last executing test programs: 4.868637376s ago: executing program 4 (id=3160): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x7ff, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x9, 0xffffff00, 0x7, 0x5d, 0x10, 0x2}) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) signalfd(r4, &(0x7f0000000000)={[0x4a]}, 0x8) truncate(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0)=0x5) 4.691120248s ago: executing program 4 (id=3162): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2}) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x7fff) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) (async) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) (async) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@l2tp={0xa, 0x0, @private, 0xc0fe}, 0x80, 0x0}, 0x4000040) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x10, &(0x7f0000000240)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x96, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x60, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x2000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async, rerun: 64) accept(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendmmsg$inet6(r2, &(0x7f0000003540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000003e000000830f00000000000024002900000032000008fe80000000000000000000000000002c12d53cd02fff2cec455bae8892c5b44810777750897d0839b0f095becb575ab7f9cf372b9846d8795d9b34b3125fc88b672a44744e32a57ae153782aeec7d3f8f1dfe3704a4b", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x2, 0x4000300) (rerun: 64) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) 3.723921361s ago: executing program 3 (id=3172): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000d40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x400000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffe00, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x20000000000]}) 3.426982842s ago: executing program 3 (id=3177): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100000014000000000000000000002907000000010000000000000018000000000000000000000007"], 0x60}, 0x0) 3.230899203s ago: executing program 3 (id=3180): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, 0x0, 0x6a) splice(r3, 0x0, r6, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r6, 0x407, 0xc) readv(r5, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0xffffff6f}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x4, 0x0) write$binfmt_elf64(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 3.213311347s ago: executing program 1 (id=3181): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, 0x0) chown(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 2.912874148s ago: executing program 1 (id=3184): syz_mount_image$fuse(0x0, 0x0, 0x2806010, 0x0, 0x1, 0x0, &(0x7f0000000240)="512346367bc680462c65aba7458ef25e84f31e66fd683a148f027349d22cf25f397049ae3f1ca1") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0x208e24b) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async, rerun: 32) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1}], 0x1, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x38, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x400000000000077, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.676551172s ago: executing program 1 (id=3185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000880)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d102769ec67e809e68ca18f0241349dc5350269e875840d441bc388", 0x39}], 0x3, 0x0, 0x0, 0x4040}], 0x1, 0x840) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/99, 0x63}, {&(0x7f0000000380)=""/91, 0x5b}], 0x2}, 0x2040) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b010203010901120001000000000904fb0000ab770a00eb7687b426188ea715aa8f9a2e69775c9f3a1aa0eb4e556497b4315513b2ea8204a617e472fcf3884f"], 0x0) 2.450897621s ago: executing program 2 (id=3187): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffe}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000740)={0x0, r5, 0x6, 0x7, 0x80000000}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000091401001000786895770000040001"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) dup3(r7, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r9 = accept$alg(r8, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f00000003c0)=ANY=[], 0x100000530) 2.450667453s ago: executing program 0 (id=3188): r0 = socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000002dc0)=0x1, 0x4) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getlink={0x24, 0x12, 0x221, 0x0, 0x0, {0x7}, [@IFLA_PORT_SELF={0x4}]}, 0x24}}, 0x0) (async, rerun: 32) ppoll(&(0x7f0000000c80)=[{r0}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000340)=@add_del={0x2, 0x0}) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source', &(0x7f0000000000)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x746}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x10) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b00"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x3ff, 0x9, {0xffffffffffffffff}, {}, 0x5}) prlimit64(r7, 0x8, &(0x7f0000000300)={0x5, 0x6}, &(0x7f0000000340)) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x28}}, 0x10) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x3, 0xa0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0xfffc, 0x40}, {0x6, 0x24, 0x1a, 0xefe7, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x640, 0x1, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x9, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0xfd, 0xed}}}}}}}]}}, 0x0) 2.036547977s ago: executing program 0 (id=3192): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x7) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03"], 0x0) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c) 1.88819816s ago: executing program 1 (id=3193): r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) 1.607026585s ago: executing program 1 (id=3194): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000004d000000000000000001"], 0x0) 1.547928105s ago: executing program 2 (id=3195): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, 0x0) chown(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) (fail_nth: 3) 1.500608087s ago: executing program 1 (id=3196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x4, 0x183, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x67, 0x61, 0xb7, 0xff, 0xc12, 0xd735, 0x2519, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x171, 0x1, 0x3, 0x8, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x98, 0x7, 0xff, 0x5d, 0x1, 0xc1, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "dd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x401, 0x40, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x69, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x1, 0xfa, 0x9, 0x1, 0x6}, @obex={0x5, 0x24, 0x15, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x67, 0x1, 0xfc}]}], [{{0x9, 0x5, 0x1, 0xc, 0x40, 0x4, 0xf, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x57, 0x981}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0xd0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0xfeff}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xd3}]}}, {{0x9, 0x5, 0xf4849a088a081741, 0x10, 0x400, 0x9, 0x94, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0x3, 0x6}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x80, 0x0, 0x1, [@generic={0xaa, 0xb, "25ca83978501b2d8d1a348304bf21f1fd76fd19993001924b9ac3aba8485120b7c81fcdf5a5bffb22a3fe23f725c1a02a60fb84305c4f246531d7d3099ab846b1d6fca033fe1da78f892c7a0d1f68be08ade1714bb84eb29ed3f7ae5d56e9f4481102756d7a9ab6e420efe2f4b961c81d2636ab0efb3d6b3fdbc05c0ef539a29da5cab6c49487730101136b22586e489dc14b1080cbd6f535a2b20d45f47e211e5906c203092db54"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x5, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x7, 0xf001}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x60, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xd}]}}]}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x1, 0x0, 0xfc, 0x40, 0x4}, 0xc4, 0x0, 0x6, [{0x86, &(0x7f0000000800)=@string={0x86, 0x3, "fd3a34382bcb87cd8c0738447a37d021bd440907b9addb1d91714b472091ac92b4adfd173547171ce6a24079a93fcf0f75f17443fa009346c417cc145f3cd5c2ef276a687c38b997ebce0008574060d705ce40c518d0514e6af8958c6234233f8fbd4ae39f43a1ba430553f5ae6d944288a709fd68115af5cb86778c22cc24a82b0acd2c"}}, {0x4, &(0x7f00000008c0)=@lang_id={0xfd1f, 0x3, 0x414}}, {0x0, 0x0}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x43f}}, {0x0, 0x0}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c80)=ANY=[@ANYBLOB="ea450b00682e7caf58de"], 0x0, &(0x7f0000000d00)={0x0, 0x8, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x73, "666f8da60998f9c6d79132dd246670db3e5ff309d51b9ef4f24af387710c98cb81f7651402f4f33a8dba6da9b3d9b5eab25a8d5c8d79faeaaa0aa19d4d9bac2eb26cd94642c09dd22d70f981089b1625d31acebb555fbc0a7d7ef6655854723e26c46870bde79a58ce6d57fb65ae3dd7a09940"}, &(0x7f0000000e00)={0x20, 0x3, 0x1, 0xf8}}) syz_emit_ethernet(0x17, &(0x7f0000000000)={@empty, @broadcast, @void, {@generic={0x16, "6b8f11105d770e9d98"}}}, &(0x7f0000000040)={0x0, 0x4, [0x4ca, 0x684, 0xff2, 0x8ca]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)={0x58, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0x81, 0xe0, 0x5, 0xff, 0x0, 0x1ff, 0x5]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x58}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1fffc}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}, @TCA_NETEM_SLOT={0x2c}]}}}]}, 0x8c}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) msgget$private(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0xb, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0xfffd, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) msgrcv(0x0, &(0x7f0000002100)={0x0, ""/100}, 0x6c, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20) r10 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRESDEC=r8]) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.37098356s ago: executing program 4 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000d40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x400000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x20000000000]}) 1.028942275s ago: executing program 0 (id=3198): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="71320c65f00eceba37c681d037e0f457cec21d02d5fcdf4f", @ANYRESDEC=r4, @ANYBLOB="08000300"/18, @ANYRES8, @ANYBLOB="22003300d0000000080211000001080211000000505050505050000004040000000000000600cd0000000000"], 0x48}}, 0x0) io_uring_setup(0x30d0, &(0x7f0000000240)={0x0, 0xb154, 0x1000, 0x4, 0x30}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = epoll_create1(0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000002100)) read$ptp(r7, &(0x7f0000000140)=""/13, 0xd) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)={0x20000001}) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13d, 0x6}}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40087447, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[{0xd600, 0x75, 0x6, 0x10}, {0x775, 0xf, 0xcd, 0x144d}, {0x4, 0x7, 0x7, 0x7}, {0x0, 0xd, 0x9, 0x8}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x369e, &(0x7f0000000140)={0x0, 0x12421, 0x2000, 0xfffffffe}, &(0x7f0000000240), &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r9, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x2, 0xffffffffffffffff}) 999.15694ms ago: executing program 4 (id=3199): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x210480, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) readahead(r1, 0x6, 0x4) (async) listen(r1, 0x9522) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r2, 0x6, r0, 0x1}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000140)={0x7fff, 0xc, [0x400, 0x7, 0x3]}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r0, 0x20, &(0x7f0000000400)={&(0x7f00000002c0)=""/193, 0xc1, 0x0, &(0x7f00000003c0)=""/39, 0x27}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x1a11}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x11, &(0x7f0000000180)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @exit, @ldst={0x0, 0x2, 0x3, 0x5, 0xa, 0x10, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000240)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1b, r0, 0x8, &(0x7f0000000280)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r1, 0x7, &(0x7f00000004c0)=[r5, r0, 0x1, r0, r0, 0x1, r1], &(0x7f0000000500)=[{0x2, 0x3, 0x5, 0x5}, {0x2, 0x4, 0x10, 0x6}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x1, 0x0, 0x2}, {0x1, 0x2, 0x0, 0xb}, {0x5, 0x2, 0xa, 0x1}, {0x3, 0x1, 0x7, 0x1}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000880)={&(0x7f0000000640)=@isdn={0x22, 0x2, 0x7f, 0x9, 0x9}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="cd5b7a4683e4bd4b32fff39b6b5c6eeb86f2905b75db9c6c0840417beea2850249447589cc7c7fd6a4f1239b25e4f301b8659b551b0d14d8c63a67e4337d327c4851ecfb98f2866fc71ed2f602840438d13d9528730bbe5ff07bd4088e718c6fe03d3ff2795a1880e290c69f3d1891a3a62088dc", 0x74}, {&(0x7f0000000740)="a50ab04831def1fbb8ceb1db6550d50697025205cd611ad0ed6bd07a623cad0f2080e82ae693cb075306f8fe806fe3d57e3d9a29f2ef57550257fdc39ce396ff6fdf632466873e5df8ce4b", 0x4b}], 0x2, &(0x7f0000000800)=[{0x50, 0x110, 0xfffffff9, "9c5f57febc84bc3004c1ea6b2baf6d4d9dae94ea5da46332e7cde0c9d9fc7625d2780bf534353b6f68feb56cfca8c5d7adb66a32350b171e94"}], 0x50}, 0x84) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000900)={@remote, @initdev, 0x0}, &(0x7f0000000940)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)=@newtclass={0x13c, 0x28, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x8}, {0x5, 0xffff}, {0x0, 0x9}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}, @c_atm={{0x8}, {0x68, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x23, 0x3, "ccb198f6b113efa4ea7eb5f2d920a5f4f8b5d787d861046f05484f581e6c3a"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x1e}}, @TCA_ATM_HDR={0x2f, 0x3, "1132eef151c3296173ec589bd319ddb168920e0a98df1d6393126e8e1f3aa883dfdc1d6a6686ba2533f2af"}]}}, @c_atm={{0x8}, {0x88, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0xfff1}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0xf}}, @TCA_ATM_HDR={0x1e, 0x3, "6d70ceef16050a168fbcf7d1bfdc4a0da934106e8125e398eb42"}, @TCA_ATM_HDR={0x3c, 0x3, "6453faabb41c0a5df106a000690ad5e55f863e56c3e4d60fc81b56619c6c775addbfa18a126f2fdeda5e01ed0aac1782318d3aab10ed9b04"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xa}}, @TCA_ATM_FD={0x8, 0x1, r1}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x40061) (async) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000c00)={0x15, 0xa7, &(0x7f0000000b40)="54990895a9a46f0763966fca8a481be337222fb52419419d330124eee4486ae513d8faf9ee51ffe2e9f15be8b7a45fc44851f952c27839ebad400b447f8f746a202aa9b809d267df73d02850b0eb345183bac1ed7f8b0685124ee70804e16f20f8851e2b719670fe7756b8642aa0d3b0017035c5fc0a957f53c7a8b10c66f73c62efbc956267576876da51e67dd3bcf8602119b322c8b4576a9b40e1fc7e1ad6f43e9270436319"}) (async) sendto$inet6(r0, &(0x7f0000000c40)="644cbc3a9dc9ff84bea5c10bb6b95400596460a3211228024202261b4629884f4b49cc295c76020d11e84a4416fa850e593d3bf6fb10be750032856009554f20a5a71b9414456c9d2e9d677186fb43937159b19e010930503cae0b964a72ba8abd14ef99413bf4d5c93cee8e3e43cd81d6", 0x71, 0x4001, 0x0, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000cc0), 0x4) (async) sendto$inet6(r0, &(0x7f0000000d00)="81f0ad2189e70ecb62e3d925a247e423606be3a2592b2b987097ef79b9d7a382be8405fe1db2ff3c4306bd3e16872b5bf9efb9561bb471b8e8dc5d2ef6c3a38da543178aad308bce3b6b3311331042abeb5c4c24108b65237472739837b738f044e18271e297051eebf66dac794c1c714a422328074747fd0ff240caa4a4a2fcd9f0c5497d5463777cfdedb74226a31b8ff04cb2d7ff42d5884b67ac2e1a25c2a064bad9a86e56ee7e168a", 0xab, 0x4000, &(0x7f0000000dc0)={0xa, 0x4e24, 0x3, @local, 0x2}, 0x1c) (async) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000e00)=r3) (async) preadv(r5, &(0x7f0000001fc0)=[{&(0x7f0000000e40)=""/102, 