last executing test programs: 2.66191303s ago: executing program 3 (id=4): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x2c020400) connect$bt_l2cap(r0, 0x0, 0x0) 2.572543099s ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @random="36cc524b06ea"}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bind$x25(r3, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r4, &(0x7f0000000080)='\r', 0x1}]) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000040)={0x20000000}) 2.292865456s ago: executing program 3 (id=7): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x0, 0xffffffba, 0x18, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x0, 0xffff888101827518}}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x2c020400) r2 = socket(0x22, 0x2, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="ef050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = open$dir(&(0x7f0000000400)='./file0\x00', 0x101642, 0x0) openat(r8, &(0x7f00000003c0)='./file0\x00', 0x22880, 0xc8) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r10 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r11 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r10, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, r11, 0x0, 0x1, 0x0, 0x3, 0x3}) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r9, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) epoll_create1(0x80000) connect$bt_l2cap(r1, 0x0, 0x0) 2.082268829s ago: executing program 1 (id=2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, r2, 0x325, 0xfffffffe, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x2700) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = getpid() prlimit64(r5, 0xf, &(0x7f0000000640)={0x1000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x10000, 0x202200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000d00)={{r3}, r8, 0xc, @inherit={0x70, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000000000000050001000000000000000000010000ffffff7f000a719040d99b8d9e0653a77f8f65f300004e00000000000000e8000000000000000900000000000000970eff000000000002000000000000000d000000000000000f00000000000000050000000000000002000000000000000104000000000000"]}, @subvolid=0x6}) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40004) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r9, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb60000000000", 0x86}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000e80)="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", 0x1f8}, {&(0x7f0000000d80)="bd2f6aa36cea0e4bccda9ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84", 0x55}], 0x4}}], 0x2, 0xc0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r9, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x598, 0xf0, 0x1d0, 0x0, 0x0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @loopback, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], [0xff000000, 0xffffffff, 0xffffffff, 0xffff00], 'team_slave_1\x00', 'macsec0\x00', {0xff}, {0xff}, 0x0, 0x4, 0x1, 0x29}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@mcast2, 0x1b, 0xd, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2, 0x0, 0x2d}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x17}, @ipv6=@mcast1, 0x12, 0x28, 0xff}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x3f}, [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x84, 0xff, 0x6}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@multicast1, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x1d, 0x9, 0x1, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4=@broadcast, 0x3e, 0x23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 1.806070308s ago: executing program 4 (id=5): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) unshare(0x2c020400) connect$bt_l2cap(r0, 0x0, 0x0) (fail_nth: 1) 1.669129853s ago: executing program 3 (id=8): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) 1.203195558s ago: executing program 4 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.05761473s ago: executing program 3 (id=10): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) (fail_nth: 1) 33.18685ms ago: executing program 4 (id=11): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x67, @loopback, 0x38}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r3, 0xfe02, 0x5}, 0x8) socket$inet_udp(0x2, 0x2, 0x0) r4 = getpgid(0x0) sched_rr_get_interval(r4, &(0x7f0000000180)) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r8 = eventfd2(0xffffffff, 0x80000) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xfffd, r7, &(0x7f00000001c0)="02", 0x1, 0x0, 0x0, 0x1, r8}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0xff, r6, &(0x7f00000001c0), 0x0, 0x6}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x0, 0x11121, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, @in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3}], 0x38) recvmmsg(r9, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 32.893472ms ago: executing program 3 (id=12): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x4b34, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000200)={0x1, &(0x7f00000003c0)=[{0x80, 0x5}]}) 0s ago: executing program 2 (id=3): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101028d43f73e1036c721e803010902240001000000000904290202b48cbb0009050402100000fa00090582024000000000"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad101028d43f73e1036c721e803010902240001000000000904290202b48cbb0009050402100000fa00090582024000000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0xce, 0x5f, &(0x7f0000000300)="da5e273e12d548dd1e326b84aec591ea334dfcddf2763153635aa0ff773e4bb81232b9a5a774593121f962a29e12c5de9a27056f32193d5f8126f8952d4560e917d088e1daed81d8aa86085ce18cbc004ea273951d4aa97595d30138853f80") (async) syz_usb_ep_write(r0, 