ? lock_release+0x2a7/0xa30 [ 1549.144210][ C0] ? default_do_nmi+0x63/0x160 [ 1549.144228][ C0] ? exc_nmi+0x123/0x1f0 [ 1549.144245][ C0] ? end_repeat_nmi+0xf/0x53 [ 1549.144264][ C0] ? lock_release+0x2a7/0xa30 [ 1549.144303][ C0] ? lock_release+0x2a7/0xa30 [ 1549.144323][ C0] ? lock_release+0x2a7/0xa30 [ 1549.144342][ C0] [ 1549.144348][ C0] [ 1549.144357][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1549.144375][ C0] ? __pfx_lock_release+0x10/0x10 [ 1549.144396][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1549.144419][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1549.144437][ C0] batadv_nc_worker+0x28b/0x610 [ 1549.144456][ C0] ? batadv_nc_worker+0xcb/0x610 [ 1549.144474][ C0] ? process_scheduled_works+0x976/0x1850 [ 1549.144495][ C0] process_scheduled_works+0xa63/0x1850 [ 1549.144523][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1549.144545][ C0] ? assign_work+0x364/0x3d0 [ 1549.144565][ C0] worker_thread+0x870/0xd30 [ 1549.144589][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1549.144610][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1549.144629][ C0] kthread+0x2f0/0x390 [ 1549.144644][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1549.144662][ C0] ? __pfx_kthread+0x10/0x10 [ 1549.144678][ C0] ret_from_fork+0x4b/0x80 [ 1549.144697][ C0] ? __pfx_kthread+0x10/0x10 [ 1549.144713][ C0] ret_from_fork_asm+0x1a/0x30 [ 1549.144737][ C0] [ 1549.478042][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1549.485036][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 1549.495651][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1549.505713][ T30] Call Trace: [ 1549.508992][ T30] [ 1549.511934][ T30] dump_stack_lvl+0x241/0x360 [ 1549.516601][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1549.521787][ T30] ? __pfx__printk+0x10/0x10 [ 1549.526401][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1549.532390][ T30] ? vscnprintf+0x5d/0x90 [ 1549.536706][ T30] panic+0x349/0x880 [ 1549.540618][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1549.546827][ T30] ? __pfx_panic+0x10/0x10 [ 1549.551272][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1549.556663][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1549.562317][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1549.567722][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1549.573907][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1549.580098][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1549.586296][ T30] watchdog+0x1033/0x1040 [ 1549.590667][ T30] ? watchdog+0x1ea/0x1040 [ 1549.595125][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.599822][ T30] kthread+0x2f0/0x390 [ 1549.603908][ T30] ? __pfx_watchdog+0x10/0x10 [ 1549.608598][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.613205][ T30] ret_from_fork+0x4b/0x80 [ 1549.617657][ T30] ? __pfx_kthread+0x10/0x10 [ 1549.622279][ T30] ret_from_fork_asm+0x1a/0x30 [ 1549.627095][ T30] [ 1549.630440][ T30] Kernel Offset: disabled [ 1549.634765][ T30] Rebooting in 86400 seconds..