0x66}, {&(0x7f0000000ec0)=""/255, 0xff}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3, 0xfffffff9, 0xfffffe01) (async) r8 = add_key$keyring(&(0x7f0000002100), &(0x7f0000002140)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x1}, &(0x7f0000002080)={0x0, 0x0, @b}, 0x48, r8) (async) ioctl$TCGETA(r1, 0x5405, &(0x7f0000002180)) (async) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000021c0), 0x1, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002200)=r0, 0x4) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002280), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r9, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x50, r10, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7ff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xe}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4080) (async) connect$inet6(r9, &(0x7f00000023c0)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00'}, 0x1c) (async) fcntl$dupfd(r0, 0x0, r1) 678.864933ms ago: executing program 2 (id=3200): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat2(r2, &(0x7f0000000400)='./file0/../file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) io_setup(0x6, &(0x7f0000000180)) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5202) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r8 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r8, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', r10, 0x8000, 0x8, 0x58, 0xfffffc01, {{0x15, 0x4, 0x1, 0x9, 0x54, 0x65, 0x0, 0x9, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x10}, {[@generic={0x94, 0xe, "5a913a6eb31faf5c3a5cc289"}, @timestamp={0x44, 0x4, 0xb2, 0x0, 0x9}, @ssrr={0x89, 0x2b, 0xeb, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) r11 = dup3(r7, r6, 0x0) fchdir(r11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 665.258107ms ago: executing program 4 (id=3201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 651.933803ms ago: executing program 0 (id=3202): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) 518.792613ms ago: executing program 4 (id=3203): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5385, &(0x7f0000000000)) chown(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 476.37598ms ago: executing program 0 (id=3204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x90100, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0185502, &(0x7f0000000340)={0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x80, 0x0, 0x5}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80000100000001]}, 0x56) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000240)) r4 = inotify_init1(0x800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400030000000900020073797a32000000001400078008000640000000510800084000000000050005000a00000005000100060000000900020073797a32000000002956166601ddb885491738e33021accecf801cdc1703e21cc36db801236b2e259c7b2ff4d14f43c41c8716341366341e7dba9131937218da79fcb613a078"], 0x58}}, 0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r3, r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x300, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x0, 0x1001}, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) inotify_rm_watch(r3, r5) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) ioctl$FICLONE(r7, 0x40049409, r7) syz_io_uring_submit(0x0, 0x0, 0x0) 444.404085ms ago: executing program 2 (id=3205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18020100000000000000000000000000180100002020782500000000002020207b1a634200000000bfa100000000000007010000f8ffffffb702000008000000b70300000d0f0000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x4000, 0xd3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 54.787827ms ago: executing program 3 (id=3206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="0500240002fad33ac6fd4baeba0000000a00340002026c0900"/36], 0x38}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000180), 0x6, 0x402) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000001b"]) mmap(&(0x7f00003a1000/0x4000)=nil, 0x4000, 0xb, 0x200000005c831, r5, 0x2000) r7 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x0}, 0x20) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000000)={0x12, {{0x29, 0x0, 0xb000000, @private1}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) modify_ldt$write(0x1, &(0x7f0000000000), 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r11 = getpgid(r10) sched_setscheduler(r11, 0x0, &(0x7f000000d380)) 54.644112ms ago: executing program 2 (id=3207): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000097000000000000000001"], 0x0) 0s ago: executing program 2 (id=3208): syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) io_setup(0x6, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e00", '\x00', "03070500", "f859ad13", ["8bad00", "c2a4a1104ecfc02000000040", '\x00', "00111c071fa000"]}) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x0, 0x300, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) kernel console output (not intermixed with test programs): bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.973428][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.040768][T17723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.045530][T18676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2943'. [ 843.067036][T17723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.196822][T18505] veth0_vlan: entered promiscuous mode [ 843.212097][T18676] pim6reg: entered allmulticast mode [ 843.246459][T18677] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 843.265712][T18677] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 843.307126][T18505] veth1_vlan: entered promiscuous mode [ 843.349347][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.378594][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.498818][T18505] veth0_macvtap: entered promiscuous mode [ 843.537332][T18505] veth1_macvtap: entered promiscuous mode [ 843.628909][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.683011][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.696407][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 843.725338][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.732116][T18685] ebtables: ebtables: counters copy to user failed while replacing table [ 843.754397][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.777462][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.811658][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.836410][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.859832][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.891544][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.917923][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.938619][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 843.961902][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 843.996321][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.018529][T18698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.045256][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.065683][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.090988][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.101132][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.129057][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.146905][T18505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.171858][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.193659][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.211798][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.236293][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.252458][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.263467][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.287943][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.306468][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.338164][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.362071][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.385418][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.407449][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.441677][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.480953][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.511548][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.532984][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.556394][T18505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 844.583373][T18505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.601775][T18698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.679763][T18505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.720971][T18696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.838285][T18696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.973205][T18505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.998615][T18505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.053399][T18505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.124176][T18505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.225519][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.425519][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 845.436163][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 845.445014][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 845.489792][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 845.520417][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 845.543966][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 845.632372][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.889330][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.983027][T18714] FAULT_INJECTION: forcing a failure. [ 845.983027][T18714] name failslab, interval 1, probability 0, space 0, times 0 [ 845.995758][T18714] CPU: 1 UID: 0 PID: 18714 Comm: syz.3.2963 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 846.006544][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 846.017146][T18714] Call Trace: [ 846.020453][T18714] [ 846.023397][T18714] dump_stack_lvl+0x241/0x360 [ 846.028102][T18714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 846.033319][T18714] ? __pfx__printk+0x10/0x10 [ 846.037939][T18714] should_fail_ex+0x3b0/0x4e0 [ 846.042656][T18714] should_failslab+0xac/0x100 [ 846.047366][T18714] ? __alloc_skb+0x1c3/0x440 [ 846.051976][T18714] kmem_cache_alloc_node_noprof+0x71/0x320 [ 846.057822][T18714] __alloc_skb+0x1c3/0x440 [ 846.062247][T18714] ? __local_bh_enable_ip+0x168/0x200 [ 846.067646][T18714] ? lockdep_hardirqs_on+0x99/0x150 [ 846.070262][ T6452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.072850][T18714] ? __pfx___alloc_skb+0x10/0x10 [ 846.085963][T18714] ? tipc_named_withdraw+0x15d/0x6c0 [ 846.091276][T18714] ? _local_bh_enable+0xb0/0xb0 [ 846.096166][T18714] tipc_buf_acquire+0x2b/0xe0 [ 846.100870][T18714] tipc_named_withdraw+0x1a5/0x6c0 [ 846.106011][T18714] tipc_nametbl_withdraw+0xd0/0x290 [ 846.111248][T18714] tipc_sk_bind+0x4ff/0x800 [ 846.115792][T18714] ? __pfx_tipc_sk_bind+0x10/0x10 [ 846.120849][T18714] ? tipc_bind+0x6c/0x250 [ 846.125195][T18714] __sys_bind+0x22d/0x2d0 [ 846.129553][T18714] ? __pfx___sys_bind+0x10/0x10 [ 846.134436][T18714] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 846.140795][T18714] ? do_syscall_64+0x100/0x230 [ 846.145169][ T6452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.145562][T18714] __x64_sys_bind+0x7a/0x90 [ 846.157349][T18714] do_syscall_64+0xf3/0x230 [ 846.161876][T18714] ? clear_bhb_loop+0x35/0x90 [ 846.166581][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.172502][T18714] RIP: 0033:0x7ff75af7dff9 [ 846.176715][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.176919][T18714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.184700][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.204280][T18714] RSP: 002b:00007ff75bd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 846.204308][T18714] RAX: ffffffffffffffda RBX: 00007ff75b135f80 RCX: 00007ff75af7dff9 [ 846.204321][T18714] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 846.204333][T18714] RBP: 00007ff75bd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 846.204348][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.252124][T18714] R13: 0000000000000000 R14: 00007ff75b135f80 R15: 00007ff75b25fa28 [ 846.260135][T18714] [ 846.263182][ C1] vkms_vblank_simulate: vblank timer overrun [ 846.269269][T18714] tipc: Withdrawal distribution failure [ 846.537397][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.997286][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 847.043899][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 847.057733][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 847.068501][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 847.076684][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 847.086960][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 847.223160][T18712] chnl_net:caif_netlink_parms(): no params data found [ 847.236333][T18732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.322999][T18732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.338860][ T11] bridge_slave_1: left allmulticast mode [ 847.355299][ T11] bridge_slave_1: left promiscuous mode [ 847.390450][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.442355][ T11] bridge_slave_0: left allmulticast mode [ 847.458808][ T11] bridge_slave_0: left promiscuous mode [ 847.495183][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.627795][ T5236] Bluetooth: hci7: command tx timeout [ 848.172977][T18756] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 848.506946][T18766] usb usb9: usbfs: process 18766 (syz.2.2977) did not claim interface 9 before use [ 848.720239][T18768] tipc: Withdrawal distribution failure [ 848.829315][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.857536][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.879541][ T11] bond0 (unregistering): Released all slaves [ 849.156264][ T5236] Bluetooth: hci4: command tx timeout [ 849.220970][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.236852][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.278012][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.303457][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.311458][T18712] bridge_slave_0: entered allmulticast mode [ 849.322555][T18712] bridge_slave_0: entered promiscuous mode [ 849.376779][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.390021][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.399147][T18712] bridge_slave_1: entered allmulticast mode [ 849.410248][T18712] bridge_slave_1: entered promiscuous mode [ 849.616169][T18712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.673118][ T11] hsr_slave_0: left promiscuous mode [ 849.691572][ T11] hsr_slave_1: left promiscuous mode [ 849.712898][ T5236] Bluetooth: hci7: command tx timeout [ 849.721667][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.752584][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.786334][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.794269][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.847056][ T11] veth1_macvtap: left promiscuous mode [ 849.852652][ T11] veth0_macvtap: left promiscuous mode [ 849.873184][T18794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.885327][ T11] veth1_vlan: left promiscuous mode [ 849.890703][ T11] veth0_vlan: left promiscuous mode [ 849.928934][T18794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.112625][T18800] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 850.449933][T18814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2986'. [ 850.469895][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2986'. [ 850.494130][T18814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2986'. [ 851.178135][ T11] team0 (unregistering): Port device team_slave_1 removed [ 851.225250][ T5236] Bluetooth: hci4: command tx timeout [ 851.228457][T18827] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 