0xce, 0x5f, &(0x7f0000000300)="da5e273e12d548dd1e326b84aec591ea334dfcddf2763153635aa0ff773e4bb81232b9a5a774593121f962a29e12c5de9a27056f32193d5f8126f8952d4560e917d088e1daed81d8aa86085ce18cbc004ea273951d4aa97595d30138853f80") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240), 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) syz_open_dev$MSR(&(0x7f00000000c0), 0xfffffffffffffff9, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r5, 0x4004743d, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x119966ec, 0x69cf39a9dadd5612, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) (async) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000000cc0)) r7 = syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7, 0x79, 0x46, 0x8, 0xccd, 0x39, 0x907b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0x2, 0xc3, 0x5d}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="000106000000cc15fc47a9ae6627b8aa07d325f3a76fbcc1be717ac7dce7dad07f3afe3ebf2d6c91b516efe956b1f50f6991c53c0153c2940da32487c1a3c4c7bc2858e017d136e593383857f4eae13ec661e8b99086a87a24f02fd3d39764076e9289be57b050b29c1b74929bee947e07ba200000000000003482d7dbc1bbfcc83902723c029a6fe02e85eae2e664c0c28412cb3034e2ede95bc4b67735f3e2839a7d613016208990b9ae5b"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 80.779364][ T5806] cgroup: Unknown subsys name 'net' [ 80.920356][ T5806] cgroup: Unknown subsys name 'cpuset' [ 80.930348][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.593537][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.296891][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.306611][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.314490][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.324857][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.333259][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.342005][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.350323][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.359629][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.371209][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.396153][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.425904][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.435865][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.444279][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.447332][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.458763][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.466921][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.474025][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.483291][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.483970][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.491737][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.499803][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.505206][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.513732][ T5129] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.521487][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.532930][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.170655][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 86.269990][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 86.418755][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 86.469090][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 86.542396][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.550511][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.558174][ T5819] bridge_slave_0: entered allmulticast mode [ 86.565469][ T5819] bridge_slave_0: entered promiscuous mode [ 86.604830][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.630554][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.637939][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.645978][ T5819] bridge_slave_1: entered allmulticast mode [ 86.653241][ T5819] bridge_slave_1: entered promiscuous mode [ 86.794907][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.802857][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.814335][ T5830] bridge_slave_0: entered allmulticast mode [ 86.823056][ T5830] bridge_slave_0: entered promiscuous mode [ 86.892935][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.939191][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.946759][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.954085][ T5830] bridge_slave_1: entered allmulticast mode [ 86.962515][ T5830] bridge_slave_1: entered promiscuous mode [ 86.970820][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.979170][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.987342][ T5816] bridge_slave_0: entered allmulticast mode [ 86.995147][ T5816] bridge_slave_0: entered promiscuous mode [ 87.007603][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.034188][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.041624][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.049504][ T5820] bridge_slave_0: entered allmulticast mode [ 87.057698][ T5820] bridge_slave_0: entered promiscuous mode [ 87.103789][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.111821][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.119811][ T5816] bridge_slave_1: entered allmulticast mode [ 87.127941][ T5816] bridge_slave_1: entered promiscuous mode [ 87.153842][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.161273][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.168618][ T5820] bridge_slave_1: entered allmulticast mode [ 87.176449][ T5820] bridge_slave_1: entered promiscuous mode [ 87.267908][ T5819] team0: Port device team_slave_0 added [ 