last executing test programs: 14.560785399s ago: executing program 1 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x25, &(0x7f0000000140)={&(0x7f0000001300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}, @IFLA_MACSEC_WINDOW={0x8}]}}}]}, 0x44}}, 0x0) 14.559793548s ago: executing program 1 (id=2923): capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0xffff7fff, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setsig(r5, 0x3, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) openat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) mknodat(r6, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r6, &(0x7f0000000080)='./file1\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) connect$packet(r0, &(0x7f0000000180)={0x11, 0xf5, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 14.558254983s ago: executing program 1 (id=2926): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0xa0, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PORT_SELF={0x80, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x69, 0x5, "03949a7dd0d1d62bc323da3400855c42"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "015f0700fbff000000008a00"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9980d65229b863d55df557d9b1394542"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1a29dfe4bf9100"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d0eb47cc7a4b72c49715faec3f16aabf"}]}]}, 0xa0}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) signalfd4(r0, &(0x7f0000000200)={[0xfffffff7, 0x2d99d195]}, 0x8, 0x80400) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fchmod(r3, 0x0) fchmod(r3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0x9, {"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", 0x1000}}, 0x1006) write$P9_RWRITE(r5, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080400c80003"], 0x7) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x82005) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="aefdda9d240303005a90f57f07703aefe1f648d7a80114a4bc53475200"/42, 0x2a}, {&(0x7f0000000000)="530000006e98adf6328d91b9120800000021ce100005df00000004e694c0feafb7977dd78465d74120c17c883e6ca52ff986a2110315580facf6af8a3dc09b40a2183faa54d03704a7f36b4af27f99373e39a218a2354d20", 0x58}], 0x2) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'trusted.', 'trusted.overlay.redirect\x00'}, &(0x7f0000000180)=""/32, 0x20) 14.555203536s ago: executing program 1 (id=2928): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) chmod(&(0x7f00000000c0)='./file0\x00', 0xf6) dup3(r0, r1, 0x0) 14.239238543s ago: executing program 1 (id=2934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001880)={&(0x7f0000000040)={0x2, 0x600, @rand_addr=0x64010101}, 0x10, &(0x7f0000001680)=[{&(0x7f00000002c0)="b8", 0x1}], 0x1}, 0x0) 13.982290703s ago: executing program 0 (id=2938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='1'], 0x31) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120155026739e740d112a883b123010203010902120001000000010904000000"], &(0x7f00000007c0)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000757e024d0000000000000000"]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f00000002c0)="b51caa1bdb202f9782ee76a83a4e1778317653b3b1223386bef254172a44b065b9950d635fdea7a5d1c29466d76b5ce317ad0c36a4d48ac906bbf15ff8958b42fc2b94c802441497941bec13510c38e2c9b32ec5b0cebe168c") lseek(r7, 0x0, 0x4) getdents(r7, 0x0, 0x58) 13.887016734s ago: executing program 1 (id=2939): capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0xffff7fff, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setsig(r5, 0x3, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) openat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) mknodat(r6, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r6, &(0x7f0000000080)='./file1\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) connect$packet(r0, &(0x7f0000000180)={0x11, 0xf5, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 12.948521367s ago: executing program 4 (id=2947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x40, &(0x7f0000000100)=""/64}, 0x90) 12.827185284s ago: executing program 3 (id=2948): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001400000f5d50808084000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) 12.78731973s ago: executing program 4 (id=2950): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000700), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000b00)=@multiplanar_mmap={0x3, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x2, 0x4, 0xf9, 0x1, 0xde, "86ccf531"}, 0x3, 0x1, {&(0x7f0000000a80)=[{0x3, 0x800, {0x2}, 0x3}, {0x4, 0x80, {0xa227}, 0x7ff}]}, 0x401, 0x0, r1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000), 0x8, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="33eb4497c38d06acc37073ecb35e3d0c995de07e8c51770acb5b7869", 0x1c}, {&(0x7f0000000300)="de6219128b3626dd41489fce85bd39aaf973f6827e0b1bf58e04f329295898b4e225a32708c361a430cad28b360d5f4ee1f23bd78c5206dfeaee717b3b507d8e65b2a7fd0ac90c314110dd075f538e6a2c6059fb887d351f66f9dee746fe65b50035f855dc8232dac7436073d029f3e149d0d5b212a3afe6d125803ef2c303659700697fb80d0cec80b60642da861c9271955b14483a39094f2cfe9badb8562404b956287654f3bce128f7084a5264ff0ba1f4bc1341af111d74ce4926b1cae9de05504b9c6953eb9255b2c19f6fc192636f354532a5177fcc", 0xd9}, {&(0x7f0000000400)="1c6fea2e73b4241ce9ea66917d133d68cb6e9d6eea75cd813aac6960ed7e399ec24f08b256a33f3e6481108cfb4e0d6ac98f59435dd4f7fef15121000592b410cfb6e3e4748b1c82bd270ac2d5a2b9ab3466191c7b810fdd9500b65ff94eda4ed4416a49e3425ca658130a963695cd8230deab68d25a92052efba52bd641ea61dd2411452a8765e9d491f799831b3a401646640aa80bda39e686ced4b5c85fc910d2475df3df38e788835197e57444afbc7a057b09f36619b969", 0xba}, {&(0x7f00000004c0)="3939f1b648245d91e419f67f787c9f27d9e740ebd90bef71bf4fb66d6f5b01ccf331ea866f2bf4125b4f3fca824e083ad0789286a0d542064d826a8d6cd6801ac18f73f6c28356a1855cc73a06fc997437e0e2ad0f82110a140ead084e76cff0145eebda6eaba22ac3b5b92da3c14f752d6f1fdf4f3c5beddd04fa8c3f27e5be72939147f83036394958a3a74ac68d5f64e182f1d5f1ca385fe35b5d9dd9de1faab1df0887bba00574a312", 0xab}], 0x4, &(0x7f0000000580)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0xd}}], 0x50}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="2009e4f5f086859d76446399affa462f4b33e3fc482bff9f875396d67021284f2fb6c53a8f633c8556ef80003a096b2db1f070e2c59a9374bac8fbf6e71565994bb1d0a192b04a13d566bf7a04dcd91d3941", 0x52}, {&(0x7f00000006c0)}, {&(0x7f0000000780)="2b34664e167d05df0e85e5f872283d5cf6014ff2dff113cb52a11c3aa7c106203bdda1ba6fc6ef1787a85cdf15bfc134b2cf8fd41428f296d59fe86df2689ca2a9a153024275db8dd7d9277343c5f796547d63a6ff1164bd64d9a66f0b8b9447a17babacd680054392f19215446df2f43144fdc784cdf95836c3cbc54ae3cc5aaa7f4f3180ffdc6e586f86a5291fc9ef3e77e4451095595c", 0x98}, {&(0x7f0000000840)="94582beb2bbe1f8fc50d46c363610358da52ce0bc6863c1402981fd852ce9d5c56f32197b8b4f885c5ef143e8be47e356bc76eff6ae40eb9c52f00987564ab7e50fbc9ce5756ba7dd861be59fa299039241347c365b8896a23a5bae816356dc732def173457064e7e4ce3abdef12e6", 0x6f}, {&(0x7f00000008c0)}, {&(0x7f0000000280)="742697b0", 0x4}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x20}}], 0x10}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000f00)=[{0x0}, {&(0x7f000001aa80)="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", 0xbe7}, {0x0}], 0x3, &(0x7f0000001000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x18}}], 0x3, 0x880) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) add_key(0x0, &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="92e98c8acdd84d62f4b07e2c9ff2788bdf60ee7fa41b45bf4cee283e45de4c3f1cf04ef34e72ad514104e3ff853b831cd02aa98fec2893a924fac8a608", 0x3d, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c00"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 12.650924765s ago: executing program 3 (id=2951): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000016c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xeee, 0x0, 0x0, {0x5, 0x520c, 0xc34000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000f80)=@fd={0x6d3, 0xb, 0x4, 0x10000, 0x2, {}, {0x3, 0xc, 0xd3, 0xfe, 0x0, 0xa, "236f85aa"}, 0x2, 0x4, {}, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)) r5 = eventfd2(0x0, 0x80800) r6 = eventfd(0x4) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r5, 0x1, 0x8, r6}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r7) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x0, 0x32344d59, 0x0, @stepwise}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x4}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x80000040, 0x0, 0x8000, 0x8000000000000000, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x4f, 0x0, 0x9], 0x0, 0x200}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2404c881) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4000000}, {0x4, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}]}) 11.674527246s ago: executing program 3 (id=2953): capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r2, 0xffff7fff, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)={0x24, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setsig(r5, 0x3, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000280)=0x2, 0x4) openat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) mknodat(r6, &(0x7f0000000140)='./file1\x00', 0xc000, 0x0) renameat2(r6, &(0x7f0000000080)='./file1\x00', r4, &(0x7f00000000c0)='./file0\x00', 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) connect$packet(r0, &(0x7f0000000180)={0x11, 0xf5, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 11.403292943s ago: executing program 4 (id=2955): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 11.247334913s ago: executing program 3 (id=2957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001c0001000000eeffffffffffff"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xe0, 0x4) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=""/254, 0xfe}}], 0x1, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x44}}, 0x0) r8 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r8, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f00000001c0)=0xffff7fff) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="220000003706000030000000000000000300000000000000", @ANYRES32, @ANYBLOB="0400776731007d57bf726e87773d55381fc8445102fdcdb49be3626cbdd3ab723133db15b19d4cab0d293fd6103cffca7244b632f16010ef1ac65c010c97754772cc59361d53ef403e332b772d0222694be3288d10632abcf48b7db190897a4b30597b828a82d8c34d8139debf8190e6"], 0x22) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x110, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8a0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x40800}, 0x880) 11.167235717s ago: executing program 4 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x14, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='1'], 0x31) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120155026739e740d112a883b123010203010902120001000000010904000000"], &(0x7f00000007c0)={0x0, 0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="050f1000757e024d0000000000000000"]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000240)={@loopback={0xff00000000000000}, 0x0, 0x0, 0xff}, 0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f00000002c0)="b51caa1bdb202f9782ee76a83a4e1778317653b3b1223386bef254172a44b065b9950d635fdea7a5d1c29466d76b5ce317ad0c36a4d48ac906bbf15ff8958b42fc2b94c802441497941bec13510c38e2c9b32ec5b0cebe168c") lseek(r6, 0x0, 0x4) getdents(r6, 0x0, 0x58) 10.853626933s ago: executing program 3 (id=2959): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000580)) r2 = socket$inet6(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000300)={0x8, r7, r4}) pwritev2(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="384932fd0b81bc51c9647254296c9702b5b1fac68e7b918c11df51d9165d19081ed62c75efc53536e29493312303db94d4b0c786c3ae61ed285a61641c734738c618389ad818734ff27c03d50a3457e87c0d9707bfbf95d893f326d3b16643b8a61364a636493a1a3e548621065e8cbddc4e17652d81b710e106dc3dc088c24da2ea17163094cfbc4731da7c2952037aa1cf64012d42cf363dc7574b58799df94963f2a1c9d752999cd3b78ad351dba567cbd65eb89757df74b852f4dfee860f3a75b4028504ec9646df8526068c6255a6455bf5d8481e124bfc9c5294362d0282", 0xe1}, {&(0x7f00000015c0)="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", 0x16b}, {&(0x7f00000014c0)="2d0c5ff67178dbedfae30b6f531847f553b4f25558e398e4887122b69a140b1972d404f911df3fd4eceab2a88934319c2ceaf978620f4ecb7418a65cd73f05228e6032ed84bee14948d7cfa3103539d57fe587bf541ee64e8ad6954b4d41f5e1aae5e7ff98b226328becc5ab81d14b9a04a7efbd320c9c61d0920e1e6ce4f4f2b46830947bda761bfc0b20cfd108551c40a28c181f3ac1009a86586afef83c1b5ac7a33b6affb39aba3f7bf03441575c86451ef3e0d69a28407bc9e5802472d0bf1a8fcf9911f3", 0xc7}, {&(0x7f0000000300)="634ae9beebd7fcc35f2d4c4a9bf310d436ac655fc97f8f82347fddc01070624d3d4e0eb2ede1704372b8f5257081e550d692df48ce06e337f11364c803e261591adb29268cf8498084ccd5eaee2a5a34c71c5d53d4322d3d6c5e9a04471d1964a9814f30e63d2291322ba11cf8c3ae1a572be75dab185fa26dbf6b1430c01c1dda1a99f73f27b8b0331fcf71a33934c0837c729b981e21986c91364007d96b558199dd84d1c5049a18", 0xa9}, {&(0x7f00000003c0)="aa577b08fddee3a1c3668595c5ffc23582f951d712f75899eab26baeb92efc3d0269ad8dae576c816d24442800419e825b0f1ab8a0e254328a5c72f8b1308e17e4917f6ad611bb5eb487ed2a1e59b8d92e13c53ac42dd722ed4a235db7628623e4443979102f204877822edb381780412a89791f0eab6067e4ce6c25c8140403c79cd2b7f482aa048b3600838e6e78aeed71dac68eccdf703268f5cb12602137b47f857afb7d82c953c1588e4842f66a9cec6b06a591aea5adbbd1350b040d16ec5874a23f56114b0db00c83fbfe9de65026191307b45b16ff9b7914b6364cad03d3e585c348a7bddc76fc", 0xeb}], 0x5, 0x80ec09, 0x4ec, 0x15) r8 = socket$rds(0x15, 0x5, 0x0) connect(r2, &(0x7f0000000280)=@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) gettid() ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000004c0)={0x0, 0x4}) 10.835242269s ago: executing program 0 (id=2960): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001400000f5d50808084000000001140000001000010000000000000000000000000a"], 0x98}}, 0x0) 10.695470264s ago: executing program 0 (id=2961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x42}, 0x90) 10.649405992s ago: executing program 3 (id=2962): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f00000016c0)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0xeee, 0x0, 0x0, {0x5, 0x520c, 0xc34000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}, 0xa0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000f80)=@fd={0x6d3, 0xb, 0x4, 0x10000, 0x2, {}, {0x3, 0xc, 0xd3, 0xfe, 0x0, 0xa, "236f85aa"}, 0x2, 0x4, {}, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)) r5 = eventfd2(0x0, 0x80800) r6 = eventfd(0x4) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000001c0)={r5, 0x1, 0x8, r6}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, r7) r8 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x0, 0x32344d59, 0x0, @stepwise}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x4}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x80000040, 0x0, 0x8000, 0x8000000000000000, 0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x4f, 0x0, 0x9], 0x0, 0x200}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2404c881) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4000000}, {0x4, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}]}) 10.567006117s ago: executing program 0 (id=2963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @random="d8928afb7028"}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev}]}}}]}, 0x50}}, 0x0) (fail_nth: 6) 8.055008548s ago: executing program 4 (id=2964): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000700), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000b00)=@multiplanar_mmap={0x3, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x2, 0x4, 0xf9, 0x1, 0xde, "86ccf531"}, 0x3, 0x1, {&(0x7f0000000a80)=[{0x3, 0x800, {0x2}, 0x3}, {0x4, 0x80, {0xa227}, 0x7ff}]}, 0x401, 0x0, r1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000), 0x8, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="33eb4497c38d06acc37073ecb35e3d0c995de07e8c51770acb5b7869", 0x1c}, {&(0x7f0000000300)="de6219128b3626dd41489fce85bd39aaf973f6827e0b1bf58e04f329295898b4e225a32708c361a430cad28b360d5f4ee1f23bd78c5206dfeaee717b3b507d8e65b2a7fd0ac90c314110dd075f538e6a2c6059fb887d351f66f9dee746fe65b50035f855dc8232dac7436073d029f3e149d0d5b212a3afe6d125803ef2c303659700697fb80d0cec80b60642da861c9271955b14483a39094f2cfe9badb8562404b956287654f3bce128f7084a5264ff0ba1f4bc1341af111d74ce4926b1cae9de05504b9c6953eb9255b2c19f6fc192636f354532a5177fcc", 0xd9}, {&(0x7f0000000400)="1c6fea2e73b4241ce9ea66917d133d68cb6e9d6eea75cd813aac6960ed7e399ec24f08b256a33f3e6481108cfb4e0d6ac98f59435dd4f7fef15121000592b410cfb6e3e4748b1c82bd270ac2d5a2b9ab3466191c7b810fdd9500b65ff94eda4ed4416a49e3425ca658130a963695cd8230deab68d25a92052efba52bd641ea61dd2411452a8765e9d491f799831b3a401646640aa80bda39e686ced4b5c85fc910d2475df3df38e788835197e57444afbc7a057b09f36619b969", 0xba}, {&(0x7f00000004c0)="3939f1b648245d91e419f67f787c9f27d9e740ebd90bef71bf4fb66d6f5b01ccf331ea866f2bf4125b4f3fca824e083ad0789286a0d542064d826a8d6cd6801ac18f73f6c28356a1855cc73a06fc997437e0e2ad0f82110a140ead084e76cff0145eebda6eaba22ac3b5b92da3c14f752d6f1fdf4f3c5beddd04fa8c3f27e5be72939147f83036394958a3a74ac68d5f64e182f1d5f1ca385fe35b5d9dd9de1faab1df0887bba00574a312", 0xab}], 0x4, &(0x7f0000000580)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0xd}}], 0x50}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="2009e4f5f086859d76446399affa462f4b33e3fc482bff9f875396d67021284f2fb6c53a8f633c8556ef80003a096b2db1f070e2c59a9374bac8fbf6e71565994bb1d0a192b04a13d566bf7a04dcd91d3941", 0x52}, {&(0x7f00000006c0)}, {&(0x7f0000000780)="2b34664e167d05df0e85e5f872283d5cf6014ff2dff113cb52a11c3aa7c106203bdda1ba6fc6ef1787a85cdf15bfc134b2cf8fd41428f296d59fe86df2689ca2a9a153024275db8dd7d9277343c5f796547d63a6ff1164bd64d9a66f0b8b9447a17babacd680054392f19215446df2f43144fdc784cdf95836c3cbc54ae3cc5aaa7f4f3180ffdc6e586f86a5291fc9ef3e77e4451095595c", 0x98}, {&(0x7f0000000840)="94582beb2bbe1f8fc50d46c363610358da52ce0bc6863c1402981fd852ce9d5c56f32197b8b4f885c5ef143e8be47e356bc76eff6ae40eb9c52f00987564ab7e50fbc9ce5756ba7dd861be59fa299039241347c365b8896a23a5bae816356dc732def173457064e7e4ce3abdef12e6", 0x6f}, {&(0x7f00000008c0)}, {&(0x7f0000000280)="742697b0", 0x4}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x20}}], 0x10}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000f00)=[{0x0}, {&(0x7f000001aa80)="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", 0xbe7}, {0x0}], 0x3, &(0x7f0000001000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x18}}], 0x3, 0x880) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) add_key(0x0, &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="92e98c8acdd84d62f4b07e2c9ff2788bdf60ee7fa41b45bf4cee283e45de4c3f1cf04ef34e72ad514104e3ff853b831cd02aa98fec2893a924fac8a608", 0x3d, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c00"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 7.029489743s ago: executing program 0 (id=2965): signalfd(0xffffffffffffffff, &(0x7f0000000300), 0x8) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 6.901271021s ago: executing program 4 (id=2966): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@multicast2}}, 0xe8) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}]}, 0x24}}, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r4 = dup(r1) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x2) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) 6.683171958s ago: executing program 0 (id=2968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "70ed35b6b21c6a92"}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0xf, 0x0, "a69e87ad90ffb6b4b8ef2c88bd9316809d2c5e674fdae02795585a9392d651e2003294cc11be2b39bb2445999a58f0b90e69473ae585be8587529a0247ea14f5475bd7b699075f8172e05c49eb78bedd"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x3) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.851009646s ago: executing program 2 (id=2974): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x11, &(0x7f0000000000)=0x300, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 2.522556204s ago: executing program 2 (id=2975): futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000140), 0x35000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000700), 0x0, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x30004081) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000b00)=@multiplanar_mmap={0x3, 0x0, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x2, 0x4, 0xf9, 0x1, 0xde, "86ccf531"}, 0x3, 0x1, {&(0x7f0000000a80)=[{0x3, 0x800, {0x2}, 0x3}, {0x4, 0x80, {0xa227}, 0x7ff}]}, 0x401, 0x0, r1}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) mmap(&(0x7f00000cb000/0x1000)=nil, 0x1000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000), 