last executing test programs: 8.648054538s ago: executing program 1 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.297711664s ago: executing program 1 (id=266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = fsopen(&(0x7f0000000440)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000140)="8d", 0x1) r9 = syz_clone(0x48101000, &(0x7f0000000080)="46538b6046b23312a3c48ffe52b9fbe5e604d83344273b1298c1965fbe77934efe1aa9d9af7e7fe396c997caa886e9eed3e7712dae124090d17b037005c10c6808b2cabfe999b8a734552add930d0c3753895a3fcd34d4b118fa9e101a338e300de9f1e2a276db7b13092e5e9bb18a013bb2ab1ca95ade6c6d0b41d2a4fad3dfb8b817de1ab2fb04b47ce5ca7a8103ca9928840a7f0e76ecf5f238cde2abe8aa67dfbdfaf1c07c31", 0xa8, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000380)="4b76f5dbf4d449a7df9ad9dccc56627a87f0bd5ca7ec608d85a45999f29d3214b93a181cf7063b1feaaae42fb7d18dc19fb22f844f17ecad0074fbf08f55c352cdcde1423d9fc4427b70226dcc3ce95f809791d24e2d0e70c01b93d66f0069fc6d693edef4df447812baf889fd8b730443d6bee30e59d8ba8356d1fe4f07d05f4b7c04bdcb2c386f3d0f6f63fc108de310ed0c8de50a33f4880a9eb5ea5ce3863ee96540da925b4f137df14a7a8cfe6e3a4d900efc3e30d2b7f8e8f035f11c885e8dec95a0d9b70765425a00d548aa8fb71bd9f09ef30db92b79d9ce446c31057de3b114601968693b0c2e83da69") process_vm_readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000480)=""/7, 0x7}], 0x3, &(0x7f0000000500), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 8.253833787s ago: executing program 4 (id=267): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000001480)=""/102, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x4008af12, &(0x7f0000000280)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0281, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000001f80)=""/4088, 0xff8) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r4, &(0x7f0000000180)=""/222, 0xde) pipe2(&(0x7f0000000100), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000000c0)=0x10000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001340)={0x11c, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg\x00'}}]}, @IPSET_ATTR_ADT={0x98, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xfe}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'FROZEN\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040082) unshare(0x20000400) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='FROZEN\x00', 0x7) 7.392745294s ago: executing program 1 (id=268): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xecc, &(0x7f0000000140)={0x0, 0x200000, 0x800}, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xf) r3 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) ptrace$setsig(0x4203, 0x0, 0x5, &(0x7f00000002c0)={0x2d, 0x800, 0x9}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) syz_io_uring_setup(0x73f2, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) arch_prctl$ARCH_GET_GS(0x1004, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x4000000}, 0x8) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x9, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0xec4, 0x0, 0x0, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'wg2\x00'}}, 0x1e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r10 = add_key$user(&(0x7f00000003c0), &(0x7f00000000c0), &(0x7f0000000500)="19b358dd3ebd128c58b2f8250c14a33ae0098f3ea3eadaf8437b8c6df768168f02c1fdc9cf98dd49f31364198f8e41a6fb38864fc63cab18f800420c9b61a37bdd33e2eba96a2ebc70a26d79d85a4ec764ac86a5d0aca630a8d9b1277aed3550e98f56ab138e309814415f202caa84448004cfe5f1c70dbac1397500dd542bc874bbe9593e72a20d7210b9da", 0x8c, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r10, r10, r10}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000280)={'sha224-generic\x00'}}) semop(0x0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1f4) 7.348661706s ago: executing program 4 (id=269): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000103a00fc8a00000000000000000000000003010000020000018b00707800000000f6ff04f600000000"], 0x0) r2 = dup(r0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000021c0)=0x80000003) ioctl$SNDCTL_DSP_GETFMTS(r3, 0x8004500b, &(0x7f0000000040)=0x7ff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) read$FUSE(r4, &(0x7f0000000180)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open(0x0, 0x0, 0x146) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x9e235000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r6 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', 0x0}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000030c0)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.518622616s ago: executing program 1 (id=271): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf, 0x100010, r0, 0x4000) syz_io_uring_setup(0x17a8, &(0x7f0000000000)={0x0, 0xcafe, 0x800, 0x0, 0x31}, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_setup(0x7058, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$sock_int(r1, 0x1, 0x48, &(0x7f0000000040), 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000080)=0x2) socket(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x0, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {&(0x7f0000000140)="c1c872f5fe578a99a07e84aa7f3564dbd1973e71f29894ca9b8be15ac2db0588c4e723a26c8009d6bc5510ef763ce6c81180160a22637523b1d9a38b8be52b8adcd61366ca056413a88abee23535db5ff71523888158d144d3d4eb7ac6e87817fd9bf8de", 0x64}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d0804860bff06037c09e8fe5504000015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3162778e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db498262f3d40fad956000000000100000000000000000009d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 6.461659048s ago: executing program 3 (id=272): modify_ldt$write(0x1, &(0x7f0000000040)={0x602}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r1 = socket(0x10, 0x800, 0x40800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) openat$vsock(0xffffff9c, &(0x7f0000000680), 0x301002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) read$FUSE(r3, &(0x7f000001aa80)={0x2020}, 0x2020) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8a000) syz_genetlink_get_family_id$tipc2(0x0, r3) r5 = socket(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) sendto$packet(r5, &(0x7f0000000240)="6a76638bc8c1fd070a44b3abc74d83a261d7d3", 0x13, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) write(r1, &(0x7f0000000000)="240000001a005f0414f9f4070009040081000000000000000000000008000f0001000000", 0x24) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000001c0)={0xffff8000, 0x0, 0x5, 0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) writev(r5, &(0x7f00000005c0)=[{&(0x7f00000002c0)="d6b5df266c1d34ffe06d5a5765de75a4a51427fe382817b56920d46c88ebe01e5ef058fb24c2e0dea710297e05b69959b2ea2227939bd7939624d4fb7b1a67379dec7c52852c0e565196f93e37bb1ff95aad1e90e71cb2eacc2c796c992869412858bb7552d381584848c3809e1a30ee18ef0bc947033497f77c829679a18fcbf956e3294e2b1b527e082fcb9d294a7bcf30896310dfa330ead13d3056b39ea9c6881417aa7b0d6bdc811b2ce45ae2a030fd3f35daead3", 0xb7}, {&(0x7f0000000380)="b669a11a1ccf03ae039021f69601766454111d9dae2b51c5b6d740a14f551a60f4d28f44bc3b6dff7c02f0ac70355ca4766033893411ac5ed17329c1a3d9e4b7e299768af14b713d705a8b064d5ae4ca66b2bf22c6716966b0ea6f7387382002c1b54aa797cfaf8bafe7e65c8d32948a7476f267633c6be827e469698992b1c50b902cef96a1752ea1d86de65748874c7644cd9966914ae9da0939969635456cf91d59d0", 0xa4}, {&(0x7f0000000080)="143615fd0b1aa99624aa3ccc59a00ec9a4cde7211c8879ee8ec0d6ad51c6a894a17ba4a0", 0x24}, {&(0x7f0000000440)="946c76e8f7708e02c9acab051c627d1537dea5936c0ccc3331791eb94da6d93f5ac951b8ed75465cd0af31c17ed87dc793f140a31e27af54777ae8d3134a0ba6aa5b1c59e1e4ee7d9ffa8cbf463ff579c280e2039a41e4271337a4dd79eeeb16", 0x60}, {&(0x7f00000004c0)="34227a92bf7ffc6417d571a4660408a9fa58b9a3f2371c7d8bf994766535e26a5671c30a003743af929e935f7e68d05d96fb3d1c994e74f64488cd99ab3ff87a75d80e599914748927f954ba7e2e674317ae82f82c09da0b6e171518c1651170e591fe8692819465f7e6451653f6cda17693ef513d47290f46276d9577a39fc35ffbce759d0a4b136e3d15c084ca6b903228ac78fffe219ff2aa01fb2f8a170dc68c47aa7992b7c90e3f780b78856967f1035fa72bee46ff31312bb9cfab311cdc4e8c0527e1", 0xc6}], 0x5) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000280)={r7, 0x0, 0x1, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0x4, 0x8}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.305676374s ago: executing program 3 (id=273): syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) (async) syz_usb_connect(0x3, 0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100005520f010402038b1420100000001090238000100000000090400000371055900090582eb10000000010200090502f3"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000b80)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="57178b022cad7c8be2c994efed963bcd3a8e1c8fc888eac5237fd050201fedf7012d1a824f84b5391adfdb0b8aec3865e0ffbde98a5060eccc55f71fb6f7bd5367c0960c9e9b6895b60b9eb319f245ed8c8d801d3590caf67998483aa4f03e84025cf832662b61c5515911773e1f6d19bc1790850be6cd98aa45f9bfc34c25dcfff22641e5350770825dc29e1df5be4158ef228dc1d111017d", 0x99}, {&(0x7f0000000140)="1d212a8a73b1d4e756d7318b976bffd73d040122ce5b5a2b16317e2e7ef6b71ffe51d168d32af792bd4ae39a367b2728f81e28dc5f02df1564986969179ac30846248e9b219ed599010a99bd91e6e2c722460e2434fcb6dd0b", 0x59}, {&(0x7f00000001c0)="26b699754a2e56a04b4bbfd867a18c550dd31bcb0b1186aa2109466f7e680a4fdb24cfc5ffe3aa0b654097c5d1235ea79b3015699ea07f944be248ac3da2ffbdbb875279168542ee341adda29371c84de4d80558ea6d511fd8124d8427529a4b74bb824e08cfffdde8041f7bfc5c1daf220597238b6158d20ee841", 0x7b}], 0x3}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) 4.781242579s ago: executing program 3 (id=280): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x3, @sliced={0x8001, [0x1, 0x2, 0x0, 0x46, 0x4, 0x3, 0x1, 0x1, 0x0, 0x0, 0x5, 0x3, 0x8001, 0x7, 0xfffe, 0x5, 0x0, 0x6, 0xa680, 0x8, 0x9, 0x6d, 0x40, 0x9, 0x2979, 0xb, 0x4, 0x8, 0x8, 0x5, 0x3, 0x0, 0x6, 0x9, 0x9, 0xe8, 0x8, 0x7, 0xf9d, 0x9, 0x96e0, 0x7, 0x40, 0x81, 0x1, 0x5, 0x7f, 0x3], 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="014000000000000000001b00800018000180140002"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1}, {0x6}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r4 = getpgid(0xffffffffffffffff) capget(&(0x7f0000000180)={0x19980330, r4}, &(0x7f0000000700)={0x0, 0x2, 0xc, 0xd4, 0x8, 0x8}) syz_open_procfs(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xe16, 0x75, 0x0, 0x101, 0x41, 0x101, 0x20}, 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d40000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000300000000001400030067656e6576653100000000000000000008001c00", @ANYRES32, @ANYBLOB="7c001a8004001c0004001c0004001c0004001c00100002800c000000000000000000000058000000000008003d00000014000700fe80000000000000005eba000000000014000700fc0200000e000000000000000000000105000800030000000500e7f0ba0f279a2b6908000300000014000700fe8000000000000000000000000000bb"], 0xd4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @remote, 0x100}, 0x16) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x420, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x498) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r9, &(0x7f0000000600)={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(r8, &(0x7f0000000500)="371afb9dd614411ed2754523b88dc17a8f938cd96f8ddf948a3d6af806f73231d9e4e93ec7ea818305478f337891fc4e84aa13bde800f129ec3add916a5184c55eb09d355a77a9629e1ac879691c1524b2a36f7647bfffea0164737073ae71a0f71a422f4a00cf31a9728f9ff6fecc2ea245b77b1fffe736f1d5a26ab1e44542430dcae498762b9443a40e6e9611", 0x8e, 0x8010, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1f}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) 4.59766428s ago: executing program 1 (id=282): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, 'XR'}, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x4406, 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380070001"], 0xfc}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.440122854s ago: executing program 3 (id=283): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x2a000400) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1b, 0x4a, 0x1}, 0x1c}}, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_setlink={0x78, 0x13, 0x800, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x8820, 0x204}, [@IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0xffffffff}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xfb}, @IFLA_PORT_PROFILE={0xa, 0x2, ',#@))\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x56}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x20) 4.41120829s ago: executing program 1 (id=284): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x260001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000480), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x3d, 0x2, 0x3, "11010000020027ee005b49f02b0000ff5eff0000000000004a00"}) 3.952337462s ago: executing program 0 (id=286): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @local, 0x3}, 0x1c) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1, 0x12, r0, 0x0) 3.951493767s ago: executing program 4 (id=288): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000800000200012800b0001006272696467650000100002800c002e00703b653e03"], 0x40}}, 0x0) fallocate(r1, 0x10, 0x10, 0x3) 3.810015467s ago: executing program 0 (id=289): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xd, r0}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES64=r6], 0x40}}, 0x4004040) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x435, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x810) 3.750907618s ago: executing program 4 (id=290): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80003f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000045}, 0x200088c4) 3.5178547s ago: executing program 4 (id=292): r0 = syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000c00)={0x0, [[0x8], [0x0, 0x1000000], [0x8]], '\x00', [{0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {0x9}], '\x00', 0x6}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$media(&(0x7f0000000780), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000f40)) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c010000160001000000000000000000e0000002000000000000000000000000fc010000000000000000000000000020000000ff00000007f92c10c0e4000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa006c25000000000000000000000000006c000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000040000000000001400000000000063bc00000c001c"], 0x10c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x2, 0x3, 0x67) sendmmsg$sock(r4, &(0x7f00000004c0)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[@mark={{0x14, 0x1, 0x41, 0x8}}], 0x18}}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000200)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_open_dev$usbfs(&(0x7f0000000200), 0x5fb, 0x200180) connect$unix(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0x2, './file0\x00'}}) capget(&(0x7f0000000380)={0x20071026}, &(0x7f00000003c0)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8, r10, 0xfff}, 0xc) 3.444913225s ago: executing program 0 (id=293): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601400107a0a000900050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r1, &(0x7f0000001640)={&(0x7f00000000c0)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00', 0x7f}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000100)="b71c25dde5e7d37dc8efd4fe1b15a31808fb0e1a42d07713bb80d4dbb92e6a7986efe664d0c7db22974225cc0ce1c2414e6f4621d4ba4f9f74f26aad82648e8f80c7850756de78d01d282dcec6cbd322acc4356f3b712b712c919a3c6b8816342ff83ea3ebb659d90174e2086605f51b784982772eed0c71dff3b7855d695b7c5d84b25644a452", 0x87}, {&(0x7f00000001c0)="e64c42a0069a6aa76f5d8fee245efafd6573a006130d04f0c45edad596de3d4051cf69aea83c3bc162c39155db814b14181c989572efdc907f7b2288d7026ec1d368c926451a031cb5cec61d55b5e6f0351ca99fa7b749382ca987e6e47a9d7b55880b2263332b3bd57c62d360f5b235b149c99cb5bb3930399bb117b8ffb2339331486222d770a0631bbf5efdad0ee3b1837c6b93ef8f2ea34276d980b0bed9cf7dbb2afa495798f80571947d56049b7a12513ae9c0cfa029aaf218d2274fd059a9bbd8e7f5", 0xc6}, {&(0x7f00000002c0)="6028287adeaa9fa1efe5a94945e462120d6c6a1bd5cb750199d3c8ce643faebe9a29f2d9de5d2468d9eab971ff5326dc229dd247e66d7418626f35f60694cc635ff49e3a62ce0a175dc3b4d350c5da1c35764d306259dafbc111dc69775eedd91a1d5f8db22fc86bdad8e50e73ea4e320cff81c8f3244d25887e4e0d6bfbc3c4d343b6d62d06b10ce9c0818ed7cbce5ccac517c2a96e12b3714c064adfabf15d39612eb8f6e4fc59e6b5a609eb62992f217bcde0fd6ae76d1129445932f5efeb975aa565f38a9235a0ffc4f607ac8a8ca9d3852ed4b8c32396236971821c7819329a852103af0275445172308371", 0xee}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="3cf91d16059f39ccfdf39bf52057e08bf540f057997806f20db18eb8c26d8b7f8cb039846b9e", 0x26}, {&(0x7f0000001400)="2e0383ff17b38b3014560a45049c8ac023f56d9510b1edbfc9e6f543d319d78adc25dcd6d14355259418e7fbdff7aeda1652e979cbbe7747120c6b1f1f8cce493f2d34b6df64", 0x46}, {&(0x7f0000001480)="bcd9973ea82f09668317611c54540b0d4870cebf720ef3dcec35dfef3923ccb1f3bbb5cba248bee7f974320bfdd1da35bfb43ccefaa7f938810e300abe6a9286953645d6d59a2f89b795500c2298a65ed87360e1c94d45fd5783977ecd009f4868f45fda7b62b8eab8fefaa38f166c4b7e2ada32e4624ddd615260e9fca6cbe7af25ad908c7bcf4eb1146f63", 0x8c}, {&(0x7f0000001540)="7438a30113a8b4f7bdfae8b4da20ac59f55b1815562b531feb1446", 0x1b}], 0x8, &(0x7f0000001600)=[@hopopts_2292={{0x20, 0x29, 0x36, {0xaa, 0x0, '\x00', [@ra={0x5, 0x2, 0x6}]}}}], 0x20}, 0x4000001) 3.444449239s ago: executing program 3 (id=294): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000800)={0x2, r1}) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x0) 2.53586179s ago: executing program 2 (id=295): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000045090100000000001d00000000040000bf9800000000000056080000000000008500000007000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.450122997s ago: executing program 0 (id=296): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) syz_open_dev$vim2m(0x0, 0x7, 0x2) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = fsopen(&(0x7f0000000440)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000140)="8d", 0x1) r9 = syz_clone(0x48101000, &(0x7f0000000080)="46538b6046b23312a3c48ffe52b9fbe5e604d83344273b1298c1965fbe77934efe1aa9d9af7e7fe396c997caa886e9eed3e7712dae124090d17b037005c10c6808b2cabfe999b8a734552add930d0c3753895a3fcd34d4b118fa9e101a338e300de9f1e2a276db7b13092e5e9bb18a013bb2ab1ca95ade6c6d0b41d2a4fad3dfb8b817de1ab2fb04b47ce5ca7a8103ca9928840a7f0e76ecf5f238cde2abe8aa67dfbdfaf1c07c31", 0xa8, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000380)="4b76f5dbf4d449a7df9ad9dccc56627a87f0bd5ca7ec608d85a45999f29d3214b93a181cf7063b1feaaae42fb7d18dc19fb22f844f17ecad0074fbf08f55c352cdcde1423d9fc4427b70226dcc3ce95f809791d24e2d0e70c01b93d66f0069fc6d693edef4df447812baf889fd8b730443d6bee30e59d8ba8356d1fe4f07d05f4b7c04bdcb2c386f3d0f6f63fc108de310ed0c8de50a33f4880a9eb5ea5ce3863ee96540da925b4f137df14a7a8cfe6e3a4d900efc3e30d2b7f8e8f035f11c885e8dec95a0d9b70765425a00d548aa8fb71bd9f09ef30db92b79d9ce446c31057de3b114601968693b0c2e83da69") process_vm_readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/106, 0x6a}, {&(0x7f00000002c0)=""/49, 0x31}, {&(0x7f0000000480)=""/7, 0x7}], 0x3, &(0x7f0000000500), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.215980245s ago: executing program 2 (id=297): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x3a}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000010002018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000480b7030000000000008500000005000000bf0900000000000045090100ef0000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.890080893s ago: executing program 2 (id=298): r0 = io_uring_setup(0x30d5, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TIOCSETD(r1, 0x5425, 0x0) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r1, 0x5427) 1.536363963s ago: executing program 3 (id=299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xeff, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e27, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(r1, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xc013, 0x9, 0xffff, 0x260, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7fff, 0x7fffffff, 0x3, 0x3ff, 0x6, 0x8, 0x7, 0x8d]}, &(0x7f00000002c0)=0x100) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x6, &(0x7f0000000100), 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000100"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000200000069000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r5 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) unshare(0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) socket$inet6(0xa, 0x3, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 1.479513855s ago: executing program 0 (id=300): lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x1c, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc010000000000000000000000000000fe8000000000000000000000000000bb0000000000000000052b000000000000fb36ca6fad50b375a22a584d16ca5500"], 