87.304852][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.319179][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.331348][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.343025][ T5819] team0: Port device team_slave_1 added [ 87.353107][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.366308][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.378195][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.385384][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.393091][ T5828] bridge_slave_0: entered allmulticast mode [ 87.402388][ T5828] bridge_slave_0: entered promiscuous mode [ 87.436748][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.506903][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.514821][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.523130][ T5828] bridge_slave_1: entered allmulticast mode [ 87.529712][ T5826] Bluetooth: hci0: command tx timeout [ 87.531796][ T5828] bridge_slave_1: entered promiscuous mode [ 87.549096][ T5830] team0: Port device team_slave_0 added [ 87.570127][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.577210][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.603785][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.606570][ T5836] Bluetooth: hci2: command tx timeout [ 87.614668][ T5818] Bluetooth: hci1: command tx timeout [ 87.624542][ T5129] Bluetooth: hci3: command tx timeout [ 87.627114][ T5826] Bluetooth: hci4: command tx timeout [ 87.641601][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.648749][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.675142][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.704474][ T5820] team0: Port device team_slave_0 added [ 87.727598][ T5830] team0: Port device team_slave_1 added [ 87.738636][ T5816] team0: Port device team_slave_0 added [ 87.754067][ T5820] team0: Port device team_slave_1 added [ 87.803952][ T5816] team0: Port device team_slave_1 added [ 87.828794][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.841921][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.848973][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.875237][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.935042][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.945345][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.952540][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.979094][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.003134][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.010200][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.036174][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.049040][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.056136][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.082109][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.093936][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.101361][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.127496][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.140307][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.147774][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.174395][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.259855][ T5828] team0: Port device team_slave_0 added [ 88.288116][ T5819] hsr_slave_0: entered promiscuous mode [ 88.294621][ T5819] hsr_slave_1: entered promiscuous mode [ 88.323684][ T5828] team0: Port device team_slave_1 added [ 88.402872][ T5830] hsr_slave_0: entered promiscuous mode [ 88.412813][ T5830] hsr_slave_1: entered promiscuous mode [ 88.419583][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.427611][ T5830] Cannot create hsr debugfs directory [ 88.470794][ T5820] hsr_slave_0: entered promiscuous mode [ 88.478138][ T5820] hsr_slave_1: entered promiscuous mode [ 88.484434][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.493186][ T5820] Cannot create hsr debugfs directory [ 88.499871][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.507382][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.533883][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.547374][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.554355][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.581145][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.615185][ T5816] hsr_slave_0: entered promiscuous mode [ 88.622227][ T5816] hsr_slave_1: entered promiscuous mode [ 88.629475][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.637233][ T5816] Cannot create hsr debugfs directory [ 88.898187][ T5828] hsr_slave_0: entered promiscuous mode [ 88.904614][ T5828] hsr_slave_1: entered promiscuous mode [ 88.913498][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.921253][ T5828] Cannot create hsr debugfs directory [ 89.290216][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.330517][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.357181][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.372609][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.436680][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.457422][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.494375][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.521326][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.557707][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.578100][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.607666][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.616780][ T5826] Bluetooth: hci0: command tx timeout [ 89.621639][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.686853][ T5826] Bluetooth: hci4: command tx timeout [ 89.687584][ T5836] Bluetooth: hci1: command tx timeout [ 89.692313][ T5826] Bluetooth: hci2: command tx timeout [ 89.698302][ T5129] Bluetooth: hci3: command tx timeout [ 