851.284393][ T11] team0 (unregistering): Port device team_slave_0 removed [ 851.786217][ T5236] Bluetooth: hci7: command tx timeout [ 852.152441][T18712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.182937][T18813] netlink: 'syz.3.2985': attribute type 4 has an invalid length. [ 852.246361][T18815] netlink: 'syz.3.2985': attribute type 17 has an invalid length. [ 852.298351][T18821] syzkaller0: entered allmulticast mode [ 852.325908][T18823] syzkaller0: mtu less than device minimum [ 852.423265][T18728] chnl_net:caif_netlink_parms(): no params data found [ 852.601734][T18712] team0: Port device team_slave_0 added [ 852.645669][T18712] team0: Port device team_slave_1 added [ 852.783870][T18712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.815377][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.851301][T18712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.868632][T18712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.878430][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.907356][T18841] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 852.917945][T18712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.117995][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'. [ 853.140721][T18848] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2996'. [ 853.316308][ T5236] Bluetooth: hci4: command tx timeout [ 853.657062][T18712] hsr_slave_0: entered promiscuous mode [ 853.725716][T18712] hsr_slave_1: entered promiscuous mode [ 853.735349][T18712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.742942][T18712] Cannot create hsr debugfs directory [ 853.878925][ T5236] Bluetooth: hci7: command tx timeout [ 853.897042][T18728] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.906480][T18728] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.913749][T18728] bridge_slave_0: entered allmulticast mode [ 853.920909][T18728] bridge_slave_0: entered promiscuous mode [ 854.007854][T18728] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.014996][T18728] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.022867][T18728] bridge_slave_1: entered allmulticast mode [ 854.053921][T18728] bridge_slave_1: entered promiscuous mode [ 854.126660][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 854.142599][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 854.152640][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 854.175694][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 854.197858][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 854.218828][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 854.237653][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.276681][T18728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.288742][T18728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.352280][T18728] team0: Port device team_slave_0 added [ 854.416354][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.449209][T18728] team0: Port device team_slave_1 added [ 854.547721][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.681235][T18728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.695163][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.774985][T18889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.794348][T18728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.808301][T18728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.815575][T18889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.840042][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.869960][T18889] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3005'. [ 854.879594][T18889] openvswitch: netlink: Key type 29 is not supported [ 854.891410][T18728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.999698][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.304511][T18728] hsr_slave_0: entered promiscuous mode [ 855.336408][T18728] hsr_slave_1: entered promiscuous mode [ 855.352059][T18728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 855.378257][T18728] Cannot create hsr debugfs directory [ 855.385420][ T5240] Bluetooth: hci4: command tx timeout [ 855.901348][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.129226][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.266218][ T5240] Bluetooth: hci6: command tx timeout [ 856.296245][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.350819][T18875] chnl_net:caif_netlink_parms(): no params data found [ 856.448567][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.812398][T18712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 856.975358][T18712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 856.988464][T18712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 857.023419][T18712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 857.041892][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 857.104092][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 857.116762][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 857.126752][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 857.134456][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 857.143248][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 857.155537][T18875] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.162852][T18875] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.171347][T18875] bridge_slave_0: entered allmulticast mode [ 857.180087][T18875] bridge_slave_0: entered promiscuous mode [ 857.209596][T18875] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.223911][T18875] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.303758][T18875] bridge_slave_1: entered allmulticast mode [ 857.320439][T18875] bridge_slave_1: entered promiscuous mode [ 857.458608][T18875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.502816][T18875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.645716][T18875] team0: Port device team_slave_0 added [ 857.859368][T18875] team0: Port device team_slave_1 added [ 857.914259][ T11] bridge_slave_1: left allmulticast mode [ 857.941899][ T11] bridge_slave_1: left promiscuous mode [ 857.955733][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.963350][T18928] input: syz1 as /devices/virtual/input/input34 [ 858.010382][ T11] bridge_slave_0: left allmulticast mode [ 858.028689][ T11] bridge_slave_0: left promiscuous mode [ 858.034430][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.066385][ T11] bridge_slave_1: left allmulticast mode [ 858.072079][ T11] bridge_slave_1: left promiscuous mode [ 858.090618][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.130207][ T11] bridge_slave_0: left allmulticast mode [ 858.140420][ T11] bridge_slave_0: left promiscuous mode [ 858.155502][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.347765][ T5240] Bluetooth: hci6: command tx timeout [ 859.306588][ T5236] Bluetooth: hci8: command tx timeout [ 859.904861][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 859.917324][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.929181][ T11] bond0 (unregistering): Released all slaves [ 860.242527][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.256804][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.278121][ T11] bond0 (unregistering): Released all slaves [ 860.397135][T18875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.404178][T18875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.438209][ T5236] Bluetooth: hci6: command tx timeout [ 860.465243][T18875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.493904][T18933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.504650][T18933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.529562][T18875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.545289][T18875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.605590][T18875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.926240][T18875] hsr_slave_0: entered promiscuous mode [ 860.932783][T18875] hsr_slave_1: entered promiscuous mode [ 860.939170][T18875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.955172][T18875] Cannot create hsr debugfs directory [ 861.166349][T18712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.268130][T18924] chnl_net:caif_netlink_parms(): no params data found [ 861.314154][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3014'. [ 861.395927][ T5236] Bluetooth: hci8: command tx timeout [ 861.454252][T18940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.504632][T18940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.521033][T18712] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.686415][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.693552][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.702604][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.709766][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.939782][T18712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.975498][T18712] veth0_vlan: entered promiscuous mode [ 861.987001][T18712] veth1_vlan: entered promiscuous mode [ 862.061980][T18728] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 862.110258][T18712] veth0_macvtap: entered promiscuous mode [ 862.120388][T18712] veth1_macvtap: entered promiscuous mode [ 862.139980][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.150869][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.161064][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.174195][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.195063][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.225822][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.245267][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.265184][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.281848][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.305708][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.327645][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.349343][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.370492][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.390803][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.418179][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.443790][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.464087][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.487152][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.505630][ T5236] Bluetooth: hci6: command tx timeout [ 862.521276][T18712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.584139][ T11] hsr_slave_0: left promiscuous mode [ 862.596640][ T11] hsr_slave_1: left promiscuous mode [ 862.612471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.636229][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.650181][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.670998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.694538][ T11] hsr_slave_0: left promiscuous mode [ 862.710401][ T11] hsr_slave_1: left promiscuous mode [ 862.722609][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.740720][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.757351][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.775089][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.872096][ T11] veth1_macvtap: left promiscuous mode [ 862.887444][ T11] veth0_macvtap: left promiscuous mode [ 862.898858][ T11] veth1_vlan: left promiscuous mode [ 862.913641][ T11] veth0_vlan: left promiscuous mode [ 862.928616][ T11] veth1_macvtap: left promiscuous mode [ 862.944850][ T11] veth0_macvtap: left promiscuous mode [ 862.952957][ T11] veth1_vlan: left promiscuous mode [ 862.965255][ T11] veth0_vlan: left promiscuous mode [ 863.444148][ T11] pim6reg (unregistering): left allmulticast mode [ 863.483067][ T5236] Bluetooth: hci8: command tx timeout [ 864.622511][ T11] team0 (unregistering): Port device team_slave_1 removed [ 864.757315][ T11] team0 (unregistering): Port device team_slave_0 removed [ 865.564042][ T5236] Bluetooth: hci8: command tx timeout [ 867.285082][ T11] team0 (unregistering): Port device team_slave_1 removed [ 867.404553][ T11] team0 (unregistering): Port device team_slave_0 removed [ 868.806451][T18924] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.816462][T18924] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.823715][T18924] bridge_slave_0: entered allmulticast mode [ 868.864584][T18924] bridge_slave_0: entered promiscuous mode [ 868.906053][T18924] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.913174][T18924] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.965379][T18924] bridge_slave_1: entered allmulticast mode [ 868.972410][T18924] bridge_slave_1: entered promiscuous mode [ 869.005467][T18728] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 869.039654][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.059804][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.085798][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.106905][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.125779][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.151781][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.172656][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.195275][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.216753][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.235262][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.255607][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.282486][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.295145][T18712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.320271][T18712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.346278][T18712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.517393][T18728] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 869.552486][T18712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.581839][T18712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.595563][T18712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.604286][T18712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.660289][T18924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.689781][T18924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.720193][T18728] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 869.941645][T18924] team0: Port device team_slave_0 added [ 869.980313][T18924] team0: Port device team_slave_1 added [ 870.337375][T18924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.344379][T18924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.370329][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.433620][T18924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.473005][T18924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.480357][T18924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 870.506245][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.517948][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.524295][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.548765][T18924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.599100][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.645281][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.060405][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.091064][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.207435][T18924] hsr_slave_0: entered promiscuous mode [ 871.273874][T18924] hsr_slave_1: entered promiscuous mode [ 871.294216][T18924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.302159][T18924] Cannot create hsr debugfs directory [ 871.612469][T18728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.635675][T18875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 871.658626][T18875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 871.770729][T18875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 871.837836][T18875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 