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x9e235000) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100002, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e", @ANYRESHEX=r2], 0x7c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000004000000010000007500000041220100", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xff, 0xff, 0x2, '\x00', 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r2, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r7, 0x0) 1.273927972s ago: executing program 2 (id=301): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'L+', 0x10000}, 0x16, 0x2) r1 = memfd_secret(0x80000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000000c0)={{r1}, "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"}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001100)={0x1, 0x3f, "8f0d818e3708ef7ec28fa2010c00c103ec0371a543e87cdef120dd5eb65518da174db9a45a46248d1fad33f8555e440d0c387530ddff4a6284bea02c8ad968"}) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000001180)={{0x0, 0x0, 0x80}}) getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000003200), &(0x7f0000003240)=0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000003280)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80000000}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x48000) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000003400)=0x6ea6659f) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000003440)) r3 = accept$packet(r1, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000034c0)=0x14) r4 = accept$packet(r3, &(0x7f0000003500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003540)=0x14) r5 = accept$packet(r4, &(0x7f0000003580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000035c0)=0x14) openat$vnet(0xffffff9c, &(0x7f0000003600), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x10) bind$tipc(r1, &(0x7f0000003640)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x2}}, 0x10) ioctl$KVM_CAP_ARM_SYSTEM_SUSPEND(r1, 0x4068aea3, &(0x7f0000003680)) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003740), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000003800)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000037c0)={&(0x7f0000003780)={0x14, r6, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x14041}, 0x20048810) gettid() r7 = dup2(r5, r5) write$UHID_INPUT(r7, &(0x7f0000003840)={0x8, {"fb9f95d4745cbb729ca1daf24361d848e1b1a2db08d343ff2a2839be6004567267341fb42ddebd21099d518440681cd8a979a81cae9082cda709cb4a8c75d75ea311988004366001d68b26091041d9b67b243edcafb503f987d63859c37fe54846b7da01a9c4169bf625df980d41d3bf5c0576dd28093744862e8c327162e8a48997426a536e7e7aee15ba71d360d7833da5106f072903232cce47c1bbe73c371c0cd7a1e6bab6b68a906d3e145fd13574e61b1be8b5e45a08413ebe4c5c54212d6e8a5312620fb543c06a1e0f150c16ad45d91e9b273133715a3843945f7df2c23e2692292949f91ca6558f18d4e6dd02e6cf0d3b5718bfc1bb55dd4695f795a799bc921ea74dc9dc56ee1a67b945d3ca2bc3dedec552c45d8cf85fc36c2b4efc32e9d938340ac6c20d9ad2cd2de4cd482dce6eb7414f707ebba3b242769fb61f8beb2f805dd495d4be4af881b393d49ce54718f00abc954af042e89cc41f38a299b7aa1ae41bf977a15b0ff1d5ce13fe9edac1d095e0c559c01011c903c2f6382f8008bcb737a4ce5f982a80b3e50afb6b9d8cd6bc025803cc13f53c55579d9762a91509af909d814502ba2474f6eb239ff30c1480a4dbd41eb1aba02e78ee2f731e0475ce84bcce609b53ed4c8ba53f0aa34b9e94fac62ba88792806275b2dcbac8448192c8261348b5428e2362ae47a4a8501484192e8d0698a2e12f0f3df2e297fd9546a9cec29886b7252a8c789e4a85e6856c0bfc1dafca2dff06ed4176294cf26073fe5ae43d275378ba2158bc6ce69717e3596098d4fc02ea9ccd4845806be2ae6d0858d75c460ceb19406827ceea8f36f605e872c080867ec8728e7431babb75ac7c583724e2854a740d00ea4474c07e5de44521b15fbb14474836481e5308a08eb7ea63ab44507ae5dc6b70e14c2f983f85dead99aa24a05711891c93eca2c336bdd9e329d52436160cd2c1d63e58cb0da81773b99fc6390abd3da2fda19cd12b1c9a01b4b6beed74edd5f3a650470eac130beb5a930db6d5f0143d8175f7ba1d0fe9dce6195bf358e6b258ed2acf6e84b6f4f55a097029ca5b7fba1e468f0acb3aa4befb45ac01b26583240efe80b27aa1b20f0057d214794cbae7289d984994224fbd88ced9420b1c9a874f47e81991a670b51d81bcb2f5ade497e3ff0fc060dd7606ee6415d6d079d02f158ea639c62dc9142d3a8ca2e3afe802e361093784bfe13f60dae740c49b3db9370f9981c770dae52f83a6f276c20933d31dadf58824a753bc842de8f9149164168d0b49f0fe35a5065e87c7199cfbf75c10cc8d6dd4599cf8922cd7332cae6e64acdcad7fcc08c9251272e8564fae6c7980583de70620b9cec9909c081ebbdc7dbf7131b2f1755b11c580c2af6b260574af0dfe4551e16b838513c09ce0eb80da0e4bb3bc7513b5f0dc56b14bf57e150103347eff22373af8142ee520b67e1eae2b5b0faea60ec26fa7e6db7aa095f64213744f37367012aa54441fa01e8bc48a733c2d435b4ef7451b4f3cb8bef9554f94c97be2b8bab86a5f0fdf15a4f48940331493da8f6a7d9f904545e50d6cb3c71324ede394f0629be55fb72f5c4d3288cae6754380dc91098edaed2d0611660629700c7f2155180d83fc6014cf7f76196a35904fe9bd7c4fbe6ec9b6425a11cff83b795248d692eb1349a10782c4cae2eb47c2925646191c7e10f44ac2a0df2920218929d7032dacab5de6f65639f2e039ffb6212c28d1188aded7e43e66da2f8560ffe99c5420a0623f669e1bdb0851a3484c8424ff7b15a8266ad225fd7f6d7dd1827196593d8b14126dbd1eb754535ace41271695f1d9be4e38a25d587cc04afc862b49a8c3792e945bc850943b47892120624321cba6b80b1a0fb55b0d39812e593c2c373410a00ea7236a16e77f1f034d31d7ad15c1da89da3b945f13cfd03edfce7e4d65c24c92f8aa69317ab247c69e8f95a3f1b96ef9d803e94375d020147b98923e655fe3d0e60ac88d61aeee4301b3efd6729ac936f20df8676275292b956ec5f0ace065953e43867170a0763201a71b5d03cc78b52d50f084a72beb23cb827396a7f404bed58f887bd8efc2a1e8f904bd33b1529dd4a9ff890c0f8e2f88dbc97fe4564673d7ec75a27d673acf50fd1e415b7f272959039a1337181d30b521ddc0f70d428059978094612b4a2a504e795f7f4ffdfd69bc6b8a30d5ac98b54747d064bb6a5a56575e39d63b317cae77a1a4b988faf044c6ef5508eb5588677243aea551b978a7fafa35361b8435ebcf50e228106752599da17f18eab39e026f6911a52af0c0a990b9b30d3e2adfec85dd41bd0da9270c99405f748d2696fed500a84e45fe8d9af78eadcde90d4d58d6e6898380ae2088a4041dddf5776926ba6da841d2aaa94c960281a79689bd0624d8428f3d25aa7b4cb03a3883c4641596977df8e82b2fe4899e220c721161674c5f049f35cef2ecdba1ef82025fce210a4f1dcab6adb3b1a32975a377441f7e719845cfa3c410291947877276a3b32199d3b12d6ec9c831dbc764f62360e0c30c67f6dd761e36ca1c375fbd814cd3542851a60b2aade4f3c0f65d6b6ad462bae27019e8ef9a413f95be38685c9c31654accc2441bc8618f60a1f7a6ac33a10c8b71bec44d77244accf879a2b4ec07a681288d6d3c23d40f7854f6d373b8f4c519055beb6478286206e93573583bb00b362ea0bbeca104f05d2d7ca7feaf47f941f7cb4e0651189c4f539be74f18668a840d1a9a248f5643f3baeb9cfdf8c59bfd6782691b5b84e4e1f6165077d4688b85723e05dbcf1e54e47e2bec804962f3ab3a883766e20432cecc14f32c868dfaf98bc4638306b4fcb468029e7145618211e0c1b793ed9fc1a90a8ceacca3da8d4461452534380253b08bb727e8a8a55a3df6d77ea524f61921606f90e1472c6336a20feae135f3c652980f4f802335cc59e584585ec8818ef34a036df99a5d3e8361556f2f62722eb5383ba0a32cec2f848c27416c4421642a73d810c4dde9c2ea4c68cc06cdd1bbca6059a5ecdf3c5520e1a8dd6a3a8c917b0285cb7f0b6e3c0ce96a1755bfcf80c040c071a5d4ea28addbe729b6dde6cadfb23667fc8717b93cef9c1c087ff813968589b76c840335da67352b0277e8f4e573d3d5509bfa35050f0dac5adb04159e9504547b57c1ee69c6304bae03dcb79544f2b812174737f35389ce36f37cfbc17b9afd007ade63e0830f4412a38e5900d146f715da6c1befb92294613c3936c32bb2227489a9ff6687f0824bdeb34e04eac33beb4cbd3bf2bbefbfaad4087fb7436ce1a243ae79c23a4244b9d321ce67411a11ae4f453f1c76af3b05117a24b768ed7ab21818ced7c831f8333f8c8c753caab143574e860335b9950a3475fd2b8f69fb70a5a0f52ae029deea3d98edf32a1edbf1c03365a7c7edd38a4f2e4c88d96defa0e2c650ad26d259b197fe653ef9a91d0dd63935f46f2003f1176c466bd659e39a9e94a22afbb3ea942cc9c50b10283ea3732a855e68d4724ed7866148db47468e4460133b60fa7125823e0bffd3085c902b63f71c09821cedb3f339e411ebf1685910892ebfa2901f4f8fcc4e5d63ea1667056371fa1e33d369e78213ec6e43f0db76698371233defe6211b2cd97c2af6dc152e72a48dcc52693397cc2fd744844e4068757bf255a2ae07d74ccb3799682f3da704869ec64a6ed0d5366adf8b570fd1561fdd2d4329a4d3232f4353b91d8da65d2f1cee663136933d172d649259e8b28b7ddab45eb9014d975d9a1f4b429c08d79839cb0b13dd03eb8503799fff268c8d4a2c1f4b9b0bdd21968b466789fd2049b2029501bb23c6b49d79994c49fa05bec11cb18c48137b97ba44e61dc184607eef93c7bab765e8932665b5151de0c84b6607453faddb680263cda7c652fc816dfda5775031f403fe4bbf45ae317a5410d3043238f9d47dd2ec1b78e8787f134d79cbdbaa0f18622651d814cf6e199ddfcba72620aabc5dccf6e7c1bedeeb117b78901e7d19f4fbbfb0312ef782b8cb7ef5a3f03bcf2e20c8dcbfe8e95bcc8634bcff4a29491eaac852e7c9381447921d2b13cbb169d9c7d1a77d62f566c32ac11042728f8063db964fe266c743c68d0ce4209e3944e4859728db684fdf1724a4476c9a5e33c28105dbca7cc18ff116ca11da7d85de35ab6b2d9f1527ee4465a803fa67245d1630948a8406f980a2ccf712e4fac94147af3bf0472bdda4978009f47ab2bcc1be11a726243f57c261798b5e1871b1f75052dbbe4441a7d551456f1254dacf8edc28f1dbd1bd47a8184d2e93cffe29e8305a41f8f5dd52846baf4880f307244f661be8a945fe13860c223d482db56fd7d8dd6e377916b842999efb489f1974f8311da6a73d2d50033fff4cdc7302430058fffa92b98ebf23e5afe78877c0deeec36805d9c7b150436c56b4f35e8f6a78d8eaf925b6d2df9f19ab03184a479f1a515cdbbd15c052d1dc2dad32337f6175a17e0870cb0d5da459f5ffb172edf0a3787c52c6ff1fed9e1f809a1f3ac23c0d3b9aced11263e5f0cc991b51b0a0c8f3ae0ae2d50c2b6c37c09b8586313e91c9303a60d8de3e238626fffb13004a2bffd484c76855da85c65623fde3a8d86cbe0f556e42457082f3cb3912c42a23858ffa3bd7de37e440ce62de909b319f76db6bfebe7c22384745c961003129d0ba4daee4f7bb9241264c8a297065327f5038cbfdd52c9062bf97e78a11d00fe76dd4bf6c03d4ed8e34980be405028ddec750613381734e047f4c84acfcf254c3333803574bbad867bf3977f682ebbbafbab26c96542152b029d056b9cf7fce099f82dbff3cd23a8540f93cf976aa3e6af25b771d52c27fd39f3ee358a63e51b1995570602f399fc290156fd8eaa2a1adbc1fc4415811afe87bb924533c9969630b5bb803edb59a4a772d82eac42e1d610aa1bb80b260370291306181abc7f8c0bef4a4c789433ea682ea1432e41cb23a8f10846cada2d0a4b99ceafa6a6a7e070c2e3f143039be06ff730a964aec42b002bb3a666877f35fd384330ae28b0355fd8c0b008843821bb8e911c074e42bf21102fcead53ee66fe5becd931deb17ee410e497324fa6ce725211172e92a42c1debd279a2a4815946486de7af659dd5d6ca378520f523196ac989ab33fcbf17dac6492454f40972aec2ae9c07676f3dfff20cd553f9a1f653636f39401fc353ee077604936b5e9f2c7da97384116c4b36324791dc590f0cfd7de3d3034194195b1f2556bf3e8c75ee576c556606163809c8087ca1b20c2ff2be70fd9469a29d3dbe446b129a3877aea91d985030e76bc7b5bfd963dc7208ad46e5e0fb4df475a355f73ac3854509c4adbe013e35609a3de088dd633acc2be43d91c841aa52dba1447c80de5439ca4f6cc0c25e7fa8d0aa4b1c61d3c75a26096931fb99113c9941e2ec66cd96781a6a2dfe90dd4752f57f1e587c4532a186c363ce2cb77c6c483ac5064b8b5696aefdbf15a2337144ec850d9f8ff78622d5562c6646f1628f95338d7a237ce318b78dc75f99ae4699bacca5b488900e182be7777545a25a9f54317cb1ea382cffddffc1ec0056411e3a2139fe4641d24441d8bd2bf9d3acef48c03c458fa911494701c5c8b392289dd74cdb549a026cb5087985d6c48421b111d320916dceb6dd0ecd082a0de5915a4c856b6e482846428c873268a503042796917f3795059bc9bc0c8b7c6044e0690e1b0a6c0a2e5d717e0b1b9b3cab68504c6c3a249e6e8e2943e", 0x1000}}, 0x1006) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000004880), r1) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x9) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.180316611s ago: executing program 2 (id=302): syz_open_dev$usbfs(0x0, 0xb, 0x101301) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x7fff, 0x0, '\x00', {0x0, @reserved}}) 1.142844322s ago: executing program 0 (id=303): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001312d082e275205e5513122a4b6263e43d5959a166a23bd1116edc"], 0x0) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f0200"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000440)=0x0) syz_io_uring_setup(0x5c4, &(0x7f0000000200), &(0x7f0000000140)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000040)="fc484e552418862e", 0x8}], 0x2}}], 0x1, 0x0) 733.943933ms ago: executing program 2 (id=304): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@delchain={0x44, 0x65, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xd}, {0x5, 0x2}, {0x2, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x23}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r3, 0x1, 0x0, 0x25dfdbfe, {{0x21, 0x0, 0x11}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0x3c, 0x0, @default_ap_ssid}, {0x30, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x5c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc200010}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x40, 0x140c, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000140)={0xd000}) ioctl$SCSI_IOCTL_DOORUNLOCK(r6, 0x5381) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6}, 0x10) 0s ago: executing program 4 (id=305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0xfffffeef) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x4) r2 = getpid() unshare(0x22020600) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r4, 0x1, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000280000000000069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510000009078e5ff5d1857133fced0def34ad5106e86cac5816e6c300c7393e133a798dfc7ffc5331c19165f85"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r8) ioctl$int_in(r7, 0x5421, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000025ad3818dd825ef4ffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRESHEX=r5, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r8, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRESHEX=r4, @ANYRES16=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002b000000000005002a00000000002ce79eb985f10ee4b2104507bffd5f6b3f159e6726f386bae0f150fb8142a0bf2576b502972a3da94cb42eda15732c8b5de027fa0dc76e13270664c5f7b281ce53b2ed4b71a9a44fbd1f0191eced298a44c187c85d0b1a350e46c0312c45a75302003ed44cb11615f65fb12fa2b889ad116cd1b32e634ee5cbd4fe29d8c6eb29af5ff3dd93e9712ed1ec69157ed0cdf449f09cd1fa51fc9ef9ed5c06602b16e866e9c457267c0a"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): n_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.753788][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.765976][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.779539][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.790567][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.811973][ T5378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.822693][ T5378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.842752][ T5378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.914812][ T5378] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.926828][ T5281] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 81.931780][ T5378] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.943515][ T5378] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.957024][ T5378] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.062206][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.076822][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 82.083876][ T5281] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 82.097930][ T5281] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 82.111665][ T5281] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 82.125291][ T5281] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 82.146652][ T5281] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.159975][ T5281] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 82.172427][ T5281] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 82.191003][ T5281] usb 1-1: Product: syz [ 82.204018][ T5281] usb 1-1: Manufacturer: syz [ 82.217745][ T5281] usb 1-1: SerialNumber: syz [ 82.233378][ T5281] usb 1-1: config 0 descriptor?? [ 82.250257][ T5281] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 82.278084][ T5281] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 82.352445][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.427170][ T5535] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.465092][ T5535] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.502538][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.578835][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.596982][ T5229] Bluetooth: hci3: command tx timeout [ 82.640265][ T5535] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.659584][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.699841][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.707001][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.715135][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.782995][ T5535] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.823194][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.830390][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.906931][ T5229] Bluetooth: hci1: command tx timeout [ 82.961131][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.981239][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 82.996695][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.031811][ T5642] wireguard0: entered promiscuous mode [ 83.047961][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.056524][ T5642] wireguard0: entered allmulticast mode [ 83.290999][ T5535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.321602][ T5535] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.392109][ T5655] loop9: detected capacity change from 0 to 7 [ 83.400482][ T5655] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 83.405912][ T5655] loop9: partition table partially beyond EOD, truncated [ 83.417457][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.424584][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.432840][ T1847] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 83.459538][ T5655] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 83.484923][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.492050][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.560805][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.608002][ T1847] usb 4-1: Using ep0 maxpacket: 32 [ 83.617618][ T1847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 83.650673][ T1847] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 83.682725][ T1847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.717862][ T1847] usb 4-1: config 0 descriptor?? [ 83.745308][ T1847] hub 4-1:0.0: bad descriptor, ignoring hub [ 83.771466][ T1847] hub 4-1:0.0: probe with driver hub failed with error -5 [ 83.825183][ T1847] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 83.850570][ T5535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.933016][ T5496] veth0_vlan: entered promiscuous mode [ 84.074852][ T5496] veth1_vlan: entered promiscuous mode [ 84.185958][ T5535] veth0_vlan: entered promiscuous mode [ 84.199087][ T5283] usb 4-1: USB disconnect, device number 15 [ 84.255676][ T5496] veth0_macvtap: entered promiscuous mode [ 84.284820][ T5535] veth1_vlan: entered promiscuous mode [ 84.302654][ T5496] veth1_macvtap: entered promiscuous mode [ 84.352485][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.388734][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.410137][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.437824][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.461103][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.474689][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.493689][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.548587][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.571318][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.582108][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.593186][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.603301][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.614791][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.628791][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.658617][ T5496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676674][ T5496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.687811][ T5496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.696986][ T5496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.705796][ T5679] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 84.721494][ T5535] veth0_macvtap: entered promiscuous mode [ 84.727700][ T5679] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.70'. [ 84.776760][ T5535] veth1_macvtap: entered promiscuous mode [ 84.853679][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.868145][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.879757][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.890662][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.900849][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.912315][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.926925][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.940037][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.953557][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.985797][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.998516][ T5229] Bluetooth: hci1: command tx timeout [ 85.005390][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.027496][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046770][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.057086][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.070969][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.081557][ T5535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.103494][ T5535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.114906][ T5535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.142855][ T5535] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.180792][ T5535] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209993][ T5535] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.243356][ T5535] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.273831][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.355091][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.466758][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 85.498172][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.532326][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.600148][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.638650][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 85.673896][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.735263][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.763866][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.819651][ T9] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 85.986740][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 86.005723][ T9] usb usb2-port1: attempt power cycle [ 86.036654][ T5291] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 86.083723][ T5696] capability: warning: `syz.3.75' uses deprecated v2 capabilities in a way that may be insecure [ 86.175104][ T5698] netlink: 72 bytes leftover after parsing attributes in process `syz.3.76'. [ 86.226911][ T5291] usb 5-1: Using ep0 maxpacket: 32 [ 86.234029][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.248549][ T5291] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.259124][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.277242][ T5291] usb 5-1: config 0 descriptor?? [ 86.318779][ T5291] hub 5-1:0.0: bad descriptor, ignoring hub [ 86.345745][ T5291] hub 5-1:0.0: probe with driver hub failed with error -5 [ 86.358424][ T5291] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 86.366692][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 86.417213][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 86.566506][ T9] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 86.597242][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 86.607897][ T9] usb usb2-port1: unable to enumerate USB device [ 86.619722][ T9] usb 5-1: USB disconnect, device number 6 [ 87.186576][ T5287] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 87.412620][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.433894][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.470476][ T5612] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 87.516220][ T1171] usb 1-1: USB disconnect, device number 13 [ 87.543720][ T1171] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 87.563932][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 87.722591][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.924280][ T5287] usb 4-1: config 0 descriptor?? [ 88.716523][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.777286][ T5291] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 88.943310][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.954742][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.964718][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.974237][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.978983][ T5291] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.997951][ T9] usb 3-1: config 0 descriptor?? [ 89.019350][ T5750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.059043][ T5291] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 89.118308][ T5291] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 89.128082][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.169401][ T5739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 89.212675][ T5291] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 89.239539][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 89.245699][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 89.326246][ T9] usb 3-1: USB disconnect, device number 7 [ 89.777435][ T5763] kvm: emulating exchange as write [ 89.886504][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 90.059958][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.091741][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 90.234745][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 90.252035][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.291037][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.311228][ T9] usb 5-1: Product: syz [ 90.315444][ T9] usb 5-1: Manufacturer: syz [ 90.350683][ T9] usb 5-1: SerialNumber: syz [ 90.393131][ T9] usb 5-1: config 0 descriptor?? [ 90.443136][ T9] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 90.465761][ T5287] usbhid 4-1:0.0: can't add hid device: -71 [ 90.493381][ T5287] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 90.544820][ T5287] usb 4-1: USB disconnect, device number 16 [ 90.573287][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.861858][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.978059][ T5775] dlm: non-version read from control device 36 [ 91.146708][ T9] usb 5-1: USB disconnect, device number 7 [ 91.204883][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.218205][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.236654][ T5287] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 91.252809][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.266705][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.282111][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.293410][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.301201][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.428365][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 91.459500][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.515142][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.527106][ T5287] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 91.537961][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.549881][ T5287] usb 4-1: config 0 descriptor?? [ 91.563052][ T9] usb 2-1: USB disconnect, device number 8 [ 92.001594][ T53] bridge_slave_1: left allmulticast mode [ 92.020907][ T53] bridge_slave_1: left promiscuous mode [ 92.037391][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.050243][ T5287] gt683r_led 0003:1770:FF00.0003: unknown main item tag 0x0 [ 92.059609][ T5287] gt683r_led 0003:1770:FF00.0003: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 92.078181][ T53] bridge_slave_0: left allmulticast mode [ 92.126722][ T53] bridge_slave_0: left promiscuous mode [ 92.132491][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.251551][ T9] usb 4-1: USB disconnect, device number 17 [ 92.264261][ T8] gt683r_led 0003:1770:FF00.0003: failed to send set report request: -19 [ 92.873357][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.885380][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.895659][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.904848][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.916298][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.932493][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.167738][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.219708][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.241828][ T53] bond0 (unregistering): Released all slaves [ 93.388795][ T5234] Bluetooth: hci4: command tx timeout [ 93.546241][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 93.936582][ T5287] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.008981][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.031082][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.047584][ T5848] netlink: 'syz.2.114': attribute type 12 has an invalid length. [ 94.063509][ T5782] bridge_slave_0: entered allmulticast mode [ 94.072451][ T5782] bridge_slave_0: entered promiscuous mode [ 94.078979][ T5848] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.114'. [ 94.091438][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.107005][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.114447][ T5782] bridge_slave_1: entered allmulticast mode [ 94.116539][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 94.122332][ T5782] bridge_slave_1: entered promiscuous mode [ 94.140307][ T5287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.160523][ T5287] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.195851][ T5287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 94.199703][ T53] hsr_slave_0: left promiscuous mode [ 94.215741][ T53] hsr_slave_1: left promiscuous mode [ 94.221585][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.230116][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.230333][ T5287] usb 2-1: SerialNumber: syz [ 94.238662][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.252206][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.255627][ T5287] usb 2-1: bad CDC descriptors [ 94.260475][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.272813][ T5287] usb-storage 2-1:1.0: USB Mass Storage device detected [ 94.294164][ T5287] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 94.297597][ T53] veth1_macvtap: left promiscuous mode [ 94.308941][ T53] veth0_macvtap: left promiscuous mode [ 94.317171][ T53] veth1_vlan: left promiscuous mode [ 94.322715][ T53] veth0_vlan: left promiscuous mode [ 94.479103][ T5833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.494792][ T5833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.512547][ T5833] syz.1.113 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.839450][ T53] team0 (unregistering): Port device team_slave_1 removed [ 94.880338][ T53] team0 (unregistering): Port device team_slave_0 removed [ 94.987921][ T5234] Bluetooth: hci3: command tx timeout [ 95.265753][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 95.285555][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.330521][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.379773][ T5281] usb 2-1: USB disconnect, device number 9 [ 95.467361][ T5234] Bluetooth: hci4: command tx timeout [ 95.622278][ T5782] team0: Port device team_slave_0 added [ 95.673784][ T5782] team0: Port device team_slave_1 added [ 95.763869][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.781772][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.796543][ T5283] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.822907][ T5807] bridge_slave_0: entered allmulticast mode [ 95.841703][ T5807] bridge_slave_0: entered promiscuous mode [ 95.885099][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.898833][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.931807][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.952924][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.961719][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.985008][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 96.002311][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.031783][ T5807] bridge_slave_1: entered allmulticast mode [ 96.033059][ T5283] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 96.058404][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.070582][ T5283] usb 3-1: Product: syz [ 96.074873][ T5283] usb 3-1: Manufacturer: syz [ 96.080436][ T5283] usb 3-1: SerialNumber: syz [ 96.092284][ T5283] usb 3-1: config 0 descriptor?? [ 96.101234][ T5283] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 96.142445][ T5807] bridge_slave_1: entered promiscuous mode [ 96.185226][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.257664][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.339756][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.541543][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.585889][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.614039][ T5281] usb 3-1: USB disconnect, device number 8 [ 96.663217][ T1847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 96.712345][ T5807] team0: Port device team_slave_0 added [ 96.728574][ T5807] team0: Port device team_slave_1 added [ 96.755093][ T5782] hsr_slave_0: entered promiscuous mode [ 96.781243][ T5782] hsr_slave_1: entered promiscuous mode [ 96.822148][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.830167][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.869477][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.883997][ T1847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 96.903144][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.916645][ T1847] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 96.925741][ T1847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.943850][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.951422][ T1847] usb 2-1: Product: syz [ 96.955629][ T1847] usb 2-1: Manufacturer: syz [ 96.966546][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.004493][ T1847] usb 2-1: SerialNumber: syz [ 97.011535][ T1847] usb 2-1: config 0 descriptor?? [ 97.023221][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.036885][ T1847] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 97.066815][ T5234] Bluetooth: hci3: command tx timeout [ 97.131325][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.333468][ T5807] hsr_slave_0: entered promiscuous mode [ 97.347903][ T5807] hsr_slave_1: entered promiscuous mode [ 97.354239][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.372069][ T5807] Cannot create hsr debugfs directory [ 97.381167][ T1847] usb 2-1: USB disconnect, device number 10 [ 97.418348][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.502086][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.512683][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 97.546812][ T5234] Bluetooth: hci4: command tx timeout [ 97.599897][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.688064][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.702159][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.722083][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.735573][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 97.748571][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.767489][ T9] usb 4-1: config 0 descriptor?? [ 98.195750][ T53] bridge_slave_1: left allmulticast mode [ 98.209954][ T53] bridge_slave_1: left promiscuous mode [ 98.229770][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.266305][ T5899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.293178][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.302664][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.311259][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.320487][ T53] bridge_slave_0: left allmulticast mode [ 98.326225][ T53] bridge_slave_0: left promiscuous mode [ 98.337389][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.344959][ T5899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.357592][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.366583][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.369851][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.130076][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 99.139915][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.147601][ T4623] Bluetooth: hci3: command tx timeout [ 99.149277][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 99.163527][ T9] usb 4-1: USB disconnect, device number 19 [ 99.169608][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.182826][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.193432][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.216153][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 99.240351][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.368949][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.381506][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.394184][ T53] bond0 (unregistering): Released all slaves [ 99.626695][ T5229] Bluetooth: hci4: command tx timeout [ 99.690686][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.722487][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.783652][ T53] hsr_slave_0: left promiscuous mode [ 99.793945][ T53] hsr_slave_1: left promiscuous mode [ 99.801607][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.809846][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.817767][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.825365][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.842023][ T53] veth1_macvtap: left promiscuous mode [ 99.847839][ T53] veth0_macvtap: left promiscuous mode [ 99.853389][ T53] veth1_vlan: left promiscuous mode [ 99.858849][ T53] veth0_vlan: left promiscuous mode [ 100.240808][ T53] team0 (unregistering): Port device team_slave_1 removed [ 100.279304][ T53] team0 (unregistering): Port device team_slave_0 removed [ 100.436683][ T5229] Bluetooth: hci1: command tx timeout [ 100.654645][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.754120][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.887715][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 100.986013][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 101.226557][ T5229] Bluetooth: hci3: command tx timeout [ 101.287793][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.307246][ T5229] Bluetooth: hci2: command tx timeout [ 101.315960][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.394712][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.405207][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.415022][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.423789][ T5923] bridge_slave_0: entered allmulticast mode [ 101.430811][ T5923] bridge_slave_0: entered promiscuous mode [ 101.439658][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.447658][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.454920][ T5923] bridge_slave_1: entered allmulticast mode [ 101.461714][ T5923] bridge_slave_1: entered promiscuous mode [ 101.575578][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.655447][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.666303][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.683293][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.695772][ T5935] bridge_slave_0: entered allmulticast mode [ 101.707884][ T5935] bridge_slave_0: entered promiscuous mode [ 101.719235][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.733766][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.743430][ T5935] bridge_slave_1: entered allmulticast mode [ 101.756028][ T5935] bridge_slave_1: entered promiscuous mode [ 101.786265][ T5975] netlink: 'syz.3.134': attribute type 12 has an invalid length. [ 101.812109][ T5975] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.134'. [ 101.825770][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.879252][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.954463][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.029008][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.050347][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.067948][ T5923] team0: Port device team_slave_0 added [ 102.082403][ T5923] team0: Port device team_slave_1 added [ 102.117496][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.223029][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.247595][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.270085][ T5935] team0: Port device team_slave_0 added [ 102.276697][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.284554][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.311721][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.324602][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.331791][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.359100][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.390924][ T5935] team0: Port device team_slave_1 added [ 102.427724][ T5923] hsr_slave_0: entered promiscuous mode [ 102.434029][ T5923] hsr_slave_1: entered promiscuous mode [ 102.442692][ T5923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.450491][ T5923] Cannot create hsr debugfs directory [ 102.462191][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.470028][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.497147][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.510241][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.516632][ T5229] Bluetooth: hci1: command tx timeout [ 102.517316][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.549417][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.712411][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.734357][ T5935] hsr_slave_0: entered promiscuous mode [ 102.755339][ T5935] hsr_slave_1: entered promiscuous mode [ 102.762155][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.787321][ T5935] Cannot create hsr debugfs directory [ 