89.800596][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.848660][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.872165][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.891358][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.920582][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.964256][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.002663][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.028645][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.036003][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.058146][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.071944][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.084840][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.113288][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.128862][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.150433][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.157806][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.167990][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.175134][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.194390][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.239742][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.247008][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.299645][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.358307][ T5820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.370132][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.384398][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.391589][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.430213][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.437463][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.561500][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.635276][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.738183][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.745415][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.787473][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.794669][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.941847][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.005517][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.036742][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.055509][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.147770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.154973][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.243769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.251021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.399967][ T5819] veth0_vlan: entered promiscuous mode [ 91.472668][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.575355][ T5819] veth1_vlan: entered promiscuous mode [ 91.641801][ T5828] veth0_vlan: entered promiscuous mode [ 91.685552][ T5828] veth1_vlan: entered promiscuous mode [ 91.691815][ T5129] Bluetooth: hci0: command tx timeout [ 91.725092][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.766388][ T5129] Bluetooth: hci2: command tx timeout [ 91.771866][ T5129] Bluetooth: hci4: command tx timeout [ 91.777793][ T5836] Bluetooth: hci3: command tx timeout [ 91.777815][ T5826] Bluetooth: hci1: command tx timeout [ 91.821888][ T5820] veth0_vlan: entered promiscuous mode [ 91.834576][ T5819] veth0_macvtap: entered promiscuous mode [ 91.861045][ T5820] veth1_vlan: entered promiscuous mode [ 91.894000][ T5828] veth0_macvtap: entered promiscuous mode [ 91.907939][ T5828] veth1_macvtap: entered promiscuous mode [ 91.925501][ T5819] veth1_macvtap: entered promiscuous mode [ 91.936096][ T978] cfg80211: failed to load regulatory.db [ 91.983172][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.024509][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.040232][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.052342][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.065098][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.074925][ T5816] veth0_vlan: entered promiscuous mode [ 92.083037][ T5820] veth0_macvtap: entered promiscuous mode [ 92.095129][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.104563][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113980][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.123209][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.146378][ T5820] veth1_macvtap: entered promiscuous mode [ 92.156198][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.179312][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.190820][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.202596][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.223118][ T5816] veth1_vlan: entered promiscuous mode [ 92.284695][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.294177][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303341][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.312453][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358868][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.370034][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.380456][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.391085][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.402667][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.424170][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.434869][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.448496][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.459423][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.472455][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.486836][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.502662][ T5816] veth0_macvtap: entered promiscuous mode [ 