0x8, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="33eb4497c38d06acc37073ecb35e3d0c995de07e8c51770acb5b7869", 0x1c}, {&(0x7f0000000300)="de6219128b3626dd41489fce85bd39aaf973f6827e0b1bf58e04f329295898b4e225a32708c361a430cad28b360d5f4ee1f23bd78c5206dfeaee717b3b507d8e65b2a7fd0ac90c314110dd075f538e6a2c6059fb887d351f66f9dee746fe65b50035f855dc8232dac7436073d029f3e149d0d5b212a3afe6d125803ef2c303659700697fb80d0cec80b60642da861c9271955b14483a39094f2cfe9badb8562404b956287654f3bce128f7084a5264ff0ba1f4bc1341af111d74ce4926b1cae9de05504b9c6953eb9255b2c19f6fc192636f354532a5177fcc", 0xd9}, {&(0x7f0000000400)="1c6fea2e73b4241ce9ea66917d133d68cb6e9d6eea75cd813aac6960ed7e399ec24f08b256a33f3e6481108cfb4e0d6ac98f59435dd4f7fef15121000592b410cfb6e3e4748b1c82bd270ac2d5a2b9ab3466191c7b810fdd9500b65ff94eda4ed4416a49e3425ca658130a963695cd8230deab68d25a92052efba52bd641ea61dd2411452a8765e9d491f799831b3a401646640aa80bda39e686ced4b5c85fc910d2475df3df38e788835197e57444afbc7a057b09f36619b969", 0xba}, {&(0x7f00000004c0)="3939f1b648245d91e419f67f787c9f27d9e740ebd90bef71bf4fb66d6f5b01ccf331ea866f2bf4125b4f3fca824e083ad0789286a0d542064d826a8d6cd6801ac18f73f6c28356a1855cc73a06fc997437e0e2ad0f82110a140ead084e76cff0145eebda6eaba22ac3b5b92da3c14f752d6f1fdf4f3c5beddd04fa8c3f27e5be72939147f83036394958a3a74ac68d5f64e182f1d5f1ca385fe35b5d9dd9de1faab1df0887bba00574a312", 0xab}], 0x4, &(0x7f0000000580)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x1f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0xd}}], 0x50}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)="2009e4f5f086859d76446399affa462f4b33e3fc482bff9f875396d67021284f2fb6c53a8f633c8556ef80003a096b2db1f070e2c59a9374bac8fbf6e71565994bb1d0a192b04a13d566bf7a04dcd91d3941", 0x52}, {&(0x7f00000006c0)}, {&(0x7f0000000780)="2b34664e167d05df0e85e5f872283d5cf6014ff2dff113cb52a11c3aa7c106203bdda1ba6fc6ef1787a85cdf15bfc134b2cf8fd41428f296d59fe86df2689ca2a9a153024275db8dd7d9277343c5f796547d63a6ff1164bd64d9a66f0b8b9447a17babacd680054392f19215446df2f43144fdc784cdf95836c3cbc54ae3cc5aaa7f4f3180ffdc6e586f86a5291fc9ef3e77e4451095595c", 0x98}, {&(0x7f0000000840)="94582beb2bbe1f8fc50d46c363610358da52ce0bc6863c1402981fd852ce9d5c56f32197b8b4f885c5ef143e8be47e356bc76eff6ae40eb9c52f00987564ab7e50fbc9ce5756ba7dd861be59fa299039241347c365b8896a23a5bae816356dc732def173457064e7e4ce3abdef12e6", 0x6f}, {&(0x7f00000008c0)}, {&(0x7f0000000280)="742697b0", 0x4}], 0x6, &(0x7f0000000a40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x20}}], 0x10}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000f00)=[{0x0}, {&(0x7f000001aa80)="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", 0xbe7}, {0x0}], 0x3, &(0x7f0000001000)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x18}}], 0x3, 0x880) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) add_key(0x0, &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="92e98c8acdd84d62f4b07e2c9ff2788bdf60ee7fa41b45bf4cee283e45de4c3f1cf04ef34e72ad514104e3ff853b831cd02aa98fec2893a924fac8a608", 0x3d, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c00"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) 2.159035894s ago: executing program 2 (id=2976): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp(0x2, 0x2, 0x73) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11c, 0x1, 0x0, 0x20000000) 1.983342302s ago: executing program 2 (id=2977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) r3 = socket(0x10, 0x803, 0x0) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b40)=ANY=[@ANYBLOB="042ffb03000000000000"], 0x2fe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="83", 0x1}], 0x1}, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x3e}, @l2cap_cid_signaling={{0x3a}, [@l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x1f, 0x7, 0x2, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x7, 0x2}, {0x5}}, @l2cap_conf_rsp={{0x5, 0x4, 0xa}, {0x5, 0x1ff, 0xff80, [@l2cap_conf_flushto={0x2, 0x2, 0x8}]}}, @l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0x31a8, 0x3}}, @l2cap_conf_req={{0x4, 0x5, 0x8}, {0x2, 0x6, [@l2cap_conf_ews={0x7, 0x2, 0x8}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x36, 0x2}, {0xa22f}}]}}, 0x43) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000235000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x32, 0xe, 0xa5, 0x8, 0x5dc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x54, 0xa2, 0x3e}}]}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110076657468305f7669"], 0x38}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) 131.675579ms ago: executing program 2 (id=2978): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 0s ago: executing program 2 (id=2980): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x56, &(0x7f0000000300)=@string={0x56, 0x3, "4f512758cd70d4acb68be8180f6158ca28dc5677e09d9bff9eadd64d51fb756ac85c0970cc8910eabf327a798f3e818d3f30fbe1370d747590bbd151d2c25b3f44550df4f47490c0283a31f4e9ee7c1f0b76a6ef"}}]}) syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "32341681"}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0xa1}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "79f03953c4c96fe6b1d67b8b584cc085"}, @ssp_cap={0xc}]}, 0x3, [{0x6e, &(0x7f0000000580)=@string={0x6e, 0x3, "79594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd089bd8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d9"}}, {0x0, 0x0}, {0x3d, &(0x7f0000000680)=@string={0x3d, 0x3, "a162a8057c983cc4c9206ba7e83958361307aac221a037db83269f2d9458f0e1fc84a4f2230f3e9d90a6275173d68b06f6dc97ca15d80e9efad8aa"}}]}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05040500d3fc0900000047", 0xb, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): :3f) already exists on: batadv_slave_1 [ 1238.662085][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.672065][T19980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.682721][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.695425][T19980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.706003][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.715896][T19980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1238.728012][T19980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1238.742003][T19980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1238.764944][T19980] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.774569][T19980] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.783779][T19980] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.818999][T19980] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1238.880712][ T5147] usb 2-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1238.896537][ T5147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.917803][ T5147] usb 2-1: Product: syz [ 1238.922698][ T5147] usb 2-1: Manufacturer: syz [ 1238.960732][ T5147] usb 2-1: SerialNumber: syz [ 1239.009601][ T5147] usb 2-1: config 0 descriptor?? [ 1239.126841][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.134803][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.176207][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.183817][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.237527][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2686'. [ 1239.279454][ T8061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.296341][ T8061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.377949][ T5147] usb 2-1: USB disconnect, device number 78 [ 1239.464090][T20139] FAULT_INJECTION: forcing a failure. [ 1239.464090][T20139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.495411][T20139] CPU: 0 PID: 20139 Comm: syz.4.2693 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1239.505648][T20139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1239.515779][T20139] Call Trace: [ 1239.519106][T20139] [ 1239.522077][T20139] dump_stack_lvl+0x241/0x360 [ 1239.526815][T20139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1239.532150][T20139] ? __pfx__printk+0x10/0x10 [ 1239.536792][T20139] ? snprintf+0xda/0x120 [ 1239.541080][T20139] should_fail_ex+0x3b0/0x4e0 [ 1239.545816][T20139] _copy_to_user+0x2f/0xb0 [ 1239.550285][T20139] simple_read_from_buffer+0xca/0x150 [ 1239.555699][T20139] proc_fail_nth_read+0x1e9/0x250 [ 1239.560745][T20139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.566307][T20139] ? rw_verify_area+0x520/0x6b0 [ 1239.571172][T20139] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.576738][T20139] vfs_read+0x204/0xbc0 [ 1239.581074][T20139] ? __pfx_lock_release+0x10/0x10 [ 1239.586170][T20139] ? __pfx_vfs_read+0x10/0x10 [ 1239.590955][T20139] ? __fget_files+0x29/0x470 [ 1239.595561][T20139] ? __fget_files+0x3f6/0x470 [ 1239.600263][T20139] ksys_read+0x1a0/0x2c0 [ 1239.604648][T20139] ? __pfx_ksys_read+0x10/0x10 [ 1239.609433][T20139] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1239.616048][T20139] ? lockdep_hardirqs_on+0x99/0x150 [ 1239.621292][T20139] __do_fast_syscall_32+0xb4/0x120 [ 1239.626432][T20139] ? exc_page_fault+0x590/0x8c0 [ 1239.631322][T20139] do_fast_syscall_32+0x34/0x80 [ 1239.636211][T20139] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.642548][T20139] RIP: 0023:0xf745b579 [ 1239.646628][T20139] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1239.666354][T20139] RSP: 002b:00000000f5d745b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1239.674957][T20139] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5d74630 [ 1239.682936][T20139] RDX: 000000000000000f RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 1239.691020][T20139] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1239.699018][T20139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1239.707018][T20139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.715014][T20139] [ 1239.957596][T20151] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2696'. [ 1240.496855][ T5147] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1240.720148][ T5147] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.748803][ T5147] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1240.769398][ T5147] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1240.784181][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1240.795871][ T5147] usb 4-1: SerialNumber: syz [ 1241.032821][T20157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.054748][T20157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.786803][ T5178] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1242.011848][ T5178] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.023804][ T5178] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1242.044339][ T5178] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1242.054671][ T5178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.063068][ T5178] usb 3-1: Product: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 1242.073666][ T5178] usb 3-1: SerialNumber: syz [ 1242.299224][ T5178] usb 3-1: 0:2 : does not exist [ 1242.323600][ T5178] usb 3-1: USB disconnect, device number 100 [ 1242.581809][T16265] udevd[16265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1242.951840][T20203] tipc: Started in network mode [ 1242.957166][T20203] tipc: Node identity , cluster identity 4711 [ 1242.964870][T20203] tipc: Failed to obtain node identity [ 1242.970636][T20203] tipc: Enabling of bearer rejected, failed to enable media [ 1243.230923][ T5147] usb 4-1: 0:2 : does not exist [ 1243.242731][ T5147] usb 4-1: unit 5: unexpected type 0x0b [ 1243.304379][ T5147] usb 4-1: USB disconnect, device number 77 [ 1243.473816][ T29] audit: type=1326 audit(1719993756.868:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.495421][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 1243.555754][ T29] audit: type=1326 audit(1719993756.868:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.596423][T18462] udevd[18462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.627892][ T29] audit: type=1326 audit(1719993756.868:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.670369][ T29] audit: type=1326 audit(1719993756.868:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.700037][ T29] audit: type=1326 audit(1719993756.868:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.738716][ T29] audit: type=1326 audit(1719993756.878:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.789489][ T29] audit: type=1326 audit(1719993756.878:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.820376][ T29] audit: type=1326 audit(1719993756.888:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.843328][ T29] audit: type=1326 audit(1719993756.888:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1243.865749][ T29] audit: type=1326 audit(1719993756.888:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20219 comm="syz.3.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1244.246693][ T5178] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1244.372705][T20249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1244.385618][T20250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1244.400604][T20250] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1244.416705][T12448] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1244.457287][ T5178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.485141][ T5178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.510510][ T5178] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.523702][ T5178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.535310][ T5178] usb 4-1: Product: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 1244.550931][ T5178] usb 4-1: SerialNumber: syz [ 1244.577127][T12448] usb 3-1: device descriptor read/64, error -71 [ 1244.791758][ T5178] usb 4-1: 0:2 : does not exist [ 1244.831937][ T5178] usb 4-1: USB disconnect, device number 78 [ 1244.856645][T12448] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1245.028704][T12448] usb 3-1: device descriptor read/64, error -71 [ 1245.079237][T18462] udevd[18462]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1245.149205][T12448] usb usb3-port1: attempt power cycle [ 1245.279774][T20260] tipc: Started in network mode [ 1245.284874][T20260] tipc: Node identity , cluster identity 4711 [ 1245.292688][T20260] tipc: Failed to obtain node identity [ 1245.298896][T20260] tipc: Enabling of bearer rejected, failed to enable media [ 1245.576949][T12448] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1245.627656][T12448] usb 3-1: device descriptor read/8, error -71 [ 1245.681048][ T5143] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1245.759738][T17430] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.849537][T17430] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.860349][ T5143] usb 4-1: device descriptor read/64, error -71 [ 1245.916194][T12448] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1245.969157][T12448] usb 3-1: device descriptor read/8, error -71 [ 1245.980637][T17430] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.090202][T17430] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.102272][T12448] usb usb3-port1: unable to enumerate USB device [ 1246.136434][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.136900][ T5143] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1246.155464][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.169870][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.181174][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.189329][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1246.196862][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1246.317181][ T5143] usb 4-1: device descriptor read/64, error -71 [ 1246.384601][T20270] fuse: Bad value for 'user_id' [ 1246.418691][T17430] bridge_slave_1: left allmulticast mode [ 1246.424703][T17430] bridge_slave_1: left promiscuous mode [ 1246.435852][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.453397][T17430] bridge_slave_0: left allmulticast mode [ 1246.459528][T17430] bridge_slave_0: left promiscuous mode [ 1246.465348][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.495344][ T5143] usb usb4-port1: attempt power cycle [ 1246.910988][ T5143] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1246.947608][ T5143] usb 4-1: device descriptor read/8, error -71 [ 1247.023479][T17430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.038304][T17430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.049530][T17430] bond0 (unregistering): Released all slaves [ 1247.216696][ T5143] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1247.302369][ T5143] usb 4-1: device descriptor read/8, error -71 [ 1247.445712][ T5143] usb usb4-port1: unable to enumerate USB device [ 1247.676694][T17430] hsr_slave_0: left promiscuous mode [ 1247.704055][T17430] hsr_slave_1: left promiscuous mode [ 1247.726072][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.750321][T17430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.768723][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.786875][T17430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.849419][T17430] veth1_macvtap: left promiscuous mode [ 1247.855056][T17430] veth0_macvtap: left promiscuous mode [ 1247.871420][T17430] veth1_vlan: left promiscuous mode [ 1247.887005][T17430] veth0_vlan: left promiscuous mode [ 1247.994970][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1248.013189][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1248.022815][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1248.065884][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1248.076407][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1248.090065][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1248.301156][ T5099] Bluetooth: hci5: command tx timeout [ 1248.481734][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1248.481757][ T29] audit: type=1326 audit(1719993761.868:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.514960][ T29] audit: type=1326 audit(1719993761.868:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.570760][ T29] audit: type=1326 audit(1719993761.908:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.608322][ T29] audit: type=1326 audit(1719993761.908:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.647887][ T29] audit: type=1326 audit(1719993761.908:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.673670][ T29] audit: type=1326 audit(1719993761.938:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.700418][ T29] audit: type=1326 audit(1719993761.938:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.731512][ T29] audit: type=1326 audit(1719993761.938:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20298 comm="syz.3.2742" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1248.973869][T17430] team0 (unregistering): Port device team_slave_1 removed [ 1249.041935][T17430] team0 (unregistering): Port device team_slave_0 removed [ 1249.146749][ T5143] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1249.352516][ T5143] usb 4-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1249.368288][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.376422][ T5143] usb 4-1: Product: syz [ 1249.384229][ T5143] usb 4-1: Manufacturer: syz [ 1249.401875][ T5143] usb 4-1: SerialNumber: syz [ 1249.437040][ T5143] usb 4-1: config 0 descriptor?? [ 1249.826688][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1250.127014][ T5099] Bluetooth: hci1: command tx timeout [ 1250.254702][T20268] chnl_net:caif_netlink_parms(): no params data found [ 1250.376784][ T5099] Bluetooth: hci5: command tx timeout [ 1250.587092][T20268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.594670][T20268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.609544][T20268] bridge_slave_0: entered allmulticast mode [ 1250.625481][T20268] bridge_slave_0: entered promiscuous mode [ 1250.648766][T20268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.654576][ T5093] usb 4-1: USB disconnect, device number 83 [ 1250.663602][T20268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.694819][T20268] bridge_slave_1: entered allmulticast mode [ 1250.725224][T20268] bridge_slave_1: entered promiscuous mode [ 1250.902761][T20268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.924486][T20297] chnl_net:caif_netlink_parms(): no params data found [ 1250.960289][T20268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.259831][T17430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.331109][T20268] team0: Port device team_slave_0 added [ 1251.487038][T17430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.508259][T20268] team0: Port device team_slave_1 added [ 1251.661395][T17430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.683867][T20297] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.700618][T20297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.716970][T20297] bridge_slave_0: entered allmulticast mode [ 1251.737084][T20297] bridge_slave_0: entered promiscuous