102.899626][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.951636][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.958804][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.981157][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.988332][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.053584][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.150337][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.166862][ T5281] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 103.241653][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.287837][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.334484][ T5281] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.338057][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.358809][ T5281] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.370273][ T5281] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.379554][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.386750][ T5229] Bluetooth: hci2: command tx timeout [ 103.398530][ T6006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 103.422422][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.437927][ T5281] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.595565][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.602761][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.615533][ T53] bridge_slave_1: left allmulticast mode [ 103.633814][ T53] bridge_slave_1: left promiscuous mode [ 103.646818][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.664491][ T53] bridge_slave_0: left allmulticast mode [ 103.675458][ T53] bridge_slave_0: left promiscuous mode [ 103.686670][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.701232][ T53] bridge_slave_1: left allmulticast mode [ 103.707882][ T53] bridge_slave_1: left promiscuous mode [ 103.714568][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.726073][ T53] bridge_slave_0: left allmulticast mode [ 103.751514][ T53] bridge_slave_0: left promiscuous mode [ 103.779813][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.819260][ T9] usb 4-1: USB disconnect, device number 20 [ 104.392440][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.404035][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.414931][ T53] bond0 (unregistering): Released all slaves [ 104.519615][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.533610][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.545651][ T53] bond0 (unregistering): Released all slaves [ 104.566432][ T5782] veth0_vlan: entered promiscuous mode [ 104.589628][ T5229] Bluetooth: hci1: command tx timeout [ 104.661732][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.668940][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.784614][ T5782] veth1_vlan: entered promiscuous mode [ 104.892328][ T5782] veth0_macvtap: entered promiscuous mode [ 104.905730][ T5782] veth1_macvtap: entered promiscuous mode [ 104.935169][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.954633][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.968686][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.985165][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.998624][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.015403][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.029276][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.167806][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.192629][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.261177][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.288228][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.315372][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.346332][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.366345][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.466955][ T5229] Bluetooth: hci2: command tx timeout [ 105.479299][ T5923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.550856][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.574182][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.583132][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.592217][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.604084][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.632070][ T5923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.734870][ T5923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.832992][ T5923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.878901][ T5807] veth0_vlan: entered promiscuous mode [ 105.938206][ T53] hsr_slave_0: left promiscuous mode [ 105.945782][ T53] hsr_slave_1: left promiscuous mode [ 105.961863][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.974477][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.984880][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.995255][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.014314][ T53] hsr_slave_0: left promiscuous mode [ 106.036604][ T53] hsr_slave_1: left promiscuous mode [ 106.043581][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.075340][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.078406][ T6046] rtc_cmos 00:00: Alarms can be up to one day in the future [ 106.091859][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.105297][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.130931][ T53] veth1_macvtap: left promiscuous mode [ 106.136653][ T53] veth0_macvtap: left promiscuous mode [ 106.142215][ T53] veth1_vlan: left promiscuous mode [ 106.147710][ T53] veth0_vlan: left promiscuous mode [ 106.155077][ T53] veth1_macvtap: left promiscuous mode [ 106.161617][ T53] veth0_macvtap: left promiscuous mode [ 106.167937][ T53] veth1_vlan: left promiscuous mode [ 106.173241][ T53] veth0_vlan: left promiscuous mode [ 106.326694][ T5283] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 106.497454][ T5283] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 106.508282][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.518502][ T5283] usb 4-1: config 0 descriptor?? [ 106.666573][ T5229] Bluetooth: hci1: command tx timeout [ 106.689280][ T53] team0 (unregistering): Port device team_slave_1 removed [ 106.742444][ T53] team0 (unregistering): Port device team_slave_0 removed [ 106.982084][ T5283] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 106.992102][ T5283] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 107.432460][ T53] team0 (unregistering): Port device team_slave_1 removed [ 107.472052][ T53] team0 (unregistering): Port device team_slave_0 removed [ 107.546761][ T5229] Bluetooth: hci2: command tx timeout [ 107.856630][ T5807] veth1_vlan: entered promiscuous mode [ 107.863898][ T6046] netlink: 56 bytes leftover after parsing attributes in process `syz.3.139'. [ 107.956575][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.980918][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.092301][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.126931][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.139907][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.167448][ T5807] veth0_macvtap: entered promiscuous mode [ 108.195038][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.211091][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.233777][ T5807] veth1_macvtap: entered promiscuous mode [ 108.254827][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.425314][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.437353][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.448062][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.458848][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.479442][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.514786][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.526029][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.547248][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.560976][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.572100][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.596211][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.605246][ T5281] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 108.615074][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.625118][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.635240][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.682255][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.771087][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.788254][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 108.812491][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.828629][ T5281] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 108.839799][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.840772][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.850257][ T5281] usb 1-1: Product: syz [ 108.854978][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.861572][ T5281] usb 1-1: Manufacturer: syz [ 108.875611][ T5281] usb 1-1: SerialNumber: syz [ 108.881113][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.888299][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.902825][ T5281] usb 1-1: config 0 descriptor?? [ 108.917504][ T5281] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 108.930913][ T5281] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 108.944675][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.959723][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.064724][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.091997][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.099570][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.137689][ T9] usb 4-1: USB disconnect, device number 21 [ 109.172464][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.204695][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.211880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.283114][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.290285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.384615][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.524847][ T5281] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 109.572146][ T5923] veth0_vlan: entered promiscuous mode [ 109.614699][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.616485][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 109.650438][ T5923] veth1_vlan: entered promiscuous mode [ 109.725227][ T5923] veth0_macvtap: entered promiscuous mode [ 109.757526][ T5923] veth1_macvtap: entered promiscuous mode [ 109.803838][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.814747][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 109.832176][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 109.843121][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.853493][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.864656][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.876333][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.888531][ T9] usb 4-1: config 0 descriptor?? [ 109.915397][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 109.926474][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.952062][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.966499][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.987042][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.004588][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.014658][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.035481][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.058497][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.084482][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.117207][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.154237][ T5281] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 110.167351][ T1847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.178941][ T5281] em28xx 1-1:0.0: board has no eeprom [ 110.193554][ T5935] veth0_vlan: entered promiscuous mode [ 110.212895][ T5923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.232646][ T5923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.244567][ T5923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.256429][ T5923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.319286][ T5935] veth1_vlan: entered promiscuous mode [ 110.362618][ T1847] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 110.390213][ T1847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.427724][ T5281] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 110.429342][ T1847] usb 5-1: config 0 descriptor?? [ 110.435612][ T5281] em28xx 1-1:0.0: dvb set to bulk mode. [ 110.446766][ T6061] em28xx 1-1:0.0: Binding DVB extension [ 110.474325][ T5935] veth0_macvtap: entered promiscuous mode [ 110.494806][ T5281] usb 1-1: USB disconnect, device number 14 [ 110.503041][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.533900][ T5281] em28xx 1-1:0.0: Disconnecting em28xx [ 110.560854][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.572841][ T6061] em28xx 1-1:0.0: Registering input extension [ 110.606962][ T5281] em28xx 1-1:0.0: Closing input extension [ 110.651503][ T5935] veth1_macvtap: entered promiscuous mode [ 110.661657][ T5281] em28xx 1-1:0.0: Freeing device [ 110.683171][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.708705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.751351][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.775972][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.796309][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.813817][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.824775][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.843824][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.854220][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.866684][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.870152][ T1847] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 110.881502][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.905767][ T1847] hackrf 5-1:0.0: Could not detect board [ 110.920946][ T1847] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 110.944686][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.988086][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.003193][ T1847] usb 5-1: USB disconnect, device number 8 [ 111.037029][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.081524][ T29] audit: type=1326 audit(1728385941.891:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c317dff9 code=0x7ffc0000 [ 111.093710][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.111827][ T6079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.140215][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.152489][ T29] audit: type=1326 audit(1728385941.921:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c317dff9 code=0x7ffc0000 [ 111.176625][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.194860][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.212133][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.222800][ T6079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.239639][ T9] gspca_sunplus: reg_w_riv err -110 [ 111.244327][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.245064][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 111.295137][ T5935] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.307006][ T9] usb 4-1: USB disconnect, device number 22 [ 111.326276][ T5935] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.351761][ T5935] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.367883][ T5935] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.397722][ T5287] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.534720][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.537620][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.558275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.589760][ T5287] usb 3-1: Using ep0 maxpacket: 8 [ 111.596909][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.608296][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.636819][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 111.653997][ T6135] netlink: 'syz.0.142': attribute type 12 has an invalid length. [ 111.667125][ T6135] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.142'. [ 111.671028][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 111.744790][ T5287] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.776212][ T5287] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 111.821105][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.841251][ T5287] usb 3-1: Product: syz [ 111.853838][ T5287] usb 3-1: Manufacturer: syz [ 111.866876][ T5287] usb 3-1: SerialNumber: syz [ 111.892962][ T5287] usb 3-1: config 0 descriptor?? [ 111.962509][ T5287] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 112.180787][ T5287] imon:send_packet: packet tx failed (-71) [ 112.206592][ T5287] imon 3-1:0.0: panel buttons/knobs setup failed [ 112.336615][ T5287] rc_core: IR keymap rc-imon-pad not found [ 112.342689][ T5287] Registered IR keymap rc-empty [ 112.367032][ T5287] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 112.377694][ T5287] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 112.391247][ T5287] imon:send_packet: packet tx failed (-71) [ 112.421372][ T5287] imon 3-1:0.0: remote input dev register failed [ 112.445483][ T5287] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 112.487727][ T5287] imon 3-1:0.0: unable to initialize intf0, err 0 [ 112.494197][ T5287] imon:imon_probe: failed to initialize context! [ 112.535033][ T5287] imon 3-1:0.0: unable to register, err -19 [ 112.555789][ T6144] fuse: Invalid uid '0x0000000014ef8cb6' [ 112.699666][ T5287] usb 3-1: USB disconnect, device number 9 [ 112.704998][ T6154] x_tables: duplicate underflow at hook 1 [ 113.232621][ T6168] netlink: 'syz.1.151': attribute type 23 has an invalid length. [ 113.397017][ T5291] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.547222][ T5291] usb 5-1: device descriptor read/64, error -71 [ 113.606553][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 113.696567][ T5283] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.756450][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 113.764143][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.775814][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.797888][ T5291] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.799297][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.843454][ T9] usb 4-1: config 0 descriptor?? [ 113.860007][ T5283] usb 3-1: config 189 has an invalid descriptor of length 107, skipping remainder of the config [ 113.901231][ T5283] usb 3-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=17.cb [ 113.918273][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 113.930626][ T5283] usb 3-1: Product: syz [ 113.934835][ T5283] usb 3-1: Manufacturer: syz [ 113.942072][ T5283] usb 3-1: SerialNumber: syz [ 113.956601][ T5291] usb 5-1: device descriptor read/64, error -71 [ 114.073756][ T9] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 114.082720][ T5291] usb usb5-port1: attempt power cycle [ 114.174010][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.285996][ T1171] usb 4-1: USB disconnect, device number 23 [ 114.300240][ T1171] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 114.437618][ T5291] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.458416][ T5291] usb 5-1: device descriptor read/8, error -71 [ 114.496559][ T1847] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 114.641024][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 114.646573][ T1847] usb 2-1: Using ep0 maxpacket: 32 [ 114.655566][ T1847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 114.672274][ T1847] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 114.682580][ T1847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.692792][ T1847] usb 2-1: Product: syz [ 114.697158][ T5291] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 114.704903][ T1847] usb 2-1: Manufacturer: syz [ 114.709632][ T1847] usb 2-1: SerialNumber: syz [ 114.716200][ T1847] usb 2-1: config 0 descriptor?? [ 114.725428][ T6184] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 114.727145][ T5291] usb 5-1: device descriptor read/8, error -71 [ 114.739818][ T1847] hub 2-1:0.0: bad descriptor, ignoring hub [ 114.745789][ T1847] hub 2-1:0.0: probe with driver hub failed with error -5 [ 114.757431][ T1847] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 114.842626][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.857227][ T5291] usb usb5-port1: unable to enumerate USB device [ 114.860535][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.875470][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.900087][ T9] usb 1-1: config 0 descriptor?? [ 114.916855][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 114.924773][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 114.940704][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 114.963469][ T5291] usb 2-1: USB disconnect, device number 11 [ 114.969516][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 114.969582][ T6189] binder: 6188:6189 ioctl c0306201 200001c0 returned -14 [ 