last executing test programs: 12.836991476s ago: executing program 1 (id=261): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getrandom(0x0, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c94"], 0x50}}, 0x0) 6.509714678s ago: executing program 2 (id=271): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000005c0), 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b1ac9"], 0xe) syz_emit_ethernet(0xe3, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRESOCT=r0], 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) set_mempolicy(0x8000, &(0x7f0000000000)=0x1, 0x26d5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x4e, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, 0x0, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1e00000001000000", @ANYRES32, @ANYBLOB="60bde915a82c8cf79b8b88c62f2c0c22a0bb75e6b6a44460a2546157b0c5ec13ef2102dd285d4244c672b35c015e2d0fcd4ab34ebcebcd277fe71120c8c34cee2227ab3cb08bb574de3c36fc07cc91174a58297b1f0bf728f7898a90e704f132e900da3e0b41deee14a30ab11005fd3db0d872d86da624e9ebbbcf12605e3793e0f426ff03e6f1c80b33cec0da12792397601d9b5b911fcc0cd7c64166d18401133e0a9299ba947f688207782a69cbe3965842306d93a828c1f3c83c35831347525c6752c4b7cf3c7db25b847d1c96d6cfedd50a92693bf73d6d86ba663742d3580b9ff11e6fe26e6c929274c818e8a514a746c159e408", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001a0001000080000000000000020000000006"], 0x2c}}, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCFLSH(r6, 0x540b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) 5.739959328s ago: executing program 0 (id=274): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x4ee2}, 0xc, 0x0) landlock_restrict_self(r4, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00', 0x2) lseek(r3, 0x4, 0x0) syz_usb_control_io(r2, &(0x7f0000000fc0)={0x2c, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x4, @string={0x4, 0x3, "b9b1"}}, 0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x14, &(0x7f00000001c0)={0x20, 0x0, 0xb3, {0xb3, 0x0, "f642d86f1ecc93a7e6c708cd937d1bfceee092e7e0735c4bfbfe2a7a8f73508b1620fc9ef7402d00034d780ae8eed533ced07a2942fe5cce427c2e7aec8df4c96dc56835028339e02d1ae4996b0f5af078db520ca55ad043a274627279fdfe04cf5dae95db90eac59e42dd1344dbb57bea0ececd65dabb61745007a16b2855e1fff2d6fa9d82b01a16da7962b4211722b80554457518799feff9a2fcf76d9427c6ead4c374073fbb3970f6a574e5f1597a"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000300), &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0xff73, 0x9, 0x1, {0x22, 0xc1e}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000480)={0x40, 0x13, 0x50, "d8d1831d9ad0dbc5cfb7da996389d21936bb36399d4bdc59bd2e88787f1b2e94b9eed0e54cf46bd9eb835bb1d48e71cd9af531fac7d0b9c842115e96847b4d6f8e48155b971acadf813a22f4481cc023"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000580)={0x20, 0x1, 0x24, "b4a13b4967b6689578b9e89e2afd47a478cc4a55bd64aa0a8c68733a71db76e73a89fc49"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x65}}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000040037800b0001"], 0x48}}, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') read$proc_mixer(r8, &(0x7f00000001c0)=""/149, 0x95) 5.174479499s ago: executing program 1 (id=278): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000040)="1c0000001a005f0214db753e19c911b82713e55013f9f40700090100", 0x1c) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.104514159s ago: executing program 3 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000002400)='scmi_xfer_begin\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fstatfs(0xffffffffffffffff, &(0x7f0000001300)=""/4096) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x9, 0x9, 0x7, 0x10001, 0x7, r2}, &(0x7f0000000100)=0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes256, 0x0, @desc3}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x0, 0x47524247}}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = dup(r5) r7 = dup2(r4, r6) syz_fuse_handle_req(r7, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, &(0x7f00000049c0)=ANY=[@ANYBLOB="100000000000ef000000000000000000"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000280)={0x8, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200060000000000000000000000000002000100000000000000081800000000020005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 4.919650593s ago: executing program 2 (id=280): r0 = socket(0x2b, 0x80801, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 4.91900748s ago: executing program 1 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r4 = inotify_init1(0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000040)='./control\x00', 0x5000410) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x0, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES64=r6, @ANYRES16=r3, @ANYRES64, @ANYRES16, @ANYRESHEX=r0, @ANYRES64, @ANYRES64=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) rmdir(&(0x7f0000000100)='./control\x00') r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES8=r9, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00@F'], 0x48}}, 0x0) 4.744514325s ago: executing program 2 (id=282): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x0, 0x0, [@empty]}}}], 0x28}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe5d) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc5, 0xc8, 0xcf, 0x40, 0xb48, 0x300d, 0xaba0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0xdd, 0x39}}]}}]}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlinkprop={0x0, 0x6c, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x2000, 0x3024}, [@IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_MPLS, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x10, 0x0, 0x0, 0x1}, {0x0, 0xe, 0x0, 0x0, 0x101}, {0x0, 0x9, 0x0, 0x0, 0x8}]}}, @AF_MPLS, @AF_MPLS, @AF_BRIDGE, @AF_BRIDGE, @AF_BRIDGE, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}]}]}, @IFLA_PROMISCUITY={0x0, 0x1e, 0x2}, @IFLA_OPERSTATE={0x0, 0x10, 0xde}, @IFLA_PHYS_PORT_ID={0x0, 0x22, "c615a0ea9660694849afa59a5c4da3736d7c93037b462297d4b5e8c39e096e"}, @IFLA_EVENT={0x0, 0x2c, 0x400}, @IFLA_ADDRESS={0x0, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x13}}, 0x4000) r6 = fsopen(&(0x7f0000000b80)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000000)='fus\x9cebFQv\nk\xaa\x10\xc4\t\x9fR\x93\xef\x89lk', 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000580)=0x40) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000140)=[@enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000001c0)="b2"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)='Z'}) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000006c0)='[\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%\xea\xfbq', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) close(r6) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x40, 0x0, 0x6, "a1899d02a40b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.706319925s ago: executing program 1 (id=283): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) write(r1, &(0x7f0000000040)="1c0000001a005f0214db753e19c911b82713e55013f9", 0x16) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) 4.691367949s ago: executing program 3 (id=284): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x18a) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000026756d085e04830249530102030109023c0001000340000904"], 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) close(r0) 4.371207594s ago: executing program 4 (id=286): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x14}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) listen(r2, 0x3a5) cachestat(r2, &(0x7f0000000000)={0x1, 0x5}, &(0x7f0000000040), 0x0) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="ce", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000002a40)="9d", 0x1}], 0x2}}], 0x2, 0x20008880) 4.165436664s ago: executing program 4 (id=287): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$uinput(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x59) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r1, 0x92c0f000) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = memfd_create(&(0x7f0000000000)='y\x105%\xa3\xd5\xfa\xd7\xfa\x17\xe9\x99\xa2\x89\x8e\xcd\xfd', 0x2) pwrite64(r4, &(0x7f00000000c0)="a0", 0x1, 0x5b63) fcntl$addseals(r4, 0x409, 0x7) r5 = dup(r3) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) r7 = syz_io_uring_setup(0x6908, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1e45, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r8, &(0x7f00000005c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) epoll_create1(0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r10, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.70717755s ago: executing program 1 (id=288): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10000}, 0x1c, 0x0}, 0x4004811) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x20000000000, 0x822b01) r1 = fcntl$dupfd(r0, 0x0, r0) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x40000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) poll(&(0x7f00000001c0)=[{r1, 0x196}, {r1, 0x8a00}, {r1, 0x600c}, {r2}, {r3, 0x4234}], 0x5, 0x2) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000500)=0x1d) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000140)={'L-', 0x40}, 0x16, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x1, 0x4) write$char_usb(r0, &(0x7f0000000040)="e2", 0x1068) 2.999073484s ago: executing program 3 (id=289): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4000) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000480)) 2.946472716s ago: executing program 3 (id=290): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0), 0x191) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c, 0x0}, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={[&(0x7f0000000100)='\x00', &(0x7f0000000180)='#! ']}, 0x0) (fail_nth: 10) 2.52085599s ago: executing program 3 (id=291): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "7b8c5c34"}]}}, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0xf0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x98, 0x2, 0x2, 0x6, 0x0, 0x1c, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x100, 0x800, 0xff}, [@ncm={0x6, 0x24, 0x1a, 0x4, 0x12}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x3, 0xc0}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5e, 0x3, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x19f, 0x8, 0x6, 0xe}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7, 0x40, 0x9, 0x8, 0x7}, 0x4d, &(0x7f00000001c0)={0x5, 0xf, 0x4d, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x2, 0x0, 0x8, [0x1fe3f30, 0x0, 0x3f00, 0x3f00, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0xa84}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b19d19b29c9f362ed380d0dbde676850"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x29, 0x40}]}, 0x4, [{0xfe, &(0x7f0000000240)=@string={0xfe, 0x3, "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"}}, {0x70, &(0x7f0000000340)=@string={0x70, 0x3, "e143d7d2a087d274f5dc7e3076c960e012d9a7fe4fd101e33eae5e8dd89f87e3f89a6e79894f911b21bb76286271db286dcf9debe39799488077c4d792326edd0acb81b11f7f56908e07d098043b4f3523e92de1df7ce0c439a6345352101c2adecd7425623a4399ef986f545690"}}, {0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "06b18e71796afa99028760b2e657b64ee1b8a9f1f38874167b695f5997f97bf1db1959009d5b7965d59337e3800e7bb415dd787c724f0a09aec4e9b08d61b5a2b871173786ccd7aa7eecf5a9143518abbd5cd6eb97b09a0d01cf36b8fbcddad29177484b321cbf53092fe6c8ac6665f6636cf488b96553a80874d247f3c4d75bb67e92c5480cb4fc91d737f439240e048d80cfb68493873ae610cac90ea4c7e680b5620e767977c2775f7ce82d544a5f07c193501f1e47d4304dc3262a3981114c0a19bf7d649bf196548fcbc25d053d"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41c}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x40, 0x10, 0x85, {0x85, 0x6, "45dc556f9be446d612089444534f6877211dc6c6ba79f0a985fc89901324a955f05fa6c4773a462de621046ee1c04b63469283f5839f2b7b6620f2758b65af778a7c7c6b7fcb1101e6ead3a5d442d77fc8df0f0bb91944c8590cc51c7f79d43cec414e4a243072ae80f608666865a41e7eaeb661682e2925d2748997c2f3d89a9c1d6a"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x10, &(0x7f0000000640)={0x0, 0x3, 0x7e, "2a1781659cd9c5fb2a457387271fd23a95c86a003d3e1d053c16b78e9ffbe291a21904ecde4f3c7af5cde98e9d1a9e85a8823ec55fc6d190437804ddbf6e686f4c4ed58ca3ab15ea85f70c823e20b8662a40a20201b8ae0c7a6bdd56bb13bdf21b73a286ce8c62a64762aa777a39d42f75bdac48529b2938931bda1bb326"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x5}}) 2.47712281s ago: executing program 0 (id=292): r0 = socket(0x2b, 0x80801, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 2.366699032s ago: executing program 0 (id=293): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000007000000df2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028004001200080005"], 0x48}}, 0x4004000) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="0b030e00ebff020002004788ba96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@expire={0x42c, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {{{@in=@multicast1, @in=@multicast2, 0x4e24, 0x3, 0x4e23, 0x3, 0xa, 0x20, 0x0, 0x8, r2, r4}, {@in6=@local, 0x4d4, 0x32}, @in=@private=0xa010101, {0x40, 0xfffffffffffffffb, 0x5, 0x1, 0x100000000, 0x7fffffff, 0x1b19, 0xc}, {0x3, 0x6, 0x5, 0x6}, {0x7b65, 0x1, 0x20000000}, 0x70bd28, 0x0, 0xa, 0x3, 0x0, 0x4}, 0x49}, [@proto={0x5, 0x19, 0xff}, @tfcpad={0x8, 0x16, 0xe}, @algo_crypt={0x126, 0x2, {{'salsa20-asm\x00'}, 0x6f0, "fa993021a650e6090931e53977c8314e0ae593163731762afb842974d8b2a43247a5739b788d898e89a0084632578c8246f2394d2b7729b0e206e34cb5cd547951a6055b369002e813c838ede8f4261884a7599c556a282397e23f20c4db7e072547b5976424b6e5824659561a8708060224387d04caa664fc208dbc78baef8f7553f7943807d31137ce0797bb5fd7f3d4904d5fb48fd9c71e947224d862b856d53054d4604cfbe904632ea1f8ec7f282efaced4bc1403566131ce3272be8e6f95bcfaeeb79f1f83a8b5420380d12372d3357f4c5b9697727127cae21c79"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @tfcpad={0x8, 0x16, 0xf7}, @sa={0xe0, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x71, 0x4e22, 0x0, 0xa, 0x80, 0xa0, 0x84, 0x0, r5}, {@in=@private=0xa010100, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, {0x8, 0x200, 0x7, 0x10000, 0xdf8, 0x3ff, 0x5, 0x7f}, {0xc, 0x40, 0x4, 0x100000001}, {0x2, 0x10, 0xac}, 0x70bd29, 0x3507, 0x2, 0x2, 0x7, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sa={0xe0, 0x6, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x0, 0x4e20, 0xbf, 0xa, 0x30, 0xa0, 0x2e, r8, r9}, {@in=@remote, 0x4d6, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x19}, {0x7, 0x63e4683d, 0x9, 0xa002, 0x4, 0x6, 0x40, 0x4}, {0x6, 0x9, 0x40, 0x6}, {0x1ab20000, 0x4, 0x9}, 0x70bd26, 0x3506, 0x2, 0x2, 0x2, 0x8}}]}, 0x42c}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x6a, {{0xa, 0x1000, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x10000000, @local}}}, 0x104) 2.204651305s ago: executing program 0 (id=294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000023c0)={&(0x7f0000002400)='scmi_xfer_begin\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fstatfs(0xffffffffffffffff, &(0x7f0000001300)=""/4096) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x9, 0x9, 0x7, 0x10001, 0x7, r2}, &(0x7f0000000100)=0x20) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x22b7, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes256, 0x0, @desc3}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x7, 0x0, 0x47524247}}) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = dup(r5) r7 = dup2(r4, r6) syz_fuse_handle_req(r7, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x90, 0x0, 0x0, {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, &(0x7f00000049c0)=ANY=[@ANYBLOB="100000000000ef000000000000000000"], 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000280)={0x8, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffe}]}) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200060000000000000000000000000002000100000000000000081800000000020005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 1.987330119s ago: executing program 4 (id=295): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="b4000000000000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000280)={"840d6042cee820000028000000e8ff0000002000000000000000000f00", r2, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500150007000000080012"], 