mode [ 1251.747304][T20297] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.754723][T20297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.762754][T20297] bridge_slave_1: entered allmulticast mode [ 1251.778535][T20297] bridge_slave_1: entered promiscuous mode [ 1251.845206][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1251.866864][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1251.891733][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1251.908559][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1251.917145][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1251.919949][T17430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.936899][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1252.046424][T20268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.054759][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.083132][T20268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.193735][T20297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1252.207187][ T5099] Bluetooth: hci1: command tx timeout [ 1252.218784][ T29] audit: type=1326 audit(1719993765.618:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1252.223627][T20268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.259905][T20268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.307060][ T29] audit: type=1326 audit(1719993765.618:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20344 comm="syz.4.2751" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1252.315365][T20268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.353981][T20348] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2752'. [ 1252.375159][T20297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1252.447553][ T5099] Bluetooth: hci5: command tx timeout [ 1252.506141][T20297] team0: Port device team_slave_0 added [ 1252.579651][T20297] team0: Port device team_slave_1 added [ 1252.756024][T20353] tipc: Started in network mode [ 1252.768590][T20353] tipc: Node identity , cluster identity 4711 [ 1252.777033][T20353] tipc: Failed to obtain node identity [ 1252.793061][T20353] tipc: Enabling of bearer rejected, failed to enable media [ 1252.843979][T20297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.859134][T20297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.896397][T20297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.953411][T20268] hsr_slave_0: entered promiscuous mode [ 1252.972410][T20268] hsr_slave_1: entered promiscuous mode [ 1252.984094][T20268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.995849][T20268] Cannot create hsr debugfs directory [ 1253.112475][T20297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.135318][T20297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1253.175219][T20297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.321720][T17430] bridge_slave_1: left allmulticast mode [ 1253.336651][T17430] bridge_slave_1: left promiscuous mode [ 1253.342512][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.374940][T17430] bridge_slave_0: left allmulticast mode [ 1253.382003][T17430] bridge_slave_0: left promiscuous mode [ 1253.395520][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.006299][T17430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.021826][T17430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.033467][T17430] bond0 (unregistering): Released all slaves [ 1254.047115][ T5099] Bluetooth: hci4: command tx timeout [ 1254.272690][T20297] hsr_slave_0: entered promiscuous mode [ 1254.284130][T20297] hsr_slave_1: entered promiscuous mode [ 1254.294135][T20297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1254.297023][ T5099] Bluetooth: hci1: command tx timeout [ 1254.302450][T20297] Cannot create hsr debugfs directory [ 1254.527224][ T5099] Bluetooth: hci5: command tx timeout [ 1254.599324][T17430] hsr_slave_0: left promiscuous mode [ 1254.605749][T17430] hsr_slave_1: left promiscuous mode [ 1254.607570][T12448] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1254.624615][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.637284][T17430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.645325][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.653367][T17430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.681817][T17430] veth1_macvtap: left promiscuous mode [ 1254.687809][T17430] veth0_macvtap: left promiscuous mode [ 1254.693679][T17430] veth1_vlan: left promiscuous mode [ 1254.700385][T17430] veth0_vlan: left promiscuous mode [ 1254.811414][T12448] usb 4-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1254.825917][T12448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.843782][T12448] usb 4-1: Product: syz [ 1254.850139][T12448] usb 4-1: Manufacturer: syz [ 1254.854956][T12448] usb 4-1: SerialNumber: syz [ 1254.875049][T12448] usb 4-1: config 0 descriptor?? [ 1255.130173][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2756'. [ 1255.513241][T17430] team0 (unregistering): Port device team_slave_1 removed [ 1255.599689][T17430] team0 (unregistering): Port device team_slave_0 removed [ 1255.706226][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1255.706248][ T29] audit: type=1326 audit(1719993769.098:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.747653][ T29] audit: type=1326 audit(1719993769.098:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.769669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.796966][ T29] audit: type=1326 audit(1719993769.108:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.819064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.828477][ T29] audit: type=1326 audit(1719993769.108:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.851964][ T29] audit: type=1326 audit(1719993769.108:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.883239][ T29] audit: type=1326 audit(1719993769.108:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1255.905343][ C0] vkms_vblank_simulate: vblank timer overrun [ 1255.911829][ T29] audit: type=1326 audit(1719993769.108:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.4.2759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745b579 code=0x7ffc0000 [ 1256.132990][ T5099] Bluetooth: hci4: command tx timeout [ 1256.374630][ T5099] Bluetooth: hci1: command tx timeout [ 1256.564533][T12448] usb 4-1: USB disconnect, device number 84 [ 1256.574122][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 1256.770760][T20341] chnl_net:caif_netlink_parms(): no params data found [ 1257.569310][T20341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.586429][T20341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.636952][T20341] bridge_slave_0: entered allmulticast mode [ 1257.644060][T20341] bridge_slave_0: entered promiscuous mode [ 1257.670677][T20341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.679981][T20341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.689210][ T5144] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1257.690304][T20341] bridge_slave_1: entered allmulticast mode [ 1257.705990][T20341] bridge_slave_1: entered promiscuous mode [ 1257.801129][T20422] input: syz0 as /devices/virtual/input/input175 [ 1257.899330][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.915900][T20341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.952888][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1257.991330][T20341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.001007][ T5144] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1258.011341][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.033057][ T5144] usb 4-1: config 0 descriptor?? [ 1258.153049][T20341] team0: Port device team_slave_0 added [ 1258.216637][ T5099] Bluetooth: hci4: command tx timeout [ 1258.239245][T17430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.284255][T20341] team0: Port device team_slave_1 added [ 1258.385198][T17430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.418534][T20341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.426124][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.482377][T20341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.496443][T20341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.503617][T20341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.531081][T20341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.611662][T17430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.801622][ T5144] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x7 [ 1258.811865][T17430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.823004][ T5144] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 1258.851384][ T5144] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x6 [ 1258.868580][T20341] hsr_slave_0: entered promiscuous mode [ 1258.877828][ T5144] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 1258.891769][T20341] hsr_slave_1: entered promiscuous mode [ 1258.898797][ T5144] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1258.898824][T20341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.898851][T20341] Cannot create hsr debugfs directory [ 1259.087760][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1259.106814][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1259.117634][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1259.128577][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1259.136410][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1259.144663][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1259.297519][T20268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1259.315183][T20268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1259.375337][T17430] bridge_slave_1: left allmulticast mode [ 1259.382519][T17430] bridge_slave_1: left promiscuous mode [ 1259.389008][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.405885][T17430] bridge_slave_0: left allmulticast mode [ 1259.413073][T17430] bridge_slave_0: left promiscuous mode [ 1259.420768][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.885705][T17430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.903126][T17430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.914139][T17430] bond0 (unregistering): Released all slaves [ 1259.929606][T20268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1259.940315][T20268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1260.096980][ T5142] usb 4-1: USB disconnect, device number 85 [ 1260.288258][T20297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1260.296839][ T5099] Bluetooth: hci4: command tx timeout [ 1260.299604][T20297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1260.369521][T17430] hsr_slave_0: left promiscuous mode [ 1260.375745][T17430] hsr_slave_1: left promiscuous mode [ 1260.383047][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.390631][T17430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.399983][T17430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.408786][T17430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.435254][T17430] veth1_macvtap: left promiscuous mode [ 1260.440931][T17430] veth0_macvtap: left promiscuous mode [ 1260.447541][T17430] veth1_vlan: left promiscuous mode [ 1260.452948][T17430] veth0_vlan: left promiscuous mode [ 1261.139254][T17430] team0 (unregistering): Port device team_slave_1 removed [ 1261.182446][ T5099] Bluetooth: hci0: command tx timeout [ 1261.208097][T17430] team0 (unregistering): Port device team_slave_0 removed [ 1261.753435][T20297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1261.769464][T20297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1261.814081][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2770'. [ 1262.294938][T20341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1262.317267][ T5144] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1262.338386][T20341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1262.356014][T20341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1262.410560][T20268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.425201][T20341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1262.446303][T20430] chnl_net:caif_netlink_parms(): no params data found [ 1262.512360][ T5144] usb 4-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1262.530154][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.557693][T20268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.568505][ T5144] usb 4-1: Product: syz [ 1262.572728][ T5144] usb 4-1: Manufacturer: syz [ 1262.579865][ T5144] usb 4-1: SerialNumber: syz [ 1262.588021][ T5144] usb 4-1: config 0 descriptor?? [ 1262.603542][T20297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.669940][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.677174][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.711138][T20430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.723753][T20430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.732053][T20430] bridge_slave_0: entered allmulticast mode [ 1262.744670][T20430] bridge_slave_0: entered promiscuous mode [ 1262.774992][T20297] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.782502][T20430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.797007][T20430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.804316][T20430] bridge_slave_1: entered allmulticast mode [ 1262.812099][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 1262.820851][T20430] bridge_slave_1: entered promiscuous mode [ 1262.838425][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.845629][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.912905][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.920184][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.930485][ T57] usb 4-1: USB disconnect, device number 86 [ 1262.972364][T20430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.001668][T20430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.073877][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.081248][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.155818][T20430] team0: Port device team_slave_0 added [ 1263.203563][T20430] team0: Port device team_slave_1 added [ 1263.247341][ T5099] Bluetooth: hci0: command tx timeout [ 1263.297907][T20341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.324467][T20430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.353191][T20430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.380403][T20430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.404841][T20430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.413611][T20430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.442265][T20430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.571718][T20341] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.608051][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.615248][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.645363][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.652537][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.749995][ T5099] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1263.798846][T20430] hsr_slave_0: entered promiscuous mode [ 1263.826075][T20430] hsr_slave_1: entered promiscuous mode [ 1263.843735][T20430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1263.860032][T20430] Cannot create hsr debugfs directory [ 1263.976362][T20268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.079740][ T57] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1264.094931][T20341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1264.238620][T20297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.276697][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 1264.293528][ T57] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1264.325782][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.368828][ T57] usb 4-1: config 0 descriptor?? [ 1264.388228][ T57] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 1264.413609][ T57] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1264.450051][T20430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.520145][T20341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.590314][T20268] veth0_vlan: entered promiscuous mode [ 1264.614879][T20297] veth0_vlan: entered promiscuous mode [ 1264.708483][T20430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.747576][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2772'. [ 1264.772228][T20297] veth1_vlan: entered promiscuous mode [ 1264.787921][ T9] usb 4-1: USB disconnect, device number 87 [ 1264.815394][T20268] veth1_vlan: entered promiscuous mode [ 1264.903286][T20430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.059468][T20430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.106002][T20341] veth0_vlan: entered promiscuous mode [ 1265.163518][T20341] veth1_vlan: entered promiscuous mode [ 1265.226355][T20268] veth0_macvtap: entered promiscuous mode [ 1265.263118][T20268] veth1_macvtap: entered promiscuous mode [ 1265.290891][T20297] veth0_macvtap: entered promiscuous mode [ 1265.314846][T20297] veth1_macvtap: entered promiscuous mode [ 1265.326786][ T5099] Bluetooth: hci0: command tx timeout [ 1265.475705][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.492538][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.505795][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.518329][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.535099][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.549424][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.563561][T20297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.623840][T20341] veth0_macvtap: entered promiscuous mode [ 1265.665085][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.686590][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.707471][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.726365][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.754679][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.767058][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.784454][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1265.796687][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.810494][T20268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.821412][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.844808][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.855556][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.866946][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.889360][T20297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1265.910865][T20297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1265.929762][T20297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.955101][T20341] veth1_macvtap: entered promiscuous mode [ 1265.986983][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.018957][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.048134][ T57] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1266.055845][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.076865][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.095161][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.106021][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.124543][T20268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.138138][T20268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.150467][T20268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.163617][T20268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.173163][T20268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.182327][T20268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.192461][T20268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.219882][T20297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.239940][T20297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.249431][T20297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.264102][T20297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.273020][ T57] usb 4-1: Using ep0 maxpacket: 32 [ 1266.281000][ T57] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=e7.5b [ 1266.306092][T20430] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1266.313702][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.329177][ T57] usb 4-1: config 0 descriptor?? [ 1266.358488][T20430] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1266.364569][ T57] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1266.390721][T20430] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1266.484529][T20430] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1266.566818][T17439] usb 4-1: Failed to submit usb control message: -71 [ 1266.574012][T17439] usb 4-1: unable to send the bmi data to the device: -71 [ 1266.595025][ T5142] usb 4-1: USB disconnect, device number 88 [ 1266.596612][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.611763][T17439] usb 