115.674400][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.690199][ T6202] openvswitch: netlink: Missing valid actions attribute. [ 115.707987][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.723450][ T6202] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.066600][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.237205][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 116.267356][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=45.98 [ 116.283195][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.339607][ T9] usb 2-1: Product: syz [ 116.360038][ T9] usb 2-1: Manufacturer: syz [ 116.371485][ T9] usb 2-1: SerialNumber: syz [ 116.386544][ T9] usb 2-1: config 0 descriptor?? [ 116.607382][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.628900][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.673460][ T5283] hub 3-1:189.0: bad descriptor, ignoring hub [ 116.679671][ T5283] hub 3-1:189.0: probe with driver hub failed with error -5 [ 116.688100][ T5283] keyspan 3-1:189.0: Keyspan - (without firmware) converter detected [ 116.790450][ T5283] usb 3-1: USB disconnect, device number 10 [ 116.797584][ T5283] keyspan 3-1:189.0: device disconnected [ 116.807674][ T6220] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.920215][ T9] mos7840 2-1:0.0: required endpoints missing [ 116.952185][ T9] usb 2-1: USB disconnect, device number 12 [ 117.021664][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 117.037180][ T1171] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 117.147413][ T5283] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.198485][ T1171] usb 4-1: Using ep0 maxpacket: 32 [ 117.205174][ T1171] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.216955][ T1171] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.228048][ T1171] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.234692][ T1171] usb 4-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 117.244995][ T1171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.260249][ T1171] usb 4-1: config 0 descriptor?? [ 117.286626][ T5281] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 117.306626][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 117.313900][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 117.325252][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 117.337004][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 117.349398][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 117.360920][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 117.370925][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 117.381070][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 117.392528][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 117.413665][ T5283] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 117.433428][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.451870][ T5283] usb 3-1: Product: syz [ 117.456719][ T5283] usb 3-1: Manufacturer: syz [ 117.461355][ T5283] usb 3-1: SerialNumber: syz [ 117.462081][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 117.481947][ T5283] usb 3-1: config 0 descriptor?? [ 117.488825][ T6220] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22 [ 117.506048][ T5281] usb 5-1: config 0 has no interfaces? [ 117.514370][ T5281] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 117.531468][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.549058][ T5281] usb 5-1: config 0 descriptor?? [ 117.683982][ T1171] kye 0003:0458:5012.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 117.703554][ T1171] kye 0003:0458:5012.0004: item fetching failed at offset 0/1 [ 117.710704][ T5283] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 117.721215][ T9] usb 1-1: USB disconnect, device number 15 [ 117.738910][ T1171] kye 0003:0458:5012.0004: parse failed [ 117.745511][ T6233] cxacru 3-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 117.772394][ T5283] usb 3-1: USB disconnect, device number 11 [ 117.777964][ T5281] usb 5-1: USB disconnect, device number 13 [ 117.784888][ T1171] kye 0003:0458:5012.0004: probe with driver kye failed with error -22 [ 117.817690][ T6233] cxacru 3-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 117.884254][ T25] usb 4-1: USB disconnect, device number 24 [ 118.126633][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 118.278380][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 118.288069][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.300845][ T9] usb 1-1: config 0 descriptor?? [ 118.477715][ T6248] sctp: [Deprecated]: syz.3.177 (pid 6248) Use of int in max_burst socket option deprecated. [ 118.477715][ T6248] Use struct sctp_assoc_value instead [ 118.549035][ T6252] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 118.689320][ T5281] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 118.724735][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 118.762402][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 118.804354][ T9] [drm] Initialized udl on minor 2 [ 118.817066][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.830466][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 118.841597][ T5228] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.857267][ T9] usb 1-1: USB disconnect, device number 16 [ 118.875983][ T5281] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.891703][ T5228] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 118.899868][ T5281] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.940348][ T5281] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.955185][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.970395][ T5281] usb 5-1: SerialNumber: syz [ 119.191061][ T5281] usb 5-1: 0:2 : does not exist [ 119.225790][ T5281] usb 5-1: USB disconnect, device number 14 [ 119.271533][ T5790] udevd[5790]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.288603][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 119.333637][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.343383][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.355114][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.384560][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.400739][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.408497][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.467948][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 119.481574][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.509125][ T9] usb 1-1: config 0 has no interfaces? [ 119.527923][ T9] usb 1-1: New USB device found, idVendor=1164, idProduct=1edc, bcdDevice=cf.03 [ 119.541691][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.559509][ T9] usb 1-1: Product: syz [ 119.571892][ T9] usb 1-1: Manufacturer: syz [ 119.614768][ T6261] chnl_net:caif_netlink_parms(): no params data found [ 119.649169][ T9] usb 1-1: SerialNumber: syz [ 119.663226][ T9] usb 1-1: config 0 descriptor?? [ 119.693374][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.702524][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.710413][ T6261] bridge_slave_0: entered allmulticast mode [ 119.725161][ T6261] bridge_slave_0: entered promiscuous mode [ 119.736453][ T6261] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.744242][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.751882][ T6261] bridge_slave_1: entered allmulticast mode [ 119.758762][ T6261] bridge_slave_1: entered promiscuous mode [ 119.792372][ T6261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.821546][ T6261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.832187][ T6269] batadv_slave_1: entered promiscuous mode [ 119.875872][ T6261] team0: Port device team_slave_0 added [ 119.891281][ T6261] team0: Port device team_slave_1 added [ 119.925367][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.932790][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.964903][ T6261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.981794][ T6261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.989553][ T6261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.021735][ T6261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.076786][ T6261] hsr_slave_0: entered promiscuous mode [ 120.087390][ T6261] hsr_slave_1: entered promiscuous mode [ 120.094487][ T6261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.102592][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 120.116874][ T6261] Cannot create hsr debugfs directory [ 120.290986][ T6261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.306720][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 120.318210][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.328997][ T9] usb 5-1: config 0 has no interfaces? [ 120.334485][ T9] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 120.344216][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.360817][ T9] usb 5-1: config 0 descriptor?? [ 120.370250][ T6261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.398701][ T25] usb 1-1: USB disconnect, device number 17 [ 120.469827][ T6261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.506900][ T1171] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.533070][ T6261] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.598402][ T9] usb 5-1: USB disconnect, device number 15 [ 120.608569][ T6268] batadv_slave_1: left promiscuous mode [ 120.692112][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.702023][ T6261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 120.714419][ T1171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.726678][ T1171] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 120.735914][ T1171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.756610][ T6261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 120.762805][ T1171] usb 2-1: config 0 descriptor?? [ 120.783017][ T6261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.803314][ T6261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.926042][ T6261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.953712][ T6261] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.969761][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.976980][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.997552][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.004859][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.114224][ T6261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.169974][ T6261] veth0_vlan: entered promiscuous mode [ 121.187410][ T6261] veth1_vlan: entered promiscuous mode [ 121.254652][ T6261] veth0_macvtap: entered promiscuous mode [ 121.264119][ T6261] veth1_macvtap: entered promiscuous mode [ 121.279762][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.290444][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.300412][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.311314][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.321393][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.332432][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.343591][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.355068][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.365151][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.375865][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.389836][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.399787][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.410747][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.420725][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.431524][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.443198][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.443220][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.443241][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.443252][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.443263][ T6261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.443275][ T6261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.445068][ T6261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.459113][ T1171] usbhid 2-1:0.0: can't add hid device: -71 [ 121.459206][ T1171] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 121.463046][ T1171] usb 2-1: USB disconnect, device number 13 [ 121.468231][ T5234] Bluetooth: hci0: command tx timeout [ 121.489920][ T6261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.489959][ T6261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.489986][ T6261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.490012][ T6261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.581424][ T6293] netlink: 'syz.4.191': attribute type 10 has an invalid length. [ 121.675015][ T6293] team0: Port device netdevsim0 added [ 121.701802][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 121.751269][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.751288][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.807688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.005408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.199850][ T6305] loop9: detected capacity change from 0 to 7 [ 122.279060][ T6305] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 122.310306][ T6305] loop9: partition table partially beyond EOD, truncated [ 122.324940][ T6305] loop9: p1 size 1139518251 extends beyond EOD, truncated [ 123.083432][ T6324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.201'. [ 123.254549][ T29] audit: type=1326 audit(1728385954.061:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.292756][ T29] audit: type=1326 audit(1728385954.061:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.296544][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 123.344342][ T29] audit: type=1326 audit(1728385954.061:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.374138][ T29] audit: type=1326 audit(1728385954.061:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.436140][ T29] audit: type=1326 audit(1728385954.061:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.465933][ T29] audit: type=1326 audit(1728385954.071:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.500146][ T29] audit: type=1326 audit(1728385954.071:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.524471][ T1847] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 123.532310][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 123.545858][ T25] usb 1-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 123.555990][ T5234] Bluetooth: hci0: command tx timeout [ 123.561392][ T6342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.205'. [ 123.562828][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 123.582763][ T25] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.598518][ T29] audit: type=1326 audit(1728385954.071:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbba57dff9 code=0x7ffc0000 [ 123.607088][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.631732][ T25] usb 1-1: Product: syz [ 123.636067][ T25] usb 1-1: Manufacturer: syz [ 123.640915][ T25] usb 1-1: SerialNumber: syz [ 123.653634][ T29] audit: type=1326 audit(1728385954.071:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbba57c990 code=0x7ffc0000 [ 123.677304][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 123.689058][ T29] audit: type=1326 audit(1728385954.071:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbba57dbfb code=0x7ffc0000 [ 123.715772][ T6346] bridge0: port 3(ipvlan2) entered blocking state [ 123.720410][ T1847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.733900][ T6346] bridge0: port 3(ipvlan2) entered disabled state [ 123.734415][ T1847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.751822][ T6346] ipvlan2: entered allmulticast mode [ 123.755765][ T1847] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.769050][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.777217][ T1847] usb 2-1: SerialNumber: syz [ 123.782374][ T6346] bridge0: entered allmulticast mode [ 123.799445][ T6346] ipvlan2: left allmulticast mode [ 123.804712][ T6346] bridge0: left allmulticast mode [ 124.016101][ T1847] usb 2-1: 0:2 : does not exist [ 124.101752][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.161983][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.202760][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 124.232934][ T25] r8152-cfgselector 1-1: bad CDC descriptors [ 124.267806][ T25] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 124.332651][ T6371] capability: warning: `syz.0.212' uses 32-bit capabilities (legacy support in use) [ 124.616568][ T1847] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 124.770353][ T1847] usb 4-1: config 0 has an invalid interface number: 73 but max is 0 [ 124.811319][ T1847] usb 4-1: config 0 has no interface number 0 [ 124.903291][ T1847] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=66.21 [ 124.962683][ T1847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.048227][ T1847] usb 4-1: config 0 descriptor?? [ 125.283038][ T1847] usb 4-1: USB disconnect, device number 25 [ 125.627063][ T5234] Bluetooth: hci0: command tx timeout [ 125.650784][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 125.676544][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 125.680128][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 126.216796][ T5281] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 126.246958][ T1847] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 126.308549][ T5290] usb 2-1: USB disconnect, device number 14 [ 126.381592][ T5281] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 126.403736][ T5281] usb 4-1: config 0 has no interface number 0 [ 126.423862][ T5281] usb 4-1: too many endpoints for config 0 interface 16 altsetting 35: 235, using maximum allowed: 30 [ 126.443655][ T1847] usb 1-1: Using ep0 maxpacket: 8 [ 126.445242][ T5281] usb 4-1: config 0 interface 16 altsetting 35 has 0 endpoint descriptors, different from the interface descriptor's value: 235 [ 126.470112][ T1847] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.482944][ T5281] usb 4-1: config 0 interface 16 has no altsetting 0 [ 126.494423][ T1847] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 126.510986][ T1847] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 126.521315][ T1847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.529497][ T1847] usb 1-1: Product: syz [ 126.531767][ T5281] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 126.533724][ T1847] usb 1-1: Manufacturer: syz [ 126.547630][ T1847] usb 1-1: SerialNumber: syz [ 126.585701][ T1847] usb 1-1: config 0 descriptor?? [ 126.598106][ T1847] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 126.598658][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.939762][ T5281] usb 4-1: Product: syz [ 126.944037][ T5281] usb 4-1: Manufacturer: syz [ 127.002603][ T5281] usb 4-1: SerialNumber: syz [ 127.113866][ T5281] usb 4-1: config 0 descriptor?? [ 127.355742][ T5281] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 127.363005][ T5281] gspca_sunplus: reg_r err -71 [ 127.370367][ T5281] usb 4-1: USB disconnect, device number 26 [ 127.490006][ T5291] usb 1-1: USB disconnect, device number 19 [ 127.568272][ T1847] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 127.646996][ T6437] netlink: 'syz.4.232': attribute type 29 has an invalid length. [ 127.706730][ T5234] Bluetooth: hci0: command tx timeout [ 127.737124][ T1847] usb 2-1: Using ep0 maxpacket: 8 [ 127.747448][ T1847] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 127.756941][ T1847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.774083][ T1847] usb 2-1: config 0 descriptor?? [ 128.246647][ T5291] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 128.280138][ T6452] netlink: 'syz.0.236': attribute type 12 has an invalid length. [ 128.311618][ T6452] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.236'. [ 128.480933][ T5291] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.513368][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.544758][ T5291] usb 5-1: Product: syz [ 128.558047][ T5291] usb 5-1: Manufacturer: syz [ 128.576263][ T5291] usb 5-1: SerialNumber: syz [ 128.675113][ T5291] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.817396][ T5287] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.929262][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 128.949361][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 128.965491][ T6450] xt_hashlimit: max too large, truncated to 1048576 [ 128.972740][ T6449] xt_hashlimit: max too large, truncated to 1048576 [ 129.336736][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.355446][ T6463] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 129.419904][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 129.606685][ T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 129.776742][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 129.786727][ T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.795642][ T25] usb 4-1: config 0 has no interface number 