92.509318][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.530842][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540057][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549080][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.558105][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.594452][ T5816] veth1_macvtap: entered promiscuous mode [ 92.632370][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.641601][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.671080][ T5830] veth0_vlan: entered promiscuous mode [ 92.762739][ T5830] veth1_vlan: entered promiscuous mode [ 92.768301][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.800086][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.821613][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.849246][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.862937][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.880030][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.919410][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.944105][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.954952][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.968527][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.028195][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.050441][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.060915][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.071638][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.082000][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.092619][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.103924][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.121759][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.132913][ T5830] veth0_macvtap: entered promiscuous mode [ 93.138918][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.176427][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.185301][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.195142][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.204603][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228660][ T5830] veth1_macvtap: entered promiscuous mode [ 93.245658][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.342746][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.376395][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.486914][ T5916] vlan2: entered promiscuous mode [ 93.540631][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.555460][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.570648][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.582772][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.593137][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.604340][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.615377][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.626431][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.638488][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.652333][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.665807][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.766911][ T5826] Bluetooth: hci0: command tx timeout [ 93.820996][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.847641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.848317][ T5818] Bluetooth: hci3: command tx timeout [ 93.861888][ T5826] Bluetooth: hci4: command tx timeout [ 93.867386][ T5818] Bluetooth: hci2: command tx timeout [ 93.872792][ T5818] Bluetooth: hci1: command tx timeout [ 93.939860][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.996269][ T5922] FAULT_INJECTION: forcing a failure. [ 93.996269][ T5922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.020516][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.035075][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.050012][ T5922] CPU: 0 UID: 0 PID: 5922 Comm: syz.4.5 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 94.050032][ T5922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 94.050046][ T5922] Call Trace: [ 94.050052][ T5922] [ 94.050061][ T5922] dump_stack_lvl+0x189/0x250 [ 94.050092][ T5922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.050112][ T5922] ? __pfx__printk+0x10/0x10 [ 94.050142][ T5922] should_fail_ex+0x414/0x560 [ 94.050169][ T5922] _copy_to_user+0x31/0xb0 [ 94.050190][ T5922] simple_read_from_buffer+0xe1/0x170 [ 94.050214][ T5922] proc_fail_nth_read+0x1df/0x250 [ 94.050231][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.050247][ T5922] ? rw_verify_area+0x258/0x650 [ 94.050264][ T5922] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.050279][ T5922] vfs_read+0x1fd/0x980 [ 94.050303][ T5922] ? __pfx_vfs_read+0x10/0x10 [ 94.050320][ T5922] ? rfcomm_sock_connect+0x8b/0x610 [ 94.050343][ T5922] ? bpf_lsm_socket_connect+0x9/0x20 [ 94.050362][ T5922] ? __sys_connect+0x339/0x440 [ 94.050377][ T5922] ? do_sys_openat2+0x154/0x1c0 [ 94.050392][ T5922] ? __pfx___sys_connect+0x10/0x10 [ 94.050412][ T5922] ksys_read+0x145/0x250 [ 94.050432][ T5922] ? __pfx_ksys_read+0x10/0x10 [ 94.050453][ T5922] ? do_syscall_64+0xba/0x210 [ 94.050473][ T5922] do_syscall_64+0xf6/0x210 [ 94.050491][ T5922] ? clear_bhb_loop+0x45/0xa0 [ 94.050508][ T5922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.050522][ T5922] RIP: 0033:0x7f77be78d37c [ 94.050537][ T5922] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.050549][ T5922] RSP: 002b:00007f77bf5fa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.050564][ T5922] RAX: ffffffffffffffda RBX: 00007f77be9b5fa0 RCX: 00007f77be78d37c [ 94.050574][ T5922] RDX: 000000000000000f RSI: 00007f77bf5fa0a0 RDI: 0000000000000003 [ 94.050583][ T5922] RBP: 00007f77bf5fa090 R08: 0000000000000000 R09: 0000000000000000 [ 94.050591][ T5922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.050599][ T5922] R13: 0000000000000000 R14: 00007f77be9b5fa0 R15: 00007ffe3293b628 [ 94.050626][ T5922] [ 94.065780][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.289267][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.299294][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.309886][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.366110][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.530909][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.545795][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.557950][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.562598][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.566848][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.566955][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.724919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.734786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.827300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.836402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.032186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.041515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.199747][ T5931] FAULT_INJECTION: forcing a failure. [ 95.199747][ T5931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.239119][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.3.10 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 95.239148][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 95.239160][ T5931] Call Trace: [ 95.239167][ T5931] [ 95.239176][ T5931] dump_stack_lvl+0x189/0x250 [ 95.239207][ T5931] ? __lock_acquire+0xaac/0xd20 [ 95.239235][ T5931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.239261][ T5931] ? __pfx__printk+0x10/0x10 [ 95.239292][ T5931] ? __might_fault+0xb0/0x130 [ 95.239333][ T5931] should_fail_ex+0x414/0x560 [ 95.239370][ T5931] _copy_from_user+0x2d/0xb0 [ 95.239397][ T5931] ___sys_sendmsg+0x158/0x2a0 [ 95.239426][ T5931] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.239488][ T5931] ? __fget_files+0x2a/0x420 [ 95.239516][ T5931] ? __fget_files+0x3a0/0x420 [ 95.239556][ T5931] __x64_sys_sendmsg+0x19b/0x260 [ 95.239584][ T5931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.239634][ T5931] ? do_syscall_64+0xba/0x210 [ 95.239661][ T5931] do_syscall_64+0xf6/0x210 [ 95.239685][ T5931] ? clear_bhb_loop+0x45/0xa0 [ 95.239709][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.239727][ T5931] RIP: 0033:0x7efc7998e969 [ 95.239744][ T5931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.239760][ T5931] RSP: 002b:00007efc7a857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.239781][ T5931] RAX: ffffffffffffffda RBX: 00007efc79bb5fa0 RCX: 00007efc7998e969 [ 95.239795][ T5931] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000003 [ 95.239807][ T5931] RBP: 00007efc7a857090 R08: 0000000000000000 R09: 0000000000000000 [ 95.239819][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.239830][ T5931] R13: 0000000000000000 R14: 00007efc79bb5fa0 R15: 00007fffb4acbad8 [ 95.239860][ T5931] [ 95.636518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.675996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.813408][ T5941] sysfs: cannot create duplicate filename '/module/raw_gadget' [ 95.947810][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.2.3 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 95.947840][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 95.947852][ T5941] Call Trace: [ 95.947861][ T5941] [ 95.947869][ T5941] dump_stack_lvl+0x189/0x250 [ 95.947904][ T5941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.947931][ T5941] ? __pfx__printk+0x10/0x10 [ 95.947964][ T5941] ? __rcu_read_unlock+0x84/0xe0 [ 95.947985][ T5941] ? kernfs_path_from_node+0x2b/0x260 [ 95.948006][ T5941] ? kernfs_path_from_node+0x216/0x260 [ 95.948029][ T5941] sysfs_create_dir_ns+0x259/0x280 [ 95.948063][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.948095][ T5941] ? do_raw_spin_unlock+0x122/0x240 [ 95.948122][ T5941] kobject_add_internal+0x59f/0xb40 [ 95.948158][ T5941] kobject_init_and_add+0x125/0x190 [ 95.948190][ T5941] ? __pfx_kobject_init_and_add+0x10/0x10 [ 95.948217][ T5941] ? __kasan_kmalloc+0x93/0xb0 [ 95.948247][ T5941] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 95.948276][ T5941] ? lookup_or_create_module_kobject+0x75/0x170 [ 95.948311][ T5941] lookup_or_create_module_kobject+0xe3/0x170 [ 95.948345][ T5941] module_add_driver+0xb9/0x310 [ 95.948374][ T5941] bus_add_driver+0x391/0x640 [ 95.948413][ T5941] driver_register+0x23a/0x320 [ 95.948443][ T5941] usb_gadget_register_driver_owner+0xf9/0x270 [ 95.948479][ T5941] raw_ioctl+0x149a/0x3c90 [ 95.948520][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 95.948543][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 95.948564][ T5941] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 95.948583][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 95.948604][ T5941] ? __pfx_raw_ioctl+0x10/0x10 [ 95.948647][ T5941] ? rcu_is_watching+0x15/0xb0 [ 95.948678][ T5941] ? __asan_memset+0x22/0x50 [ 95.948702][ T5941] ? smack_file_ioctl+0x24a/0x340 [ 95.948737][ T5941] ? __pfx_smack_file_ioctl+0x10/0x10 [ 95.948786][ T5941] ? bpf_lsm_file_ioctl+0x9/0x20 [ 95.948810][ T5941] ? __pfx_raw_ioctl+0x10/0x10 [ 95.948835][ T5941] __se_sys_ioctl+0xf9/0x170 [ 95.948868][ T5941] do_syscall_64+0xf6/0x210 [ 95.948892][ T5941] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 95.948912][ T5941] ? clear_bhb_loop+0x45/0xa0 [ 95.948936][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.948955][ T5941] RIP: 0033:0x7f3b8d98e56b [ 95.948973][ T5941] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 95.948989][ T5941] RSP: 