4-1: unable to get target info from device [ 1266.611829][T17439] usb 4-1: could not get target info (-71) [ 1266.611858][T17439] usb 4-1: could not probe fw (-71) [ 1266.639157][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.675812][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.706628][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.717245][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.728779][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.747224][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.757766][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.776316][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1266.786986][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.799337][T20341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.821020][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.831575][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.851441][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.862718][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.873283][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.883818][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.893702][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.904513][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.916026][T20341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1266.936944][T20341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1266.971288][T20341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.005327][T20341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.026787][T20341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.035572][T20341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.045884][T20341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.299364][T17427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.321922][T17427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.341210][ T29] audit: type=1326 audit(1719993780.728:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.369997][ T29] audit: type=1326 audit(1719993780.728:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.404214][ T29] audit: type=1326 audit(1719993780.758:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.440078][ T5099] Bluetooth: hci0: command tx timeout [ 1267.471038][ T29] audit: type=1326 audit(1719993780.758:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.495054][ T29] audit: type=1326 audit(1719993780.758:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.518163][ T29] audit: type=1326 audit(1719993780.768:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.540428][ T29] audit: type=1326 audit(1719993780.768:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.540493][ T29] audit: type=1326 audit(1719993780.768:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20536 comm="syz.3.2775" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x7ffc0000 [ 1267.546760][T17427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.603569][T17427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.748806][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.759389][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.796303][T20430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.828328][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.836220][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.883108][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.919541][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.959399][ T8061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.963864][T20430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.988193][ T8061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.007594][T20542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2777'. [ 1268.043359][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.050608][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.099093][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.106303][T15681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.507211][T20430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.626927][ T5145] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1268.667046][ T5143] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1268.683017][T20430] veth0_vlan: entered promiscuous mode [ 1268.695896][ T29] audit: type=1326 audit(1719993782.078:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20556 comm="syz.1.2781" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x0 [ 1268.764894][T20430] veth1_vlan: entered promiscuous mode [ 1268.779740][ T29] audit: type=1326 audit(1719993782.178:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20559 comm="syz.0.2782" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7432579 code=0x7ffc0000 [ 1268.836780][ T5145] usb 3-1: Using ep0 maxpacket: 8 [ 1268.852050][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.870600][ T5145] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1268.886443][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.886743][ T5143] usb 4-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1268.887096][T20430] veth0_macvtap: entered promiscuous mode [ 1268.895311][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.925014][ T5145] usb 3-1: config 0 descriptor?? [ 1268.935939][ T5143] usb 4-1: Product: syz [ 1268.941001][ T5143] usb 4-1: Manufacturer: syz [ 1268.945944][ T5143] usb 4-1: SerialNumber: syz [ 1268.961023][ T5143] usb 4-1: config 0 descriptor?? [ 1268.973561][T20430] veth1_macvtap: entered promiscuous mode [ 1269.036094][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.048855][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.060341][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.083356][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.101481][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.115279][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.130743][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.144658][ T5145] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1269.145052][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.155478][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.190948][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2778'. [ 1269.200080][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.200104][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.200124][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.202460][T20430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.271993][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.286322][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.296384][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.308264][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.311367][ T5143] usb 4-1: USB disconnect, device number 89 [ 1269.318200][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.318228][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.318249][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.318266][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.318280][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.318296][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.318323][T20430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.318340][T20430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.320625][T20430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.429433][ T5093] usb 3-1: USB disconnect, device number 105 [ 1269.429496][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1269.448382][T20430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.460555][T20430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.469690][T20430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.480695][T20430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.523542][ T5093] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1269.728266][ T8061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.736151][ T8061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.783930][T20570] geneve2: entered promiscuous mode [ 1269.796154][T20570] geneve2: entered allmulticast mode [ 1269.850640][T17430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.865678][T17430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.030744][T20548] binder: BINDER_SET_CONTEXT_MGR already set [ 1270.064128][T20548] binder: 20547:20548 ioctl 4018620d 200001c0 returned -16 [ 1270.426856][ T9] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1270.635969][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1270.658784][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.673582][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1270.694547][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.716321][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.742681][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1270.762842][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.775870][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.786432][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1270.799796][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.817188][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.830128][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1270.852379][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.871261][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.888510][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1270.910370][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1270.958570][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1270.972657][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2787'. [ 1270.976578][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1271.003375][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1271.043565][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1271.055228][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1271.066655][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1271.094889][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1271.115575][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1271.156727][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1271.190620][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1271.206558][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1271.225404][ T9] usb 4-1: Product: syz [ 1271.229967][ T9] usb 4-1: Manufacturer: syz [ 1271.235538][ T9] usb 4-1: SerialNumber: syz [ 1271.254270][ T9] usb 4-1: config 0 descriptor?? [ 1271.275571][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1271.545150][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 1271.545794][ T5145] usb 4-1: USB disconnect, device number 90 [ 1271.578525][ T5145] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1272.296666][ T5145] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1272.476645][ T5145] usb 4-1: Using ep0 maxpacket: 16 [ 1272.489890][ T5145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1272.506591][ T5145] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1272.516154][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.539091][ T5145] usb 4-1: config 0 descriptor?? [ 1272.540658][T15681] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1272.550053][ T5145] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1272.773511][T15681] usb 3-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1272.782925][T15681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.802978][T15681] usb 3-1: Product: syz [ 1272.811483][T15681] usb 3-1: Manufacturer: syz [ 1272.816138][T15681] usb 3-1: SerialNumber: syz [ 1272.822295][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 1272.856780][T15681] usb 3-1: config 0 descriptor?? [ 1273.099987][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2796'. [ 1273.163451][T20593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1273.191996][T20593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.225173][T20625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.246199][ T5147] usb 3-1: USB disconnect, device number 106 [ 1273.371523][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1273.371544][ T29] audit: type=1326 audit(1719993786.768:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.400677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.416866][ T29] audit: type=1326 audit(1719993786.768:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.455103][ T29] audit: type=1326 audit(1719993786.808:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.492231][ T29] audit: type=1326 audit(1719993786.808:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.514259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.530528][ T29] audit: type=1326 audit(1719993786.808:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.558790][ T29] audit: type=1326 audit(1719993786.838:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.580803][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.595204][ T29] audit: type=1326 audit(1719993786.838:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.617563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.628151][ T29] audit: type=1326 audit(1719993786.838:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20629 comm="syz.4.2803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73db579 code=0x7ffc0000 [ 1273.650170][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.658235][T15681] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1273.839099][T15681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.856602][T15681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1273.878016][T15681] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.893556][T15681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.901845][T15681] usb 2-1: Product: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 1273.912202][T15681] usb 2-1: SerialNumber: syz [ 1273.950843][T20638] FAULT_INJECTION: forcing a failure. [ 1273.950843][T20638] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.963804][T20638] CPU: 0 PID: 20638 Comm: syz.2.2806 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1273.973996][T20638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1273.984086][T20638] Call Trace: [ 1273.987391][T20638] [ 1273.990390][T20638] dump_stack_lvl+0x241/0x360 [ 1273.995128][T20638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.000354][T20638] ? __pfx__printk+0x10/0x10 [ 1274.005022][T20638] should_fail_ex+0x3b0/0x4e0 [ 1274.009725][T20638] ? rtnl_newlink+0xf2/0x20a0 [ 1274.014429][T20638] should_failslab+0x9/0x20 [ 1274.018971][T20638] kmalloc_trace_noprof+0x6c/0x2c0 [ 1274.024140][T20638] ? __pfx_rtnl_newlink+0x10/0x10 [ 1274.029193][T20638] rtnl_newlink+0xf2/0x20a0 [ 1274.033713][T20638] ? __kernel_text_address+0xd/0x40 [ 1274.038965][T20638] ? __mutex_trylock_common+0x183/0x2e0 [ 1274.044537][T20638] ? __pfx___might_resched+0x10/0x10 [ 1274.049843][T20638] ? __pfx_rtnl_newlink+0x10/0x10 [ 1274.054901][T20638] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1274.060837][T20638] ? rcu_is_watching+0x15/0xb0 [ 1274.065614][T20638] ? trace_contention_end+0x3c/0x120 [ 1274.070917][T20638] ? __mutex_lock+0x2ef/0xd70 [ 1274.075619][T20638] ? rcu_read_unlock+0x87/0xa0 [ 1274.080399][T20638] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1274.085621][T20638] ? __pfx_lock_release+0x10/0x10 [ 1274.090669][T20638] ? __pfx___mutex_lock+0x10/0x10 [ 1274.095734][T20638] ? __pfx_rtnl_newlink+0x10/0x10 [ 1274.100779][T20638] rtnetlink_rcv_msg+0x89b/0x1180 [ 1274.105838][T20638] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1274.111158][T20638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1274.116641][T20638] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1274.122651][T20638] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1274.128999][T20638] ? __local_bh_enable_ip+0x168/0x200 [ 1274.134384][T20638] ? lockdep_hardirqs_on+0x99/0x150 [ 1274.139604][T20638] ? __local_bh_enable_ip+0x168/0x200 [ 1274.145076][T20638] ? dev_hard_start_xmit+0x773/0x7e0 [ 1274.150381][T20638] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1274.155512][T20638] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1274.161252][T20638] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1274.166380][T20638] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1274.171612][T20638] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1274.176838][T20638] ? ref_tracker_free+0x643/0x7e0 [ 1274.181897][T20638] netlink_rcv_skb+0x1e3/0x430 [ 1274.186683][T20638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1274.192250][T20638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1274.197574][T20638] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 1274.202799][T20638] ? rtnetlink_rcv+0xd/0x20 [ 1274.207331][T20638] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1274.212834][T20638] netlink_unicast+0x7ea/0x980 [ 1274.217769][T20638] ? __pfx_netlink_unicast+0x10/0x10 [ 1274.223077][T20638] ? __virt_addr_valid+0x183/0x520 [ 1274.228250][T20638] ? __check_object_size+0x49c/0x900 [ 1274.233574][T20638] ? bpf_lsm_netlink_send+0x9/0x10 [ 1274.238715][T20638] netlink_sendmsg+0x8db/0xcb0 [ 1274.243510][T20638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.248830][T20638] ? aa_sock_msg_perm+0x91/0x160 [ 1274.253789][T20638] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1274.259097][T20638] ? security_socket_sendmsg+0x87/0xb0 [ 1274.264573][T20638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1274.269882][T20638] __sock_sendmsg+0x221/0x270 [ 1274.274585][T20638] ____sys_sendmsg+0x525/0x7d0 [ 1274.279472][T20638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1274.284794][T20638] __sys_sendmsg+0x2b0/0x3a0 [ 1274.289415][T20638] ? __pfx___sys_sendmsg+0x10/0x10 [ 1274.294574][T20638] ? vfs_write+0x7c4/0xc90 [ 1274.299088][T20638] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1274.305717][T20638] ? lockdep_hardirqs_on+0x99/0x150 [ 1274.310945][T20638] __do_fast_syscall_32+0xb4/0x120 [ 1274.316093][T20638] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1274.322792][T20638] ? lockdep_hardirqs_on+0x99/0x150 [ 1274.328100][T20638] do_fast_syscall_32+0x34/0x80 [ 1274.333062][T20638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1274.339405][T20638] RIP: 0023:0xf73fa579 [ 1274.343486][T20638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1274.363208][T20638] RSP: 002b:00000000f5d1357c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1274.371661][T20638] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 1274.379679][T20638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1274.387669][T20638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.395647][T20638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1274.403668][T20638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.411670][T20638] [ 1274.459374][T15681] usb 2-1: 0:2 : does not exist [ 1274.483629][T15681] usb 2-1: USB disconnect, device number 79 [ 1274.592570][T20640] ALSA: seq fatal error: cannot create timer (-19) [ 1274.667491][ T5147] usb 4-1: USB disconnect, device number 91 [ 1274.684356][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2808'. [ 1274.704433][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2808'. [ 1274.753110][T18462] udevd[18462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1274.865539][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 1275.120605][T20651] gretap1: entered promiscuous mode [ 1275.125957][T20651] gretap1: entered allmulticast mode [ 1275.195434][ T5143] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 1275.380535][ T5143] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1275.414664][ T5143] usb 4-1: string descriptor 0 read error: -22 [ 1275.422979][ T5099] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1275.434706][ T5099] Bluetooth: hci5: Injecting HCI hardware error event [ 1275.444967][ T5096] Bluetooth: hci5: hardware error 0x00 [ 1275.470089][ T5143] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1275.480387][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.583339][T20669] input: syz1 as /devices/virtual/input/input176 [ 1275.670424][T20671] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1275.677078][T20671] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1275.687075][T20671] vhci_hcd vhci_hcd.0: Device attached [ 1275.694895][T20672] vhci_hcd: connection closed [ 1275.695399][T17430] vhci_hcd: stop threads [ 1275.705850][T17430] vhci_hcd: release socket [ 1275.710909][T17430] vhci_hcd: disconnect device [ 1275.720857][ T57] usb 4-1: USB disconnect, device number 92 [ 1276.139140][ T5145] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1276.334133][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2820'. [ 1276.368701][ T5145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.403518][ T5145] usb 3-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=f8.b5 [ 1276.415059][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.442218][ T5145] usb 3-1: config 0 descriptor?? [ 1276.741573][ T9] usb 3-1: USB disconnect, device number 107 [ 1276.788725][T15681] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1276.888803][ T785] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1276.909466][ T29] audit: type=1400 audit(1719993790.308:642): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20694 comm="syz.4.2826" [ 1276.916258][T20695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 1277.014748][T15681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.017531][T20697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1277.036018][T15681] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1277.062040][T15681] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1277.081522][T15681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.102154][T15681] usb 2-1: Product: 抡֨顼ì¼âƒ‰ê«ã§¨ã™˜Ü“슪ꀡ⚃⶟墔蓼༣鴾êšå„§í™³Ú‹ìª—鸎 [ 1277.112754][ T785] usb 4-1: Using ep0 maxpacket: 8 [ 1277.128523][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1277.146550][T15681] usb 2-1: SerialNumber: syz [ 1277.149133][T20699] FAULT_INJECTION: forcing a failure. [ 1277.149133][T20699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1277.153473][ T785] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1277.166239][T20699] CPU: 1 PID: 20699 Comm: syz.4.2828 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1277.184520][T20699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1277.194695][T20699] Call Trace: [ 1277.198081][T20699] [ 1277.201019][T20699] dump_stack_lvl+0x241/0x360 [ 1277.205731][T20699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1277.211041][T20699] ? __pfx__printk+0x10/0x10 [ 1277.215652][T20699] ? __pfx_lock_release+0x10/0x10 [ 1277.220710][T20699] ? vfs_write+0x7c4/0xc90 [ 1277.225158][T20699] should_fail_ex+0x3b0/0x4e0 [ 1277.229860][T20699] _copy_from_user+0x2f/0xe0 [ 1277.234509][T20699] __sys_bpf+0x1a4/0x810 [ 1277.238783][T20699] ? __pfx___sys_bpf+0x10/0x10 [ 1277.243578][T20699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1277.249947][T20699] __ia32_sys_bpf+0x7c/0x90 [ 1277.254472][T20699] __do_fast_syscall_32+0xb4/0x120 [ 1277.259620][T20699] ? exc_page_fault+0x590/0x8c0 [ 1277.264512][T20699] do_fast_syscall_32+0x34/0x80 [ 1277.269393][T20699] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.275837][T20699] RIP: 0023:0xf73db579 [ 1277.279938][T20699] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1277.299562][T20699] RSP: 002b:00000000f5cf457c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1277.308081][T20699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000180 [ 1277.316151][T20699] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1277.324137][T20699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1277.332119][T20699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1277.340106][T20699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1277.348098][T20699] [ 1277.356561][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.379389][ T785] usb 4-1: config 0 descriptor?? [ 1277.568879][ T5096] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1277.617764][ T785] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1277.647717][T15681] usb 2-1: 0:2 : does not exist [ 1277.691699][T15681] usb 2-1: USB disconnect, device number 80 [ 1277.775712][T20705] FAULT_INJECTION: forcing a failure. [ 1277.775712][T20705] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.789549][T20705] CPU: 0 PID: 20705 Comm: syz.2.2830 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1277.799763][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1277.809846][T20705] Call Trace: [ 1277.813155][T20705] [ 1277.816092][T20705] dump_stack_lvl+0x241/0x360 [ 1277.820791][T20705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1277.826007][T20705] ? __pfx__printk+0x10/0x10 [ 1277.830618][T20705] ? ref_tracker_alloc+0x332/0x490 [ 1277.835751][T20705] should_fail_ex+0x3b0/0x4e0 [ 1277.840458][T20705] ? skb_clone+0x20c/0x390 [ 1277.844886][T20705] should_failslab+0x9/0x20 [ 1277.849625][T20705] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1277.855130][T20705] skb_clone+0x20c/0x390 [ 1277.859406][T20705] __netlink_deliver_tap+0x3cc/0x7c0 [ 1277.864719][T20705] ? netlink_deliver_tap+0x2e/0x1b0 [ 1277.869934][T20705] netlink_deliver_tap+0x19d/0x1b0 [ 1277.875160][T20705] netlink_unicast+0x7b8/0x980 [ 1277.879947][T20705] ? __pfx_netlink_unicast+0x10/0x10 [ 1277.885248][T20705] ? __virt_addr_valid+0x183/0x520 [ 1277.890384][T20705] ? __check_object_size+0x49c/0x900 [ 1277.895693][T20705] ? bpf_lsm_netlink_send+0x9/0x10 [ 1277.900827][T20705] netlink_sendmsg+0x8db/0xcb0 [ 1277.905649][T20705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.910956][T20705] ? aa_sock_msg_perm+0x91/0x160 [ 1277.915915][T20705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1277.921210][T20705] ? security_socket_sendmsg+0x87/0xb0 [ 1277.926709][T20705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1277.932012][T20705] __sock_sendmsg+0x221/0x270 [ 1277.936714][T20705] ____sys_sendmsg+0x525/0x7d0 [ 1277.941505][T20705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1277.946836][T20705] __sys_sendmsg+0x2b0/0x3a0 [ 1277.951450][T20705] ? __pfx___sys_sendmsg+0x10/0x10 [ 1277.956574][T20705] ? vfs_write+0x7c4/0xc90 [ 1277.961051][T20705] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1277.967688][T20705] ? lockdep_hardirqs_on+0x99/0x150 [ 1277.972912][T20705] __do_fast_syscall_32+0xb4/0x120 [ 1277.978052][T20705] ? exc_page_fault+0x590/0x8c0 [ 1277.982925][T20705] do_fast_syscall_32+0x34/0x80 [ 1277.987799][T20705] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1277.994143][T20705] RIP: 0023:0xf73fa579 [ 1277.998227][T20705] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1278.017853][T20705] RSP: 002b:00000000f5d1357c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1278.026282][T20705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 1278.034291][T20705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.042360][T20705] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1278.050432][T20705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1278.058411][T20705] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1278.066444][T20705] [ 1278.160066][ T5147] usb 4-1: USB disconnect, device number 93 [ 1278.160141][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1278.182775][ T5147] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 1278.238779][T18462] udevd[18462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1278.416691][ T785] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1278.472944][T20688] binder: BINDER_SET_CONTEXT_MGR already set [ 1278.479491][T20688] binder: 20687:20688 ioctl 4018620d 200001c0 returned -16 [ 1278.608968][ T785] usb 3-1: Using ep0 maxpacket: 8 [ 1278.612312][ T785] usb 3-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1278.612340][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.612357][ T785] usb 3-1: Product: syz [ 1278.612370][ T785] usb 3-1: Manufacturer: syz [ 1278.612383][ T785] usb 3-1: SerialNumber: syz [ 1278.614414][ T785] usb 3-1: config 0 descriptor?? [ 1278.616247][ T785] cdc_phonet 3-1:0.0: probe with driver cdc_phonet failed with error -22 [ 1278.673256][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2832'. [ 1278.833137][T20707] fuse: Unknown parameter 'dd$¸Gƒ“MÑ^&—Øk|ç‰/—°S›36•‡}ü<ÀKžºW™·ÁÓ;HIÓÏ~¤çßê–"©fïÿäæ"£cF [ 1278.833137][T20707] eû' [ 1279.070791][T20720] kernel profiling enabled (shift: 9) [ 1279.117325][ T5147] usb 3-1: USB disconnect, device number 108 [ 1279.236680][ T57] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1279.291474][ T29] audit: type=1400 audit(1719993792.688:643): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20724 comm="syz.3.2837" [ 1279.325952][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2837'. [ 1279.446677][ T57] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1279.463222][ T57] usb 2-1: can't read configurations, error -61 [ 1279.617010][ T57] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1279.745649][T20732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1279.816189][ T57] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1279.836779][ T57] usb 2-1: can't read configurations, error -61 [ 1279.843915][ T57] usb usb2-port1: attempt power cycle [ 1280.276879][ T57] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1280.345423][ T57] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1280.351683][ T785] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1280.353718][ T57] usb 2-1: can't read configurations, error -61 [ 1280.449391][T20742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 1280.512005][T20745] input: syz1 as /devices/virtual/input/input177 [ 1280.546816][ T57] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1280.570549][ T785] usb 3-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1280.585695][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.590441][ T57] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1280.594045][ T785] usb 3-1: Product: syz [ 1280.603879][ T57] usb 2-1: can't read configurations, error -61 [ 1280.612400][ T785] usb 3-1: Manufacturer: syz [ 1280.614279][ T57] usb usb2-port1: unable to enumerate USB device [ 1280.622483][ T785] usb 3-1: SerialNumber: syz [ 1280.651663][ T785] usb 3-1: config 0 descriptor?? [ 1280.870887][T20740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 1280.915137][ T785] usb 3-1: USB disconnect, device number 109 [ 1281.522285][ C0] net_ratelimit: 28 callbacks suppressed [ 1281.522301][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1281.766609][ T5147] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1281.948736][ T5147] usb 4-1: Using ep0 maxpacket: 8 [ 1281.961382][ T5147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1281.986710][ T5147] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1281.995952][ T5147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.016282][ T5147] usb 4-1: config 0 descriptor?? [ 1282.036158][ T29] audit: type=1400 audit(1719993795.428:644): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20754 comm="syz.1.2849" [ 1282.071620][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2849'. [ 1282.236993][ T5147] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1282.426773][ T57] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1282.461849][ T5093] usb 4-1: USB disconnect, device number 94 [ 1282.461923][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1282.483402][ T5093] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 1282.598244][ T57] usb 2-1: device descriptor read/64, error -71 [ 1282.817999][T20774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 1282.927017][ T57] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1283.026039][T20776] input: syz1 as /devices/virtual/input/input178 [ 1283.107344][ T57] usb 2-1: device descriptor read/64, error -71 [ 1283.227890][ T57] usb usb2-port1: attempt power cycle [ 1283.343896][T20785] input: syz0 as /devices/virtual/input/input179 [ 1283.546209][T20788] netlink: 'syz.2.2860': attribute type 1 has an invalid length. [ 1283.676753][ T57] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1283.727478][ T57] usb 2-1: device descriptor read/8, error -71 [ 1283.882533][T20796] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 1283.906619][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 1283.915576][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 1284.017872][ T57] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1284.096938][ T57] usb 2-1: device descriptor read/8, error -71 [ 1284.131443][ T1038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.228538][ T57] usb usb2-port1: unable to enumerate USB device [ 1284.314066][ T1038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.453734][ T1038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.491401][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 1284.596849][ T1038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.867599][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.878530][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.892395][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.902293][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.915236][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1284.924381][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1284.959838][ T1038] bridge_slave_1: left allmulticast mode [ 1284.965557][ T1038] bridge_slave_1: left promiscuous mode [ 1284.987045][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.997121][ T1038] bridge_slave_0: left allmulticast mode [ 1285.002915][ T1038] bridge_slave_0: left promiscuous mode [ 1285.009483][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.136982][ T5145] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1285.236067][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 1285.253395][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2872'. [ 1285.356583][ T5145] usb 3-1: Using ep0 maxpacket: 8 [ 1285.367194][ T5145] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1285.388028][ T5145] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1285.399546][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.436132][ T5145] usb 3-1: config 0 descriptor?? [ 1285.564503][T20818] netlink: 'syz.1.2873': attribute type 1 has an invalid length. [ 1285.654874][ T5145] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1285.903904][ T5145] usb 3-1: USB disconnect, device number 110 [ 1285.903981][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 1285.985724][ T5145] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1286.095399][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.116088][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.150351][ T1038] bond0 (unregistering): Released all slaves [ 1286.367529][ T5142] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1286.415641][T20831] input: syz1 as /devices/virtual/input/input180 [ 1286.537023][ T5142] usb 4-1: device descriptor read/64, error -71 [ 1286.839164][ T1038] hsr_slave_0: left promiscuous mode [ 1286.845733][ T1038] hsr_slave_1: left promiscuous mode [ 1286.851292][ T5142] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1286.865544][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.874654][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.883542][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.892161][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.935661][ T1038] veth1_macvtap: left promiscuous mode [ 1286.942846][ T1038] veth0_macvtap: left promiscuous mode [ 1286.949308][ T1038] veth1_vlan: left promiscuous mode [ 1286.955261][ T1038] veth0_vlan: left promiscuous mode [ 1287.006819][ T5099] Bluetooth: hci0: command tx timeout [ 1287.018064][ T5142] usb 4-1: device descriptor read/64, error -71 [ 1287.147208][ T5142] usb usb4-port1: attempt power cycle [ 1287.548000][T20853] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1287.554575][T20853] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1287.575506][T20853] vhci_hcd vhci_hcd.0: Device attached [ 1287.586753][ T5142] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1287.631416][ T5142] usb 4-1: device descriptor read/8, error -71 [ 1287.675344][T20853] netlink: zone id is out of range [ 1287.691857][T20853] netlink: zone id is out of range [ 1287.704406][T20853] netlink: zone id is out of range [ 1287.715616][T20853] netlink: zone id is out of range [ 1287.725936][T20853] netlink: zone id is out of range [ 1287.736324][T20853] netlink: zone id is out of range [ 1287.742056][T20853] netlink: zone id is out of range [ 1287.757564][T20853] netlink: zone id is out of range [ 1287.763231][T20853] netlink: zone id is out of range [ 1287.777110][T20853] netlink: zone id is out of range [ 1287.836796][ T5147] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 1287.932738][ T5142] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1287.960946][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 1287.972669][ T5142] usb 4-1: device descriptor read/8, error -71 [ 1288.039485][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 1288.101382][ T5142] usb usb4-port1: unable to enumerate USB device [ 1288.243583][T20855] vhci_hcd: connection reset by peer [ 1288.263760][T17430] vhci_hcd: stop threads [ 1288.269105][T17430] vhci_hcd: release socket [ 1288.273678][T17430] vhci_hcd: disconnect device [ 1288.746589][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1288.910810][T20809] chnl_net:caif_netlink_parms(): no params data found [ 1288.981884][T20869] input: syz0 as /devices/virtual/input/input181 [ 1289.088123][ T5099] Bluetooth: hci0: command tx timeout [ 1289.164288][T20871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2879'. [ 1289.394489][ T5099] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260 [ 1289.430216][T20887] netlink: 'syz.0.2884': attribute type 1 has an invalid length. [ 1289.557304][T20809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.573679][T20809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.591709][T20809] bridge_slave_0: entered allmulticast mode [ 1289.610146][T20809] bridge_slave_0: entered promiscuous mode [ 1289.640396][T20809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.661873][T20809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.703774][T20895] input: syz1 as /devices/virtual/input/input182 [ 1289.712044][T20809] bridge_slave_1: entered allmulticast mode [ 1289.761099][T20809] bridge_slave_1: entered promiscuous mode [ 1289.787770][ T5145] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1289.886832][T20809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.904593][T20809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.926705][ T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1289.997991][T20904] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 1290.010804][T20809] team0: Port device team_slave_0 added [ 1290.030444][T20809] team0: Port device team_slave_1 added [ 1290.033188][ T5145] usb 4-1: Using ep0 maxpacket: 8 [ 1290.062170][ T5145] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1290.093367][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.114253][T20809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.136576][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1290.138265][ T5145] usb 4-1: config 0 descriptor?? [ 1290.141745][T20809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.181484][ T5145] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 1290.188965][T20809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.190894][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1290.227826][T20809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.240113][ T5145] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1290.249157][T20809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.256950][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.349838][ T9] usb 3-1: config 0 descriptor?? [ 1290.359691][T20809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.434615][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 1290.539191][ T5145] usb 4-1: USB disconnect, device number 99 [ 1290.547378][T20809] hsr_slave_0: entered promiscuous mode [ 1290.561869][T20809] hsr_slave_1: entered promiscuous mode [ 1290.578259][T20809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.592178][T20809] Cannot create hsr debugfs directory [ 1290.981644][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 1291.166643][ T5099] Bluetooth: hci0: command tx timeout [ 1291.653107][T20936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.687818][T20936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.727100][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.739341][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.749664][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.800818][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.820136][T20809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1291.842089][T20937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1291.853582][T20809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1291.869063][T20809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1291.885477][T20809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1292.092022][T20809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.123158][T20809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.146392][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.153651][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.191522][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.197642][ T5099] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 1292.198756][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.499454][T20809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.742670][T20809] veth0_vlan: entered promiscuous mode [ 1292.786350][T20809] veth1_vlan: entered promiscuous mode [ 1292.883573][T20809] veth0_macvtap: entered promiscuous mode [ 1292.918950][T20809] veth1_macvtap: entered promiscuous mode [ 1292.954991][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1292.981221][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.007272][ T5147] vhci_hcd: vhci_device speed not set [ 1293.012941][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.033477][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.056717][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.087261][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.102586][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.126511][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.147506][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.193451][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.216587][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.231514][T20968] netlink: 'syz.1.2897': attribute type 1 has an invalid length. [ 1293.235545][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1293.252422][ T5099] Bluetooth: hci0: command tx timeout [ 1293.268286][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1293.281031][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.283058][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1293.316381][T20965] sctp: [Deprecated]: syz.3.2894 (pid 20965) Use of int in max_burst socket option deprecated. [ 1293.316381][T20965] Use struct sctp_assoc_value instead [ 1293.317680][ T9] usb 3-1: USB disconnect, device number 111 [ 1293.349972][T20809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1293.437334][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.467671][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.499994][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.528098][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.559722][T20972] input: syz1 as /devices/virtual/input/input183 [ 1293.579486][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.604960][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.639015][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.675319][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.727162][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.785514][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.810381][T20809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1293.846817][T20809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1293.902871][T20809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.929857][T20809] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.970387][T20809] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.990397][T20809] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.001528][T20809] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.054586][ T29] audit: type=1326 audit(1719993807.448:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20987 comm="syz.3.2900" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73e9579 code=0x0 [ 1294.262824][T20996] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 1294.378798][T20996] batman_adv: batadv0: Adding interface: team0 [ 1294.396746][T20996] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.456611][T20996] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1294.485214][T20999] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 1294.516148][T20999] __nla_validate_parse: 15 callbacks suppressed [ 1294.516171][T20999] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2900'. [ 1294.550303][T20999] team0: entered promiscuous mode [ 1294.555396][T20999] team_slave_0: entered promiscuous mode [ 1294.597897][T20999] team_slave_1: entered promiscuous mode [ 1294.605758][T20999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.639473][T20999] batman_adv: batadv0: Interface activated: team0 [ 1294.687233][T20999] batman_adv: batadv0: Interface deactivated: team0 [ 1294.734238][T20999] batman_adv: batadv0: Removing interface: team0 [ 1294.796394][T20999] bridge0: port 3(team0) entered blocking state [ 1294.821616][T20999] bridge0: port 3(team0) entered disabled state [ 1294.891621][T20999] team0: entered allmulticast mode [ 1294.899665][T20999] team_slave_0: entered allmulticast mode [ 1294.907516][T20999] team_slave_1: entered allmulticast mode [ 1294.936208][T20999] bridge0: port 3(team0) entered blocking state [ 1294.942751][T20999] bridge0: port 3(team0) entered forwarding state [ 1295.028085][T21027] netlink: 'syz.0.2908': attribute type 1 has an invalid length. [ 1295.042344][T21026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 1295.080222][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.117303][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.316910][ T5143] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1295.345939][ T8061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.385354][ T8061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.529002][ T5143] usb 2-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1295.554748][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.611940][ T5143] usb 2-1: Product: syz [ 1295.616177][ T5143] usb 2-1: Manufacturer: syz [ 1295.649238][ T5143] usb 2-1: SerialNumber: syz [ 1295.682305][ T5143] usb 2-1: config 0 descriptor?? [ 1295.742591][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 1295.916723][ T57] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1295.997763][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2909'. [ 1296.074707][T21051] input: syz1 as /devices/virtual/input/input184 [ 1296.170639][ T57] usb 4-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1296.175716][ T9] usb 2-1: USB disconnect, device number 89 [ 1296.195831][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.206783][ T5099] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1296.216425][ T57] usb 4-1: Product: syz [ 1296.218907][ T5099] Bluetooth: hci2: Injecting HCI hardware error event [ 1296.233394][ T5099] Bluetooth: hci2: hardware error 0x00 [ 1296.240677][ T57] usb 4-1: Manufacturer: syz [ 1296.267569][ T57] usb 4-1: SerialNumber: syz [ 1296.275160][ T57] usb 4-1: config 0 descriptor?? [ 1296.611725][T21038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 1296.800727][ T9] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1297.005597][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.010247][ T57] usb 4-1: USB disconnect, device number 100 [ 1297.053577][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1297.076619][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.116412][ T9] usb 3-1: config 0 descriptor?? [ 1297.133016][ T9] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 1297.152350][ T9] usb 3-1: No valid video chain found. [ 1297.431441][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'. [ 1297.568201][ T9] usb 3-1: USB disconnect, device number 112 [ 1297.721206][T21102] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 1297.876253][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1298.368119][ T5099] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1300.620542][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.627539][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.960542][T21116] input: syz1 as /devices/virtual/input/input185 [ 1307.231361][ T57] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1307.366880][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2937'. [ 1307.384402][T21137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1307.433880][ T57] usb 3-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1307.443516][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.452938][ T57] usb 3-1: Product: syz [ 1307.458328][ T57] usb 3-1: Manufacturer: syz [ 1307.463412][ T57] usb 3-1: SerialNumber: syz [ 1307.483364][ T57] usb 3-1: config 0 descriptor?? [ 1307.658620][ T8061] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.700444][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1307.851431][ T8061] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.948288][ T785] usb 3-1: USB disconnect, device number 113 [ 1308.018542][ T8061] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.181312][ T8061] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.217226][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 1308.285661][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1308.304248][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1308.317996][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1308.329402][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1308.357004][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1308.368906][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1308.723691][ T8061] bridge_slave_1: left allmulticast mode [ 1308.742468][ T8061] bridge_slave_1: left promiscuous mode [ 1308.757407][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.788090][ T8061] bridge_slave_0: left allmulticast mode [ 1308.804767][ T8061] bridge_slave_0: left promiscuous mode [ 1308.825076][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.867896][T21173] input: syz1 as /devices/virtual/input/input186 [ 1309.778317][ T8061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.798581][ T8061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.822986][ T8061] bond0 (unregistering): Released all slaves [ 1309.865866][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2950'. [ 1309.975609][T21194] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 1310.324189][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 1310.344850][ T5096] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 1310.446937][ T5096] Bluetooth: hci5: command tx timeout [ 1310.766805][T15681] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1310.926937][ T8061] hsr_slave_0: left promiscuous mode [ 1310.933378][ T8061] hsr_slave_1: left promiscuous mode [ 1310.957671][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.965160][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.976881][T15681] usb 3-1: Using ep0 maxpacket: 8 [ 1310.993450][T15681] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1311.013372][T15681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.018953][ T8061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.047770][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.065790][T15681] usb 3-1: config 0 descriptor?? [ 1311.080738][T15681] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 1311.120729][T15681] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1311.149310][ T8061] veth1_macvtap: left promiscuous mode [ 1311.171489][ T8061] veth0_macvtap: left promiscuous mode [ 1311.203919][ T8061] veth1_vlan: left promiscuous mode [ 1311.246955][ T8061] veth0_vlan: left promiscuous mode [ 1312.526785][ T5096] Bluetooth: hci5: command tx timeout [ 1312.587350][ T8061] team0 (unregistering): Port device team_slave_1 removed [ 1312.666974][ T8061] team0 (unregistering): Port device team_slave_0 removed [ 1313.904689][T21234] FAULT_INJECTION: forcing a failure. [ 1313.904689][T21234] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.923294][T21234] CPU: 0 PID: 21234 Comm: syz.0.2963 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1313.933531][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1313.943631][T21234] Call Trace: [ 1313.946950][T21234] [ 1313.949920][T21234] dump_stack_lvl+0x241/0x360 [ 1313.954662][T21234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1313.959921][T21234] ? __pfx__printk+0x10/0x10 [ 1313.964585][T21234] should_fail_ex+0x3b0/0x4e0 [ 1313.969335][T21234] ? rtnl_newlink+0xf2/0x20a0 [ 1313.974102][T21234] should_failslab+0x9/0x20 [ 1313.978664][T21234] kmalloc_trace_noprof+0x6c/0x2c0 [ 1313.983841][T21234] ? __pfx_rtnl_newlink+0x10/0x10 [ 1313.988950][T21234] rtnl_newlink+0xf2/0x20a0 [ 1313.993544][T21234] ? __pfx_lock_acquire+0x10/0x10 [ 1313.998719][T21234] ? __mutex_lock+0x99b/0xd70 [ 1314.003453][T21234] ? __pfx_lock_release+0x10/0x10 [ 1314.008535][T21234] ? do_raw_spin_lock+0x14f/0x370 [ 1314.013625][T21234] ? __pfx_rtnl_newlink+0x10/0x10 [ 1314.018713][T21234] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1314.023987][T21234] ? __mutex_lock+0x9a5/0xd70 [ 1314.028763][T21234] ? __mutex_lock+0x527/0xd70 [ 1314.033502][T21234] ? rtnetlink_rcv_msg+0x842/0x1180 [ 1314.038770][T21234] ? __pfx___mutex_lock+0x10/0x10 [ 1314.043870][T21234] ? __pfx_rtnl_newlink+0x10/0x10 [ 1314.049037][T21234] rtnetlink_rcv_msg+0x89b/0x1180 [ 1314.054163][T21234] ? rtnetlink_rcv_msg+0x208/0x1180 [ 1314.059513][T21234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1314.065036][T21234] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1314.071076][T21234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1314.077462][T21234] ? __local_bh_enable_ip+0x168/0x200 [ 1314.082890][T21234] ? lockdep_hardirqs_on+0x99/0x150 [ 1314.088240][T21234] ? __local_bh_enable_ip+0x168/0x200 [ 1314.093665][T21234] ? dev_hard_start_xmit+0x773/0x7e0 [ 1314.099005][T21234] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1314.104170][T21234] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1314.109951][T21234] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1314.115128][T21234] ? __dev_queue_xmit+0x16c9/0x3d30 [ 1314.120399][T21234] ? __dev_queue_xmit+0x2d2/0x3d30 [ 1314.125584][T21234] ? ref_tracker_free+0x643/0x7e0 [ 1314.130677][T21234] netlink_rcv_skb+0x1e3/0x430 [ 1314.135508][T21234] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1314.141028][T21234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1314.146392][T21234] ? netlink_deliver_tap+0x2e/0x1b0 [ 1314.151657][T21234] netlink_unicast+0x7ea/0x980 [ 1314.156496][T21234] ? __pfx_netlink_unicast+0x10/0x10 [ 1314.161836][T21234] ? __virt_addr_valid+0x183/0x520 [ 1314.167099][T21234] ? __check_object_size+0x49c/0x900 [ 1314.172442][T21234] ? bpf_lsm_netlink_send+0x9/0x10 [ 1314.177627][T21234] netlink_sendmsg+0x8db/0xcb0 [ 1314.182441][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.187754][T21234] ? aa_sock_msg_perm+0x91/0x160 [ 1314.192710][T21234] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1314.198002][T21234] ? security_socket_sendmsg+0x87/0xb0 [ 1314.203481][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1314.208775][T21234] __sock_sendmsg+0x221/0x270 [ 1314.213491][T21234] ____sys_sendmsg+0x525/0x7d0 [ 1314.218385][T21234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1314.223690][T21234] __sys_sendmsg+0x2b0/0x3a0 [ 1314.228326][T21234] ? __pfx___sys_sendmsg+0x10/0x10 [ 1314.233463][T21234] ? vfs_write+0x7c4/0xc90 [ 1314.237952][T21234] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1314.244567][T21234] ? lockdep_hardirqs_on+0x99/0x150 [ 1314.249798][T21234] __do_fast_syscall_32+0xb4/0x120 [ 1314.254929][T21234] ? exc_page_fault+0x590/0x8c0 [ 1314.259815][T21234] do_fast_syscall_32+0x34/0x80 [ 1314.264705][T21234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1314.271062][T21234] RIP: 0023:0xf7432579 [ 1314.275136][T21234] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1314.294857][T21234] RSP: 002b:00000000f5d4b57c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1314.303315][T21234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 1314.311299][T21234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1314.319280][T21234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1314.327269][T21234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1314.335291][T21234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1314.343378][T21234] [ 1314.412001][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2956'. [ 1314.465936][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2964'. [ 1314.502483][ T5147] usb 3-1: USB disconnect, device number 114 [ 1314.538711][T21159] chnl_net:caif_netlink_parms(): no params data found [ 1314.609593][ T5096] Bluetooth: hci5: command tx timeout [ 1314.747277][T21249] net_ratelimit: 28 callbacks suppressed [ 1314.747294][T21249] openvswitch: netlink: EtherType 0 is less than min 600 [ 1315.279309][T21159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.307668][T21159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1315.328030][T21159] bridge_slave_0: entered allmulticast mode [ 1315.335752][T21159] bridge_slave_0: entered promiscuous mode [ 1315.428961][T21159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.440508][T21159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.468177][T21159] bridge_slave_1: entered allmulticast mode [ 1315.487152][T21159] bridge_slave_1: entered promiscuous mode [ 1315.538885][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1315.672187][T21159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.752863][ T9] usb 3-1: New USB device found, idVendor=12d1, idProduct=83a8, bcdDevice=23.b1 [ 1315.773983][T21251] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1315.785569][T21159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.806763][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.814860][ T9] usb 3-1: Product: syz [ 1315.819701][T21251] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1315.851841][ T9] usb 3-1: Manufacturer: syz [ 1315.861987][ T9] usb 3-1: SerialNumber: syz [ 1315.873738][T21251] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1315.882426][T21251] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1315.891942][ T9] usb 3-1: config 0 descriptor?? [ 1316.034875][T21159] team0: Port device team_slave_0 added [ 1316.058698][T21159] team0: Port device team_slave_1 added [ 1316.237327][T21264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 1316.291003][T21159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.291858][T21251] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1316.311970][T21251] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1316.346945][T21159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.420210][T21159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.536421][T21159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.543472][T21159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1316.576863][T21251] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1316.582831][T21251] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1316.677782][T21159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.759062][T15681] usb 3-1: USB disconnect, device number 115 [ 1316.915658][T21159] hsr_slave_0: entered promiscuous mode [ 1316.939354][T21159] hsr_slave_1: entered promiscuous mode [ 1316.956364][T21159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1316.975658][T21159] Cannot create hsr debugfs directory [ 1318.279806][T21159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1318.313275][T21159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1318.358442][T21159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1318.379784][T21159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1318.641756][T21159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1318.699132][T21159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1318.741059][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1318.748326][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1318.768788][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.776004][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.978860][T21159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.128441][T21159] veth0_vlan: entered promiscuous mode [ 1319.141816][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 1319.209414][T21159] veth1_vlan: entered promiscuous mode [ 1319.391281][T21159] veth0_macvtap: entered promiscuous mode [ 1319.420600][T21159] veth1_macvtap: entered promiscuous mode [ 