0 [ 129.808443][ T25] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 129.817841][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.827350][ T25] usb 4-1: Product: syz [ 129.834602][ T25] usb 4-1: Manufacturer: syz [ 129.841311][ T25] usb 4-1: SerialNumber: syz [ 129.858847][ T25] usb 4-1: config 0 descriptor?? [ 129.877171][ T5287] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 129.901081][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 129.926463][ T5287] ath9k_htc: Failed to initialize the device [ 129.997620][ T5287] usb 5-1: ath9k_htc: USB layer deinitialized [ 130.438133][ T1847] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 130.457945][ T1847] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 130.473537][ T1847] asix 2-1:0.0: probe with driver asix failed with error -71 [ 130.484889][ T1847] usb 2-1: USB disconnect, device number 15 [ 130.984611][ T9] usb 5-1: USB disconnect, device number 16 [ 131.290277][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 131.290295][ T29] audit: type=1326 audit(1728385962.101:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.1.248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbba57dff9 code=0x0 [ 131.447486][ T5287] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 131.477592][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.509350][ T25] gspca_spca1528: reg_r err -71 [ 131.514482][ T25] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 131.529884][ T25] usb 4-1: USB disconnect, device number 27 [ 131.577526][ T5290] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.638127][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.663099][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.691211][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.701346][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.727502][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.743383][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.746474][ T5290] usb 2-1: Using ep0 maxpacket: 8 [ 131.760265][ T5290] usb 2-1: unable to get BOS descriptor or descriptor too short [ 131.771424][ T5290] usb 2-1: config 9 has an invalid interface number: 5 but max is 0 [ 131.773586][ T9] usb 5-1: config 0 descriptor?? [ 131.780398][ T5290] usb 2-1: config 9 has no interface number 0 [ 131.802620][ T5290] usb 2-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 131.814284][ T5290] usb 2-1: config 9 interface 5 has no altsetting 0 [ 131.823162][ T5290] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 131.837981][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.846273][ T5290] usb 2-1: Product: syz [ 131.852597][ T5290] usb 2-1: Manufacturer: syz [ 131.857553][ T5290] usb 2-1: SerialNumber: syz [ 132.359421][ T1847] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 132.429383][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.460876][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.476131][ T6491] syz.4.247 uses obsolete (PF_INET,SOCK_PACKET) [ 132.542982][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 132.557346][ T1847] usb 4-1: Using ep0 maxpacket: 8 [ 132.562719][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.567746][ T9] usb 5-1: USB disconnect, device number 17 [ 132.593102][ T1847] usb 4-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 132.607345][ T1847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.621921][ T1847] usb 4-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 132.632502][ T1847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.644164][ T1847] usb 4-1: config 0 descriptor?? [ 132.673963][ T1847] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 132.877018][ T6506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.893979][ T6506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.069635][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.086608][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.603723][ T6517] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 134.006688][ T5287] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 134.055233][ T6527] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 134.064311][ T6527] bond0: entered promiscuous mode [ 134.077922][ T6527] bond_slave_0: entered promiscuous mode [ 134.084129][ T6527] bond_slave_1: entered promiscuous mode [ 134.136606][ T5287] usb 1-1: device descriptor read/64, error -71 [ 134.400087][ T5287] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 134.408959][ T5290] usb 2-1: USB disconnect, device number 16 [ 134.579490][ T5287] usb 1-1: device descriptor read/64, error -71 [ 134.739794][ T6540] FAULT_INJECTION: forcing a failure. [ 134.739794][ T6540] name failslab, interval 1, probability 0, space 0, times 1 [ 134.767787][ T5287] usb usb1-port1: attempt power cycle [ 134.775215][ T6540] CPU: 1 UID: 0 PID: 6540 Comm: syz.1.260 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 134.785871][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.795968][ T6540] Call Trace: [ 134.799295][ T6540] [ 134.802231][ T6540] dump_stack_lvl+0x241/0x360 [ 134.806911][ T6540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.812111][ T6540] ? __pfx__printk+0x10/0x10 [ 134.816726][ T6540] ? fs_reclaim_acquire+0x93/0x140 [ 134.821833][ T6540] ? __pfx___might_resched+0x10/0x10 [ 134.827155][ T6540] should_fail_ex+0x3b0/0x4e0 [ 134.831835][ T6540] ? tomoyo_encode+0x26f/0x540 [ 134.836620][ T6540] should_failslab+0xac/0x100 [ 134.841343][ T6540] ? tomoyo_encode+0x26f/0x540 [ 134.846146][ T6540] __kmalloc_noprof+0xd8/0x400 [ 134.850955][ T6540] tomoyo_encode+0x26f/0x540 [ 134.855591][ T6540] tomoyo_realpath_from_path+0x59e/0x5e0 [ 134.861271][ T6540] tomoyo_path_number_perm+0x23a/0x880 [ 134.866775][ T6540] ? __lock_acquire+0x1384/0x2050 [ 134.871935][ T6540] ? tomoyo_path_number_perm+0x208/0x880 [ 134.877613][ T6540] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.883651][ T6540] ? rcu_read_lock_any_held+0xb7/0x160 [ 134.889124][ T6540] ? down_write+0x18c/0x220 [ 134.893652][ T6540] ? __pfx_down_write+0x10/0x10 [ 134.898514][ T6540] security_path_chmod+0x13c/0x360 [ 134.903725][ T6540] chmod_common+0x1c9/0x4c0 [ 134.908339][ T6540] ? __pfx_chmod_common+0x10/0x10 [ 134.913459][ T6540] __x64_sys_fchmod+0xf5/0x160 [ 134.918286][ T6540] do_syscall_64+0xf3/0x230 [ 134.922822][ T6540] ? clear_bhb_loop+0x35/0x90 [ 134.927537][ T6540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.933482][ T6540] RIP: 0033:0x7fbbba57dff9 [ 134.937992][ T6540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.940743][ T6542] program syz.4.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.957615][ T6540] RSP: 002b:00007fbbbb307038 EFLAGS: 00000246 ORIG_RAX: 000000000000005b [ 134.957667][ T6540] RAX: ffffffffffffffda RBX: 00007fbbba735f80 RCX: 00007fbbba57dff9 [ 134.957681][ T6540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 134.957692][ T6540] RBP: 00007fbbbb307090 R08: 0000000000000000 R09: 0000000000000000 [ 134.957704][ T6540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.957716][ T6540] R13: 0000000000000000 R14: 00007fbbba735f80 R15: 00007fbbba85fa28 [ 134.957744][ T6540] [ 134.966600][ T6540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.149503][ T1171] usb 4-1: USB disconnect, device number 28 [ 135.227084][ T5287] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 135.270652][ T5287] usb 1-1: device descriptor read/8, error -71 [ 135.526501][ T5287] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 135.551482][ T1171] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 135.551564][ T5287] usb 1-1: device descriptor read/8, error -71 [ 135.680487][ T5287] usb usb1-port1: unable to enumerate USB device [ 135.720095][ T1171] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 135.733887][ T1171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.742015][ T1171] usb 4-1: Product: syz [ 135.746338][ T1171] usb 4-1: Manufacturer: syz [ 135.753896][ T1171] usb 4-1: SerialNumber: syz [ 135.768492][ T1171] usb 4-1: config 0 descriptor?? [ 136.186127][ T1171] usb 4-1: Firmware version (0.0) predates our first public release. [ 136.194746][ T1171] usb 4-1: Please update to version 0.2 or newer [ 136.492083][ T6572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 136.594990][ T29] audit: type=1326 audit(1728385967.401:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.4.269" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x0 [ 136.705879][ T1171] usb 4-1: USB disconnect, device number 29 [ 137.227338][ T5281] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 137.294084][ T29] audit: type=1326 audit(1728385968.101:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.319494][ T29] audit: type=1326 audit(1728385968.101:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.348326][ T29] audit: type=1326 audit(1728385968.101:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.378621][ T29] audit: type=1326 audit(1728385968.101:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.405475][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.415404][ T29] audit: type=1326 audit(1728385968.101:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.416944][ T5281] usb 1-1: Using ep0 maxpacket: 32 [ 137.439719][ T29] audit: type=1326 audit(1728385968.101:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.449277][ T5281] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 137.474744][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.476613][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.489393][ T5281] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 65 [ 137.502126][ T29] audit: type=1326 audit(1728385968.101:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.502954][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.531587][ T29] audit: type=1326 audit(1728385968.111:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.563291][ T5287] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 137.563886][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.576997][ T29] audit: type=1326 audit(1728385968.131:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535ff7dff9 code=0x7ffc0000 [ 137.611562][ T5281] usb 1-1: config 0 descriptor?? [ 137.636622][ T5228] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 137.729653][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 137.742822][ T5287] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 137.753446][ T5287] usb 2-1: config 179 has no interface number 0 [ 137.761703][ T5287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 137.783439][ T5287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 137.795692][ T5228] usb 4-1: Using ep0 maxpacket: 16 [ 137.803960][ T5287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.811155][ T5228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.825597][ T5287] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 137.825634][ T5287] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.825674][ T5287] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 137.825698][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.837609][ T6580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 137.879355][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.891308][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 137.928486][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.955101][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.974030][ T5228] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 138.002605][ T5228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.028911][ T5228] usb 4-1: config 0 descriptor?? [ 138.108283][ T5228] rc_core: IR keymap rc-hauppauge not found [ 138.123557][ T5228] Registered IR keymap rc-empty [ 138.135522][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.167384][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.231291][ T6607] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 138.250405][ T5228] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 138.288249][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.308947][ T5228] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 138.309586][ T6607] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 138.394042][ T6609] netlink: 188 bytes leftover after parsing attributes in process `syz.1.271'. [ 138.414860][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.425421][ T5290] usb 2-1: USB disconnect, device number 17 [ 138.431569][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 138.431606][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 138.460470][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.486626][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.516655][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.536725][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.556685][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.586733][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.608216][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.641768][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.676672][ T5228] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 138.738588][ T5228] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 138.757879][ T5281] usb 1-1: USB disconnect, device number 25 [ 138.764428][ T5228] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 138.886091][ T5290] usb 4-1: USB disconnect, device number 30 [ 139.020343][ T6623] veth1_macvtap: left promiscuous mode [ 139.581611][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.707380][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.856082][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.967983][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.041581][ T6645] batadv0: entered promiscuous mode [ 140.068257][ T6645] bridge0: entered promiscuous mode [ 140.185758][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.212325][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.221670][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.235033][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.251123][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.262662][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.318672][ T6657] netlink: 'syz.0.293': attribute type 12 has an invalid length. [ 140.323766][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.292'. [ 140.336636][ T6657] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.293'. [ 140.420293][ T6655] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 140.447528][ T6655] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 140.461361][ T11] bridge_slave_1: left allmulticast mode [ 140.482691][ T11] bridge_slave_1: left promiscuous mode [ 140.492822][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.502340][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.511051][ T11] bridge_slave_0: left allmulticast mode [ 140.517093][ T11] bridge_slave_0: left promiscuous mode [ 140.524854][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.659171][ T5290] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 140.732860][ T5287] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 140.840587][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 140.865758][ T5290] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.875709][ T5290] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.886131][ T5290] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.897322][ T5290] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.912394][ T5290] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.921803][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 140.934874][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.980932][ T5287] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 140.990807][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.000289][ T5287] usb 5-1: Product: syz [ 141.007722][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.020388][ T5287] usb 5-1: Manufacturer: syz [ 141.025111][ T5287] usb 5-1: SerialNumber: syz [ 141.033845][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.046735][ T5287] usb 5-1: config 0 descriptor?? [ 141.060256][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 141.073017][ T5287] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 141.087879][ T11] bond0 (unregistering): Released all slaves [ 141.179473][ T5290] usb 4-1: GET_CAPABILITIES returned 0 [ 141.185120][ T5290] usbtmc 4-1:16.0: can't read capabilities [ 141.542955][ T5287] usb 4-1: USB disconnect, device number 31 [ 141.733870][ T6659] chnl_net:caif_netlink_parms(): no params data found [ 142.103391][ T11] hsr_slave_0: left promiscuous mode [ 142.162570][ T11] hsr_slave_1: left promiscuous mode [ 142.215963][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.247615][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.262572][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.278892][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.304806][ T11] veth1_macvtap: left promiscuous mode [ 142.314045][ T11] veth0_macvtap: left promiscuous mode [ 142.327011][ T11] veth1_vlan: left promiscuous mode [ 142.332449][ T11] veth0_vlan: left promiscuous mode [ 142.346697][ T5234] Bluetooth: hci2: command tx timeout [ 143.689197][ T5228] usb 5-1: USB disconnect, device number 18 [ 143.806706][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 143.868157][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 143.868175][ T29] audit: type=1326 audit(1728385974.681:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 144.705110][ T5234] Bluetooth: hci2: command tx timeout [ 144.818199][ T29] audit: type=1326 audit(1728385974.711:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 144.876860][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 145.475524][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.493598][ T29] audit: type=1326 audit(1728385975.581:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 145.528464][ T9] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 145.562951][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.610906][ T29] audit: type=1326 audit(1728385975.581:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 145.638079][ T9] usb 1-1: config 0 descriptor?? [ 145.739974][ T29] audit: type=1326 audit(1728385975.581:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 145.843930][ T29] audit: type=1326 audit(1728385975.581:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 145.960263][ T29] audit: type=1326 audit(1728385975.581:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 146.056628][ T29] audit: type=1326 audit(1728385975.581:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 146.166598][ T29] audit: type=1326 audit(1728385975.581:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 146.263757][ T29] audit: type=1326 audit(1728385975.581:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.4.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd4b7dff9 code=0x7ffc0000 [ 146.748247][ T5234] Bluetooth: hci2: command tx timeout [ 146.764050][ T11] team0 (unregistering): Port device team_slave_1 removed [ 146.951678][ T11] team0 (unregistering): Port device team_slave_0 removed [ 147.095887][ T25] sched: DL replenish lagged too much [ 148.836713][ T5234] Bluetooth: hci2: command tx timeout [ 149.254375][ T6708] tun0: tun_chr_ioctl cmd 3226476800 [ 150.987249][ T9] usb 1-1: can't set config #0, error -71 [ 151.078585][ T9] usb 1-1: USB disconnect, device number 26 [ 154.508662][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 154.520028][ T5229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 154.532022][ T5229] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 154.540180][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.547877][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.555206][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 154.729620][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.743856][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.753330][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.763502][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.771645][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.781071][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.180776][ T5229] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.191123][ T5229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.202145][ T5229] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.210123][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.220114][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.229545][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.269005][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.286799][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.306019][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.315419][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.324602][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.333066][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.666817][ T5229] Bluetooth: hci4: command tx timeout [ 156.906608][ T5229] Bluetooth: hci5: command tx timeout [ 157.306803][ T5229] Bluetooth: hci6: command tx timeout [ 157.386747][ T5234] Bluetooth: hci7: command tx timeout [ 158.747586][ T5229] Bluetooth: hci4: command tx timeout [ 158.986674][ T5229] Bluetooth: hci5: command tx timeout [ 159.388991][ T5229] Bluetooth: hci6: command tx timeout [ 159.475148][ T5229] Bluetooth: hci7: command tx timeout [ 160.826842][ T5229] Bluetooth: hci4: command tx timeout [ 161.067707][ T5229] Bluetooth: hci5: command tx timeout [ 161.471116][ T5229] Bluetooth: hci6: command tx timeout [ 161.546612][ T5229] Bluetooth: hci7: command tx timeout [ 162.907689][ T5229] Bluetooth: hci4: command tx timeout [ 163.147580][ T5229] Bluetooth: hci5: command tx timeout [ 163.546835][ T5229] Bluetooth: hci6: command tx timeout [ 163.636465][ T5229] Bluetooth: hci7: command tx timeout [ 179.184961][ T6233] cxacru 3-1:0.