871.871176][T18728] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.955813][T18983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.978115][T18983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.038506][T18924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.090273][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.097481][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.237424][T18924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.278568][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.285773][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.399347][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 872.411727][T18924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.422613][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 872.431822][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 872.441285][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 872.452529][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 872.465463][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 872.600865][T18924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.839213][ T11] bridge_slave_1: left allmulticast mode [ 872.855750][ T11] bridge_slave_1: left promiscuous mode [ 872.861510][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.895292][ T11] bridge_slave_0: left allmulticast mode [ 872.900996][ T11] bridge_slave_0: left promiscuous mode [ 872.915496][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.199115][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.218490][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.230165][ T11] bond0 (unregistering): Released all slaves [ 874.283097][T18993] netlink: 'syz.0.3017': attribute type 11 has an invalid length. [ 874.545491][ T5240] Bluetooth: hci10: command tx timeout [ 874.655961][T18875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.672681][T18875] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.711941][T18875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 874.722540][T18875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.878394][ T2496] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.885621][ T2496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.926566][ T2496] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.933737][ T2496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.006960][T18924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 875.039646][T18924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 875.140429][T18987] chnl_net:caif_netlink_parms(): no params data found [ 875.158596][T18728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.170281][T18924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 875.191073][T18924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 875.255617][ T11] hsr_slave_0: left promiscuous mode [ 875.290056][ T11] hsr_slave_1: left promiscuous mode [ 875.296769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.315362][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.335928][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.343387][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.392492][ T11] veth1_macvtap: left promiscuous mode [ 875.405343][ T11] veth0_macvtap: left promiscuous mode [ 875.411000][ T11] veth1_vlan: left promiscuous mode [ 875.425309][ T11] veth0_vlan: left promiscuous mode [ 875.559477][T19047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.575743][T19047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.557227][ T11] team0 (unregistering): Port device team_slave_1 removed [ 876.594189][ T5240] Bluetooth: hci10: command tx timeout [ 876.633892][ T11] team0 (unregistering): Port device team_slave_0 removed [ 877.897526][T18875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.058934][T18987] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.071782][T18987] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.111751][T18987] bridge_slave_0: entered allmulticast mode [ 878.136430][T18987] bridge_slave_0: entered promiscuous mode [ 878.169349][T18728] veth0_vlan: entered promiscuous mode [ 878.211888][T18987] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.219442][T18987] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.245725][T18987] bridge_slave_1: entered allmulticast mode [ 878.276400][T18987] bridge_slave_1: entered promiscuous mode [ 878.376679][T18875] veth0_vlan: entered promiscuous mode [ 878.439450][T18987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.470204][T18728] veth1_vlan: entered promiscuous mode [ 878.508476][T18987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.613161][T18875] veth1_vlan: entered promiscuous mode [ 878.653358][T18924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.666447][ T5240] Bluetooth: hci10: command tx timeout [ 878.773111][T18987] team0: Port device team_slave_0 added [ 878.841636][T18728] veth0_macvtap: entered promiscuous mode [ 878.864630][T18875] veth0_macvtap: entered promiscuous mode [ 878.900198][T18875] veth1_macvtap: entered promiscuous mode [ 878.919068][T18987] team0: Port device team_slave_1 added [ 878.991933][T18987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.025246][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.085240][T18987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.137110][T18987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.144097][T18987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.215189][T18987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.236860][T18728] veth1_macvtap: entered promiscuous mode [ 879.278237][T18924] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.306460][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.327676][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.337669][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.348254][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.358728][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.369316][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.385499][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.415385][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.435292][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.455454][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.476248][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.499785][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.523977][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.538808][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.566330][T18875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.707427][T18987] hsr_slave_0: entered promiscuous mode [ 879.714154][T18987] hsr_slave_1: entered promiscuous mode [ 879.731508][T18987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 879.749491][T18987] Cannot create hsr debugfs directory [ 879.772366][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.805679][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.832880][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.855205][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.865067][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.896026][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.915212][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.935228][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.945079][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.975517][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.994951][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.025344][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.045225][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.065718][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.085477][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.115201][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.131313][T18728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.159459][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.166628][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.186462][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.207478][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.253131][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.275797][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.295586][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.318582][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.341317][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.365216][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.375071][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.398246][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.421367][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.445326][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.471437][T18875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.496703][T18875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.525566][T18875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.630843][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.655236][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.675223][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.698448][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.721000][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.745156][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.771100][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.794866][T19097] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 880.802419][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.815649][ T5240] Bluetooth: hci10: command tx timeout [ 880.893328][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.947515][T19097] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 880.991757][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.010928][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.027336][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.055082][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.075238][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.098744][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.119308][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.142995][T18728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.167442][T18728] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.186664][T18728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.210763][T18728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.225310][T18728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.258624][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.265791][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.388184][T18875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.399768][T18875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.579448][T18875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.588305][T18875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.743264][T19109] af_packet: packet_mmap: vma is busy: 1 [ 882.101083][ T2558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.113238][ T2558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.151714][T19117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.202863][T19117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.292840][T18987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.412586][T18924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.450816][T18924] veth0_vlan: entered promiscuous mode [ 882.463003][T18924] veth1_vlan: entered promiscuous mode [ 882.487429][T18924] veth0_macvtap: entered promiscuous mode [ 882.497251][T18924] veth1_macvtap: entered promiscuous mode [ 882.517267][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.525332][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.533791][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.541808][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.871285][T18987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.943062][T19135] program syz.4.2965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 883.474584][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.575374][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.596219][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.785550][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.807436][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.839843][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.860404][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.880694][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.893572][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.918908][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.933446][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.967029][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.978402][T19138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.010971][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.062256][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.090851][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.122657][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.132998][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.143857][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.155934][T18924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.177927][T19138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.294673][T18987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.358879][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.368125][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.385291][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.394948][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.425250][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.448688][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.469670][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.493807][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.514231][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.538619][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.561635][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.584042][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.597818][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.608805][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.621056][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.632109][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.642926][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.653707][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.664184][T18924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.678174][T18924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.689868][T18924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.804050][T18987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.889596][T18924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.917735][T18924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.953609][T18924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.973069][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.973868][T18924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.117791][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.389967][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.399485][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.526962][T18987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.573535][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.584235][T18987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.598453][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.619850][T18987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.668861][T18987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.848045][T19156] fuse: Unknown parameter 'ÿÿÿÿ0x00007ff518689000' [ 886.019974][T19158] ebtables: ebtables: counters copy to user failed while replacing table [ 886.044564][T18987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.109903][T19164] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 