0x5c}}, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0383e04, &(0x7f0000000140)={"e3fe98873d275ac4650da6ff0d7ee4c0cda5a703827becb26eba2497c5271959", 0xffffffffffffffff, 0xffffffffffffffff, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000180), 0x44080, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) 1.814550151s ago: executing program 4 (id=296): pipe(&(0x7f00000001c0)) set_mempolicy(0x3, &(0x7f0000000040)=0x5bf, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xbb) write$binfmt_misc(r0, 0x0, 0x6c33d10a663d29c5) 1.712857838s ago: executing program 4 (id=297): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 1.686367869s ago: executing program 2 (id=298): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a005f0214db753e19c911b82713e55013f9", 0x16) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000000c0)) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) 1.674827893s ago: executing program 0 (id=299): r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x72, &(0x7f0000000180)={0x2}, &(0x7f0000000280)=0x20) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000000000)) rseq(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x6, 0x8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r5, 0x0) timer_create(0x3, 0x0, &(0x7f0000000000)) openat$ppp(0xffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r6, &(0x7f0000000180)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0x48, 0xa0c4, &(0x7f0000000140)={0x11, 0x19, r7, 0x1, 0xfb, 0x6, @multicast}, 0x14) r8 = socket$inet_dccp(0x2, 0x6, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000200), 0x4, &(0x7f00004e2000/0x2000)=nil, 0x1) setsockopt(r8, 0x800000010d, 0x3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3500000002"], 0x20) 1.61586831s ago: executing program 4 (id=300): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000340)=ANY=[], 0x2000011a) syz_usb_connect$uac1(0x5, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x10, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4d1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x3d, 0x4e, 0xa, {0x7, 0x25, 0x1, 0x81, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x5, 0x9, {0x7, 0x25, 0x1, 0x80, 0x1, 0x5}}}}}}}]}}, 0x0) splice(r8, 0x0, r7, 0x0, 0x4ff9c, 0x0) 736.714369ms ago: executing program 2 (id=301): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2200) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x2f) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000140)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYRES64=r5, @ANYBLOB="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", @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280060002404e21000008000500", @ANYRES32=r4], 0x44}}, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) fcntl$notify(r6, 0x402, 0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) renameat2(r1, &(0x7f0000000580)='./file1/file4/file7\x00', r1, &(0x7f0000000040)='./file1/file4/file7\x00', 0x8) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002e80)="5f343f12c773676d3d2efb0b75b3329066998000f2c8e5fc8b077443f8fb1d64fe840f69680d68d49ee6cf0e30d8cdaaadabf33acea9337badfd319e61dc4d18f813b7f57899d027e27cf32bddba12ed0f32b26720ad0d52a1b442fb34ffb8284df47620968c12a970a8d7a282229b1e36", 0x71}, {&(0x7f0000003000)="ef5f790dcc2ebd91ed72d2c759c94e79dee6eca3de1cc7198c341aad0a94140006632bbeb7e8ae099efe2c5f7d10c128d1890710435bcd634c8e7ed8185588669aa379313bef43c767fb6544c12e8066419dd64979e63fdae1e8135bca02a63dd338ccf353de1431adea00babdcc0f55f068d4dfb0eb3614e66f44c01bed38354138c21786767d657cc7f44222159d", 0x8f}], 0x2}}], 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x2) 695.248605ms ago: executing program 2 (id=302): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) (fail_nth: 2) 642.015468ms ago: executing program 3 (id=303): r0 = socket(0x2b, 0x80801, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000000c0)) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) 261.734255ms ago: executing program 1 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000700)={0x60001, 0x0, [0x40000000000081, 0x3, 0x2000, 0xe, 0x0, 0x3, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_usb_connect(0x0, 0x38, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000c166a0108304341276ff0102030109022600"], 0x0) r5 = epoll_create1(0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b0f, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x1c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}}, 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000180)={0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000480)={0x1c, &(0x7f00000001c0)={0x0, 0x8, 0xda, "26d8088792e862c05999f54f6a6e6bfaac5d35a90f8ccfbaddec2b7e8e6c2d81a0c1d96544fca810d4fca4f6d26efc776eda0a030ce1efb2d7eb3d786859cd27746ce288bcba99ada6b832ac6267c69011da70927be1710047a447061a41fe006b912143c9962485936a9b8093ad3b7e0a32ab2ddc7d4ee7cbe9bab50de81d3b9ac45db5035348c139a6a16358d3a54a4b4de15f8c683141219debe75f3e614cb7d627d325d68dae7da8eb1582679ba3bdb217eb1bb6f238afe1908d475a5e32538878249ddea81c10343760fc4519b418c0566a852727ce2ae3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1}, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000590000000057ffffffff7a02c1daab2dfe1cffff7f23094bf0755bbc59abe26ddaf4212ac40e41806e3aed584add17eef778bcf13aa612fb424ead9174d184b9a740a70e11633a9f6527595947b738c9e22ff326de6257943100000000"], &(0x7f0000000340)={0x20, 0x1, 0x1, 0xb}, &(0x7f0000000440)={0x20, 0x0, 0x1, 0x5}}) 0s ago: executing program 0 (id=305): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') read$proc_mixer(r0, &(0x7f00000001c0)=""/149, 0x95) kernel console output (not intermixed with test programs): nterface number: 48 but max is 0 [ 235.129066][ T5273] usb 2-1: config 0 has no interface number 0 [ 235.141129][ T5273] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 235.152419][ T5273] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 235.173493][ T5273] usb 2-1: config 0 interface 48 has no altsetting 0 [ 235.183494][ T5273] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 235.194665][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.202982][ T5273] usb 2-1: Product: syz [ 235.207332][ T5273] usb 2-1: Manufacturer: syz [ 235.212832][ T5273] usb 2-1: SerialNumber: syz [ 235.233721][ T5273] usb 2-1: config 0 descriptor?? [ 235.288518][ T5289] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 235.311381][ T6165] dccp_xmit_packet: Payload too large (65456) for featneg. [ 235.386536][ T6167] capability: warning: `syz.2.150' uses deprecated v2 capabilities in a way that may be insecure [ 235.454342][ T5289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.466539][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.472280][ T5289] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 235.496596][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.502726][ T5289] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.527183][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.558578][ T5289] usb 1-1: config 0 descriptor?? [ 235.600151][ T5289] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 235.650200][ T4004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.669299][ T4004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.681814][ T4004] bond0 (unregistering): Released all slaves [ 235.731751][ T5273] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 235.750889][ T5273] gspca_sunplus: reg_r err -71 [ 235.779881][ T5273] usb 2-1: USB disconnect, device number 8 [ 236.158631][ T4004] hsr_slave_0: left promiscuous mode [ 236.186917][ T4004] hsr_slave_1: left promiscuous mode [ 236.197562][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.207415][ T6188] [U]  [ 236.225036][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.246655][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.273882][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.361956][ T4004] veth1_macvtap: left promiscuous mode [ 236.379380][ T4004] veth0_macvtap: left promiscuous mode [ 236.386669][ T4004] veth1_vlan: left promiscuous mode [ 236.396322][ T4004] veth0_vlan: left promiscuous mode [ 236.791202][ T6200] __nla_validate_parse: 6 callbacks suppressed [ 236.791216][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 236.923279][ T4617] Bluetooth: hci2: command tx timeout [ 237.019480][ T4617] Bluetooth: hci3: command tx timeout [ 237.121244][ T4004] team0 (unregistering): Port device team_slave_1 removed [ 237.158584][ T4004] team0 (unregistering): Port device team_slave_0 removed [ 237.559028][ T6200] netlink: 'syz.1.155': attribute type 21 has an invalid length. [ 237.579436][ T6200] netlink: 128 bytes leftover after parsing attributes in process `syz.1.155'. [ 237.591711][ T6200] netlink: 'syz.1.155': attribute type 5 has an invalid length. [ 237.600611][ T6200] netlink: 3 bytes leftover after parsing attributes in process `syz.1.155'. [ 237.686434][ T6154] chnl_net:caif_netlink_parms(): no params data found [ 237.738380][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.784658][ T6213] netlink: 64 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.787381][ T6160] chnl_net:caif_netlink_parms(): no params data found [ 237.817277][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.821762][ T6213] netlink: 52 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.962117][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.969888][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.2.158'. [ 237.985248][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.005338][ T6154] bridge_slave_0: entered allmulticast mode [ 238.021755][ T6154] bridge_slave_0: entered promiscuous mode [ 238.073600][ T5273] usb 1-1: USB disconnect, device number 11 [ 238.215800][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.215926][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.216073][ T6154] bridge_slave_1: entered allmulticast mode [ 238.217033][ T6154] bridge_slave_1: entered promiscuous mode [ 238.254537][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.254605][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.254745][ T6160] bridge_slave_0: entered allmulticast mode [ 238.255671][ T6160] bridge_slave_0: entered promiscuous mode [ 238.257588][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.257649][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.257779][ T6160] bridge_slave_1: entered allmulticast mode [ 238.258709][ T6160] bridge_slave_1: entered promiscuous mode [ 238.310564][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.310952][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.159'. [ 238.319182][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.514649][ T6154] team0: Port device team_slave_0 added [ 238.518563][ T6160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.601994][ T4004] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.621889][ T6154] team0: Port device team_slave_1 added [ 238.655722][ T6160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.820878][ T4004] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.838915][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.838934][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.838959][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.900529][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.005722][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.043667][ T4617] Bluetooth: hci2: command tx timeout [ 239.062792][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.082689][ T4617] Bluetooth: hci3: command tx timeout [ 239.113763][ T4004] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.155411][ T6160] team0: Port device team_slave_0 added [ 239.184128][ T6160] team0: Port device team_slave_1 added [ 239.220709][ T6263] FAULT_INJECTION: forcing a failure. [ 239.220709][ T6263] name failslab, interval 1, probability 0, space 0, times 1 [ 239.260681][ T6263] CPU: 0 UID: 0 PID: 6263 Comm: syz.1.166 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 239.270989][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.281077][ T6263] Call Trace: [ 239.284379][ T6263] [ 239.287329][ T6263] dump_stack_lvl+0x241/0x360 [ 239.292057][ T6263] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.297306][ T6263] ? __pfx__printk+0x10/0x10 [ 239.301933][ T6263] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 239.307944][ T6263] ? __pfx___might_resched+0x10/0x10 [ 239.313264][ T6263] should_fail_ex+0x3b0/0x4e0 [ 239.317964][ T6263] should_failslab+0xac/0x100 [ 239.322650][ T6263] ? __alloc_skb+0x1c3/0x440 [ 239.327248][ T6263] kmem_cache_alloc_node_noprof+0x71/0x320 [ 239.333052][ T6263] ? __mutex_unlock_slowpath+0x21d/0x750 [ 239.338690][ T6263] __alloc_skb+0x1c3/0x440 [ 239.343109][ T6263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.349092][ T6263] ? __pfx___alloc_skb+0x10/0x10 [ 239.354035][ T6263] ? pfkey_broadcast+0x40/0x400 [ 239.358895][ T6263] ? pfkey_broadcast+0x3e3/0x400 [ 239.363845][ T6263] pfkey_sendmsg+0xce4/0x1050 [ 239.368520][ T6263] ? __lock_acquire+0x1384/0x2050 [ 239.373553][ T6263] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 239.378673][ T6263] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.383526][ T6263] ? __might_fault+0xaa/0x120 [ 239.388204][ T6263] ? __pfx_lock_release+0x10/0x10 [ 239.393230][ T6263] ? aa_sock_msg_perm+0x91/0x160 [ 239.398171][ T6263] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 239.403281][ T6263] __sock_sendmsg+0x221/0x270 [ 239.407962][ T6263] ____sys_sendmsg+0x52a/0x7e0 [ 239.412733][ T6263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.418024][ T6263] __sys_sendmsg+0x2aa/0x390 [ 239.422613][ T6263] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.427719][ T6263] ? vfs_write+0x7bf/0xc90 [ 239.432160][ T6263] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 239.438751][ T6263] ? lockdep_hardirqs_on+0x99/0x150 [ 239.443951][ T6263] __do_fast_syscall_32+0xb4/0x110 [ 239.449065][ T6263] ? exc_page_fault+0x590/0x8c0 [ 239.453919][ T6263] do_fast_syscall_32+0x34/0x80 [ 239.458776][ T6263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.465113][ T6263] RIP: 0023:0xf7f63579 [ 239.469179][ T6263] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 239.488787][ T6263] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 239.497205][ T6263] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 239.505176][ T6263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.513144][ T6263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.521115][ T6263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.529084][ T6263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.537063][ T6263] [ 239.544434][ T4004] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.570845][ T5276] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.683977][ T6154] hsr_slave_0: entered promiscuous mode [ 239.700045][ T6154] hsr_slave_1: entered promiscuous mode [ 239.709700][ T6154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.732652][ T6154] Cannot create hsr debugfs directory [ 239.738766][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.758210][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.816595][ T5276] usb 1-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 239.826563][ T5276] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.827250][ T6160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.846858][ T5276] usb 1-1: config 0 descriptor?? [ 239.865906][ T5276] pwc: Creative Labs Webcam Pro Ex detected. [ 239.916680][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.928418][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.955125][ T6160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.027771][ T6260] netlink: 'syz.2.165': attribute type 10 has an invalid length. [ 240.036654][ T6260] netlink: 40 bytes leftover after parsing attributes in process `syz.2.165'. [ 240.049956][ T6260] hsr0: entered promiscuous mode [ 240.056307][ T6260] bridge0: port 3(hsr0) entered blocking state [ 240.063439][ T6260] bridge0: port 3(hsr0) entered disabled state [ 240.070678][ T6260] hsr0: entered allmulticast mode [ 240.077338][ T6260] hsr_slave_0: entered allmulticast mode [ 240.084840][ T6260] hsr_slave_1: entered allmulticast mode [ 240.098806][ T6260] bridge0: port 3(hsr0) entered blocking state [ 240.105567][ T6260] bridge0: port 3(hsr0) entered forwarding state [ 240.214139][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.246217][ T4004] bridge_slave_1: left allmulticast mode [ 240.252076][ T4004] bridge_slave_1: left promiscuous mode [ 240.259110][ T4004] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.276627][ T4004] bridge_slave_0: left allmulticast mode [ 240.282393][ T4004] bridge_slave_0: left promiscuous mode [ 240.291428][ T4004] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.402961][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 240.411807][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 240.421755][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 240.430952][ T9] usb 3-1: Product: syz [ 240.435467][ T9] usb 3-1: Manufacturer: syz [ 240.440423][ T9] usb 3-1: SerialNumber: syz [ 240.466968][ T9] usb 3-1: config 0 descriptor?? [ 240.507369][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.535053][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.572647][ T5276] pwc: recv_control_msg error -71 req 02 val 2b00 [ 240.585488][ T5276] pwc: recv_control_msg error -71 req 02 val 2700 [ 240.601781][ T5276] pwc: recv_control_msg error -71 req 04 val 1600 [ 240.620620][ T5276] pwc: recv_control_msg error -71 req 02 val 2c00 [ 240.629448][ T5276] pwc: recv_control_msg error -71 req 04 val 1000 [ 240.638794][ T5276] pwc: recv_control_msg error -71 req 04 val 1300 [ 240.645789][ T5276] pwc: recv_control_msg error -71 req 04 val 1400 [ 240.669546][ T5276] pwc: recv_control_msg error -71 req 02 val 2000 [ 240.678213][ T5276] pwc: recv_control_msg error -71 req 02 val 2100 [ 240.700552][ T5276] pwc: recv_control_msg error -71 req 06 val 0600 [ 240.712208][ T5276] pwc: recv_control_msg error -71 req 04 val 1500 [ 240.730762][ T8] usb 3-1: USB disconnect, device number 17 [ 240.749132][ T5276] pwc: recv_control_msg error -71 req 02 val 2500 [ 240.757662][ T5276] pwc: recv_control_msg error -71 req 02 val 2400 [ 240.770290][ T5276] pwc: recv_control_msg error -71 req 02 val 2600 [ 240.780602][ T5276] pwc: recv_control_msg error -71 req 02 val 2900 [ 240.789902][ T5276] pwc: recv_control_msg error -71 req 02 val 2800 [ 240.799524][ T5276] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.807283][ T5276] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.820708][ T5276] pwc: Registered as video71. [ 240.832772][ T5276] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 240.856862][ T5276] usb 1-1: USB disconnect, device number 12 [ 241.024540][ T5289] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 241.035366][ T4004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.046110][ T4004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.057411][ T4004] bond0 (unregistering): Released all slaves [ 241.069987][ T6160] hsr_slave_0: entered promiscuous mode [ 241.077646][ T6160] hsr_slave_1: entered promiscuous mode [ 241.083947][ T6160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.091528][ T6160] Cannot create hsr debugfs directory [ 241.098549][ T4617] Bluetooth: hci2: command tx timeout [ 241.174780][ T4617] Bluetooth: hci3: command tx timeout [ 241.210607][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.227139][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 241.255855][ T5289] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.284928][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.319263][ T5289] usb 2-1: config 0 descriptor?? [ 241.335100][ T5289] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 241.398688][ T6294] netlink: 'syz.0.170': attribute type 21 has an invalid length. [ 241.408237][ T6294] netlink: 'syz.0.170': attribute type 5 has an invalid length. [ 241.655011][ T4004] hsr_slave_0: left promiscuous mode [ 241.673390][ T4004] hsr_slave_1: left promiscuous mode [ 241.683273][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.690688][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.715782][ T4004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.731737][ T4004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.776669][ T4004] veth1_macvtap: left promiscuous mode [ 241.782390][ T4004] veth0_macvtap: left promiscuous mode [ 241.788998][ T4004] veth1_vlan: left promiscuous mode [ 241.802818][ T4004] veth0_vlan: left promiscuous mode [ 241.897725][ T6317] [U]  [ 242.349299][ T4004] team0 (unregistering): Port device team_slave_1 removed [ 242.381189][ T4004] team0 (unregistering): Port device team_slave_0 removed [ 242.402804][ T5277] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 242.562651][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 242.580100][ T5277] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 242.590734][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.604849][ T5277] usb 1-1: Product: syz [ 242.610864][ T5277] usb 1-1: Manufacturer: syz [ 242.619464][ T5277] usb 1-1: SerialNumber: syz [ 242.631300][ T5277] usb 1-1: config 0 descriptor?? [ 242.658611][ T5277] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 242.778849][ T6316] __nla_validate_parse: 8 callbacks suppressed [ 242.778868][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 242.868354][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 242.891290][ T8] usb 1-1: USB disconnect, device number 13 [ 243.162690][ T4617] Bluetooth: hci2: command tx timeout [ 243.242711][ T4617] Bluetooth: hci3: command tx timeout [ 243.504372][ T6154] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 243.523611][ T6154] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 243.575566][ T6154] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 243.602184][ T6154] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 243.677152][ T6160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 243.710503][ T6160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 243.738087][ T51] usb 2-1: USB disconnect, device number 9 [ 243.810411][ T6160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 243.839042][ T6355] FAULT_INJECTION: forcing a failure. [ 243.839042][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.889643][ T6160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 243.890972][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.0.179 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 243.906583][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 243.916662][ T6355] Call Trace: [ 243.919962][ T6355] [ 243.922911][ T6355] dump_stack_lvl+0x241/0x360 [ 243.927619][ T6355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.932846][ T6355] ? __pfx__printk+0x10/0x10 [ 243.937464][ T6355] ? __pfx_lock_release+0x10/0x10 [ 243.942520][ T6355] should_fail_ex+0x3b0/0x4e0 [ 243.947224][ T6355] _copy_from_iter+0x1ed/0x1d60 [ 243.952103][ T6355] ? __virt_addr_valid+0x183/0x530 [ 243.957238][ T6355] ? __pfx_lock_release+0x10/0x10 [ 243.962309][ T6355] ? __alloc_skb+0x28f/0x440 [ 243.966923][ T6355] ? __pfx__copy_from_iter+0x10/0x10 [ 243.972244][ T6355] ? __virt_addr_valid+0x183/0x530 [ 243.977374][ T6355] ? __virt_addr_valid+0x183/0x530 [ 243.982503][ T6355] ? __virt_addr_valid+0x45f/0x530 [ 243.987637][ T6355] ? __check_object_size+0x49c/0x900 [ 243.992951][ T6355] netlink_sendmsg+0x73d/0xcb0 [ 243.997751][ T6355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.003045][ T6355] ? __pfx_lock_release+0x10/0x10 [ 244.008063][ T6355] ? aa_sock_msg_perm+0x91/0x160 [ 244.013009][ T6355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.018309][ T6355] __sock_sendmsg+0x221/0x270 [ 244.022998][ T6355] ____sys_sendmsg+0x52a/0x7e0 [ 244.027773][ T6355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.033080][ T6355] __sys_sendmsg+0x2aa/0x390 [ 244.037684][ T6355] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.042798][ T6355] ? vfs_write+0x7bf/0xc90 [ 244.047241][ T6355] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 244.053839][ T6355] ? lockdep_hardirqs_on+0x99/0x150 [ 244.059058][ T6355] __do_fast_syscall_32+0xb4/0x110 [ 244.064174][ T6355] ? exc_page_fault+0x590/0x8c0 [ 244.069110][ T6355] do_fast_syscall_32+0x34/0x80 [ 244.073988][ T6355] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.080364][ T6355] RIP: 0023:0xf7fe3579 [ 244.084423][ T6355] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.104025][ T6355] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 244.112439][ T6355] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 244.120411][ T6355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.128376][ T6355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.136342][ T6355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.144308][ T6355] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.152279][ T6355] [ 244.216179][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.276019][ T6154] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.303892][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.311015][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.423962][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.431061][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.515678][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.611415][ T6160] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.622417][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.183'. [ 244.645158][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.652270][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.743463][ T6376] netlink: 'syz.1.183': attribute type 21 has an invalid length. [ 244.751744][ T6376] netlink: 128 bytes leftover after parsing attributes in process `syz.1.183'. [ 244.772778][ T6376] netlink: 'syz.1.183': attribute type 5 has an invalid length. [ 244.781081][ T6376] netlink: 3 bytes leftover after parsing attributes in process `syz.1.183'. [ 244.801817][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.808980][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.874872][ T6160] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.885830][ T6160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.909141][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.945216][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.989152][ T6160] veth0_vlan: entered promiscuous mode [ 245.001037][ T6160] veth1_vlan: entered promiscuous mode [ 245.038825][ T6160] veth0_macvtap: entered promiscuous mode [ 245.094078][ T6160] veth1_macvtap: entered promiscuous mode [ 245.161449][ T6154] veth0_vlan: entered promiscuous mode [ 245.180022][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.212967][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.231079][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.272687][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.302560][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.335802][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.374026][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.398008][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.451160][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.485140][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.516989][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.548765][ T6160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.548788][ T6160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.550006][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.567877][ T6160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.567910][ T6160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.567936][ T6160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.567962][ T6160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.621843][ T6154] veth1_vlan: entered promiscuous mode [ 245.664996][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 245.723724][ T6154] veth0_macvtap: entered promiscuous mode [ 245.735196][ T6154] veth1_macvtap: entered promiscuous mode [ 245.838210][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.838233][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.838247][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.838261][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.838272][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.838286][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.838300][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.838314][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.841932][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.846231][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.846251][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.851430][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.851451][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.851463][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.851478][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.851491][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.851505][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.851518][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.851533][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.855100][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.861168][ T6154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.861203][ T6154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.861232][ T6154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.861259][ T6154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.912781][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 246.271066][ T388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.271090][ T388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.399852][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.436862][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.539086][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.562701][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.582736][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.639204][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.825518][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.902598][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.012959][ T5289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 247.082402][ T6439] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.093351][ T938] usb 4-1: Using ep0 maxpacket: 16 [ 247.111332][ T6439] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.127477][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.139545][ T938] usb 4-1: config 0 has no interfaces? [ 247.150760][ T6439] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.174593][ T938] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 247.192625][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 247.203272][ T6439] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 247.219977][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.228436][ T5289] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 247.252938][ T6439] geneve2: entered promiscuous mode [ 247.262809][ T938] usb 4-1: Product: syz [ 247.267005][ T938] usb 4-1: Manufacturer: syz [ 247.268435][ T6439] geneve2: entered allmulticast mode [ 247.271590][ T938] usb 4-1: SerialNumber: syz [ 247.278988][ T5289] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.307588][ T938] usb 4-1: config 0 descriptor?? [ 247.326499][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.336135][ T5289] usb 5-1: Product: syz [ 247.343390][ T5289] usb 5-1: Manufacturer: syz [ 247.352681][ T5289] usb 5-1: SerialNumber: syz [ 247.462947][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 247.600257][ T938] usb 5-1: USB disconnect, device number 6 [ 247.634164][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.657674][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 247.709283][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.739037][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.765527][ T25] usb 1-1: config 0 descriptor?? [ 247.783513][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 247.913741][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.192'. [ 247.945442][ T6458] netlink: 'syz.1.192': attribute type 21 has an invalid length. [ 247.955314][ T6458] netlink: 128 bytes leftover after parsing attributes in process `syz.1.192'. [ 247.965453][ T6458] netlink: 'syz.1.192': attribute type 5 has an invalid length. [ 247.973481][ T6458] netlink: 3 bytes leftover after parsing attributes in process `syz.1.192'. [ 248.351513][ T6475] [U]  [ 