002b:00007f3b8e85af10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.949010][ T5941] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f3b8d98e56b [ 95.949024][ T5941] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 95.949036][ T5941] RBP: 00007f3b8e85bfe0 R08: 0000000000000000 R09: 00322e6364755f79 [ 95.949049][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.949060][ T5941] R13: 00007f3b8e85afb0 R14: 0000200000000000 R15: 00007f3b8dce0b88 [ 95.949091][ T5941] [ 96.319533][ T5941] kobject: kobject_add_internal failed for raw_gadget with -EEXIST, don't try to register things with the same name in the same directory. [ 96.566685][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.576145][ T5941] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 96.588202][ T5941] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 96.596652][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz.2.3 Not tainted 6.15.0-rc5-syzkaller-00136-g9c69f8884904 #0 PREEMPT(full) [ 96.608652][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 96.618739][ T5941] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 96.624671][ T5941] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 96.644306][ T5941] RSP: 0018:ffffc90004657840 EFLAGS: 00010002 [ 96.650413][ T5941] RAX: dffffc0000000000 RBX: ffffffff8b5177a7 RCX: 3f015366d0b03c00 [ 96.658412][ T5941] RDX: 0000000000000000 RSI: ffffffff8b5177a7 RDI: 0000000000000004 [ 96.666407][ T5941] RBP: ffffffff819b48f8 R08: 0000000000000001 R09: 0000000000000000 [ 96.674409][ T5941] R10: dffffc0000000000 R11: fffffbfff1efb4ef R12: 0000000000000000 [ 96.682581][ T5941] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 96.691102][ T5941] FS: 00007f3b8e85d6c0(0000) GS:ffff888126100000(0000) knlGS:0000000000000000 [ 96.700058][ T5941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.706750][ T5941] CR2: 00007ffd593c2ecf CR3: 000000002924a000 CR4: 00000000003526f0 [ 96.714747][ T5941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.722737][ T5941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.730729][ T5941] Call Trace: [ 96.734030][ T5941] [ 96.736981][ T5941] __kasan_check_byte+0x12/0x40 [ 96.741869][ T5941] lock_acquire+0x8d/0x360 [ 96.746314][ T5941] ? kobj_kset_leave+0x163/0x190 [ 96.751285][ T5941] _raw_spin_lock_irqsave+0xa7/0xf0 [ 96.756510][ T5941] ? complete+0x28/0x1b0 [ 96.760774][ T5941] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 96.766685][ T5941] ? kobject_init_and_add+0x125/0x190 [ 96.772091][ T5941] complete+0x28/0x1b0 [ 96.776208][ T5941] kobject_put+0x228/0x480 [ 96.780655][ T5941] lookup_or_create_module_kobject+0x150/0x170 [ 96.786842][ T5941] module_add_driver+0xb9/0x310 [ 96.791733][ T5941] bus_add_driver+0x391/0x640 [ 96.796448][ T5941] driver_register+0x23a/0x320 [ 96.801255][ T5941] usb_gadget_register_driver_owner+0xf9/0x270 [ 96.807445][ T5941] raw_ioctl+0x149a/0x3c90 [ 96.811896][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 96.817553][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 96.823220][ T5941] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 96.828883][ T5941] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 96.834542][ T5941] ? __pfx_raw_ioctl+0x10/0x10 [ 96.839344][ T5941] ? rcu_is_watching+0x15/0xb0 [ 96.844138][ T5941] ? __asan_memset+0x22/0x50 [ 96.848758][ T5941] ? smack_file_ioctl+0x24a/0x340 [ 96.853820][ T5941] ? __pfx_smack_file_ioctl+0x10/0x10 [ 96.859242][ T5941] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.864223][ T5941] ? __pfx_raw_ioctl+0x10/0x10 [ 96.869022][ T5941] __se_sys_ioctl+0xf9/0x170 [ 96.873645][ T5941] do_syscall_64+0xf6/0x210 [ 96.878192][ T5941] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 96.884116][ T5941] ? clear_bhb_loop+0x45/0xa0 [ 96.888836][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.894821][ T5941] RIP: 0033:0x7f3b8d98e56b [ 96.899269][ T5941] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 96.919247][ T5941] RSP: 002b:00007f3b8e85af10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.927696][ T5941] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f3b8d98e56b [ 96.935690][ T5941] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 96.943688][ T5941] RBP: 00007f3b8e85bfe0 R08: 0000000000000000 R09: 00322e6364755f79 [ 96.951860][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.959854][ T5941] R13: 00007f3b8e85afb0 R14: 0000200000000000 R15: 00007f3b8dce0b88 [ 96.967857][ T5941] [ 96.970919][ T5941] Modules linked in: [ 96.974849][ T5941] ---[ end trace 0000000000000000 ]--- [ 96.980346][ T5941] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 96.986288][ T5941] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 97.005928][ T5941] RSP: 0018:ffffc90004657840 EFLAGS: 00010002 [ 97.012058][ T5941] RAX: dffffc0000000000 RBX: ffffffff8b5177a7 RCX: 3f015366d0b03c00 [ 97.020062][ T5941] RDX: 0000000000000000 RSI: ffffffff8b5177a7 RDI: 0000000000000004 [ 97.028062][ T5941] RBP: ffffffff819b48f8 R08: 0000000000000001 R09: 0000000000000000 [ 97.036057][ T5941] R10: dffffc0000000000 R11: fffffbfff1efb4ef R12: 0000000000000000 [ 97.044056][ T5941] R13: 0000000000000020 R14: 0000000000000020 R15: 0000000000000001 [ 97.052142][ T5941] FS: 00007f3b8e85d6c0(0000) GS:ffff888126100000(0000) knlGS:0000000000000000 [ 97.061358][ T5941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.067959][ T5941] CR2: 00007ffd593c2ecf CR3: 000000002924a000 CR4: 00000000003526f0 [ 97.075960][ T5941] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.083989][ T5941] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.091999][ T5941] Kernel panic - not syncing: Fatal exception [ 97.098220][ T5941] Kernel Offset: disabled [ 97.102555][ T5941] Rebooting in 86400 seconds..