886.178814][T18987] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.233830][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.241031][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.285486][T19170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.296058][ T2496] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.303238][ T2496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.338891][T19170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.401352][T18987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.441320][T18987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.509314][T19167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.546197][T19167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.589567][T18987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 886.610085][T19180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.647157][T19178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.656165][T19180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.688277][T19178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.736924][T18987] veth0_vlan: entered promiscuous mode [ 886.761840][T19183] block device autoloading is deprecated and will be removed. [ 886.802895][T19183] syz.1.3038: attempt to access beyond end of device [ 886.802895][T19183] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 886.827854][T18987] veth1_vlan: entered promiscuous mode [ 886.835446][ T51] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 886.910161][T18987] veth0_macvtap: entered promiscuous mode [ 886.919783][T18987] veth1_macvtap: entered promiscuous mode [ 886.937339][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.948553][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.958645][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.969194][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 886.979898][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 886.991391][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.001423][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.012046][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.022047][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.032565][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.042534][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.053051][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.063066][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.073658][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.084275][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.095472][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.105489][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.116103][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.126122][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 887.137222][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.151329][T18987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 887.161699][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.172476][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.182424][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.193757][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.204309][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.214874][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.224778][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.235752][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.245711][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.256326][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.266231][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.276813][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.287559][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.298692][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.309139][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.319684][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.329617][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.340137][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.350075][T18987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 887.360617][T18987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 887.372124][T18987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 887.422555][T18987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.431926][T18987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.442015][T18987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.455300][ T51] usb 5-1: device descriptor read/64, error -71 [ 887.468361][T18987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.633519][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.695263][ T51] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 887.703694][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.830779][ T51] usb 5-1: device descriptor read/64, error -71 [ 887.851040][ T2496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.864861][ T2496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.955698][ T51] usb usb5-port1: attempt power cycle [ 888.151140][T19195] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 888.211383][T19195] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 888.221808][T19195] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 888.234605][T19195] bond1: (slave vcan1): making interface the new active one [ 888.243445][T19195] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 888.392168][T19200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.402321][T19200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.435573][T19200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.457383][T19200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.482236][T19200] ebt_among: src integrity fail: 300 [ 888.715239][ T51] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 888.735628][ T51] usb 5-1: device descriptor read/8, error -71 [ 888.975355][ T51] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 889.015896][ T51] usb 5-1: device descriptor read/8, error -71 [ 889.125608][ T51] usb usb5-port1: unable to enumerate USB device [ 889.232720][T19206] ebtables: ebtables: counters copy to user failed while replacing table [ 889.765190][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 889.765212][ T29] audit: type=1326 audit(1729226356.648:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19224 comm="syz.2.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4bde57dff9 code=0x0 [ 889.861619][T19229] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 889.873143][T19230] netlink: 'syz.2.3050': attribute type 10 has an invalid length. [ 889.920778][T19230] team0: Failed to send options change via netlink (err -105) [ 889.931183][T19230] team0: Port device netdevsim0 added [ 889.946932][T19229] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 889.969903][T19229] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 889.994313][ T80] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 890.496364][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.540250][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.729328][T19252] bridge1: entered promiscuous mode [ 890.755552][T19252] bridge1: entered allmulticast mode [ 891.496895][T19267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.528194][T19267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.529257][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.698820][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.878980][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.989678][ T80] team0: Port device netdevsim0 removed [ 893.007831][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.178066][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 893.190997][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 893.204051][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 893.213697][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 893.236041][ T5236] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 893.245080][ T80] bridge_slave_1: left allmulticast mode [ 893.251472][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 893.304783][ T80] bridge_slave_1: left promiscuous mode [ 893.311568][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.344321][ T80] bridge_slave_0: left allmulticast mode [ 893.350410][ T80] bridge_slave_0: left promiscuous mode [ 893.356359][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.859089][T19285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.902385][T19285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.911393][T12135] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 894.053653][T12135] usb 5-1: device descriptor read/64, error -71 [ 894.315919][T12135] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 894.455287][T12135] usb 5-1: device descriptor read/64, error -71 [ 894.532633][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.566316][T12135] usb usb5-port1: attempt power cycle [ 894.580440][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.612592][ T80] bond0 (unregistering): Released all slaves [ 894.910043][T12135] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 894.969608][T12135] usb 5-1: device descriptor read/8, error -71 [ 895.179327][ T80] hsr_slave_0: left promiscuous mode [ 895.207609][ T80] hsr_slave_1: left promiscuous mode [ 895.216688][T12135] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 895.234813][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.261202][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.275857][T12135] usb 5-1: device descriptor read/8, error -71 [ 895.305955][ T5240] Bluetooth: hci10: command tx timeout [ 895.314877][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.344889][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.405735][T12135] usb usb5-port1: unable to enumerate USB device [ 895.427538][ T80] veth1_macvtap: left promiscuous mode [ 895.445408][ T80] veth0_macvtap: left promiscuous mode [ 895.451249][ T80] veth1_vlan: left promiscuous mode [ 895.488148][ T80] veth0_vlan: left promiscuous mode [ 896.856480][T19307] loop2: detected capacity change from 0 to 7 [ 896.881317][T19307] Dev loop2: unable to read RDB block 7 [ 896.915338][T19307] loop2: unable to read partition table [ 896.921175][T19307] loop2: partition table beyond EOD, truncated [ 896.935411][T19307] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 897.081477][T13975] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 897.091842][T13975] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 897.103442][T13975] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 897.116852][T13975] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 897.126841][T19312] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 897.134264][T13975] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 897.160510][T19312] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 897.168651][T19312] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 897.179769][T19312] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 897.187462][T13975] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 897.194774][T13975] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 897.202700][T19312] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 897.310415][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.381426][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.390995][T19318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.391299][ T5240] Bluetooth: hci10: command tx timeout [ 897.427162][T19318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.506924][T19322] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.3075'. [ 897.545774][T19322] netlink: zone id is out of range [ 897.551085][T19322] netlink: zone id is out of range [ 897.558360][T19322] netlink: zone id is out of range [ 897.573894][T19322] netlink: zone id is out of range [ 897.588497][T19322] netlink: zone id is out of range [ 897.617813][T19322] netlink: zone id is out of range [ 897.644059][T19322] netlink: zone id is out of range [ 897.655451][T19322] netlink: zone id is out of range [ 897.695989][T19322] netlink: zone id is out of range [ 897.766422][T19322] netlink: zone id is out of range [ 897.912274][ T80] team0 (unregistering): Port device team_slave_1 removed [ 898.040657][ T80] team0 (unregistering): Port device team_slave_0 removed [ 899.314341][ T5240] Bluetooth: hci11: command tx timeout [ 899.321181][ T5240] Bluetooth: hci12: command tx timeout [ 899.466817][ T5236] Bluetooth: hci10: command tx timeout [ 900.101668][T19327] netlink: 'syz.1.3077': attribute type 27 has an invalid length. [ 900.349202][T19327] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.356810][T19327] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.583784][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.659892][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.843330][T19327] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.875377][T19327] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.896985][T19327] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.923223][T19327] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.344674][T19276] chnl_net:caif_netlink_parms(): no params data found [ 901.385397][ T5236] Bluetooth: hci12: command tx timeout [ 901.390944][ T5236] Bluetooth: hci11: command tx timeout [ 901.547084][ T5236] Bluetooth: hci10: command tx timeout [ 901.605263][ T9] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 901.756808][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.789373][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.789933][T19276] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.815312][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 901.837879][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.875345][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.921581][T19276] bridge_slave_0: entered allmulticast mode [ 901.955796][T19276] bridge_slave_0: entered promiscuous mode [ 901.978004][T19276] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.005439][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.031332][T19276] bridge_slave_1: entered allmulticast mode [ 902.047864][T19276] bridge_slave_1: entered promiscuous mode [ 902.087277][ T9] usb 5-1: usb_control_msg returned -71 [ 902.092919][ T9] usbtmc 5-1:16.0: can't read capabilities [ 902.273902][T19276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.307917][T19276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.382604][T19313] chnl_net:caif_netlink_parms(): no params data found [ 902.473640][T19314] chnl_net:caif_netlink_parms(): no params data found [ 902.594179][T19276] team0: Port device team_slave_0 added [ 902.668355][T19276] team0: Port device team_slave_1 added [ 902.966948][T19314] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.005264][T19314] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.012607][T19314] bridge_slave_0: entered allmulticast mode [ 903.107923][T19314] bridge_slave_0: entered promiscuous mode [ 903.155779][T19276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.162779][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.242869][T19276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.310974][T19314] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.325331][T19314] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.342903][T19314] bridge_slave_1: entered allmulticast mode [ 903.363064][T19314] bridge_slave_1: entered promiscuous mode [ 903.417580][T19276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.437906][T19276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.465330][ T5236] Bluetooth: hci11: command tx timeout [ 903.472277][ T5236] Bluetooth: hci12: command tx timeout [ 903.504718][T19276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.533054][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.557067][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.583105][T19313] bridge_slave_0: entered allmulticast mode [ 903.607090][T19313] bridge_slave_0: entered promiscuous mode [ 903.630020][T19313] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.647245][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.667683][T19313] bridge_slave_1: entered allmulticast mode [ 903.682857][T19313] bridge_slave_1: entered promiscuous mode [ 903.728329][T19388] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 903.896130][T19401] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 903.899494][T19314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.958352][T19314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.969383][T19403] misc userio: No port type given on /dev/userio [ 904.013562][T19403] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 904.028214][T19313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.089915][T19313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.146187][T19314] team0: Port device team_slave_0 added [ 904.207638][T19276] hsr_slave_0: entered promiscuous mode [ 904.233650][T19276] hsr_slave_1: entered promiscuous mode [ 904.256637][T19276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.280439][T19276] Cannot create hsr debugfs directory [ 904.358576][T19313] team0: Port device team_slave_0 added [ 904.386838][T19314] team0: Port device team_slave_1 added [ 904.413346][T19313] team0: Port device team_slave_1 added [ 904.554342][T19313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.569648][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.615206][T19313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.629497][T19314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.643359][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.683403][T19314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.731597][T19313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.749904][T19313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.792783][T19313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.836758][T19314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.843736][T19314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.899296][T19314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.006967][ T29] audit: type=1326 audit(1729226371.878:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.029951][ T29] audit: type=1326 audit(1729226371.878:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.052557][ T29] audit: type=1326 audit(1729226371.878:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.088040][ T29] audit: type=1326 audit(1729226371.968:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.112684][ T29] audit: type=1326 audit(1729226371.968:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.135346][ T29] audit: type=1326 audit(1729226371.978:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.157897][ T29] audit: type=1326 audit(1729226371.978:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.180467][ T29] audit: type=1326 audit(1729226371.978:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19417 comm="syz.1.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04d677dff9 code=0x7ffc0000 [ 905.227904][T19313] hsr_slave_0: entered promiscuous mode [ 905.240147][T19313] hsr_slave_1: entered promiscuous mode [ 905.271119][T19313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.310065][T19313] Cannot create hsr debugfs directory [ 905.448164][T19314] hsr_slave_0: entered promiscuous mode [ 905.504988][T19314] hsr_slave_1: entered promiscuous mode [ 905.522830][T19314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 905.543090][T19314] Cannot create hsr debugfs directory [ 905.548917][ T5236] Bluetooth: hci12: command tx timeout [ 905.556117][ T5240] Bluetooth: hci11: command tx timeout [ 905.944206][T19433] ebt_limit: overflow, try lower: 570423552/2483027968 [ 906.105088][T19436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 906.846506][T19443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.877159][T19443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.427833][T19313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.508702][T19276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 907.545852][T19276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 907.607879][T19276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 907.708806][T19313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.788752][T19276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 907.939922][T19313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.040894][T19313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.357242][T19276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.494597][T19276] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.550760][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.557963][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.586062][T19313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 908.596733][T19313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 908.623210][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.630434][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.847746][T19313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 908.953277][T19314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.044643][T19313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 909.218466][T19314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.458369][T19314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.617245][T19314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.747577][T19276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.096969][T19276] veth0_vlan: entered promiscuous mode [ 910.122901][T19313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.162950][T19314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 910.184253][T19314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 910.221272][T19314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 910.242491][T19314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 910.265039][T19276] veth1_vlan: entered promiscuous mode [ 910.312893][T19313] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.367581][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.374770][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.418440][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.425666][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.517048][T19276] veth0_macvtap: entered promiscuous mode [ 910.553866][T19276] veth1_macvtap: entered promiscuous mode [ 910.608645][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.620455][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.666189][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.687194][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.707749][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.762937][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.801885][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.824317][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.853058][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.876680][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.898596][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.923313][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.949183][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 910.972989][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.994729][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.018878][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.042557][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.064740][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.089786][T19276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.157643][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.195336][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.244212][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.270475][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.297685][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.309619][T19488] binder: 19487:19488 ioctl c0306201 20000000 returned -14 [ 911.352111][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.372457][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.393673][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.414191][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.436663][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.457714][T19490] binder: 19487:19490 ioctl c028aa03 20000000 returned -22 [ 911.485675][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.501921][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.523277][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.558113][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.579587][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.602900][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.623552][T19276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 911.647473][T19276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.700363][T19276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.759586][T19276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.776859][T19276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.795329][T19276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.815254][T19276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.839391][T19313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.964793][T19314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.091438][T19314] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.268641][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.275846][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.314311][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.321484][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.387496][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.436363][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.480532][T19313] veth0_vlan: entered promiscuous mode [ 912.560457][T19313] veth1_vlan: entered promiscuous mode [ 912.619930][T19314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.673899][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.704554][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.911090][T19313] veth0_macvtap: entered promiscuous mode [ 912.961133][T19313] veth1_macvtap: entered promiscuous mode [ 913.041517][T19314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.655290][ T29] audit: type=1326 audit(1729226380.508:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 913.728311][ T29] audit: type=1326 audit(1729226380.508:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 913.886829][ T29] audit: type=1326 audit(1729226380.518:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 913.968149][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 914.018324][ T29] audit: type=1326 audit(1729226380.538:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.103261][ T29] audit: type=1326 audit(1729226380.538:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.195384][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.235234][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.245630][ T29] audit: type=1326 audit(1729226380.668:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe90bf7c990 code=0x7ffc0000 [ 914.281851][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.305337][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.325581][ T29] audit: type=1326 audit(1729226380.668:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.355235][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.395216][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.425668][ T29] audit: type=1326 audit(1729226380.668:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.458826][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.490053][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.521731][ T29] audit: type=1326 audit(1729226380.678:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.544628][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.582365][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.611618][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.624674][ T29] audit: type=1326 audit(1729226380.678:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19515 comm="syz.4.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x7ffc0000 [ 914.667786][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.693941][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.885328][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.895683][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.910876][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 914.941397][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 914.989044][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.019734][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.061238][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.143005][T19313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.244593][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.315241][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.363561][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.424993][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.478435][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.545831][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.605565][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.627643][T19547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.660749][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.707751][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.766771][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.845256][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.896767][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.957091][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.021277][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.085210][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.136545][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.191194][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.245292][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.325294][T19313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.368823][T19313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.423259][T19313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.617786][T19547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.697265][T19313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.799231][T19313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.808543][T19313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.820606][T19313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.846806][T19545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.882599][T19545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.029317][T19314] veth0_vlan: entered promiscuous mode [ 917.247815][T19314] veth1_vlan: entered promiscuous mode [ 917.407715][T19314] veth0_macvtap: entered promiscuous mode [ 917.525082][T19314] veth1_macvtap: entered promiscuous mode [ 917.555080][ T6450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.596291][ T6450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.669775][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.701056][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.723761][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.746419][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.771175][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.797714][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.816389][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.852760][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.886058][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.932167][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.963390][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.986405][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.011610][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.033590][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.054202][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.078719][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.117981][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.170894][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.209707][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.240732][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.263193][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.294202][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.324687][T19314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.352755][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.371448][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.385899][T19586] netlink: 'syz.2.3120': attribute type 10 has an invalid length. [ 918.650362][T19586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.951816][T19586] team0: Port device bond0 added [ 919.003652][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.070010][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.124826][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.178191][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.188397][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.199180][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.209422][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.220251][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.262134][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.283002][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.306779][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.355288][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.415866][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.449754][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.468105][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.485256][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.505566][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.525268][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.554671][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.575232][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.600419][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.620767][T19314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.645410][T19314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.685817][T19314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.714304][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.790962][T19314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.885364][T19314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.894123][T19314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.933372][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.945402][T19314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.964861][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.072919][T19606] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 920.444704][ T7927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.456596][ T7927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.490424][T19626] hub 9-0:1.0: USB hub found [ 920.537910][ T6450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.546729][ T6450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.609663][T19626] hub 9-0:1.0: 8 ports detected [ 920.809498][T19649] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 920.918273][T19655] warn_alloc: 3 callbacks suppressed [ 920.918294][T19655] syz.2.3133: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 920.918371][T19655] CPU: 0 UID: 0 PID: 19655 Comm: syz.2.3133 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 920.918397][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 920.918411][T19655] Call Trace: [ 920.918419][T19655] [ 920.918429][T19655] dump_stack_lvl+0x241/0x360 [ 920.918462][T19655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.918485][T19655] ? __pfx__printk+0x10/0x10 [ 920.918512][T19655] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 920.918546][T19655] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 920.918574][T19655] warn_alloc+0x278/0x410 [ 920.918597][T19655] ? stack_depot_save_flags+0x29/0x830 [ 920.918626][T19655] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 920.918649][T19655] ? __pfx_warn_alloc+0x10/0x10 [ 920.918671][T19655] ? kasan_save_track+0x3f/0x80 [ 920.918690][T19655] ? __kasan_kmalloc+0x98/0xb0 [ 920.918713][T19655] ? xsk_setsockopt+0x598/0x950 [ 920.918738][T19655] ? do_sock_setsockopt+0x3af/0x720 [ 920.918759][T19655] ? __sys_setsockopt+0x1a2/0x250 [ 920.918779][T19655] ? __x64_sys_setsockopt+0xb5/0xd0 [ 920.918798][T19655] ? do_syscall_64+0xf3/0x230 [ 920.918818][T19655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.918855][T19655] __vmalloc_node_range_noprof+0x126/0x13f0 [ 920.918903][T19655] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 920.918929][T19655] ? __kasan_kmalloc+0x98/0xb0 [ 920.918949][T19655] ? xskq_create+0x54/0x170 [ 920.918980][T19655] vmalloc_user_noprof+0x74/0x80 [ 920.919001][T19655] ? xskq_create+0xb6/0x170 [ 920.919027][T19655] xskq_create+0xb6/0x170 [ 920.919055][T19655] xsk_init_queue+0xa1/0x100 [ 920.919085][T19655] xsk_setsockopt+0x598/0x950 [ 920.919113][T19655] ? __pfx_xsk_setsockopt+0x10/0x10 [ 920.919141][T19655] ? __pfx_aa_sk_perm+0x10/0x10 [ 920.919162][T19655] ? __pfx_lock_acquire+0x10/0x10 [ 920.919192][T19655] ? __fget_files+0x29/0x470 [ 920.919214][T19655] ? aa_sock_opt_perm+0x79/0x120 [ 920.919241][T19655] ? __pfx_xsk_setsockopt+0x10/0x10 [ 920.919266][T19655] do_sock_setsockopt+0x3af/0x720 [ 920.919294][T19655] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 920.919315][T19655] ? __fget_files+0x29/0x470 [ 920.919338][T19655] ? __fget_files+0x3f3/0x470 [ 920.919359][T19655] ? __fget_files+0x29/0x470 [ 920.919391][T19655] __sys_setsockopt+0x1a2/0x250 [ 920.919418][T19655] __x64_sys_setsockopt+0xb5/0xd0 [ 920.919443][T19655] do_syscall_64+0xf3/0x230 [ 920.919465][T19655] ? clear_bhb_loop+0x35/0x90 [ 920.919489][T19655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.919529][T19655] RIP: 0033:0x7f657177dff9 [ 920.919550][T19655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.919570][T19655] RSP: 002b:00007f65711de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 920.919595][T19655] RAX: ffffffffffffffda RBX: 00007f6571936130 RCX: 00007f657177dff9 [ 920.919612][T19655] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 920.919627][T19655] RBP: 00007f65717f0296 R08: 0000000000000020 R09: 0000000000000000 [ 920.919643][T19655] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 920.919658][T19655] R13: 0000000000000000 R14: 00007f6571936130 R15: 00007f6571a5fa28 [ 920.919686][T19655] [ 920.919696][T19655] Mem-Info: [ 920.919708][T19655] active_anon:10516 inactive_anon:0 isolated_anon:0 [ 920.919708][T19655] active_file:14616 inactive_file:3099 isolated_file:0 [ 920.919708][T19655] unevictable:768 dirty:152 writeback:0 [ 920.919708][T19655] slab_reclaimable:8008 slab_unreclaimable:119808 [ 920.919708][T19655] mapped:53911 shmem:1249 pagetables:1057 [ 920.919708][T19655] sec_pagetables:0 bounce:0 [ 920.919708][T19655] kernel_misc_reclaimable:0 [ 920.919708][T19655] free:1271039 free_pcp:1163 free_cma:0 [ 920.919764][T19655] Node 0 active_anon:42064kB inactive_anon:0kB active_file:58444kB inactive_file:12388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:215624kB dirty:608kB writeback:0kB shmem:3460kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12084kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no [ 920.919817][T19655] Node 1 active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 920.919868][T19655] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 920.919928][T19655] lowmem_reserve[]: 0 2465 2466 0 0 [ 920.919979][T19655] Node 0 DMA32 free:1137788kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:42004kB inactive_anon:0kB active_file:58164kB inactive_file:11908kB unevictable:1536kB writepending:608kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:2552kB local_pcp:1828kB free_cma:0kB [ 920.920033][T19655] lowmem_reserve[]: 0 0 0 0 0 [ 920.920076][T19655] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:60kB inactive_anon:0kB active_file:280kB inactive_file:480kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:28kB free_cma:0kB [ 920.920135][T19655] lowmem_reserve[]: 0 0 0 0 0 [ 920.920181][T19655] Node 1 Normal free:3931000kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2052kB local_pcp:2052kB free_cma:0kB [ 920.920243][T19655] lowmem_reserve[]: 0 0 0 0 0 [ 920.920437][T19655] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 920.920601][T19655] Node 0 DMA32: 118*4kB (UME) 346*8kB (ME) 710*16kB (ME) 801*32kB (UME) 328*64kB (ME) 384*128kB (ME) 193*256kB (UME) 84*512kB (ME) 43*1024kB (ME) 13*2048kB (ME) 211*4096kB (M) = 1137704kB [ 920.920814][T19655] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 920.920956][T19655] Node 1 Normal: 158*4kB (UME) 54*8kB (UME) 33*16kB (UME) 152*32kB (UE) 73*64kB (UME) 36*128kB (UME) 16*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 950*4096kB (M) = 3931000kB [ 920.921171][T19655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.921199][T19655] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 920.921216][T19655] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 920.921235][T19655] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 920.921253][T19655] 18967 total pagecache pages [ 920.921263][T19655] 2 pages in swap cache [ 920.921272][T19655] Free swap = 123692kB [ 920.921282][T19655] Total swap = 124996kB [ 920.921293][T19655] 2097051 pages RAM [ 920.921302][T19655] 0 pages HighMem/MovableOnly [ 920.921311][T19655] 427076 pages reserved [ 920.921321][T19655] 0 pages cma reserved [ 921.000729][T19657] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 921.101501][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 921.101521][ T29] audit: type=1800 audit(1729226387.988:1805): pid=19661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3136" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 922.292887][T19696] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 922.640138][ T29] audit: type=1326 audit(1729226389.528:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19707 comm="syz.4.3151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe90bf7dff9 code=0x0 [ 923.116263][T19719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3154'. [ 923.135559][T19720] FAULT_INJECTION: forcing a failure. [ 923.135559][T19720] name failslab, interval 1, probability 0, space 0, times 0 [ 923.154426][T19720] CPU: 1 UID: 0 PID: 19720 Comm: syz.2.3155 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 923.165248][T19720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 923.175429][T19720] Call Trace: [ 923.178726][T19720] [ 923.181670][T19720] dump_stack_lvl+0x241/0x360 [ 923.186375][T19720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.191685][T19720] ? __pfx__printk+0x10/0x10 [ 923.196297][T19720] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 923.201875][T19720] ? __pfx___might_resched+0x10/0x10 [ 923.207184][T19720] should_fail_ex+0x3b0/0x4e0 [ 923.211874][T19720] ? getname_flags+0xb7/0x540 [ 923.216550][T19720] should_failslab+0xac/0x100 [ 923.221227][T19720] ? getname_flags+0xb7/0x540 [ 923.225911][T19720] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 923.231323][T19720] getname_flags+0xb7/0x540 [ 923.235825][T19720] ? __fget_files+0x3f3/0x470 [ 923.240500][T19720] user_path_at+0x24/0x60 [ 923.244830][T19720] do_faccessat+0x5e2/0xb80 [ 923.249338][T19720] ? __pfx_do_faccessat+0x10/0x10 [ 923.254368][T19720] do_syscall_64+0xf3/0x230 [ 923.258871][T19720] ? clear_bhb_loop+0x35/0x90 [ 923.263553][T19720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.269452][T19720] RIP: 0033:0x7f657177dff9 [ 923.273863][T19720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.293466][T19720] RSP: 002b:00007f657249a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 923.301881][T19720] RAX: ffffffffffffffda RBX: 00007f6571935f80 RCX: 00007f657177dff9 [ 923.309851][T19720] RDX: 0000000000000002 RSI: 0000000020000280 RDI: ffffffffffffff9c [ 923.317820][T19720] RBP: 00007f657249a090 R08: 0000000000000000 R09: 0000000000000000 [ 923.325791][T19720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.333767][T19720] R13: 0000000000000000 R14: 00007f6571935f80 R15: 00007f6571a5fa28 [ 923.341758][T19720] [ 923.354398][T19721] program syz.3.3154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.707152][T19727] loop2: detected capacity change from 0 to 7 [ 923.756199][T19727] Dev loop2: unable to read RDB block 7 [ 923.761848][T19727] loop2: unable to read partition table [ 923.792520][T19727] loop2: partition table beyond EOD, truncated [ 923.801896][T19732] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 923.831866][T19727] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 923.909394][ T4685] Dev loop2: unable to read RDB block 7 [ 923.917923][ T4685] loop2: unable to read partition table [ 923.944132][ T4685] loop2: partition table beyond EOD, truncated [ 924.071957][T19741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.116825][T19741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.212524][ T4685] Dev loop2: unable to read RDB block 7 [ 924.235880][ T4685] loop2: unable to read partition table [ 924.249366][ T4685] loop2: partition table beyond EOD, truncated [ 924.474200][T19751] overlayfs: missing 'lowerdir' [ 924.561101][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3167'. [ 924.575755][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3167'. [ 924.598168][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'. [ 924.873110][T19761] net_ratelimit: 674 callbacks suppressed [ 924.873133][T19761] ebtables: ebtables: counters copy to user failed while replacing table [ 925.030257][T19775] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.037538][T19775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.092979][T19773] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 925.344762][T19785] ip6gretap0: entered promiscuous mode [ 925.365806][T19785] bridge0: entered promiscuous mode [ 925.742521][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.760489][T19800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.784981][T19800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.798522][T19800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.818076][T19780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3175'. [ 925.882033][T19780] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 925.896202][T19780] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 926.059852][T19810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.113782][T19810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.137657][T19812] ebt_limit: overflow, try lower: 570423552/2483027968 [ 926.219745][T19817] kAFS: unable to lookup cell '' [ 926.308018][T19814] netlink: 'syz.2.3187': attribute type 1 has an invalid length. [ 926.519281][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3189'. [ 926.579257][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.670339][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.681440][T19829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.729696][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.779114][T19829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.890753][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.954424][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.025740][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.259310][T19841] FAULT_INJECTION: forcing a failure. [ 927.259310][T19841] name failslab, interval 1, probability 0, space 0, times 0 [ 