248.553513][ T29] audit: type=1326 audit(1726836436.257:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.4.194" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21579 code=0x0 [ 248.850194][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.196'. [ 249.047027][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.2.197'. [ 249.139993][ T6491] FAULT_INJECTION: forcing a failure. [ 249.139993][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 249.153060][ T6491] CPU: 1 UID: 0 PID: 6491 Comm: syz.1.198 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 249.163338][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.173407][ T6491] Call Trace: [ 249.176683][ T6491] [ 249.179605][ T6491] dump_stack_lvl+0x241/0x360 [ 249.184320][ T6491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.189639][ T6491] ? __pfx__printk+0x10/0x10 [ 249.194244][ T6491] ? ref_tracker_alloc+0x332/0x490 [ 249.199376][ T6491] should_fail_ex+0x3b0/0x4e0 [ 249.204094][ T6491] ? skb_clone+0x20c/0x390 [ 249.208549][ T6491] should_failslab+0xac/0x100 [ 249.213239][ T6491] ? skb_clone+0x20c/0x390 [ 249.217671][ T6491] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 249.223078][ T6491] skb_clone+0x20c/0x390 [ 249.227343][ T6491] __netlink_deliver_tap+0x3cc/0x7c0 [ 249.232641][ T6491] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.237863][ T6491] netlink_deliver_tap+0x19d/0x1b0 [ 249.243002][ T6491] netlink_unicast+0x7c4/0x990 [ 249.247780][ T6491] ? __pfx_netlink_unicast+0x10/0x10 [ 249.253062][ T6491] ? __virt_addr_valid+0x183/0x530 [ 249.258174][ T6491] ? __check_object_size+0x49c/0x900 [ 249.263468][ T6491] netlink_sendmsg+0x8e4/0xcb0 [ 249.268248][ T6491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.273537][ T6491] ? __pfx_lock_release+0x10/0x10 [ 249.278564][ T6491] ? aa_sock_msg_perm+0x91/0x160 [ 249.283503][ T6491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.288786][ T6491] __sock_sendmsg+0x221/0x270 [ 249.293469][ T6491] ____sys_sendmsg+0x52a/0x7e0 [ 249.298235][ T6491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.303548][ T6491] __sys_sendmsg+0x2aa/0x390 [ 249.308132][ T6491] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.313236][ T6491] ? vfs_write+0x7bf/0xc90 [ 249.317699][ T6491] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 249.324292][ T6491] ? lockdep_hardirqs_on+0x99/0x150 [ 249.329489][ T6491] __do_fast_syscall_32+0xb4/0x110 [ 249.334600][ T6491] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 249.340775][ T6491] ? lockdep_hardirqs_on+0x99/0x150 [ 249.345975][ T6491] do_fast_syscall_32+0x34/0x80 [ 249.350825][ T6491] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.357153][ T6491] RIP: 0023:0xf7f63579 [ 249.361215][ T6491] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.380834][ T6491] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 249.389255][ T6491] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000180 [ 249.397224][ T6491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.405189][ T6491] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.413162][ T6491] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.421144][ T6491] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.429125][ T6491] [ 249.459168][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 249.519025][ T6497] FAULT_INJECTION: forcing a failure. [ 249.519025][ T6497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.533680][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.4.201 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 249.543981][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.554068][ T6497] Call Trace: [ 249.557364][ T6497] [ 249.560329][ T6497] dump_stack_lvl+0x241/0x360 [ 249.565037][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.570242][ T6497] ? __pfx__printk+0x10/0x10 [ 249.574843][ T6497] should_fail_ex+0x3b0/0x4e0 [ 249.579521][ T6497] strncpy_from_user+0x36/0x2e0 [ 249.584369][ T6497] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 249.590005][ T6497] getname_flags+0xf1/0x540 [ 249.594514][ T6497] __ia32_sys_rename+0x5c/0x90 [ 249.599277][ T6497] __do_fast_syscall_32+0xb4/0x110 [ 249.604396][ T6497] ? exc_page_fault+0x590/0x8c0 [ 249.609253][ T6497] do_fast_syscall_32+0x34/0x80 [ 249.614105][ T6497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.620442][ T6497] RIP: 0023:0xf7f21579 [ 249.624509][ T6497] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 249.644118][ T6497] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 249.652536][ T6497] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 0000000000000000 [ 249.660509][ T6497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.668476][ T6497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.676476][ T6497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 249.684447][ T6497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.692433][ T6497] [ 249.739008][ T9] usb 4-1: USB disconnect, device number 10 [ 249.988155][ T5277] usb 1-1: USB disconnect, device number 14 [ 250.100838][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 250.129213][ T6514] netlink: 'syz.1.205': attribute type 21 has an invalid length. [ 250.137987][ T6514] netlink: 128 bytes leftover after parsing attributes in process `syz.1.205'. [ 250.160652][ T6514] netlink: 'syz.1.205': attribute type 5 has an invalid length. [ 250.170549][ T6514] netlink: 3 bytes leftover after parsing attributes in process `syz.1.205'. [ 250.201403][ T6518] fuse: Bad value for 'user_id' [ 250.207378][ T6518] fuse: Bad value for 'user_id' [ 250.235781][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 250.322783][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.376930][ T6522] netlink: 'syz.0.209': attribute type 2 has an invalid length. [ 250.432665][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 250.440328][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 250.456265][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 250.465415][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.477988][ T9] usb 4-1: Product: syz [ 250.482192][ T9] usb 4-1: Manufacturer: syz [ 250.494198][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 250.499475][ T9] usb 4-1: SerialNumber: syz [ 250.504652][ T8] usb 3-1: too many configurations: 39, using maximum allowed: 8 [ 250.516630][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 250.537410][ T8] usb 3-1: can't read configurations, error -61 [ 250.671363][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.211'. [ 250.685127][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.742047][ T5274] usb 4-1: USB disconnect, device number 11 [ 250.854351][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 250.858775][ T8] usb 3-1: too many configurations: 39, using maximum allowed: 8 [ 250.861546][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 250.861578][ T8] usb 3-1: can't read configurations, error -61 [ 250.862541][ T8] usb usb3-port1: attempt power cycle [ 251.172694][ T5277] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 251.212598][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 251.232991][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 251.238605][ T8] usb 3-1: too many configurations: 39, using maximum allowed: 8 [ 251.248094][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 251.255853][ T8] usb 3-1: can't read configurations, error -61 [ 251.284017][ T5276] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 251.313932][ T6535] binder: 6534:6535 unknown command 555784920 [ 251.320159][ T6535] binder: 6534:6535 ioctl c0306201 20000000 returned -22 [ 251.334530][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 251.349654][ T5277] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 251.365864][ T5277] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.379135][ T6537] FAULT_INJECTION: forcing a failure. [ 251.379135][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 251.389503][ T5277] usb 2-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 251.392059][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.3.216 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 251.402988][ T5277] usb 2-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 251.412682][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 251.412698][ T6537] Call Trace: [ 251.412706][ T6537] [ 251.412714][ T6537] dump_stack_lvl+0x241/0x360 [ 251.412746][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.412769][ T6537] ? __pfx__printk+0x10/0x10 [ 251.412793][ T6537] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 251.412813][ T6537] ? __pfx___might_resched+0x10/0x10 [ 251.412839][ T6537] should_fail_ex+0x3b0/0x4e0 [ 251.412862][ T6537] should_failslab+0xac/0x100 [ 251.412886][ T6537] ? __alloc_skb+0x1c3/0x440 [ 251.412910][ T6537] kmem_cache_alloc_node_noprof+0x71/0x320 [ 251.412932][ T6537] __alloc_skb+0x1c3/0x440 [ 251.412958][ T6537] ? __pfx___alloc_skb+0x10/0x10 [ 251.412983][ T6537] ? netlink_autobind+0xd6/0x2f0 [ 251.413004][ T6537] ? netlink_autobind+0x2b0/0x2f0 [ 251.413032][ T6537] netlink_sendmsg+0x638/0xcb0 [ 251.413063][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.424016][ T5277] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 251.432103][ T6537] ? __pfx_lock_release+0x10/0x10 [ 251.436268][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.438279][ T6537] ? aa_sock_msg_perm+0x91/0x160 [ 251.442970][ T5277] usb 2-1: Product: syz [ 251.448115][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.448143][ T6537] __sock_sendmsg+0x221/0x270 [ 251.553723][ T6537] ____sys_sendmsg+0x52a/0x7e0 [ 251.558497][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.563786][ T6537] __sys_sendmsg+0x2aa/0x390 [ 251.568369][ T6537] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.573468][ T6537] ? vfs_write+0x7bf/0xc90 [ 251.577903][ T6537] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 251.584486][ T6537] ? lockdep_hardirqs_on+0x99/0x150 [ 251.589678][ T6537] __do_fast_syscall_32+0xb4/0x110 [ 251.594785][ T6537] ? exc_page_fault+0x590/0x8c0 [ 251.599632][ T6537] do_fast_syscall_32+0x34/0x80 [ 251.604483][ T6537] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.610814][ T6537] RIP: 0023:0xf741d579 [ 251.614875][ T6537] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.634474][ T6537] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 251.642887][ T6537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 251.650860][ T6537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.658830][ T6537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.666822][ T6537] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.674787][ T6537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.682762][ T6537] [ 251.689655][ T5277] usb 2-1: Manufacturer: syz [ 251.694406][ T5277] usb 2-1: SerialNumber: syz [ 251.710574][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.732771][ T5276] usb 1-1: Using ep0 maxpacket: 16 [ 251.739636][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 251.746840][ T8] usb 3-1: too many configurations: 39, using maximum allowed: 8 [ 251.754832][ T5276] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.765553][ T5276] usb 1-1: config 0 has no interfaces? [ 251.775046][ T8] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 251.784145][ T5276] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 251.795720][ T8] usb 3-1: can't read configurations, error -61 [ 251.804511][ T5276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.821116][ T8] usb usb3-port1: unable to enumerate USB device [ 251.827757][ T5276] usb 1-1: Product: syz [ 251.832045][ T5276] usb 1-1: Manufacturer: syz [ 251.838275][ T5276] usb 1-1: SerialNumber: syz [ 251.846865][ T5276] usb 1-1: config 0 descriptor?? [ 251.960375][ T5277] usb 2-1: USB disconnect, device number 11 [ 251.996314][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.685603][ T6548] capability: warning: `syz.3.220' uses 32-bit capabilities (legacy support in use) [ 252.745897][ T6548] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.772572][ T5276] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 252.945607][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.956145][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 252.969379][ T5276] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.979037][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.989400][ T5276] usb 2-1: config 0 descriptor?? [ 252.998996][ T6553] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 253.006077][ T5276] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 253.020310][ T6553] kvm: pic: non byte read [ 253.032348][ T6553] kvm: pic: level sensitive irq not supported [ 253.032449][ T6553] kvm: pic: non byte read [ 253.343433][ T6562] __nla_validate_parse: 1 callbacks suppressed [ 253.343446][ T6562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 253.362413][ T6562] netlink: 'syz.3.223': attribute type 21 has an invalid length. [ 253.370524][ T6562] netlink: 128 bytes leftover after parsing attributes in process `syz.3.223'. [ 253.379762][ T6562] netlink: 'syz.3.223': attribute type 5 has an invalid length. [ 253.388329][ T6562] netlink: 3 bytes leftover after parsing attributes in process `syz.3.223'. [ 253.452599][ T5276] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 253.575762][ T6563] [U]  [ 253.602664][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 253.609277][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.621047][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.633174][ T5276] usb 3-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 253.642256][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.656018][ T5276] usb 3-1: Product: syz [ 253.660194][ T5276] usb 3-1: Manufacturer: syz [ 253.667715][ T5276] usb 3-1: SerialNumber: syz [ 253.675342][ T5276] usb 3-1: config 0 descriptor?? [ 253.684691][ T5276] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 253.693232][ T5276] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 253.702880][ T5276] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 254.027123][ T25] usb 1-1: USB disconnect, device number 15 [ 254.532675][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.652621][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 254.704396][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.722536][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.732347][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 254.745949][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.755771][ T25] usb 1-1: config 0 descriptor?? [ 255.188214][ T25] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 6/7 [ 255.196882][ T25] pyra 0003:1E7D:2CF6.0001: parse failed [ 255.202769][ T25] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -22 [ 255.307409][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.316519][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.389444][ T5277] usb 1-1: USB disconnect, device number 16 [ 255.538093][ T5276] usb 2-1: USB disconnect, device number 12 [ 255.804716][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.811178][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.912627][ T5276] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 256.083166][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 256.110316][ T5276] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice= 0.dd [ 256.119712][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 256.142619][ T5276] usb 2-1: SerialNumber: syz [ 256.164913][ T5276] usb 2-1: config 0 descriptor?? [ 256.184196][ T5276] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 256.422928][ T5277] usb 3-1: USB disconnect, device number 23 [ 256.622868][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.234'. [ 256.636509][ T6597] netlink: 'syz.2.234': attribute type 21 has an invalid length. [ 256.646033][ T6597] netlink: 128 bytes leftover after parsing attributes in process `syz.2.234'. [ 256.657931][ T6597] netlink: 'syz.2.234': attribute type 5 has an invalid length. [ 256.666504][ T6597] netlink: 3 bytes leftover after parsing attributes in process `syz.2.234'. [ 256.688017][ T5276] ssu100 2-1:0.0: probe with driver ssu100 failed with error -110 [ 257.133367][ T5289] usb 2-1: USB disconnect, device number 13 [ 257.239276][ T6599] FAULT_INJECTION: forcing a failure. [ 