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 194.576873][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583225][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.457426][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 202.468311][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 202.478346][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 202.486291][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 202.494424][ T5234] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 202.506665][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 204.586650][ T5234] Bluetooth: hci8: command tx timeout [ 206.666693][ T5229] Bluetooth: hci8: command tx timeout [ 208.746628][ T5234] Bluetooth: hci8: command tx timeout [ 210.826631][ T5234] Bluetooth: hci8: command tx timeout [ 216.254715][ T5229] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 216.265923][ T5229] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 216.274352][ T5229] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 216.284738][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 216.292793][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 216.300213][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 216.433601][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 216.448964][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 216.457810][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 216.468018][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 216.476150][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 216.485968][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 216.558194][ T5229] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 216.573713][ T5229] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 216.583583][ T5229] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 216.593772][ T5229] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 216.601646][ T5229] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 216.609795][ T5229] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 216.707403][ T5234] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 216.718371][ T5234] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 216.729086][ T5234] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 216.737215][ T5234] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 216.744928][ T5234] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 216.752786][ T5234] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 218.346686][ T5234] Bluetooth: hci9: command tx timeout [ 218.592129][ T5234] Bluetooth: hci10: command tx timeout [ 218.668898][ T5234] Bluetooth: hci11: command tx timeout [ 218.826695][ T5234] Bluetooth: hci12: command tx timeout [ 220.426667][ T5234] Bluetooth: hci9: command tx timeout [ 220.666720][ T5234] Bluetooth: hci10: command tx timeout [ 220.747722][ T5234] Bluetooth: hci11: command tx timeout [ 220.906608][ T5234] Bluetooth: hci12: command tx timeout [ 222.193049][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 222.506716][ T5229] Bluetooth: hci9: command tx timeout [ 222.748758][ T5229] Bluetooth: hci10: command tx timeout [ 222.826565][ T5229] Bluetooth: hci11: command tx timeout [ 222.986635][ T5229] Bluetooth: hci12: command tx timeout [ 224.586711][ T5234] Bluetooth: hci9: command tx timeout [ 224.826578][ T5229] Bluetooth: hci10: command tx timeout [ 224.906592][ T5229] Bluetooth: hci11: command tx timeout [ 225.066746][ T5229] Bluetooth: hci12: command tx timeout [ 242.674975][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 252.910298][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 255.955504][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962041][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.468376][ T4623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 261.478865][ T4623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 261.489013][ T4623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 261.497219][ T4623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 261.507038][ T4623] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 261.514478][ T4623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 263.152944][ T4623] Bluetooth: hci2: command 0x0406 tx timeout [ 263.546901][ T5229] Bluetooth: hci13: command tx timeout [ 265.626742][ T5229] Bluetooth: hci13: command tx timeout [ 267.706801][ T5229] Bluetooth: hci13: command tx timeout [ 269.786812][ T5229] Bluetooth: hci13: command tx timeout [ 276.137312][ T4623] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 276.147341][ T4623] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 276.172736][ T4623] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 276.181864][ T4623] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 276.190570][ T4623] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 276.198336][ T4623] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 277.079843][ T5242] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 277.094662][ T5242] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 277.103821][ T5242] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 277.113819][ T5242] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 277.121762][ T5242] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 277.154969][ T5242] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 277.317276][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 277.330865][ T55] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 277.341419][ T55] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 277.350138][ T55] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 277.371643][ T5243] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 277.379894][ T5243] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 277.417773][ T5243] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 277.428435][ T5243] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 277.441337][ T5243] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 277.449517][ T5243] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 277.459095][ T5243] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 277.466815][ T5243] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 278.266581][ T5243] Bluetooth: hci14: command tx timeout [ 278.507015][ T5243] Bluetooth: hci6: command 0x0406 tx timeout [ 278.513168][ T5243] Bluetooth: hci4: command 0x0406 tx timeout [ 278.520363][ T55] Bluetooth: hci5: command 0x0406 tx timeout [ 278.526628][ T5242] Bluetooth: hci7: command 0x0406 tx timeout [ 279.231344][ T4623] Bluetooth: hci15: command tx timeout [ 279.466805][ T4623] Bluetooth: hci16: command tx timeout [ 279.547572][ T4623] Bluetooth: hci17: command tx timeout [ 280.346735][ T4623] Bluetooth: hci14: command tx timeout [ 281.313432][ T4623] Bluetooth: hci15: command tx timeout [ 281.547201][ T4623] Bluetooth: hci16: command tx timeout [ 281.626635][ T4623] Bluetooth: hci17: command tx timeout [ 282.426687][ T4623] Bluetooth: hci14: command tx timeout [ 283.386708][ T4623] Bluetooth: hci15: command tx timeout [ 283.626587][ T4623] Bluetooth: hci16: command tx timeout [ 283.706643][ T4623] Bluetooth: hci17: command tx timeout [ 284.506661][ T4623] Bluetooth: hci14: command tx timeout [ 285.466800][ T4623] Bluetooth: hci15: command tx timeout [ 285.706524][ T4623] Bluetooth: hci16: command tx timeout [ 285.796695][ T4623] Bluetooth: hci17: command tx timeout [ 296.266862][ T30] INFO: task kworker/u8:0:11 blocked for more than 142 seconds. [ 296.274569][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 296.316509][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.354764][ T30] task:kworker/u8:0 state:D stack:21488 pid:11 tgid:11 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 296.475342][ T30] Workqueue: netns cleanup_net [ 296.540320][ T30] Call Trace: [ 296.543663][ T30] [ 296.593617][ T30] __schedule+0x1895/0x4b30 [ 296.603829][ T30] ? __pfx___schedule+0x10/0x10 [ 296.642633][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.656463][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.666987][ T30] ? kthread_data+0x52/0xd0 [ 296.671581][ T30] ? schedule+0x90/0x320 [ 296.675949][ T30] ? wq_worker_sleeping+0x66/0x240 [ 296.744966][ T30] ? schedule+0x90/0x320 [ 296.782039][ T30] schedule+0x14b/0x320 [ 296.786277][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.821795][ T30] __mutex_lock+0x6a7/0xd70 [ 296.854443][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.865811][ T30] ? wg_destruct+0x25/0x2e0 [ 296.904374][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.926439][ T30] ? __pfx_free_percpu+0x10/0x10 [ 296.931459][ T30] ? kobject_put+0x272/0x480 [ 296.936284][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 296.995967][ T30] wg_destruct+0x25/0x2e0 [ 297.005299][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 297.036455][ T30] netdev_run_todo+0xe1a/0x1000 [ 297.041382][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 297.086419][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 297.092396][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 297.144398][ T30] default_device_exit_batch+0xa24/0xaa0 [ 297.177777][ T30] ? __pfx___might_resched+0x10/0x10 [ 297.183139][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 297.244420][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 297.276793][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 297.282154][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 297.306926][ T30] cleanup_net+0x89d/0xcc0 [ 297.311421][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 297.336448][ T30] ? process_scheduled_works+0x976/0x1850 [ 297.342242][ T30] process_scheduled_works+0xa63/0x1850 [ 297.370723][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.396431][ T30] ? assign_work+0x364/0x3d0 [ 297.401098][ T30] worker_thread+0x870/0xd30 [ 297.405739][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.435774][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.455626][ T30] kthread+0x2f0/0x390 [ 297.466438][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.485043][ T30] ? __pfx_kthread+0x10/0x10 [ 297.495494][ T30] ret_from_fork+0x4b/0x80 [ 297.511317][ T30] ? __pfx_kthread+0x10/0x10 [ 297.516010][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.536653][ T30] [ 297.554657][ T30] INFO: task kworker/u8:2:35 blocked for more than 144 seconds. [ 297.573974][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 297.596530][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.605283][ T30] task:kworker/u8:2 state:D stack:21976 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 297.652080][ T30] Workqueue: events_unbound linkwatch_event [ 297.671199][ T30] Call Trace: [ 297.674550][ T30] [ 297.698512][ T30] __schedule+0x1895/0x4b30 [ 297.703130][ T30] ? __pfx___schedule+0x10/0x10 [ 297.729216][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.734331][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.761085][ T30] ? kthread_data+0x52/0xd0 [ 297.765669][ T30] ? schedule+0x90/0x320 [ 297.786812][ T30] ? wq_worker_sleeping+0x66/0x240 [ 297.792017][ T30] ? schedule+0x90/0x320 [ 297.796297][ T30] schedule+0x14b/0x320 [ 297.821902][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.835575][ T30] __mutex_lock+0x6a7/0xd70 [ 297.840586][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.845309][ T30] ? linkwatch_event+0xe/0x60 [ 297.856434][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.861537][ T30] ? process_scheduled_works+0x976/0x1850 [ 297.880870][ T30] linkwatch_event+0xe/0x60 [ 297.886241][ T30] process_scheduled_works+0xa63/0x1850 [ 297.895710][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.906420][ T30] ? assign_work+0x364/0x3d0 [ 297.911087][ T30] worker_thread+0x870/0xd30 [ 297.915729][ T30] ? __kthread_parkme+0x169/0x1d0 [ 297.928924][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.934106][ T30] kthread+0x2f0/0x390 [ 297.944317][ T30] ? __pfx_worker_thread+0x10/0x10 [ 297.954508][ T30] ? __pfx_kthread+0x10/0x10 [ 297.964978][ T30] ret_from_fork+0x4b/0x80 [ 297.969860][ T30] ? __pfx_kthread+0x10/0x10 [ 297.975536][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.989559][ T30] [ 297.992780][ T30] INFO: task dhcpcd:4899 blocked for more than 144 seconds. [ 298.006156][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 298.018072][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.034419][ T30] task:dhcpcd state:D stack:23632 pid:4899 tgid:4899 ppid:1 flags:0x00000002 [ 298.048545][ T30] Call Trace: [ 298.051865][ T30] [ 298.054967][ T30] __schedule+0x1895/0x4b30 [ 298.065947][ T30] ? __pfx___schedule+0x10/0x10 [ 298.073499][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.086323][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.091991][ T30] ? schedule+0x90/0x320 [ 298.096324][ T30] schedule+0x14b/0x320 [ 298.110739][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.133741][ T30] __mutex_lock+0x6a7/0xd70 [ 298.138894][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.143641][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 298.158760][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.163868][ T30] ? __might_fault+0xc6/0x120 [ 298.175815][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 298.184207][ T30] ? sock_ioctl+0x661/0x8e0 [ 298.198517][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 298.204642][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 298.216793][ T30] sock_ioctl+0x680/0x8e0 [ 298.221201][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 298.226106][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 298.240145][ T30] __se_sys_ioctl+0xf9/0x170 [ 298.244813][ T30] do_syscall_64+0xf3/0x230 [ 298.255739][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.264303][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.275089][ T30] RIP: 0033:0x7f68b62cfd49 [ 298.284930][ T30] RSP: 002b:00007ffee45f90d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.296449][ T30] RAX: ffffffffffffffda RBX: 000055d47c915370 RCX: 00007f68b62cfd49 [ 298.313981][ T30] RDX: 00007ffee45f90e0 RSI: 0000000000008982 RDI: 0000000000000011 [ 298.323563][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 298.336413][ T30] R10: 00007ffee4609760 R11: 0000000000000246 R12: 00007ffee45f90e0 [ 298.344632][ T30] R13: 00007ffee45f91a0 R14: 000055d47c915370 R15: 000055d47caa8e40 [ 298.366816][ T30] [ 298.376782][ T30] INFO: task syz-executor:6659 blocked for more than 145 seconds. [ 298.388110][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 298.395803][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.413272][ T30] task:syz-executor state:D stack:21728 pid:6659 tgid:6659 ppid:1 flags:0x00000004 [ 298.426210][ T30] Call Trace: [ 298.436569][ T30] [ 298.439562][ T30] __schedule+0x1895/0x4b30 [ 298.444126][ T30] ? __pfx___schedule+0x10/0x10 [ 298.458613][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.463716][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.478418][ T30] ? schedule+0x90/0x320 [ 298.482837][ T30] schedule+0x14b/0x320 [ 298.494747][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.504539][ T30] __mutex_lock+0x6a7/0xd70 [ 298.514964][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.523910][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 298.532797][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.542658][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 298.551528][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 298.562523][ T30] ? __lock_acquire+0x1384/0x2050 [ 298.571309][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.581546][ T30] netlink_rcv_skb+0x1e3/0x430 [ 298.592361][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 298.603731][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.612252][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 298.623536][ T30] netlink_unicast+0x7f6/0x990 [ 298.631210][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 298.643133][ T30] ? __virt_addr_valid+0x183/0x530 [ 298.651029][ T30] ? __check_object_size+0x48e/0x900 [ 298.663976][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 298.671608][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.682848][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 298.690297][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.695659][ T30] __sock_sendmsg+0x221/0x270 [ 298.712391][ T30] __sys_sendto+0x39b/0x4f0 [ 298.723208][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 298.730958][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.736226][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 298.748468][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.754520][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.766499][ T30] __x64_sys_sendto+0xde/0x100 [ 298.771349][ T30] do_syscall_64+0xf3/0x230 [ 298.775885][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.788941][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.797114][ T30] RIP: 0033:0x7fd7ee77fe8c [ 298.801597][ T30] RSP: 002b:00007fd7eea5f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.818812][ T30] RAX: ffffffffffffffda RBX: 00007fd7ef464620 RCX: 00007fd7ee77fe8c [ 298.834559][ T30] RDX: 000000000000003c RSI: 00007fd7ef464670 RDI: 0000000000000003 [ 298.843074][ T30] RBP: 0000000000000000 R08: 00007fd7eea5f704 R09: 000000000000000c [ 298.856443][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 298.865357][ T30] R13: 0000000000000000 R14: 00007fd7ef464670 R15: 0000000000000000 [ 298.882082][ T30] [ 298.885256][ T30] INFO: task syz.3.299:6694 blocked for more than 145 seconds. [ 298.902905][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 298.913949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.931919][ T30] task:syz.3.299 state:D stack:25824 pid:6694 tgid:6693 ppid:6261 flags:0x00004006 [ 298.944812][ T30] Call Trace: [ 298.955180][ T30] [ 298.960761][ T30] __schedule+0x1895/0x4b30 [ 298.965346][ T30] ? __pfx___schedule+0x10/0x10 [ 298.976169][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.983891][ T30] ? schedule+0x90/0x320 [ 298.994545][ T30] schedule+0x14b/0x320 [ 299.004145][ T30] schedule_timeout+0xb0/0x310 [ 299.015074][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 299.023645][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.035956][ T30] ? wait_for_completion+0x2fe/0x620 [ 299.043912][ T30] ? wait_for_completion+0x2fe/0x620 [ 299.056849][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.062120][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 299.075653][ T30] ? wait_for_completion+0x2fe/0x620 [ 299.082559][ T30] wait_for_completion+0x355/0x620 [ 299.094807][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 299.104887][ T30] ? __flush_work+0xe7/0xc50 [ 299.116461][ T30] __flush_work+0xa37/0xc50 [ 299.121067][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 299.126311][ T30] ? __flush_work+0xe7/0xc50 [ 299.139436][ T30] ? __pfx___flush_work+0x10/0x10 [ 299.144619][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 299.167674][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.174081][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 299.187042][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.192315][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 299.209429][ T30] ? enqueue_timer+0x21b/0x570 [ 299.214278][ T30] ? __mod_timer+0xb89/0xeb0 [ 299.225316][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 299.236194][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.248267][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.254670][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 299.266436][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 299.271717][ T30] unregister_netdevice_queue+0x303/0x370 [ 299.286866][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 299.293193][ T30] __tun_detach+0x6b9/0x1600 [ 299.304717][ T30] tun_chr_close+0x105/0x1b0 [ 