1319.478359][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.516558][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.536596][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.556899][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.585229][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.596342][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.615118][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.627166][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.637403][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.673040][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.697902][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1319.716515][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.747482][T21159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.800067][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.823298][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.835305][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.854140][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.865374][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.896636][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.914525][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.925112][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.935171][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.953003][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1319.979164][T21159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1319.996499][T21159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1320.018610][T21159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1320.047264][ T5147] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1320.072852][T21159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.082921][T21159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.096609][T21159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.105571][T21159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.250036][ T5147] usb 3-1: Using ep0 maxpacket: 8 [ 1320.270547][ T5147] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1320.289285][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.305529][ T5147] usb 3-1: config 0 descriptor?? [ 1320.321225][ T5147] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 1320.344878][ T5147] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1320.547489][T21327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 1320.581836][ T5178] usb 3-1: USB disconnect, device number 116 [ 1346.723803][T17430] bridge_slave_1: left allmulticast mode [ 1346.730100][T17430] bridge_slave_1: left promiscuous mode [ 1346.735861][T17430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.747040][T17430] bridge_slave_0: left allmulticast mode [ 1346.752731][T17430] bridge_slave_0: left promiscuous mode [ 1346.762655][T17430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.210692][T17430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1347.222820][T17430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1347.234417][T17430] bond0 (unregistering): Released all slaves [ 1362.053076][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.062542][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.500971][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.507548][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.526900][ T30] INFO: task kworker/0:2:785 blocked for more than 143 seconds. [ 1478.534621][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1478.542510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1478.551333][ T30] task:kworker/0:2 state:D stack:21552 pid:785 tgid:785 ppid:2 flags:0x00004000 [ 1478.561618][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1478.572754][ T30] Call Trace: [ 1478.576082][ T30] [ 1478.579151][ T30] __schedule+0x17e8/0x4a20 [ 1478.583727][ T30] ? __pfx___schedule+0x10/0x10 [ 1478.589749][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1478.595784][ T30] ? __pfx_lock_release+0x10/0x10 [ 1478.600961][ T30] ? kick_pool+0x45c/0x620 [ 1478.605514][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1478.610833][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1478.616090][ T30] ? schedule+0x90/0x320 [ 1478.620518][ T30] schedule+0x14b/0x320 [ 1478.624706][ T30] schedule_preempt_disabled+0x13/0x30 [ 1478.630395][ T30] __mutex_lock+0x6a4/0xd70 [ 1478.634936][ T30] ? __mutex_lock+0x527/0xd70 [ 1478.639861][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1478.646158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1478.651365][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1478.657455][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1478.663848][ T30] ? process_scheduled_works+0x945/0x1830 [ 1478.669715][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1478.675904][ T30] ? process_scheduled_works+0x945/0x1830 [ 1478.684769][ T30] process_scheduled_works+0xa2c/0x1830 [ 1478.690779][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1478.698220][ T30] ? assign_work+0x364/0x3d0 [ 1478.702866][ T30] worker_thread+0x86d/0xd50 [ 1478.707633][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1478.712696][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1478.717939][ T30] kthread+0x2f0/0x390 [ 1478.722049][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1478.727297][ T30] ? __pfx_kthread+0x10/0x10 [ 1478.731928][ T30] ret_from_fork+0x4b/0x80 [ 1478.736360][ T30] ? __pfx_kthread+0x10/0x10 [ 1478.741118][ T30] ret_from_fork_asm+0x1a/0x30 [ 1478.745929][ T30] [ 1478.749168][ T30] INFO: task syz-executor:19918 blocked for more than 143 seconds. [ 1478.757131][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1478.764850][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1478.773668][ T30] task:syz-executor state:D stack:19632 pid:19918 tgid:19918 ppid:1 flags:0x20004006 [ 1478.784077][ T30] Call Trace: [ 1478.791917][ T30] [ 1478.794914][ T30] __schedule+0x17e8/0x4a20 [ 1478.799576][ T30] ? __pfx___schedule+0x10/0x10 [ 1478.804456][ T30] ? __pfx_lock_release+0x10/0x10 [ 1478.809624][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1478.815141][ T30] ? schedule+0x90/0x320 [ 1478.820269][ T30] schedule+0x14b/0x320 [ 1478.824446][ T30] schedule_preempt_disabled+0x13/0x30 [ 1478.830042][ T30] __mutex_lock+0x6a4/0xd70 [ 1478.834577][ T30] ? kobject_put+0x443/0x480 [ 1478.839273][ T30] ? __mutex_lock+0x527/0xd70 [ 1478.844075][ T30] ? rfkill_unregister+0xd0/0x230 [ 1478.849218][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1478.854269][ T30] ? __pfx_device_del+0x10/0x10 [ 1478.859341][ T30] ? hci_sock_dev_event+0x2eb/0x5f0 [ 1478.864586][ T30] rfkill_unregister+0xd0/0x230 [ 1478.869584][ T30] hci_unregister_dev+0x336/0x4e0 [ 1478.874654][ T30] vhci_release+0x83/0xd0 [ 1478.879200][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1478.884351][ T30] __fput+0x24a/0x8a0 [ 1478.888462][ T30] task_work_run+0x24f/0x310 [ 1478.893097][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1478.902108][ T30] ? do_exit+0xa22/0x27e0 [ 1478.906566][ T30] ? kmem_cache_free+0x145/0x350 [ 1478.911586][ T30] do_exit+0xa27/0x27e0 [ 1478.915794][ T30] ? __pfx_do_exit+0x10/0x10 [ 1478.920592][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1478.926120][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1478.934118][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1478.940599][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1478.945764][ T30] do_group_exit+0x207/0x2c0 [ 1478.950493][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1478.955723][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1478.961071][ T30] get_signal+0x16a1/0x1740 [ 1478.965634][ T30] ? __pfx_get_signal+0x10/0x10 [ 1478.970583][ T30] ? do_unlinkat+0x7b0/0x830 [ 1478.975212][ T30] ? kmem_cache_free+0x145/0x350 [ 1478.980285][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1478.985899][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1478.992212][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1478.998050][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 1479.003636][ T30] __do_fast_syscall_32+0xc4/0x120 [ 1479.013262][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1479.019640][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1479.024879][ T30] do_fast_syscall_32+0x34/0x80 [ 1479.029914][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1479.036535][ T30] RIP: 0023:0xf73e9579 [ 1479.040639][ T30] RSP: 002b:00000000f7539c2c EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1479.050372][ T30] RAX: ffffffffffffffff RBX: 00000000f7539cd0 RCX: 0000000000000000 [ 1479.058442][ T30] RDX: 00000000f73d4ff4 RSI: 0000000000001482 RDI: 0000000056d43414 [ 1479.066520][ T30] RBP: 00000000f7539cd0 R08: 0000000000000000 R09: 0000000000000000 [ 1479.074538][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1479.082696][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1479.091120][ T30] [ 1479.094194][ T30] INFO: task syz-executor:21159 blocked for more than 143 seconds. [ 1479.102218][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1479.109955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.121928][ T30] task:syz-executor state:D stack:20000 pid:21159 tgid:21159 ppid:1 flags:0x20000004 [ 1479.132216][ T30] Call Trace: [ 1479.135517][ T30] [ 1479.138567][ T30] __schedule+0x17e8/0x4a20 [ 1479.143120][ T30] ? __pfx___schedule+0x10/0x10 [ 1479.148112][ T30] ? __pfx_lock_release+0x10/0x10 [ 1479.153167][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1479.159513][ T30] ? schedule+0x90/0x320 [ 1479.163776][ T30] schedule+0x14b/0x320 [ 1479.168226][ T30] schedule_preempt_disabled+0x13/0x30 [ 1479.173719][ T30] __mutex_lock+0x6a4/0xd70 [ 1479.178437][ T30] ? __mutex_lock+0x527/0xd70 [ 1479.183166][ T30] ? rfkill_fop_open+0x131/0x850 [ 1479.188216][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1479.193390][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1479.198957][ T30] rfkill_fop_open+0x131/0x850 [ 1479.204149][ T30] ? module_put+0x13a/0x2d0 [ 1479.208836][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1479.214164][ T30] misc_open+0x313/0x390 [ 1479.218545][ T30] chrdev_open+0x5b0/0x630 [ 1479.223002][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1479.231926][ T30] ? security_file_open+0x51a/0x750 [ 1479.237268][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1479.242245][ T30] do_dentry_open+0x970/0x1450 [ 1479.247269][ T30] vfs_open+0x3e/0x330 [ 1479.251411][ T30] path_openat+0x2c01/0x35f0 [ 1479.256020][ T30] ? mark_lock+0x9a/0x350 [ 1479.260491][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1479.265568][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1479.271579][ T30] ? __pfx_path_openat+0x10/0x10 [ 1479.276634][ T30] do_filp_open+0x235/0x490 [ 1479.281179][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1479.286259][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1479.291257][ T30] ? alloc_fd+0x5a1/0x640 [ 1479.295631][ T30] do_sys_openat2+0x13e/0x1d0 [ 1479.300402][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1479.305651][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1479.311784][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1479.317429][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1479.323663][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1479.330554][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1479.335801][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1479.344439][ T30] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1479.350728][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1479.355979][ T30] do_fast_syscall_32+0x34/0x80 [ 1479.360911][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1479.367382][ T30] RIP: 0023:0xf7453579 [ 1479.371476][ T30] RSP: 002b:00000000f75a5ec0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1479.380097][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f733da6e [ 1479.389009][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f743eff4 [ 1479.397352][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1479.405350][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1479.413964][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1479.422081][ T30] [ 1479.425127][ T30] INFO: task syz.4.2966:21244 blocked for more than 144 seconds. [ 1479.432962][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1479.440708][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.453872][ T30] task:syz.4.2966 state:D stack:24640 pid:21244 tgid:21244 ppid:20809 flags:0x20004006 [ 1479.464198][ T30] Call Trace: [ 1479.467598][ T30] [ 1479.470584][ T30] __schedule+0x17e8/0x4a20 [ 1479.475147][ T30] ? __pfx___schedule+0x10/0x10 [ 1479.480129][ T30] ? __pfx_lock_release+0x10/0x10 [ 1479.485276][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1479.490964][ T30] ? schedule+0x90/0x320 [ 1479.495245][ T30] schedule+0x14b/0x320 [ 1479.500833][ T30] schedule_preempt_disabled+0x13/0x30 [ 1479.506355][ T30] __mutex_lock+0x6a4/0xd70 [ 1479.511079][ T30] ? kobject_put+0x443/0x480 [ 1479.515885][ T30] ? __mutex_lock+0x527/0xd70 [ 1479.520635][ T30] ? rfkill_unregister+0xd0/0x230 [ 1479.525784][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1479.530957][ T30] ? __pfx_device_del+0x10/0x10 [ 1479.535868][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 1479.542788][ T30] rfkill_unregister+0xd0/0x230 [ 1479.547839][ T30] nfc_unregister_device+0x96/0x2a0 [ 1479.553073][ T30] virtual_ncidev_close+0x59/0x90 [ 1479.562772][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1479.568767][ T30] __fput+0x24a/0x8a0 [ 1479.572834][ T30] task_work_run+0x24f/0x310 [ 1479.577513][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1479.582665][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 1479.588544][ T30] syscall_exit_to_user_mode+0x168/0x360 [ 1479.594242][ T30] __do_fast_syscall_32+0xc4/0x120 [ 1479.599543][ T30] ? exc_page_fault+0x590/0x8c0 [ 1479.604430][ T30] do_fast_syscall_32+0x34/0x80 [ 1479.610559][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1479.617086][ T30] RIP: 0023:0xf73df579 [ 1479.621186][ T30] RSP: 002b:00000000f7531abc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1479.629709][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1479.637790][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.645776][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1479.653879][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1479.661939][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1479.674615][ T30] [ 1479.677749][ T30] INFO: task syz.0.2968:21251 blocked for more than 144 seconds. [ 1479.685573][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1479.693362][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1479.702173][ T30] task:syz.0.2968 state:D stack:24792 pid:21251 tgid:21250 ppid:20297 flags:0x20004006 [ 1479.712483][ T30] Call Trace: [ 1479.715804][ T30] [ 1479.718913][ T30] __schedule+0x17e8/0x4a20 [ 1479.723475][ T30] ? __pfx___schedule+0x10/0x10 [ 1479.729898][ T30] ? __pfx_lock_release+0x10/0x10 [ 1479.734989][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1479.740759][ T30] ? schedule+0x90/0x320 [ 1479.745108][ T30] schedule+0x14b/0x320 [ 1479.749365][ T30] schedule_preempt_disabled+0x13/0x30 [ 1479.754954][ T30] __mutex_lock+0x6a4/0xd70 [ 1479.759571][ T30] ? __mutex_lock+0x527/0xd70 [ 1479.764295][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 1479.769729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1479.774805][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1479.783249][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1479.789295][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1479.795660][ T30] nfc_rfkill_set_block+0x50/0x310 [ 1479.800896][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1479.807482][ T30] rfkill_set_block+0x1f1/0x440 [ 1479.812409][ T30] rfkill_fop_write+0x5bb/0x790 [ 1479.817375][ T30] ? common_file_perm+0x1a6/0x210 [ 1479.822447][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1479.827952][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 1479.833382][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 1479.839520][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1479.844967][ T30] vfs_write+0x2a2/0xc90 [ 1479.849355][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1479.854151][ T30] ? do_futex+0x392/0x560 [ 1479.858562][ T30] ? __fget_files+0x29/0x470 [ 1479.863202][ T30] ? __fget_files+0x3f6/0x470 [ 1479.868047][ T30] ? __fget_files+0x29/0x470 [ 1479.872699][ T30] ksys_write+0x1a0/0x2c0 [ 1479.877132][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1479.881998][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1479.891932][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1479.897255][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1479.902421][ T30] ? exc_page_fault+0x590/0x8c0 [ 1479.907404][ T30] do_fast_syscall_32+0x34/0x80 [ 1479.912300][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1479.918741][ T30] RIP: 0023:0xf7432579 [ 1479.922838][ T30] RSP: 002b:00000000f5d4b57c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1479.931372][ T30] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000080 [ 1479.939408][ T30] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 1479.948658][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1479.956857][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1479.964871][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1479.973519][ T30] [ 1479.976659][ T30] INFO: task syz-executor:21362 blocked for more than 144 seconds. [ 1479.984854][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1479.992621][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.001532][ T30] task:syz-executor state:D stack:24640 pid:21362 tgid:21362 ppid:5081 flags:0x20000004 [ 1480.014959][ T30] Call Trace: [ 1480.018401][ T30] [ 1480.021379][ T30] __schedule+0x17e8/0x4a20 [ 1480.025935][ T30] ? __pfx___schedule+0x10/0x10 [ 1480.030938][ T30] ? __pfx_lock_release+0x10/0x10 [ 1480.036069][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1480.041632][ T30] ? schedule+0x90/0x320 [ 1480.045900][ T30] schedule+0x14b/0x320 [ 1480.050298][ T30] schedule_preempt_disabled+0x13/0x30 [ 1480.055795][ T30] __mutex_lock+0x6a4/0xd70 [ 1480.061261][ T30] ? __mutex_lock+0x527/0xd70 [ 1480.065980][ T30] ? misc_open+0x5c/0x390 [ 1480.070437][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1480.075498][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1480.081241][ T30] misc_open+0x5c/0x390 [ 1480.085443][ T30] chrdev_open+0x5b0/0x630 [ 1480.089990][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.095245][ T30] ? security_file_open+0x51a/0x750 [ 1480.100682][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.105681][ T30] do_dentry_open+0x970/0x1450 [ 1480.110625][ T30] vfs_open+0x3e/0x330 [ 1480.114836][ T30] path_openat+0x2c01/0x35f0 [ 1480.122689][ T30] ? mark_lock+0x9a/0x350 [ 1480.127184][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.132267][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.137522][ T30] ? __pfx_path_openat+0x10/0x10 [ 1480.142522][ T30] do_filp_open+0x235/0x490 [ 1480.147137][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1480.152232][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1480.157507][ T30] ? alloc_fd+0x5a1/0x640 [ 1480.161908][ T30] do_sys_openat2+0x13e/0x1d0 [ 1480.167680][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.172920][ T30] ? __se_compat_sys_socketcall+0xa73/0x1430 [ 1480.179025][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1480.184601][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1480.190826][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1480.197555][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1480.202939][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1480.208221][ T30] ? exc_page_fault+0x590/0x8c0 [ 1480.213118][ T30] do_fast_syscall_32+0x34/0x80 [ 1480.218100][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1480.224455][ T30] RIP: 0023:0xf749e579 [ 1480.232315][ T30] RSP: 002b:00000000ffa69640 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1480.240881][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f73889c3 [ 1480.248990][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7489ff4 [ 1480.257166][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1480.265162][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1480.273269][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1480.281375][ T30] [ 1480.284413][ T30] INFO: task syz.2.2980:21369 blocked for more than 145 seconds. [ 1480.293572][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1480.301294][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.310072][ T30] task:syz.2.2980 state:D stack:27328 pid:21369 tgid:21368 ppid:20341 flags:0x20000004 [ 1480.320348][ T30] Call Trace: [ 1480.323924][ T30] [ 1480.327105][ T30] __schedule+0x17e8/0x4a20 [ 1480.331676][ T30] ? __pfx___schedule+0x10/0x10 [ 1480.341134][ T30] ? __pfx_lock_release+0x10/0x10 [ 1480.346222][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1480.352105][ T30] ? schedule+0x90/0x320 [ 1480.356467][ T30] schedule+0x14b/0x320 [ 1480.360674][ T30] schedule_preempt_disabled+0x13/0x30 [ 1480.366175][ T30] __mutex_lock+0x6a4/0xd70 [ 1480.370968][ T30] ? __mutex_lock+0x527/0xd70 [ 1480.375684][ T30] ? misc_open+0x5c/0x390 [ 1480.380093][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1480.385150][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1480.390920][ T30] misc_open+0x5c/0x390 [ 1480.395136][ T30] chrdev_open+0x5b0/0x630 [ 