927.297504][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.2.3195 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 927.308327][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 927.318410][T19841] Call Trace: [ 927.321722][T19841] [ 927.324661][T19841] dump_stack_lvl+0x241/0x360 [ 927.329340][T19841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.334544][T19841] ? __pfx__printk+0x10/0x10 [ 927.339152][T19841] ? fs_reclaim_acquire+0x93/0x130 [ 927.344251][T19841] ? __pfx___might_resched+0x10/0x10 [ 927.349534][T19841] should_fail_ex+0x3b0/0x4e0 [ 927.354298][T19841] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 927.360013][T19841] should_failslab+0xac/0x100 [ 927.364727][T19841] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 927.370457][T19841] __kmalloc_noprof+0xd8/0x400 [ 927.375239][T19841] tomoyo_realpath_from_path+0xcf/0x5e0 [ 927.380808][T19841] tomoyo_path_number_perm+0x23a/0x880 [ 927.386273][T19841] ? tomoyo_path_number_perm+0x208/0x880 [ 927.391913][T19841] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 927.397909][T19841] ? __pfx_from_kuid+0x10/0x10 [ 927.402666][T19841] ? down_write+0x18c/0x220 [ 927.407171][T19841] tomoyo_path_chown+0x42/0xb0 [ 927.411931][T19841] security_path_chown+0x140/0x370 [ 927.417069][T19841] chown_common+0x4b3/0x850 [ 927.421594][T19841] ? __pfx_chown_common+0x10/0x10 [ 927.426645][T19841] ? rcu_read_lock_any_held+0xb7/0x160 [ 927.432113][T19841] ? mnt_get_write_access+0x226/0x2b0 [ 927.437487][T19841] do_fchownat+0x16a/0x240 [ 927.441896][T19841] ? __pfx_do_fchownat+0x10/0x10 [ 927.446836][T19841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 927.453180][T19841] ? do_syscall_64+0x100/0x230 [ 927.457962][T19841] __x64_sys_chown+0x82/0x90 [ 927.462746][T19841] do_syscall_64+0xf3/0x230 [ 927.467268][T19841] ? clear_bhb_loop+0x35/0x90 [ 927.471948][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.477871][T19841] RIP: 0033:0x7f657177dff9 [ 927.482281][T19841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.501893][T19841] RSP: 002b:00007f65711f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 927.510320][T19841] RAX: ffffffffffffffda RBX: 00007f6571936058 RCX: 00007f657177dff9 [ 927.518298][T19841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000440 [ 927.526283][T19841] RBP: 00007f65711f7090 R08: 0000000000000000 R09: 0000000000000000 [ 927.534270][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.542249][T19841] R13: 0000000000000000 R14: 00007f6571936058 R15: 00007f6571a5fa28 [ 927.550234][T19841] [ 927.563651][T19841] ERROR: Out of memory at tomoyo_realpath_from_path. [ 927.577106][T19843] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 927.638963][T19827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.752307][T19837] netlink: 'syz.1.3196': attribute type 14 has an invalid length. [ 927.764913][ T29] audit: type=1326 audit(1729226394.648:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19844 comm="syz.0.3198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62d417dff9 code=0x0 [ 927.833617][T19827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.224892][T19866] usb usb8: usbfs: process 19866 (syz.0.3204) did not claim interface 0 before use [ 928.246751][T19866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.426465][T19866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.610646][T19873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3206'. [ 928.656483][T19873] program syz.3.3206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 928.747951][ T30] INFO: task kworker/1:4:5281 blocked for more than 143 seconds. [ 928.759343][ T30] Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 928.770624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 928.785292][T19873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.805064][ T30] task:kworker/1:4 state:D stack:18416 pid:5281 tgid:5281 ppid:2 flags:0x00004000 [ 928.862534][ T30] Workqueue: usb_hub_wq hub_event [ 928.868955][ T30] Call Trace: [ 928.874292][ T30] [ 928.882260][ T30] __schedule+0x1895/0x4b30 [ 928.889240][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 928.894336][ T30] ? schedule+0x90/0x320 [ 928.898998][ T30] ? __pfx___schedule+0x10/0x10 [ 928.904324][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 928.910831][ T30] ? __pfx_lock_release+0x10/0x10 [ 928.916248][ T30] ? kick_pool+0x45c/0x620 [ 928.920787][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 928.926593][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 928.931907][ T30] ? schedule+0x90/0x320 [ 928.936739][ T30] schedule+0x14b/0x320 [ 928.941097][ T30] schedule_preempt_disabled+0x13/0x30 [ 928.947171][ T30] __mutex_lock+0x6a7/0xd70 [ 928.952149][ T30] ? __mutex_lock+0x52a/0xd70 [ 928.960914][ T30] ? hub_event+0x7d5/0x5150 [ 928.965900][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 928.971093][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 928.976846][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 928.982219][ T30] ? pm_runtime_barrier+0x152/0x1d0 [ 928.988565][ T30] hub_event+0x7d5/0x5150 [ 928.993075][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 928.999244][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 929.005065][ T30] ? __pfx_hub_event+0x10/0x10 [ 929.010369][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 929.035485][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 929.047481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 929.054033][ T30] ? process_scheduled_works+0x976/0x1850 [ 929.063812][ T30] process_scheduled_works+0xa63/0x1850 [ 929.070083][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 929.076553][ T30] ? assign_work+0x364/0x3d0 [ 929.081344][ T30] worker_thread+0x870/0xd30 [ 929.086516][ T30] ? __kthread_parkme+0x169/0x1d0 [ 929.091737][ T30] ? __pfx_worker_thread+0x10/0x10 [ 929.097910][ T30] kthread+0x2f0/0x390 [ 929.102153][ T30] ? __pfx_worker_thread+0x10/0x10 [ 929.107863][ T30] ? __pfx_kthread+0x10/0x10 [ 929.112622][ T30] ret_from_fork+0x4b/0x80 [ 929.117761][ T30] ? __pfx_kthread+0x10/0x10 [ 929.122464][ T30] ret_from_fork_asm+0x1a/0x30 [ 929.127878][ T30] [ 929.133188][T19873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.143311][ T30] INFO: task syz.3.2823:17848 blocked for more than 143 seconds. [ 929.159690][ T30] Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 929.189555][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 929.205240][ T30] task:syz.3.2823 state:D stack:25792 pid:17848 tgid:17848 ppid:17521 flags:0x00000004 [ 929.226174][ T30] Call Trace: [ 929.235374][ T30] [ 929.238593][ T30] __schedule+0x1895/0x4b30 [ 929.243162][ T30] ? __pfx___schedule+0x10/0x10 [ 929.255188][ T30] ? __pfx_lock_release+0x10/0x10 [ 929.260284][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 929.268499][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 929.274885][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 929.280880][ T30] ? schedule+0x90/0x320 [ 929.285205][ T30] schedule+0x14b/0x320 [ 929.289395][ T30] rpm_resume+0x504/0x1670 [ 929.293847][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 929.299583][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 929.304480][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 929.311416][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 929.317150][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 929.322396][ T30] rpm_resume+0x8fe/0x1670 [ 929.327392][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 929.332287][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 929.338275][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 929.344224][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 929.351897][ T30] __pm_runtime_resume+0x120/0x180 [ 929.365382][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 929.372602][ T30] usb_autopm_get_interface+0x22/0xf0 [ 929.378869][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 929.384289][ T30] wdm_manage_power+0x1c/0xa0 [ 929.390285][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 929.395991][ T30] wdm_release+0x20f/0x460 [ 929.400450][ T30] ? __pfx_wdm_release+0x10/0x10 [ 929.405910][ T30] __fput+0x23f/0x880 [ 929.409943][ T30] task_work_run+0x24f/0x310 [ 929.414563][ T30] ? __pfx_task_work_run+0x10/0x10 [ 929.424660][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 929.435234][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 929.441086][ T30] do_syscall_64+0x100/0x230 [ 929.457085][ T30] ? clear_bhb_loop+0x35/0x90 [ 929.461823][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.471884][ T30] RIP: 0033:0x7fa46bb7dff9 [ 929.476710][ T30] RSP: 002b:00007fa46be5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 929.485489][ T30] RAX: 0000000000000000 RBX: 00007fa46bd37a80 RCX: 00007fa46bb7dff9 [ 929.493496][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 929.501976][ T30] RBP: 00007fa46bd37a80 R08: 0000000000000006 R09: 00007fa46be5fe7f [ 929.510339][ T30] R10: 00000000003ffba0 R11: 0000000000000246 R12: 00000000000bddd2 [ 929.518741][ T30] R13: 00007fa46be5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 929.527084][ T30] [ 929.530257][ T30] [ 929.530257][ T30] Showing all locks held in the system: [ 929.538974][ T30] 6 locks held by kworker/0:1/9: [ 929.544099][ T30] #0: ffff8881412d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 929.556924][ T30] #1: ffffc900000e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 929.570776][ T30] #2: ffff888028963190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 929.583336][ T30] #3: ffff8880538d3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 929.592999][ T30] #4: ffff88801e2d4160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 929.602710][ T30] #5: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 929.612811][ T30] 1 lock held by khungtaskd/30: [ 929.618028][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 929.639734][ T30] 3 locks held by kworker/0:2/938: [ 929.644980][ T30] #0: ffff88801c292148 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 929.665217][ T30] #1: ffffc90003e87d00 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 929.680131][ T30] #2: ffff8881447d6510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 929.690863][ T30] 1 lock held by klogd/4674: [ 929.695613][ T30] 2 locks held by getty/4988: [ 929.700347][ T30] #0: ffff888032bfa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 929.711149][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 929.721602][ T30] 3 locks held by kworker/1:3/5278: [ 929.727049][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 929.738290][ T30] #1: ffffc90003fe7d00 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 929.749793][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 929.769609][ T30] 4 locks held by kworker/1:4/5281: [ 929.784224][ T30] #0: ffff8881412d3548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 929.813322][ T30] #1: ffffc90003ea7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 929.839614][ T30] #2: ffff8881447d3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 929.855198][ T30] #3: ffff8881447d6510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x7d5/0x5150 [ 929.868993][ T30] 1 lock held by syz.3.2697/17366: [ 929.880754][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 929.891128][ T30] 1 lock held by syz.3.2823/17848: [ 929.896685][ T30] #0: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 929.905796][ T30] 2 locks held by syz.0.2834/18049: [ 929.911255][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 929.921419][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 929.930395][ T30] 2 locks held by syz.1.2839/18071: [ 929.936083][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 929.945059][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 929.954599][ T30] 2 locks held by syz.2.2917/18353: [ 929.974885][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 929.997450][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 930.015292][ T30] 2 locks held by syz.2.3015/18940: [ 930.024866][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 930.056570][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 930.075330][ T30] 2 locks held by syz.0.3034/19167: [ 930.087997][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 930.107294][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 930.125209][ T30] 2 locks held by syz.3.3036/19184: [ 930.134610][ T30] #0: ffffffff8f5ac830 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 930.157800][ T30] #1: ffffffff8f6345a8 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 930.180334][ T30] 1 lock held by syz.1.3196/19836: [ 930.193369][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 930.215280][ T30] 1 lock held by syz.3.3206/19872: [ 930.220532][ T30] #0: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 930.230930][ T30] [ 930.233370][ T30] ============================================= [ 930.233370][ T30] [ 930.249387][ T30] NMI backtrace for cpu 0 [ 930.253768][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 930.264288][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.274348][ T30] Call Trace: [ 930.277627][ T30] [ 930.280573][ T30] dump_stack_lvl+0x241/0x360 [ 930.285255][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.290450][ T30] ? __pfx__printk+0x10/0x10 [ 930.295042][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 930.299975][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 930.305435][ T30] ? _printk+0xd5/0x120 [ 930.309574][ T30] ? __pfx__printk+0x10/0x10 [ 930.314149][ T30] ? __wake_up_klogd+0xcc/0x110 [ 930.319008][ T30] ? __pfx__printk+0x10/0x10 [ 930.323583][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 930.328609][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 930.334580][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 930.340552][ T30] watchdog+0xff4/0x1040 [ 930.344782][ T30] ? watchdog+0x1ea/0x1040 [ 930.349210][ T30] ? __pfx_watchdog+0x10/0x10 [ 930.353899][ T30] kthread+0x2f0/0x390 [ 930.357955][ T30] ? __pfx_watchdog+0x10/0x10 [ 930.362624][ T30] ? __pfx_kthread+0x10/0x10 [ 930.367201][ T30] ret_from_fork+0x4b/0x80 [ 930.371606][ T30] ? __pfx_kthread+0x10/0x10 [ 930.376183][ T30] ret_from_fork_asm+0x1a/0x30 [ 930.380947][ T30] [ 930.385775][ T30] Sending NMI from CPU 0 to CPUs 1: [ 930.392276][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 930.405634][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 930.412514][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 930.423043][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 930.433111][ T30] Call Trace: [ 930.436387][ T30] [ 930.439310][ T30] dump_stack_lvl+0x241/0x360 [ 930.444013][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.449214][ T30] ? __pfx__printk+0x10/0x10 [ 930.453810][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 930.459796][ T30] ? vscnprintf+0x5d/0x90 [ 930.464124][ T30] panic+0x349/0x880 [ 930.468018][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 930.474167][ T30] ? __pfx_panic+0x10/0x10 [ 930.478573][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 930.483937][ T30] ? __irq_work_queue_local+0x137/0x410 [ 930.489508][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 930.494884][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 930.501058][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 930.507220][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 930.513394][ T30] watchdog+0x1033/0x1040 [ 930.517728][ T30] ? watchdog+0x1ea/0x1040 [ 930.522151][ T30] ? __pfx_watchdog+0x10/0x10 [ 930.526822][ T30] kthread+0x2f0/0x390 [ 930.530886][ T30] ? __pfx_watchdog+0x10/0x10 [ 930.535567][ T30] ? __pfx_kthread+0x10/0x10 [ 930.540161][ T30] ret_from_fork+0x4b/0x80 [ 930.544571][ T30] ? __pfx_kthread+0x10/0x10 [ 930.549157][ T30] ret_from_fork_asm+0x1a/0x30 [ 930.553931][ T30] [ 930.557217][ T30] Kernel Offset: disabled [ 930.561549][ T30] Rebooting in 86400 seconds..