299.313419][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 299.325286][ T30] __fput+0x23f/0x880 [ 299.334156][ T30] task_work_run+0x24f/0x310 [ 299.342676][ T30] ? __pfx_task_work_run+0x10/0x10 [ 299.352748][ T30] get_signal+0x15e8/0x1740 [ 299.361229][ T30] ? __pfx_get_signal+0x10/0x10 [ 299.366160][ T30] arch_do_signal_or_restart+0x96/0x860 [ 299.378953][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.385180][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.396501][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 299.402295][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 299.424900][ T30] do_syscall_64+0x100/0x230 [ 299.431203][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.435950][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.446420][ T30] RIP: 0033:0x7f535ff7dff9 [ 299.450895][ T30] RSP: 002b:00007f5360d3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.468262][ T30] RAX: 0000000000000000 RBX: 00007f5360135f80 RCX: 00007f535ff7dff9 [ 299.476297][ T30] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 000000000000000b [ 299.493369][ T30] RBP: 00007f535fff0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.502967][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.520840][ T30] R13: 0000000000000000 R14: 00007f5360135f80 R15: 00007f536025fa28 [ 299.535855][ T30] [ 299.545325][ T30] INFO: task syz.0.303:6708 blocked for more than 146 seconds. [ 299.560295][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 299.580417][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.595726][ T30] task:syz.0.303 state:D stack:24720 pid:6708 tgid:6704 ppid:5782 flags:0x00004006 [ 299.609708][ T30] Call Trace: [ 299.614915][ T30] [ 299.624179][ T30] __schedule+0x1895/0x4b30 [ 299.636920][ T30] ? __pfx___schedule+0x10/0x10 [ 299.641949][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.656103][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 299.663350][ T30] ? schedule+0x90/0x320 [ 299.675830][ T30] schedule+0x14b/0x320 [ 299.680686][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.686212][ T30] __mutex_lock+0x6a7/0xd70 [ 299.696918][ T30] ? __mutex_lock+0x52a/0xd70 [ 299.701669][ T30] ? tun_chr_close+0x3b/0x1b0 [ 299.722197][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.727821][ T30] ? __pfx_call_rcu+0x10/0x10 [ 299.732548][ T30] tun_chr_close+0x3b/0x1b0 [ 299.745861][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 299.751409][ T30] __fput+0x23f/0x880 [ 299.755465][ T30] task_work_run+0x24f/0x310 [ 299.770698][ T30] ? __pfx_task_work_run+0x10/0x10 [ 299.775878][ T30] ? switch_task_namespaces+0xe4/0x110 [ 299.786425][ T30] do_exit+0xa2f/0x28e0 [ 299.790649][ T30] ? __pfx_do_exit+0x10/0x10 [ 299.795282][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 299.812342][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.825036][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.835614][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 299.845752][ T30] do_group_exit+0x207/0x2c0 [ 299.854428][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.866439][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 299.871712][ T30] get_signal+0x16a3/0x1740 [ 299.876257][ T30] ? __pfx_get_signal+0x10/0x10 [ 299.888659][ T30] ? __tun_chr_ioctl+0x685/0x2400 [ 299.893938][ T30] arch_do_signal_or_restart+0x96/0x860 [ 299.906775][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 299.913085][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.926437][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 299.932235][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 299.947785][ T30] do_syscall_64+0x100/0x230 [ 299.952448][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.965747][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.972225][ T30] RIP: 0033:0x7f1d9917dff9 [ 299.984740][ T30] RSP: 002b:00007f1d99ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.994963][ T30] RAX: ffffffffffffffea RBX: 00007f1d99336130 RCX: 00007f1d9917dff9 [ 300.006408][ T30] RDX: 0000000000000000 RSI: 00000000c0502100 RDI: 0000000000000007 [ 300.014434][ T30] RBP: 00007f1d991f0296 R08: 0000000000000000 R09: 0000000000000000 [ 300.031598][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.044535][ T30] R13: 0000000000000001 R14: 00007f1d99336130 R15: 00007f1d9945fa28 [ 300.058523][ T30] [ 300.063296][ T30] INFO: task syz.4.305:6715 blocked for more than 146 seconds. [ 300.094832][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 300.104007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.116453][ T30] task:syz.4.305 state:D stack:23520 pid:6715 tgid:6714 ppid:5807 flags:0x00004004 [ 300.137101][ T30] Call Trace: [ 300.140436][ T30] [ 300.143416][ T30] __schedule+0x1895/0x4b30 [ 300.156453][ T30] ? __pfx___schedule+0x10/0x10 [ 300.161622][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.175403][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 300.185327][ T30] ? schedule+0x90/0x320 [ 300.190546][ T30] schedule+0x14b/0x320 [ 300.194783][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.200436][ T30] __mutex_lock+0x6a7/0xd70 [ 300.204986][ T30] ? __mutex_lock+0x52a/0xd70 [ 300.210088][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.216281][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.221717][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.227756][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 300.233002][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.238725][ T30] ? ref_tracker_free+0x643/0x7e0 [ 300.243789][ T30] netlink_rcv_skb+0x1e3/0x430 [ 300.248793][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.254384][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.259801][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.265039][ T30] netlink_unicast+0x7f6/0x990 [ 300.269950][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 300.275809][ T30] ? __virt_addr_valid+0x183/0x530 [ 300.282734][ T30] ? __check_object_size+0x48e/0x900 [ 300.289669][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 300.294497][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.299997][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 300.304976][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.310377][ T30] __sock_sendmsg+0x221/0x270 [ 300.315090][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 300.319999][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.325368][ T30] ? kmem_cache_free+0x1a2/0x420 [ 300.331991][ T30] ? __seccomp_filter+0xb38/0x1fe0 [ 300.337509][ T30] __sys_sendmsg+0x292/0x380 [ 300.342174][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.347681][ T30] ? __secure_computing+0x125/0x370 [ 300.352927][ T30] do_syscall_64+0xf3/0x230 [ 300.357591][ T30] ? clear_bhb_loop+0x35/0x90 [ 300.362308][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.368273][ T30] RIP: 0033:0x7f7fd4b7dff9 [ 300.372713][ T30] RSP: 002b:00007f7fd5966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.381221][ T30] RAX: ffffffffffffffda RBX: 00007f7fd4d35f80 RCX: 00007f7fd4b7dff9 [ 300.389283][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 300.399894][ T30] RBP: 00007f7fd4bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 300.408023][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.416133][ T30] R13: 0000000000000000 R14: 00007f7fd4d35f80 R15: 00007f7fd4e5fa28 [ 300.424317][ T30] [ 300.427848][ T30] [ 300.427848][ T30] Showing all locks held in the system: [ 300.518660][ T30] 4 locks held by kworker/u8:0/11: [ 300.524107][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.544493][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.566476][ T30] #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 300.575985][ T30] #3: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 300.584970][ T30] 1 lock held by khungtaskd/30: [ 300.589919][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 300.600000][ T30] 3 locks held by kworker/u8:2/35: [ 300.605153][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.616954][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.628240][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 300.637828][ T30] 5 locks held by kworker/u8:4/62: [ 300.643016][ T30] 3 locks held by kworker/u8:9/3036: [ 300.648883][ T30] #0: ffff88814b64e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.660802][ T30] #1: ffffc90009e37d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.674855][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 300.684569][ T30] 2 locks held by dhcpcd/4899: [ 300.689450][ T30] #0: ffffffff8fcb67c8 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x661/0x8e0 [ 300.699269][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 300.708935][ T30] 2 locks held by getty/4983: [ 300.713717][ T30] #0: ffff88802e8070a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 300.723590][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 300.734159][ T30] 3 locks held by kworker/0:3/5228: [ 300.742597][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.755111][ T30] #1: ffffc90003bc7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.766445][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 300.776105][ T30] 1 lock held by syz-executor/5782: [ 300.781445][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 300.790671][ T30] 1 lock held by syz-executor/6659: [ 300.795883][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.805538][ T30] 1 lock held by syz.3.299/6694: [ 300.810569][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 300.821587][ T30] 1 lock held by syz.0.303/6708: [ 300.826732][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 300.835751][ T30] 4 locks held by syz.2.304/6712: [ 300.841895][ T30] #0: ffff88806c778d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 300.851978][ T30] #1: ffff88806c778078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 300.861901][ T30] #2: ffffffff8fe3e568 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 300.872492][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 300.883486][ T30] 2 locks held by syz.4.305/6715: [ 300.888753][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.898295][ T30] #1: ffffffff8e93d240 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 300.908492][ T30] 2 locks held by syz-executor/6727: [ 300.913967][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 300.923598][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 300.933862][ T30] 2 locks held by syz-executor/6729: [ 300.939245][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 300.949846][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 300.960001][ T30] 2 locks held by syz-executor/6732: [ 300.965328][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 300.974995][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 300.985739][ T30] 2 locks held by syz-executor/6733: [ 300.991394][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.000938][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.011129][ T30] 2 locks held by syz-executor/6738: [ 301.016944][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.026515][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.036668][ T30] 2 locks held by syz-executor/6748: [ 301.041995][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.052135][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.062536][ T30] 2 locks held by syz-executor/6751: [ 301.070669][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.080322][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.090650][ T30] 2 locks held by syz-executor/6753: [ 301.095950][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.105453][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.115802][ T30] 2 locks held by syz-executor/6755: [ 301.121210][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.130699][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.141037][ T30] 2 locks held by syz-executor/6763: [ 301.147103][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.156644][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.166799][ T30] 2 locks held by syz-executor/6768: [ 301.172101][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.183655][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.193784][ T30] 2 locks held by syz-executor/6774: [ 301.199165][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.208724][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.218898][ T30] 2 locks held by syz-executor/6777: [ 301.224206][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.234171][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.244343][ T30] 2 locks held by syz-executor/6778: [ 301.250846][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 301.260598][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 301.270728][ T30] [ 301.273165][ T30] ============================================= [ 301.273165][ T30] [ 301.281780][ T30] NMI backtrace for cpu 1 [ 301.286133][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 301.296749][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.306824][ T30] Call Trace: [ 301.310100][ T30] [ 301.313028][ T30] dump_stack_lvl+0x241/0x360 [ 301.317710][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.322990][ T30] ? __pfx__printk+0x10/0x10 [ 301.327585][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 301.332525][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 301.337980][ T30] ? _printk+0xd5/0x120 [ 301.342135][ T30] ? __pfx__printk+0x10/0x10 [ 301.346724][ T30] ? __wake_up_klogd+0xcc/0x110 [ 301.351581][ T30] ? __pfx__printk+0x10/0x10 [ 301.356260][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 301.361304][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.367378][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 301.373357][ T30] watchdog+0xff4/0x1040 [ 301.377598][ T30] ? watchdog+0x1ea/0x1040 [ 301.382016][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.386692][ T30] kthread+0x2f0/0x390 [ 301.390756][ T30] ? __pfx_watchdog+0x10/0x10 [ 301.395429][ T30] ? __pfx_kthread+0x10/0x10 [ 301.400047][ T30] ret_from_fork+0x4b/0x80 [ 301.404465][ T30] ? __pfx_kthread+0x10/0x10 [ 301.409050][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.413824][ T30] [ 301.417802][ T30] Sending NMI from CPU 1 to CPUs 0: [ 301.423061][ C0] NMI backtrace for cpu 0 [ 301.423075][ C0] CPU: 0 UID: 0 PID: 6694 Comm: syz.3.299 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 301.423095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.423106][ C0] RIP: 0010:stack_trace_consume_entry+0xb/0x280 [ 301.423130][ C0] Code: 44 0a 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 18 48 89 fb 48 ba 00 00 00 00 00 fc ff df 4c 8d [ 301.423145][ C0] RSP: 0018:ffffc900097ef518 EFLAGS: 00000282 [ 301.423160][ C0] RAX: ffffffff81ed0276 RBX: ffffc900097ef540 RCX: ffffffff917b9000 [ 301.423173][ C0] RDX: ffffffff91966601 RSI: ffffffff81ed0276 RDI: ffffc900097ef620 [ 301.423185][ C0] RBP: ffffc900097ef5d0 R08: ffffc900097ef8e8 R09: 0000000000000000 [ 301.423197][ C0] R10: ffffc900097ef590 R11: ffffffff8180a000 R12: ffff8880615f8000 [ 301.423209][ C0] R13: ffffffff8180a000 R14: ffffc900097ef620 R15: 0000000000000000 [ 301.423221][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 301.423235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.423247][ C0] CR2: 00007ffe77124fa8 CR3: 0000000065e24000 CR4: 00000000003526f0 [ 301.423262][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.423272][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.423282][ C0] Call Trace: [ 301.423288][ C0] [ 301.423295][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 301.423314][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 301.423337][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 301.423354][ C0] ? nmi_handle+0x2a/0x5a0 [ 301.423377][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 301.423396][ C0] ? nmi_handle+0x14f/0x5a0 [ 301.423412][ C0] ? nmi_handle+0x2a/0x5a0 [ 301.423429][ C0] ? stack_trace_consume_entry+0xb/0x280 [ 301.423446][ C0] ? default_do_nmi+0x63/0x160 [ 301.423465][ C0] ? exc_nmi+0x123/0x1f0 [ 301.423482][ C0] ? end_repeat_nmi+0xf/0x53 [ 301.423497][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.423516][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.423534][ C0] ? vfree+0x186/0x2e0 [ 301.423558][ C0] ? __init_begin+0x41000/0x41000 [ 301.423574][ C0] ? use_tsc_delay+0x21/0x30 [ 301.423594][ C0] ? vfree+0x186/0x2e0 [ 301.423612][ C0] ? stack_trace_consume_entry+0xb/0x280 [ 301.423631][ C0] ? stack_trace_consume_entry+0xb/0x280 [ 301.423655][ C0] ? use_tsc_delay+0x21/0x30 [ 301.423674][ C0] ? stack_trace_consume_entry+0xb/0x280 [ 301.423692][ C0] [ 301.423697][ C0] [ 301.423702][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.423721][ C0] arch_stack_walk+0x10e/0x150 [ 301.423740][ C0] ? vfree+0x186/0x2e0 [ 301.423761][ C0] stack_trace_save+0x118/0x1d0 [ 301.423780][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 301.423802][ C0] save_stack+0xfb/0x1f0 [ 301.423820][ C0] ? __pfx_save_stack+0x10/0x10 [ 301.423835][ C0] ? free_unref_page+0xcfb/0xf20 [ 301.423866][ C0] ? page_ext_get+0x20/0x2a0 [ 301.423889][ C0] __reset_page_owner+0x76/0x430 [ 301.423912][ C0] free_unref_page+0xcfb/0xf20 [ 301.423940][ C0] vfree+0x186/0x2e0 [ 301.423961][ C0] kcov_close+0x28/0x50 [ 301.423979][ C0] ? __pfx_kcov_close+0x10/0x10 [ 301.423997][ C0] __fput+0x23f/0x880 [ 301.424021][ C0] task_work_run+0x24f/0x310 [ 301.424038][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 301.424060][ C0] ? __pfx_task_work_run+0x10/0x10 [ 301.424076][ C0] ? do_exit+0xa2a/0x28e0 [ 301.424092][ C0] ? kmem_cache_free+0x1a2/0x420 [ 301.424111][ C0] ? do_exit+0xa2a/0x28e0 [ 301.424128][ C0] do_exit+0xa2f/0x28e0 [ 301.424147][ C0] ? __pfx_do_exit+0x10/0x10 [ 301.424162][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.424182][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.424204][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.424224][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 301.424245][ C0] do_group_exit+0x207/0x2c0 [ 301.424260][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.424279][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 301.424301][ C0] get_signal+0x16a3/0x1740 [ 301.424325][ C0] ? __pfx_get_signal+0x10/0x10 [ 301.424347][ C0] arch_do_signal_or_restart+0x96/0x860 [ 301.424368][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.424387][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.424413][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 301.424435][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 301.424457][ C0] do_syscall_64+0x100/0x230 [ 301.424472][ C0] ? clear_bhb_loop+0x35/0x90 [ 301.424487][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.424508][ C0] RIP: 0033:0x7f535ff7dff9 [ 301.424521][ C0] Code: Unable to access opcode bytes at 0x7f535ff7dfcf. [ 301.424529][ C0] RSP: 002b:00007f5360d3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.424550][ C0] RAX: 0000000000000000 RBX: 00007f5360135f80 RCX: 00007f535ff7dff9 [ 301.424562][ C0] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 000000000000000b [ 301.424573][ C0] RBP: 00007f535fff0296 R08: 0000000000000000 R09: 0000000000000000 [ 301.424583][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.424593][ C0] R13: 0000000000000000 R14: 00007f5360135f80 R15: 00007f536025fa28 [ 301.424612][ C0] [ 301.963480][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 301.970404][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 301.980907][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.990957][ T30] Call Trace: [ 301.994233][ T30] [ 301.997682][ T30] dump_stack_lvl+0x241/0x360 [ 302.002362][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.007554][ T30] ? __pfx__printk+0x10/0x10 [ 302.012140][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.018126][ T30] ? vscnprintf+0x5d/0x90 [ 302.022589][ T30] panic+0x349/0x880 [ 302.026578][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 302.032764][ T30] ? __pfx_panic+0x10/0x10 [ 302.037180][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 302.042564][ T30] ? __irq_work_queue_local+0x137/0x410 [ 302.048114][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 302.053570][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 302.059734][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 302.065974][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 302.072150][ T30] watchdog+0x1033/0x1040 [ 302.076578][ T30] ? watchdog+0x1ea/0x1040 [ 302.081007][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.085697][ T30] kthread+0x2f0/0x390 [ 302.089763][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.094441][ T30] ? __pfx_kthread+0x10/0x10 [ 302.099029][ T30] ret_from_fork+0x4b/0x80 [ 302.103442][ T30] ? __pfx_kthread+0x10/0x10 [ 302.108028][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.112797][ T30] [ 302.115967][ T30] Kernel Offset: disabled [ 302.120292][ T30] Rebooting in 86400 seconds..