1480.400396][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.405374][ T30] ? security_file_open+0x51a/0x750 [ 1480.411021][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.415995][ T30] do_dentry_open+0x970/0x1450 [ 1480.420886][ T30] vfs_open+0x3e/0x330 [ 1480.424999][ T30] path_openat+0x2c01/0x35f0 [ 1480.429731][ T30] ? mark_lock+0x9a/0x350 [ 1480.434094][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.439223][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.444288][ T30] ? __pfx_path_openat+0x10/0x10 [ 1480.454050][ T30] do_filp_open+0x235/0x490 [ 1480.458732][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1480.463828][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1480.468817][ T30] ? alloc_fd+0x5a1/0x640 [ 1480.473205][ T30] do_sys_openat2+0x13e/0x1d0 [ 1480.478019][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.483267][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1480.488968][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1480.495066][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1480.501782][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1480.507918][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1480.513054][ T30] ? exc_page_fault+0x590/0x8c0 [ 1480.518033][ T30] do_fast_syscall_32+0x34/0x80 [ 1480.522918][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1480.529763][ T30] RIP: 0023:0xf73fa579 [ 1480.533869][ T30] RSP: 002b:00000000f5d11480 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1480.542352][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72e4028 [ 1480.550482][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73e5ff4 [ 1480.561957][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1480.570142][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1480.578233][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1480.586241][ T30] [ 1480.589378][ T30] INFO: task syz-executor:21431 blocked for more than 145 seconds. [ 1480.597359][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1480.605020][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.613798][ T30] task:syz-executor state:D stack:24640 pid:21431 tgid:21431 ppid:5081 flags:0x20000000 [ 1480.624093][ T30] Call Trace: [ 1480.628392][ T30] [ 1480.631344][ T30] __schedule+0x17e8/0x4a20 [ 1480.635869][ T30] ? __pfx___schedule+0x10/0x10 [ 1480.640895][ T30] ? __pfx_lock_release+0x10/0x10 [ 1480.645955][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1480.651531][ T30] ? schedule+0x90/0x320 [ 1480.655798][ T30] schedule+0x14b/0x320 [ 1480.660050][ T30] schedule_preempt_disabled+0x13/0x30 [ 1480.665539][ T30] __mutex_lock+0x6a4/0xd70 [ 1480.674340][ T30] ? __mutex_lock+0x527/0xd70 [ 1480.679138][ T30] ? misc_open+0x5c/0x390 [ 1480.683527][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1480.688679][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1480.694359][ T30] misc_open+0x5c/0x390 [ 1480.698618][ T30] chrdev_open+0x5b0/0x630 [ 1480.703085][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.708139][ T30] ? security_file_open+0x51a/0x750 [ 1480.713369][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1480.718424][ T30] do_dentry_open+0x970/0x1450 [ 1480.723232][ T30] vfs_open+0x3e/0x330 [ 1480.727427][ T30] path_openat+0x2c01/0x35f0 [ 1480.732074][ T30] ? mark_lock+0x9a/0x350 [ 1480.737576][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.742657][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1480.747825][ T30] ? __pfx_path_openat+0x10/0x10 [ 1480.752808][ T30] do_filp_open+0x235/0x490 [ 1480.757397][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1480.762463][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1480.767968][ T30] ? alloc_fd+0x5a1/0x640 [ 1480.772365][ T30] do_sys_openat2+0x13e/0x1d0 [ 1480.781003][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1480.786240][ T30] ? __se_compat_sys_socketcall+0xa73/0x1430 [ 1480.792348][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1480.798023][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1480.804123][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1480.810858][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1480.816091][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1480.821277][ T30] ? exc_page_fault+0x590/0x8c0 [ 1480.826161][ T30] do_fast_syscall_32+0x34/0x80 [ 1480.831155][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1480.837680][ T30] RIP: 0023:0xf73f1579 [ 1480.841748][ T30] RSP: 002b:00000000ffeab4e0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1480.850337][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72db9c3 [ 1480.859578][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73dcff4 [ 1480.867680][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1480.875683][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1480.883721][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1480.895033][ T30] [ 1480.898152][ T30] INFO: task syz-executor:21432 blocked for more than 145 seconds. [ 1480.906061][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1480.913856][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1480.922584][ T30] task:syz-executor state:D stack:24640 pid:21432 tgid:21432 ppid:5081 flags:0x20000000 [ 1480.932914][ T30] Call Trace: [ 1480.936213][ T30] [ 1480.939247][ T30] __schedule+0x17e8/0x4a20 [ 1480.943820][ T30] ? __pfx___schedule+0x10/0x10 [ 1480.948795][ T30] ? __pfx_lock_release+0x10/0x10 [ 1480.953857][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1480.959394][ T30] ? schedule+0x90/0x320 [ 1480.963659][ T30] schedule+0x14b/0x320 [ 1480.968978][ T30] schedule_preempt_disabled+0x13/0x30 [ 1480.974467][ T30] __mutex_lock+0x6a4/0xd70 [ 1480.979103][ T30] ? __mutex_lock+0x527/0xd70 [ 1480.983812][ T30] ? misc_open+0x5c/0x390 [ 1480.988243][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1480.993302][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1480.999314][ T30] misc_open+0x5c/0x390 [ 1481.003515][ T30] chrdev_open+0x5b0/0x630 [ 1481.012109][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1481.017202][ T30] ? security_file_open+0x51a/0x750 [ 1481.022439][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1481.027493][ T30] do_dentry_open+0x970/0x1450 [ 1481.032316][ T30] vfs_open+0x3e/0x330 [ 1481.036488][ T30] path_openat+0x2c01/0x35f0 [ 1481.041116][ T30] ? mark_lock+0x9a/0x350 [ 1481.045468][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1481.050617][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1481.055667][ T30] ? __pfx_path_openat+0x10/0x10 [ 1481.060733][ T30] do_filp_open+0x235/0x490 [ 1481.065271][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1481.070461][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1481.075342][ T30] ? alloc_fd+0x5a1/0x640 [ 1481.080746][ T30] do_sys_openat2+0x13e/0x1d0 [ 1481.085464][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1481.094666][ T30] ? __se_compat_sys_socketcall+0xa73/0x1430 [ 1481.100916][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1481.106611][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1481.112727][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1481.122689][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1481.128173][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1481.133339][ T30] ? exc_page_fault+0x590/0x8c0 [ 1481.138283][ T30] do_fast_syscall_32+0x34/0x80 [ 1481.143179][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1481.149622][ T30] RIP: 0023:0xf73b0579 [ 1481.153719][ T30] RSP: 002b:00000000ffe32c20 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1481.162234][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f729a9c3 [ 1481.170397][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f739bff4 [ 1481.178501][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1481.187744][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1481.195764][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1481.203905][ T30] [ 1481.207133][ T30] INFO: task syz-executor:21433 blocked for more than 146 seconds. [ 1481.216272][ T30] Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1481.224035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1481.236062][ T30] task:syz-executor state:D stack:24640 pid:21433 tgid:21433 ppid:5081 flags:0x20000000 [ 1481.246353][ T30] Call Trace: [ 1481.249842][ T30] [ 1481.252819][ T30] __schedule+0x17e8/0x4a20 [ 1481.257526][ T30] ? __pfx___schedule+0x10/0x10 [ 1481.262530][ T30] ? __pfx_lock_release+0x10/0x10 [ 1481.267692][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1481.273197][ T30] ? schedule+0x90/0x320 [ 1481.277540][ T30] schedule+0x14b/0x320 [ 1481.281727][ T30] schedule_preempt_disabled+0x13/0x30 [ 1481.287294][ T30] __mutex_lock+0x6a4/0xd70 [ 1481.291839][ T30] ? __mutex_lock+0x527/0xd70 [ 1481.297332][ T30] ? misc_open+0x5c/0x390 [ 1481.301682][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1481.306912][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1481.312601][ T30] misc_open+0x5c/0x390 [ 1481.316903][ T30] chrdev_open+0x5b0/0x630 [ 1481.321392][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1481.326538][ T30] ? security_file_open+0x51a/0x750 [ 1481.331904][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1481.340211][ T30] do_dentry_open+0x970/0x1450 [ 1481.345039][ T30] vfs_open+0x3e/0x330 [ 1481.349261][ T30] path_openat+0x2c01/0x35f0 [ 1481.353904][ T30] ? mark_lock+0x9a/0x350 [ 1481.358419][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1481.363466][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 1481.368689][ T30] ? __pfx_path_openat+0x10/0x10 [ 1481.373694][ T30] do_filp_open+0x235/0x490 [ 1481.378342][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1481.383441][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1481.388457][ T30] ? alloc_fd+0x5a1/0x640 [ 1481.392865][ T30] do_sys_openat2+0x13e/0x1d0 [ 1481.397667][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1481.402918][ T30] ? __se_compat_sys_socketcall+0xa73/0x1430 [ 1481.410289][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1481.415969][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1481.422149][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1481.428861][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1481.434212][ T30] __do_fast_syscall_32+0xb4/0x120 [ 1481.439445][ T30] ? exc_page_fault+0x590/0x8c0 [ 1481.444331][ T30] do_fast_syscall_32+0x34/0x80 [ 1481.452474][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1481.458960][ T30] RIP: 0023:0xf7408579 [ 1481.463064][ T30] RSP: 002b:00000000ffbb24e0 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1481.471572][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72f29c3 [ 1481.479622][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73f3ff4 [ 1481.487902][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1481.495931][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1481.504317][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1481.512492][ T30] [ 1481.515577][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1481.525989][ T30] [ 1481.525989][ T30] Showing all locks held in the system: [ 1481.533906][ T30] 1 lock held by khungtaskd/30: [ 1481.538867][ T30] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1481.548834][ T30] 3 locks held by kworker/0:2/785: [ 1481.553974][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1481.569763][ T30] #1: ffffc900032bfd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1481.583425][ T30] #2: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1481.594920][ T30] 2 locks held by getty/4852: [ 1481.599715][ T30] #0: ffff88802a9590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1481.609584][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1481.619837][ T30] 4 locks held by kworker/u8:2/17430: [ 1481.625242][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1481.637333][ T30] #1: ffffc90014c2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1481.648061][ T30] #2: ffffffff8f5da690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1481.657598][ T30] #3: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1481.669079][ T30] 1 lock held by syz-executor/19918: [ 1481.674415][ T30] #0: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1481.687546][ T30] 2 locks held by syz-executor/21159: [ 1481.692966][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.701752][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 1481.711915][ T30] 2 locks held by syz.4.2966/21244: [ 1481.717201][ T30] #0: ffff888068591100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 1481.727124][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1481.737437][ T30] 2 locks held by syz.0.2968/21251: [ 1481.742785][ T30] #0: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 1481.753068][ T30] #1: ffff888068591100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 1481.763576][ T30] 1 lock held by syz-executor/21362: [ 1481.768985][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.778802][ T30] 1 lock held by syz.2.2980/21369: [ 1481.783966][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.794274][ T30] 1 lock held by syz-executor/21431: [ 1481.800800][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.809942][ T30] 1 lock held by syz-executor/21432: [ 1481.815461][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.824078][ T30] 1 lock held by syz-executor/21433: [ 1481.829471][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.838149][ T30] 1 lock held by syz-executor/21436: [ 1481.843455][ T30] #0: ffffffff8eb2f6e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1481.852054][ T30] [ 1481.854394][ T30] ============================================= [ 1481.854394][ T30] [ 1481.862898][ T30] NMI backtrace for cpu 1 [ 1481.867344][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1481.877254][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1481.887315][ T30] Call Trace: [ 1481.890624][ T30] [ 1481.893553][ T30] dump_stack_lvl+0x241/0x360 [ 1481.898248][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1481.903468][ T30] ? __pfx__printk+0x10/0x10 [ 1481.908090][ T30] ? vprintk_emit+0x631/0x770 [ 1481.912775][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1481.917836][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1481.922810][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1481.928280][ T30] ? _printk+0xd5/0x120 [ 1481.932537][ T30] ? __pfx__printk+0x10/0x10 [ 1481.937146][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1481.942019][ T30] ? __pfx__printk+0x10/0x10 [ 1481.946646][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1481.951695][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1481.957692][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1481.963695][ T30] watchdog+0xfde/0x1020 [ 1481.967953][ T30] ? watchdog+0x1ea/0x1020 [ 1481.972390][ T30] ? __pfx_watchdog+0x10/0x10 [ 1481.977080][ T30] kthread+0x2f0/0x390 [ 1481.981168][ T30] ? __pfx_watchdog+0x10/0x10 [ 1481.985855][ T30] ? __pfx_kthread+0x10/0x10 [ 1481.990547][ T30] ret_from_fork+0x4b/0x80 [ 1481.995009][ T30] ? __pfx_kthread+0x10/0x10 [ 1481.999615][ T30] ret_from_fork_asm+0x1a/0x30 [ 1482.004416][ T30] [ 1482.007959][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1482.013210][ C0] NMI backtrace for cpu 0 [ 1482.013224][ C0] CPU: 0 PID: 8061 Comm: kworker/u8:11 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1482.013245][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1482.013257][ C0] Workqueue: bat_events batadv_nc_worker [ 1482.013284][ C0] RIP: 0010:lockdep_softirqs_off+0x23e/0x440 [ 1482.013308][ C0] Code: 0e 36 e0 45 4b c7 44 35 00 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 60 0f 85 f7 01 00 00 48 8d 65 d8 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc 90 e8 32 30 39 03 85 c0 74 3a 48 c7 [ 1482.013324][ C0] RSP: 0018:ffffc9000936f9a0 EFLAGS: 00000046 [ 1482.013339][ C0] RAX: d354e29d5c66b500 RBX: ffffc9000936fa00 RCX: ffffffff9479f603 [ 1482.013353][ C0] RDX: 1ffff1100eedb971 RSI: 0000000000000201 RDI: ffffffff8b50e538 [ 1482.013367][ C0] RBP: ffffc9000936f9b0 R08: ffffffff92fa765f R09: 1ffffffff25f4ecb [ 1482.013382][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ecc R12: dffffc0000000000 [ 1482.013396][ C0] R13: 1ffff9200126df3c R14: 1ffff9200126df24 R15: ffff888053be46a8 [ 1482.013411][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1482.013427][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1482.013440][ C0] CR2: 000055b24670a600 CR3: 000000000e132000 CR4: 00000000003506f0 [ 1482.013456][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1482.013468][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1482.013479][ C0] Call Trace: [ 1482.013487][ C0] [ 1482.013495][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1482.013515][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1482.013537][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1482.013555][ C0] ? nmi_handle+0x2a/0x5a0 [ 1482.013592][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1482.013613][ C0] ? nmi_handle+0x14f/0x5a0 [ 1482.013639][ C0] ? nmi_handle+0x2a/0x5a0 [ 1482.013668][ C0] ? lockdep_softirqs_off+0x23e/0x440 [ 1482.013686][ C0] ? default_do_nmi+0x63/0x160 [ 1482.013707][ C0] ? exc_nmi+0x123/0x1f0 [ 1482.013725][ C0] ? end_repeat_nmi+0xf/0x53 [ 1482.013757][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1482.013781][ C0] ? lockdep_softirqs_off+0x23e/0x440 [ 1482.013800][ C0] ? lockdep_softirqs_off+0x23e/0x440 [ 1482.013820][ C0] ? lockdep_softirqs_off+0x23e/0x440 [ 1482.013839][ C0] [ 1482.013846][ C0] [ 1482.013853][ C0] __local_bh_disable_ip+0xfb/0x220 [ 1482.013872][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1482.013889][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1482.013918][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1482.013941][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1482.013959][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 1482.013977][ C0] ? batadv_nc_purge_paths+0x30f/0x3b0 [ 1482.014001][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1482.014022][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1482.014044][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 1482.014070][ C0] _raw_spin_lock_bh+0x1c/0x50 [ 1482.014087][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 1482.014114][ C0] batadv_nc_purge_paths+0xe8/0x3b0 [ 1482.014146][ C0] batadv_nc_worker+0x365/0x610 [ 1482.014172][ C0] ? process_scheduled_works+0x945/0x1830 [ 1482.014191][ C0] process_scheduled_works+0xa2c/0x1830 [ 1482.014227][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1482.014251][ C0] ? assign_work+0x364/0x3d0 [ 1482.014272][ C0] worker_thread+0x86d/0xd50 [ 1482.014297][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1482.014317][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1482.014340][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1482.014360][ C0] kthread+0x2f0/0x390 [ 1482.014381][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1482.014400][ C0] ? __pfx_kthread+0x10/0x10 [ 1482.014422][ C0] ret_from_fork+0x4b/0x80 [ 1482.014445][ C0] ? __pfx_kthread+0x10/0x10 [ 1482.014467][ C0] ret_from_fork_asm+0x1a/0x30 [ 1482.014502][ C0] [ 1482.016499][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1482.016517][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1482.016542][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1482.016557][ T30] Call Trace: [ 1482.016567][ T30] [ 1482.016578][ T30] dump_stack_lvl+0x241/0x360 [ 1482.016620][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1482.016660][ T30] ? __pfx__printk+0x10/0x10 [ 1482.016690][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1482.016725][ T30] ? vscnprintf+0x5d/0x90 [ 1482.016753][ T30] panic+0x349/0x860 [ 1482.016787][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1482.016816][ T30] ? __pfx_panic+0x10/0x10 [ 1482.016844][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1482.016880][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1482.016907][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1482.016933][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1482.016959][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1482.016988][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1482.017018][ T30] watchdog+0x101d/0x1020 [ 1482.017047][ T30] ? watchdog+0x1ea/0x1020 [ 1482.017081][ T30] ? __pfx_watchdog+0x10/0x10 [ 1482.017107][ T30] kthread+0x2f0/0x390 [ 1482.017137][ T30] ? __pfx_watchdog+0x10/0x10 [ 1482.017162][ T30] ? __pfx_kthread+0x10/0x10 [ 1482.017193][ T30] ret_from_fork+0x4b/0x80 [ 1482.017223][ T30] ? __pfx_kthread+0x10/0x10 [ 1482.017252][ T30] ret_from_fork_asm+0x1a/0x30 [ 1482.017302][ T30] [ 1482.021053][ T30] Kernel Offset: disabled [ 1482.549551][ T30] Rebooting in 86400 seconds..