257.239276][ T6599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.252601][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.1.235 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 257.262873][ T6599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.272953][ T6599] Call Trace: [ 257.276240][ T6599] [ 257.279167][ T6599] dump_stack_lvl+0x241/0x360 [ 257.283849][ T6599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.289046][ T6599] ? __pfx__printk+0x10/0x10 [ 257.293647][ T6599] ? vfs_write+0x7bf/0xc90 [ 257.298071][ T6599] should_fail_ex+0x3b0/0x4e0 [ 257.302751][ T6599] _copy_from_user+0x2f/0xe0 [ 257.307341][ T6599] move_addr_to_kernel+0x82/0x150 [ 257.312366][ T6599] __sys_bind+0x162/0x2e0 [ 257.316708][ T6599] ? __pfx___sys_bind+0x10/0x10 [ 257.321574][ T6599] __ia32_sys_bind+0x7a/0x90 [ 257.326163][ T6599] __do_fast_syscall_32+0xb4/0x110 [ 257.331281][ T6599] ? exc_page_fault+0x590/0x8c0 [ 257.336131][ T6599] do_fast_syscall_32+0x34/0x80 [ 257.340990][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 257.347323][ T6599] RIP: 0023:0xf7f63579 [ 257.351386][ T6599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 257.370994][ T6599] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 257.379414][ T6599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 257.387388][ T6599] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 257.395355][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 257.403328][ T6599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 257.411293][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 257.419272][ T6599] [ 257.536979][ T6594] syz.0.233 (6594): drop_caches: 2 [ 257.806046][ T6617] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 257.884926][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 258.042927][ T9] usb 4-1: device descriptor read/64, error -71 [ 258.068137][ T388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.079323][ T388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.202139][ T388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.213769][ T388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.317073][ T388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.327924][ T388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.332882][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.428132][ T388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.451453][ T388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.526379][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 258.539212][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.572569][ T9] usb 4-1: config 0 has no interfaces? [ 258.601823][ T9] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 258.622630][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.630678][ T9] usb 4-1: Product: syz [ 258.655882][ T9] usb 4-1: Manufacturer: syz [ 258.660539][ T9] usb 4-1: SerialNumber: syz [ 258.674974][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.685993][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.694272][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.705512][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.720232][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.727746][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.738875][ T388] bridge_slave_1: left allmulticast mode [ 258.744968][ T388] bridge_slave_1: left promiscuous mode [ 258.750693][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.807067][ T9] usb 4-1: config 0 descriptor?? [ 258.813630][ T388] bridge_slave_0: left allmulticast mode [ 258.819309][ T388] bridge_slave_0: left promiscuous mode [ 258.829092][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.205320][ T6630] FAULT_INJECTION: forcing a failure. [ 259.205320][ T6630] name failslab, interval 1, probability 0, space 0, times 0 [ 259.239678][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.0.249 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 259.249991][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 259.260076][ T6630] Call Trace: [ 259.263380][ T6630] [ 259.266324][ T6630] dump_stack_lvl+0x241/0x360 [ 259.271003][ T6630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.276214][ T6630] ? __pfx__printk+0x10/0x10 [ 259.280815][ T6630] ? ref_tracker_alloc+0x332/0x490 [ 259.285934][ T6630] should_fail_ex+0x3b0/0x4e0 [ 259.290606][ T6630] ? skb_clone+0x20c/0x390 [ 259.295037][ T6630] should_failslab+0xac/0x100 [ 259.299745][ T6630] ? skb_clone+0x20c/0x390 [ 259.304182][ T6630] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 259.304928][ T4617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.309564][ T6630] skb_clone+0x20c/0x390 [ 259.309593][ T6630] __netlink_deliver_tap+0x3cc/0x7c0 [ 259.319037][ T4617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.320847][ T6630] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.320879][ T6630] netlink_deliver_tap+0x19d/0x1b0 [ 259.320902][ T6630] netlink_unicast+0x7c4/0x990 [ 259.320931][ T6630] ? __pfx_netlink_unicast+0x10/0x10 [ 259.320950][ T6630] ? __virt_addr_valid+0x183/0x530 [ 259.320973][ T6630] ? __check_object_size+0x49c/0x900 [ 259.321001][ T6630] netlink_sendmsg+0x8e4/0xcb0 [ 259.321036][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.321062][ T6630] ? __pfx_lock_release+0x10/0x10 [ 259.321085][ T6630] ? aa_sock_msg_perm+0x91/0x160 [ 259.321116][ T6630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.321138][ T6630] __sock_sendmsg+0x221/0x270 [ 259.321165][ T6630] ____sys_sendmsg+0x52a/0x7e0 [ 259.321192][ T6630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.321226][ T6630] __sys_sendmsg+0x2aa/0x390 [ 259.321248][ T6630] ? __pfx___sys_sendmsg+0x10/0x10 [ 259.321265][ T6630] ? vfs_write+0x7bf/0xc90 [ 259.321320][ T6630] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 259.321345][ T6630] ? lockdep_hardirqs_on+0x99/0x150 [ 259.321367][ T6630] __do_fast_syscall_32+0xb4/0x110 [ 259.321391][ T6630] ? exc_page_fault+0x590/0x8c0 [ 259.321416][ T6630] do_fast_syscall_32+0x34/0x80 [ 259.321441][ T6630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.321468][ T6630] RIP: 0023:0xf7fe3579 [ 259.321486][ T6630] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.321504][ T6630] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 259.321527][ T6630] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 259.321541][ T6630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.321554][ T6630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.321566][ T6630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.321578][ T6630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.321606][ T6630] [ 259.321726][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.333360][ T4617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.551953][ T4617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.559684][ T4617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.567290][ T4617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.660392][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.250'. [ 259.792726][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.806416][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.818083][ T388] bond0 (unregistering): Released all slaves [ 259.838248][ T6633] netlink: 'syz.0.250': attribute type 21 has an invalid length. [ 259.847951][ T6633] netlink: 128 bytes leftover after parsing attributes in process `syz.0.250'. [ 259.868821][ T6633] netlink: 'syz.0.250': attribute type 5 has an invalid length. [ 259.884101][ T6633] netlink: 3 bytes leftover after parsing attributes in process `syz.0.250'. [ 260.169795][ T388] hsr_slave_0: left promiscuous mode [ 260.176612][ T388] hsr_slave_1: left promiscuous mode [ 260.183245][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.190709][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.200308][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.208563][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.233602][ T388] veth1_macvtap: left promiscuous mode [ 260.239275][ T388] veth0_macvtap: left promiscuous mode [ 260.246204][ T388] veth1_vlan: left promiscuous mode [ 260.251684][ T388] veth0_vlan: left promiscuous mode [ 260.618101][ T8] usb 4-1: USB disconnect, device number 13 [ 260.773505][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.848148][ T4617] Bluetooth: hci1: command tx timeout [ 260.856779][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.873262][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.886988][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.902420][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.911689][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.931078][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.967157][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 261.008030][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 261.018665][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 261.027947][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.069132][ T6655] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 261.080206][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.232643][ T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 261.270750][ T388] team0 (unregistering): Port device team_slave_1 removed [ 261.323993][ T388] team0 (unregistering): Port device team_slave_0 removed [ 261.382677][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 261.390843][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.408056][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 261.421943][ T8] usb 4-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 261.436617][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.447999][ T8] usb 4-1: config 0 descriptor?? [ 261.464566][ T8] usb 4-1: bad CDC descriptors [ 261.539863][ T8] usb 1-1: USB disconnect, device number 17 [ 261.643175][ T5231] Bluetooth: hci0: command tx timeout [ 261.680094][ T5277] usb 4-1: USB disconnect, device number 14 [ 261.999030][ T6623] chnl_net:caif_netlink_parms(): no params data found [ 262.064595][ T6635] chnl_net:caif_netlink_parms(): no params data found [ 262.377769][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.389813][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.398533][ T6623] bridge_slave_0: entered allmulticast mode [ 262.407953][ T6623] bridge_slave_0: entered promiscuous mode [ 262.417069][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.424938][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.433452][ T6623] bridge_slave_1: entered allmulticast mode [ 262.440653][ T6623] bridge_slave_1: entered promiscuous mode [ 262.502259][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.521934][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.540429][ T6635] bridge_slave_0: entered allmulticast mode [ 262.548762][ T6635] bridge_slave_0: entered promiscuous mode [ 262.560152][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.586677][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.594382][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.602314][ T6635] bridge_slave_1: entered allmulticast mode [ 262.610377][ T6635] bridge_slave_1: entered promiscuous mode [ 262.619355][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.678494][ T388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.707548][ T6661] chnl_net:caif_netlink_parms(): no params data found [ 262.746150][ T6623] team0: Port device team_slave_0 added [ 262.756135][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.786804][ T388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.806420][ T6623] team0: Port device team_slave_1 added [ 262.817771][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.887280][ T388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.908637][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.918969][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.946679][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.953782][ T5231] Bluetooth: hci1: command tx timeout [ 262.975732][ T6635] team0: Port device team_slave_0 added [ 263.011780][ T5231] Bluetooth: hci4: command tx timeout [ 263.020078][ T388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.037519][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.047440][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.073557][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.089295][ T6623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.114506][ T6635] team0: Port device team_slave_1 added [ 263.160489][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.173066][ T6661] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.181509][ T6661] bridge_slave_0: entered allmulticast mode [ 263.228965][ T6661] bridge_slave_0: entered promiscuous mode [ 263.250356][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.268352][ T6661] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.275995][ T6661] bridge_slave_1: entered allmulticast mode [ 263.291452][ T6661] bridge_slave_1: entered promiscuous mode [ 263.318796][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.335551][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.405997][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.584066][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.620424][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.654302][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.682294][ T6623] hsr_slave_0: entered promiscuous mode [ 263.695498][ T6623] hsr_slave_1: entered promiscuous mode [ 263.713574][ T6661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.724868][ T5231] Bluetooth: hci0: command tx timeout [ 263.748668][ T6661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.958289][ T6635] hsr_slave_0: entered promiscuous mode [ 263.974965][ T6635] hsr_slave_1: entered promiscuous mode [ 263.981351][ T6635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.998676][ T6635] Cannot create hsr debugfs directory [ 264.008901][ T6661] team0: Port device team_slave_0 added [ 264.020820][ T6661] team0: Port device team_slave_1 added [ 264.081521][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.091135][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.280379][ T6661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.309109][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.318811][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.333629][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.357078][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.374945][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.386793][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.421599][ T6718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 264.497184][ T388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.515118][ T6661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.522439][ T6661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.559411][ T6661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.604677][ T6718] netlink: 'syz.3.259': attribute type 21 has an invalid length. [ 264.613338][ T6718] netlink: 128 bytes leftover after parsing attributes in process `syz.3.259'. [ 264.622998][ T6718] netlink: 'syz.3.259': attribute type 5 has an invalid length. [ 264.630638][ T6718] netlink: 3 bytes leftover after parsing attributes in process `syz.3.259'. [ 264.666180][ T388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.734282][ T388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.791388][ T6661] hsr_slave_0: entered promiscuous mode [ 264.799347][ T6661] hsr_slave_1: entered promiscuous mode [ 264.806496][ T6661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.814531][ T6661] Cannot create hsr debugfs directory [ 264.836324][ T388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.002621][ T54] Bluetooth: hci1: command tx timeout [ 265.083443][ T54] Bluetooth: hci4: command tx timeout [ 265.306567][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 265.319155][ T388] bridge_slave_1: left allmulticast mode [ 265.329436][ T388] bridge_slave_1: left promiscuous mode [ 265.344219][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.357564][ T388] bridge_slave_0: left allmulticast mode [ 265.363971][ T388] bridge_slave_0: left promiscuous mode [ 265.371164][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.384556][ T388] hsr0: left allmulticast mode [ 265.389380][ T388] hsr_slave_0: left allmulticast mode [ 265.395161][ T388] hsr_slave_1: left allmulticast mode [ 265.400764][ T388] bridge0: port 3(hsr0) entered disabled state [ 265.408764][ T388] bridge_slave_1: left allmulticast mode [ 265.415513][ T388] bridge_slave_1: left promiscuous mode [ 265.421215][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.441439][ T388] bridge_slave_0: left allmulticast mode [ 265.447584][ T388] bridge_slave_0: left promiscuous mode [ 265.462973][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.804051][ T54] Bluetooth: hci0: command tx timeout [ 266.117411][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.129833][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.140523][ T388] bond0 (unregistering): Released all slaves [ 266.259188][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.269991][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.285909][ T388] bond0 (unregistering): Released all slaves [ 266.443023][ T54] Bluetooth: hci2: command tx timeout [ 266.521578][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.533973][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.541174][ T6719] bridge_slave_0: entered allmulticast mode [ 266.551582][ T6719] bridge_slave_0: entered promiscuous mode [ 266.560020][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.567283][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.574701][ T6719] bridge_slave_1: entered allmulticast mode [ 266.581309][ T6719] bridge_slave_1: entered promiscuous mode [ 266.670527][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.680412][ T6623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.690997][ T6623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.721344][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.752639][ T6623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.794718][ T6719] team0: Port device team_slave_0 added [ 266.846415][ T6623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.868110][ T6719] team0: Port device team_slave_1 added [ 266.980859][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.990785][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.028053][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.082743][ T54] Bluetooth: hci1: command tx timeout [ 267.126914][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.152961][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.183073][ T54] Bluetooth: hci4: command tx timeout [ 267.200313][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.228442][ T388] hsr_slave_0: left promiscuous mode [ 267.238747][ T388] hsr_slave_1: left promiscuous mode [ 267.245141][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.253175][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.261272][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.269072][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.280530][ T388] hsr_slave_0: left promiscuous mode [ 267.290908][ T388] hsr_slave_1: left promiscuous mode [ 267.297418][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.305068][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.314051][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.321502][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.351194][ T388] veth1_macvtap: left promiscuous mode [ 267.356989][ T388] veth0_macvtap: left promiscuous mode [ 267.362664][ T388] veth1_vlan: left promiscuous mode [ 267.367976][ T388] veth0_vlan: left promiscuous mode [ 267.374191][ T388] veth1_macvtap: left promiscuous mode [ 267.379684][ T388] veth0_macvtap: left promiscuous mode [ 267.385331][ T388] veth1_vlan: left promiscuous mode [ 267.390596][ T388] veth0_vlan: left promiscuous mode [ 267.886482][ T388] team0 (unregistering): Port device team_slave_1 removed [ 267.894981][ T54] Bluetooth: hci0: command tx timeout [ 267.934402][ T388] team0 (unregistering): Port device team_slave_0 removed [ 268.525380][ T54] Bluetooth: hci2: command tx timeout [ 268.620657][ T388] team0 (unregistering): Port device team_slave_1 removed [ 268.662248][ T388] team0 (unregistering): Port device team_slave_0 removed [ 269.090056][ T6719] hsr_slave_0: entered promiscuous mode [ 269.099178][ T6719] hsr_slave_1: entered promiscuous mode [ 269.105858][ T6719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.114015][ T6719] Cannot create hsr debugfs directory [ 269.252749][ T54] Bluetooth: hci4: command tx timeout [ 269.407549][ T6635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.425490][ T6635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.450491][ T6623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.482392][ T6635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.516344][ T6635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.603655][ T6623] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.625311][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.632536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.681812][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.689002][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.866074][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.912273][ T6635] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.926524][ T6623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.966896][ T6661] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.977530][ T6661] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 270.034729][ T6719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.059728][ T6661] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 270.070485][ T6661] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 270.091352][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.098481][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.135780][ T6719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.150170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.157374][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.195330][ T6623] veth0_vlan: entered promiscuous mode [ 270.217567][ T6719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.266217][ T6623] veth1_vlan: entered promiscuous mode [ 270.301009][ T6719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.369964][ T6623] veth0_macvtap: entered promiscuous mode [ 270.395508][ T6661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.406986][ T6623] veth1_macvtap: entered promiscuous mode [ 270.434678][ T388] bridge_slave_1: left allmulticast mode [ 270.440345][ T388] bridge_slave_1: left promiscuous mode [ 270.446506][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.464773][ T388] bridge_slave_0: left allmulticast mode [ 270.470468][ T388] bridge_slave_0: left promiscuous mode [ 270.476367][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.602821][ T54] Bluetooth: hci2: command tx timeout [ 270.799301][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.814184][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.827035][ T388] bond0 (unregistering): Released all slaves [ 270.857945][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.869346][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.879833][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.890431][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.903830][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.921706][ T6635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.943875][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.047982][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.060205][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.071247][ T6623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.081761][ T6623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.093209][ T6623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.102141][ T6719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.116506][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.123617][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.191046][ T6623] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.207640][ T6623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.218872][ T6623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.232857][ T6623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.251423][ T6719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.264627][ T6719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.276366][ T6719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.288338][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.295552][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.364483][ T388] hsr_slave_0: left promiscuous mode [ 271.370442][ T388] hsr_slave_1: left promiscuous mode [ 271.378539][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.388896][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.404628][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.412091][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.447762][ T388] veth1_macvtap: left promiscuous mode [ 271.453549][ T388] veth0_macvtap: left promiscuous mode [ 271.459163][ T388] veth1_vlan: left promiscuous mode [ 271.465617][ T388] veth0_vlan: left promiscuous mode [ 272.029623][ T388] team0 (unregistering): Port device team_slave_1 removed [ 272.070872][ T388] team0 (unregistering): Port device team_slave_0 removed [ 272.684660][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.692961][ T54] Bluetooth: hci2: command tx timeout [ 272.700526][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.744248][ T6635] veth0_vlan: entered promiscuous mode [ 272.779896][ T6635] veth1_vlan: entered promiscuous mode [ 272.882400][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.907255][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.949632][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.951769][ T6635] veth0_macvtap: entered promiscuous mode [ 272.967299][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.995883][ T6635] veth1_macvtap: entered promiscuous mode [ 273.091175][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.118537][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.137882][ T6815] input: syz1 as /devices/virtual/input/input6 [ 273.143855][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.181283][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.202508][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.218166][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.234589][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.255307][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.270470][ T6635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.282411][ T6635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.298940][ T6635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.360358][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.367564][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.382932][ T5274] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 273.443851][ T6635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.464843][ T6635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.474140][ T6635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.485538][ T6635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.525100][ T4004] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.532247][ T4004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.556354][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 273.572006][ T5274] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 273.580286][ T6661] veth0_vlan: entered promiscuous mode [ 273.619152][ T5274] usb 4-1: config 0 has no interface number 0 [ 273.636897][ T5274] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.672074][ T5274] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 273.710184][ T5274] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 273.736184][ T6661] veth1_vlan: entered promiscuous mode [ 273.779456][ T5274] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 273.824781][ T5274] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 273.859235][ T5274] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 273.877971][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.906728][ T5274] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 273.916227][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.937590][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.963757][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.968463][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.995766][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.006900][ T5274] usb 4-1: Product: syz [ 274.011131][ T5274] usb 4-1: Manufacturer: syz [ 274.049785][ T6661] veth0_macvtap: entered promiscuous mode [ 274.052510][ T5274] usb 4-1: SerialNumber: syz [ 274.087847][ T5274] usb 4-1: config 0 descriptor?? [ 274.100512][ T6813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.124165][ T6813] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.166162][ T6661] veth1_macvtap: entered promiscuous mode [ 274.290873][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.348728][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.375897][ T5274] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 274.385697][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.406275][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.428152][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.455792][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.474833][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.512352][ T6719] veth0_vlan: entered promiscuous mode [ 274.555537][ T6719] veth1_vlan: entered promiscuous mode [ 274.642938][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.703325][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.749763][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.792609][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.860988][ T6661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.898592][ T6661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.918341][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.982838][ T6661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.983117][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.999978][ T6661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.035827][ T6661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.045196][ T5274] etas_es58x 4-1:0.219: could not parse product info: '놹' [ 275.048313][ T6661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.197019][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 275.252568][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.287968][ T9] usb 3-1: Product: syz [ 275.303240][ T9] usb 3-1: Manufacturer: syz [ 275.311968][ T6719] veth0_macvtap: entered promiscuous mode [ 275.329290][ T9] usb 3-1: SerialNumber: syz [ 275.343720][ T9] usb 3-1: config 0 descriptor?? [ 275.361430][ T6719] veth1_macvtap: entered promiscuous mode [ 275.373928][ T9] hso 3-1:0.0: Not our interface [ 275.384035][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 275.449394][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.472256][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.636886][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.652569][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 275.671747][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.685912][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.718096][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.743259][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.802585][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.835982][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.871634][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.909552][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.949540][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.994055][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.008799][ T6877] fuse: Bad value for 'source' [ 276.047579][ T6877] vxcan1: entered allmulticast mode [ 276.079230][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.155597][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.198885][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.239737][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.276382][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.319177][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.350461][ T6719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.389366][ T6719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.402863][ T5277] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 276.425869][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.466233][ T6719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.487273][ T6719] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.506497][ T6719] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.527261][ T6719] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.569417][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.623696][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 276.744321][ T5277] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.786008][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.809807][ T4004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.833742][ T4004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.848185][ T5277] usb 5-1: config 0 descriptor?? [ 276.867049][ T5277] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 276.911088][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.929768][ T5277] usb 4-1: USB disconnect, device number 15 [ 276.954621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.970916][ T5277] etas_es58x 4-1:0.219: Disconnecting syz syz [ 277.132828][ T6892] dummy0: entered promiscuous mode [ 277.151388][ T6892] vlan2: entered promiscuous mode [ 277.175118][ T6892] vlan2: entered allmulticast mode [ 277.193432][ T6892] dummy0: entered allmulticast mode [ 277.217465][ T6892] dummy0: left allmulticast mode [ 277.237447][ T6892] dummy0: left promiscuous mode [ 277.452625][ T6902] [U]  [ 277.848005][ T51] usb 3-1: USB disconnect, device number 24 [ 277.922647][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 278.084424][ T8] usb 4-1: config 7 has an invalid interface number: 165 but max is 0 [ 278.117653][ T8] usb 4-1: config 7 has no interface number 0 [ 278.168477][ T8] usb 4-1: New USB device found, idVendor=0dda, idProduct=0301, bcdDevice= 0.12 [ 278.199713][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.291053][ T8] usb 4-1: Product: syz [ 278.306463][ T8] usb 4-1: Manufacturer: syz [ 278.329778][ T8] usb 4-1: SerialNumber: syz [ 278.389213][ T8] hub 4-1:7.165: bad descriptor, ignoring hub [ 278.430912][ T8] hub 4-1:7.165: probe with driver hub failed with error -5 [ 278.461592][ T8] usb-storage 4-1:7.165: USB Mass Storage device detected [ 278.547992][ T8] usb-storage 4-1:7.165: Quirks match for vid 0dda pid 0301: 20 [ 278.706351][ T29] audit: type=1326 audit(1726836466.407:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6907 comm="syz.3.264" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf741d579 code=0x0 [ 279.135540][ T5289] usb 5-1: USB disconnect, device number 7 [ 279.356520][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 279.692967][ T6916] coredump: 7(syz.2.267): written to core: VMAs: 33, size 99520512; core: 62073990 bytes, pos 99528704 [ 279.860489][ T6930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 279.933359][ T6930] netlink: 'syz.4.270': attribute type 21 has an invalid length. [ 279.953783][ T6930] netlink: 128 bytes leftover after parsing attributes in process `syz.4.270'. [ 279.963483][ T6930] netlink: 'syz.4.270': attribute type 5 has an invalid length. [ 279.971207][ T6930] netlink: 3 bytes leftover after parsing attributes in process `syz.4.270'. [ 280.131904][ T6932] xt_CT: No such helper "netbios-ns" [ 280.488402][ T54] Bluetooth: hci0: unexpected subevent 0x1a length: 10 > 6 [ 280.769170][ T5289] usb 4-1: USB disconnect, device number 16 [ 280.983148][ T51] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 281.165339][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 281.230209][ T51] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 281.240779][ T51] usb 1-1: config 0 has no interface number 0 [ 281.249186][ T51] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.260221][ T51] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 281.261495][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 281.272176][ T51] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 281.292033][ T51] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 281.302341][ T51] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 281.314784][ T51] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.396455][ T51] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 281.416161][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.425940][ T51] usb 1-1: Product: syz [ 281.430952][ T51] usb 1-1: Manufacturer: syz [ 281.440182][ T51] usb 1-1: SerialNumber: syz [ 281.464986][ T51] usb 1-1: config 0 descriptor?? [ 281.476373][ T6942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.484722][ T6942] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 281.696735][ T51] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 281.853288][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 282.003331][ T9] usb 3-1: device descriptor read/64, error -71 [ 282.052596][ T5221] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.066929][ T51] etas_es58x 1-1:0.219: could not parse product info: '놹' [ 282.223056][ T5221] usb 4-1: Using ep0 maxpacket: 8 [ 282.235150][ T5221] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.250361][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 282.267776][ T5221] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=53.49 [ 282.297950][ T5221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.312549][ T5221] usb 4-1: Product: syz [ 282.316772][ T5221] usb 4-1: Manufacturer: syz [ 282.338481][ T5221] usb 4-1: SerialNumber: syz [ 282.355609][ T5221] usb 4-1: config 0 descriptor?? [ 282.403332][ T9] usb 3-1: device descriptor read/64, error -71 [ 282.512810][ T9] usb usb3-port1: attempt power cycle [ 282.524954][ T54] Bluetooth: hci0: command tx timeout [ 282.595684][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 282.628295][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 282.635166][ T5289] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.637681][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 282.637728][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 282.637769][ C0] etas_es58x 1-1:0.219: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 282.640596][ T4893] etas_es58x 1-1:0.219 can0: bit-timing not yet defined [ 282.645398][ C0] etas_es58x 1-1:0.219 can0: es58x_write_bulk_callback: error -EPROTO [ 282.661798][ T5221] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 282.684977][ T4893] etas_es58x 1-1:0.219 can0: es58x_open: Could not open the network device: -EINVAL [ 282.716719][ T5221] usb 4-1: USB disconnect, device number 17 [ 282.747518][ T6096] udevd[6096]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.777686][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 282.852581][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 282.859166][ T5289] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 282.867825][ T5289] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.879357][ T5289] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.882616][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 282.889509][ T5289] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.910455][ T5289] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.924187][ T5289] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 282.924362][ T9] usb 3-1: device descriptor read/8, error -71 [ 282.939749][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.192693][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 283.213305][ T9] usb 3-1: device descriptor read/8, error -71 [ 283.232611][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.252331][ T5289] usb 5-1: GET_CAPABILITIES returned 0 [ 283.260714][ T5289] usbtmc 5-1:16.0: can't read capabilities [ 283.352813][ T9] usb usb3-port1: unable to enumerate USB device [ 283.392891][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 283.409898][ T8] usb 2-1: config 0 has no interfaces? [ 283.426291][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.428197][ T7016] FAULT_INJECTION: forcing a failure. [ 283.428197][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 283.440157][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.453316][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.3.290 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 283.462952][ T8] usb 2-1: Product: syz [ 283.466909][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 283.466928][ T7016] Call Trace: [ 283.466936][ T7016] [ 283.466946][ T7016] dump_stack_lvl+0x241/0x360 [ 283.466980][ T7016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.471408][ T8] usb 2-1: Manufacturer: syz [ 283.481158][ T7016] ? __pfx__printk+0x10/0x10 [ 283.481194][ T7016] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 283.481220][ T7016] ? __pfx___might_resched+0x10/0x10 [ 283.481245][ T7016] should_fail_ex+0x3b0/0x4e0 [ 283.481269][ T7016] ? mas_alloc_nodes+0x26c/0x840 [ 283.481288][ T7016] should_failslab+0xac/0x100 [ 283.481311][ T7016] ? mas_alloc_nodes+0x26c/0x840 [ 283.481331][ T7016] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 283.481359][ T7016] mas_alloc_nodes+0x26c/0x840 [ 283.481388][ T7016] mas_preallocate+0xfca/0x1730 [ 283.481418][ T7016] ? __pfx_lock_release+0x10/0x10 [ 283.481442][ T7016] ? __pfx_mas_preallocate+0x10/0x10 [ 283.481472][ T7016] ? __mas_set_range+0x133/0x3c0 [ 283.490927][ T8] usb 2-1: SerialNumber: syz [ 283.492350][ T7016] vma_link+0x130/0x4f0 [ 283.492380][ T7016] ? __pfx_vma_link+0x10/0x10 [ 283.508533][ T8] usb 2-1: config 0 descriptor?? [ 283.512239][ T7016] ? __vm_enough_memory+0x119/0x380 [ 283.512277][ T7016] insert_vm_struct+0x2f7/0x410 [ 283.512302][ T7016] ? __pfx_insert_vm_struct+0x10/0x10 [ 283.512322][ T7016] ? __init_rwsem+0x122/0x160 [ 283.605313][ T7016] alloc_bprm+0x8f5/0xe20 [ 283.609690][ T7016] ? __pfx_alloc_bprm+0x10/0x10 [ 283.614555][ T7016] ? __virt_addr_valid+0x183/0x530 [ 283.619666][ T7016] ? __phys_addr_symbol+0x2f/0x70 [ 283.624700][ T7016] ? __check_object_size+0x49c/0x900 [ 283.630005][ T7016] do_execveat_common+0x18c/0x6f0 [ 283.635036][ T7016] __ia32_compat_sys_execve+0x97/0xb0 [ 283.640409][ T7016] __do_fast_syscall_32+0xb4/0x110 [ 283.645539][ T7016] ? exc_page_fault+0x590/0x8c0 [ 283.650419][ T7016] do_fast_syscall_32+0x34/0x80 [ 283.655272][ T7016] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.661611][ T7016] RIP: 0023:0xf741d579 [ 283.665678][ T7016] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.685297][ T7016] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 283.693750][ T7016] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000240 [ 283.701740][ T7016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.709710][ T7016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.717682][ T7016] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.725678][ T7016] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.733700][ T7016] [ 283.760355][ T9] usb 5-1: USB disconnect, device number 8 [ 283.850114][ T8] usb 1-1: USB disconnect, device number 18 [ 283.859333][ T8] etas_es58x 1-1:0.219: Disconnecting syz syz [ 284.046231][ T7026] netlink: 507 bytes leftover after parsing attributes in process `syz.0.293'. [ 284.072657][ T51] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 284.252029][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.270720][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.339229][ T51] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 284.367094][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.409484][ T51] usb 4-1: config 0 descriptor?? [ 284.431401][ T7045] syzkaller0: entered promiscuous mode [ 284.438919][ T7045] syzkaller0: entered allmulticast mode [ 284.855425][ T51] mcp2221 0003:04D8:00DD.0002: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 285.065337][ T7018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.087257][ T7018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.111151][ T51] usb 4-1: USB disconnect, device number 18 [ 285.172864][ T5274] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 285.414979][ T5274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 285.425530][ T5274] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 285.434721][ T5274] usb 5-1: can't read configurations, error -71 [ 285.705263][ T51] usb 2-1: USB disconnect, device number 14 [ 285.748897][ T7061] FAULT_INJECTION: forcing a failure. [ 285.748897][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 285.792716][ T7061] CPU: 1 UID: 0 PID: 7061 Comm: syz.2.302 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 285.803031][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 285.813117][ T7061] Call Trace: [ 285.816425][ T7061] [ 285.819374][ T7061] dump_stack_lvl+0x241/0x360 [ 285.824097][ T7061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.829336][ T7061] ? __pfx__printk+0x10/0x10 [ 285.833959][ T7061] ? fs_reclaim_acquire+0x93/0x140 [ 285.839097][ T7061] ? __pfx___might_resched+0x10/0x10 [ 285.844427][ T7061] should_fail_ex+0x3b0/0x4e0 [ 285.849140][ T7061] ? tomoyo_encode+0x26f/0x540 [ 285.853940][ T7061] should_failslab+0xac/0x100 [ 285.858651][ T7061] ? tomoyo_encode+0x26f/0x540 [ 285.863447][ T7061] __kmalloc_noprof+0xd8/0x400 [ 285.868243][ T7061] tomoyo_encode+0x26f/0x540 [ 285.872873][ T7061] tomoyo_realpath_from_path+0x59e/0x5e0 [ 285.878552][ T7061] tomoyo_path_number_perm+0x23a/0x880 [ 285.884051][ T7061] ? tomoyo_path_number_perm+0x208/0x880 [ 285.887929][ T7053] coredump: 30(syz.0.299): written to core: VMAs: 31, size 97292288; core: 59979138 bytes, pos 97300480 [ 285.889694][ T7061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.906805][ T7061] ? __pfx_lock_acquire+0x10/0x10 [ 285.911864][ T7061] ? __fget_files+0x29/0x470 [ 285.916457][ T7061] ? __fget_files+0x3f3/0x470 [ 285.921134][ T7061] security_file_ioctl_compat+0xc6/0x2a0 [ 285.926767][ T7061] __se_compat_sys_ioctl+0xd6/0xc90 [ 285.931961][ T7061] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 285.937771][ T7061] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 285.943754][ T7061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.950085][ T7061] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 285.956679][ T7061] ? lockdep_hardirqs_on+0x99/0x150 [ 285.961874][ T7061] __do_fast_syscall_32+0xb4/0x110 [ 285.966986][ T7061] ? exc_page_fault+0x590/0x8c0 [ 285.971834][ T7061] do_fast_syscall_32+0x34/0x80 [ 285.976681][ T7061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.983006][ T7061] RIP: 0023:0xf73bd579 [ 285.987067][ T7061] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 286.006673][ T7061] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 286.015084][ T7061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040405515 [ 286.023050][ T7061] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.031013][ T7061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.038978][ T7061] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 286.046944][ T7061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.054926][ T7061] [ 297.664546][ T51] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 308.756452][ T51] usb 2-1: device descriptor read/64, error -110 [ 309.136814][ T7061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.828858][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.835292][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.470031][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.481080][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.489819][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 321.498793][ T5227] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.506984][ T5223] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 321.517814][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.525922][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 321.536286][ T5223] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.546379][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 321.553962][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.564132][ T5227] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.575209][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.583298][ T5223] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 321.590762][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 321.599726][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.608023][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.615983][ T5223] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.625610][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 321.635776][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 321.644131][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 321.651425][ T5223] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 321.660897][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 321.668576][ T5227] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 321.676603][ T5223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.684991][ T5230] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 321.694344][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 321.701805][ T5227] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.709737][ T5223] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 321.718466][ T5230] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.726288][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.185001][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.802899][ T5233] Bluetooth: hci4: command tx timeout [ 323.810523][ T7088] Bluetooth: hci7: command tx timeout [ 323.882775][ T5232] Bluetooth: hci6: command tx timeout [ 323.890180][ T5233] Bluetooth: hci8: command tx timeout [ 323.898748][ T7088] Bluetooth: hci5: command tx timeout [ 325.882869][ T7088] Bluetooth: hci7: command tx timeout [ 325.888339][ T7088] Bluetooth: hci4: command tx timeout [ 325.963529][ T5233] Bluetooth: hci8: command tx timeout [ 325.968989][ T5233] Bluetooth: hci6: command tx timeout [ 325.978930][ T7088] Bluetooth: hci5: command tx timeout [ 327.962787][ T5233] Bluetooth: hci7: command tx timeout [ 327.969217][ T7088] Bluetooth: hci4: command tx timeout [ 328.042753][ T7088] Bluetooth: hci5: command tx timeout [ 328.048222][ T7088] Bluetooth: hci6: command tx timeout [ 328.054453][ T5233] Bluetooth: hci8: command tx timeout [ 330.043007][ T5232] Bluetooth: hci7: command tx timeout [ 330.048500][ T7088] Bluetooth: hci4: command tx timeout [ 330.122873][ T5232] Bluetooth: hci8: command tx timeout [ 330.128340][ T5232] Bluetooth: hci5: command tx timeout [ 330.134069][ T7088] Bluetooth: hci6: command tx timeout [ 341.076552][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.219754][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.459909][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.793131][ T11] bridge_slave_1: left allmulticast mode [ 342.803634][ T11] bridge_slave_1: left promiscuous mode [ 342.809481][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.848058][ T11] bridge_slave_0: left allmulticast mode [ 342.858265][ T11] bridge_slave_0: left promiscuous mode [ 342.867805][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.923350][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.972205][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.009843][ T11] bond0 (unregistering): Released all slaves [ 373.325466][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.336708][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.345182][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.353492][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.361145][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 373.368668][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.439780][ T7088] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.450132][ T7088] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.458977][ T7088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.467426][ T7088] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.480686][ T7088] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.492778][ T7088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.506851][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.516625][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.525166][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.555165][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.581322][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.588880][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.345957][ T7088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 375.359124][ T7088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 375.368607][ T7088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 375.377255][ T7088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 375.385397][ T7088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 375.393422][ T7088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 375.402875][ T5233] Bluetooth: hci0: command tx timeout [ 375.979108][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 375.989938][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 375.998633][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 376.007390][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 376.015786][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 376.023512][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 376.603756][ T5232] Bluetooth: hci1: command tx timeout [ 376.683772][ T5232] Bluetooth: hci2: command tx timeout [ 377.483809][ T7088] Bluetooth: hci0: command tx timeout [ 377.490208][ T5232] Bluetooth: hci3: command tx timeout [ 378.122634][ T5232] Bluetooth: hci9: command tx timeout [ 378.688748][ T7088] Bluetooth: hci1: command tx timeout [ 378.702792][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709113][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.762548][ T5232] Bluetooth: hci2: command tx timeout [ 379.562648][ T7088] Bluetooth: hci0: command tx timeout [ 379.569269][ T5232] Bluetooth: hci3: command tx timeout [ 380.202664][ T5232] Bluetooth: hci9: command tx timeout [ 380.762556][ T5232] Bluetooth: hci1: command tx timeout [ 380.842547][ T5232] Bluetooth: hci2: command tx timeout [ 381.642573][ T5232] Bluetooth: hci3: command tx timeout [ 381.648029][ T5232] Bluetooth: hci0: command tx timeout [ 382.282653][ T5232] Bluetooth: hci9: command tx timeout [ 382.842567][ T5232] Bluetooth: hci1: command tx timeout [ 382.922537][ T5232] Bluetooth: hci2: command tx timeout [ 383.722540][ T5232] Bluetooth: hci3: command tx timeout [ 384.362555][ T5232] Bluetooth: hci9: command tx timeout [ 433.137048][ T7088] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 433.154310][ T7088] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 433.205190][ T7088] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 433.263618][ T7088] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 433.316876][ T7088] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 433.364181][ T7088] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 435.492536][ T5232] Bluetooth: hci10: command tx timeout [ 436.318768][ T5232] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 436.333056][ T5232] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 436.352832][ T5232] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 436.360830][ T5232] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 436.373651][ T5232] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 436.381651][ T5232] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 436.506898][ T7088] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 436.542684][ T7088] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 436.562915][ T7088] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 436.573377][ T7088] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 436.581739][ T7088] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 436.590195][ T7088] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 436.671000][ T5232] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 436.680799][ T5232] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 436.688978][ T5232] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 436.697248][ T5232] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 436.719115][ T5232] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 436.726700][ T5232] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 437.167856][ T7088] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 437.177501][ T7088] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 437.185776][ T7088] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 437.194435][ T7088] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 437.202107][ T7088] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 437.209875][ T7088] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 437.562699][ T7088] Bluetooth: hci10: command tx timeout [ 438.442657][ T7088] Bluetooth: hci11: command tx timeout [ 438.682587][ T7088] Bluetooth: hci12: command tx timeout [ 438.762581][ T7088] Bluetooth: hci13: command tx timeout [ 439.242613][ T7088] Bluetooth: hci14: command tx timeout [ 439.642571][ T7088] Bluetooth: hci10: command tx timeout [ 440.124940][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131350][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.522666][ T7088] Bluetooth: hci11: command tx timeout [ 440.762578][ T7088] Bluetooth: hci12: command tx timeout [ 440.842801][ T7088] Bluetooth: hci13: command tx timeout [ 441.322584][ T7088] Bluetooth: hci14: command tx timeout [ 441.722558][ T7088] Bluetooth: hci10: command tx timeout [ 442.602845][ T7088] Bluetooth: hci11: command tx timeout [ 442.842515][ T7088] Bluetooth: hci12: command tx timeout [ 442.922552][ T7088] Bluetooth: hci13: command tx timeout [ 443.402534][ T7088] Bluetooth: hci14: command tx timeout [ 444.682579][ T7088] Bluetooth: hci11: command tx timeout [ 444.922513][ T7088] Bluetooth: hci12: command tx timeout [ 445.002757][ T7088] Bluetooth: hci13: command tx timeout [ 445.488376][ T7088] Bluetooth: hci14: command tx timeout [ 447.341610][ T7088] Bluetooth: hci5: command 0x0406 tx timeout [ 447.347724][ T5226] Bluetooth: hci7: command 0x0406 tx timeout [ 447.353857][ T4617] Bluetooth: hci6: command 0x0406 tx timeout [ 447.359879][ T4617] Bluetooth: hci4: command 0x0406 tx timeout [ 447.369416][ T5227] Bluetooth: hci8: command 0x0406 tx timeout [ 493.486473][ T5233] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 493.533799][ T5233] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 493.567441][ T5233] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 493.627230][ T5233] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 493.687248][ T5233] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 493.703206][ T5233] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 495.892625][ T5231] Bluetooth: hci15: command tx timeout [ 496.262963][ T5233] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 496.271724][ T5233] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 496.291281][ T5233] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 496.299390][ T5233] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 496.307794][ T5233] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 496.315434][ T5233] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 497.405387][ T4617] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 497.415200][ T4617] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 497.423675][ T4617] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 497.431623][ T4617] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 497.439778][ T4617] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 497.452762][ T4617] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 497.526573][ T4617] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 497.544753][ T4617] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 497.552820][ T4617] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 497.561238][ T4617] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 497.568951][ T4617] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 497.577204][ T4617] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 497.647117][ T7088] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 497.656779][ T7088] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 497.665171][ T7088] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 497.674521][ T7088] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 497.701623][ T7088] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 497.709453][ T7088] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 497.962813][ T7088] Bluetooth: hci15: command tx timeout [ 498.362877][ T7088] Bluetooth: hci16: command tx timeout [ 498.548244][ T7088] Bluetooth: hci0: command 0x0406 tx timeout [ 498.554347][ T4617] Bluetooth: hci1: command 0x0406 tx timeout [ 498.560369][ T4617] Bluetooth: hci2: command 0x0406 tx timeout [ 498.568313][ T5226] Bluetooth: hci3: command 0x0406 tx timeout [ 498.574376][ T5227] Bluetooth: hci9: command 0x0406 tx timeout [ 499.482613][ T5232] Bluetooth: hci17: command tx timeout [ 499.642699][ T5232] Bluetooth: hci18: command tx timeout [ 499.802606][ T5232] Bluetooth: hci19: command tx timeout [ 500.042473][ T5232] Bluetooth: hci15: command tx timeout [ 500.442772][ T5232] Bluetooth: hci16: command tx timeout [ 501.567539][ T5232] Bluetooth: hci17: command tx timeout [ 501.574533][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.580834][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.728724][ T5232] Bluetooth: hci18: command tx timeout [ 501.882653][ T5232] Bluetooth: hci19: command tx timeout [ 502.122475][ T5232] Bluetooth: hci15: command tx timeout [ 502.522705][ T5232] Bluetooth: hci16: command tx timeout [ 503.642665][ T5232] Bluetooth: hci17: command tx timeout [ 503.802551][ T5232] Bluetooth: hci18: command tx timeout [ 503.962799][ T5232] Bluetooth: hci19: command tx timeout [ 504.602725][ T5232] Bluetooth: hci16: command tx timeout [ 504.762723][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 504.770420][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 504.782631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 504.791330][ T30] task:kworker/u8:0 state:D stack:21808 pid:11 tgid:11 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 504.829325][ T30] Workqueue: netns cleanup_net [ 504.868298][ T30] Call Trace: [ 504.871618][ T30] [ 504.946467][ T30] __schedule+0x1893/0x4b50 [ 504.951043][ T30] ? __pfx___schedule+0x10/0x10 [ 505.022471][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.027552][ T30] ? kthread_data+0x52/0xd0 [ 505.032082][ T30] ? wq_worker_sleeping+0x66/0x240 [ 505.102455][ T30] ? schedule+0x90/0x320 [ 505.106745][ T30] schedule+0x14b/0x320 [ 505.110921][ T30] schedule_timeout+0xb0/0x310 [ 505.147689][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 505.154188][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 505.160213][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.172496][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.177812][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.189603][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 505.197123][ T30] ? wait_for_completion+0x2fe/0x620 [ 505.208105][ T30] wait_for_completion+0x355/0x620 [ 505.213578][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 505.219254][ T30] ? __flush_work+0xe7/0xc50 [ 505.230749][ T30] __flush_work+0xa37/0xc50 [ 505.235558][ T30] ? __flush_work+0xe7/0xc50 [ 505.240185][ T30] ? __pfx___flush_work+0x10/0x10 [ 505.251019][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 505.257689][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 505.269845][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 505.275241][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.280471][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 505.292600][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 505.299399][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.311078][ T30] ? up_write+0x1a9/0x590 [ 505.316761][ T30] unregister_netdevice_queue+0x303/0x370 [ 505.328569][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 505.335095][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 505.340844][ T30] _cfg80211_unregister_wdev+0x162/0x560 [ 505.352428][ T30] ieee80211_remove_interfaces+0x4db/0x700 [ 505.358275][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 505.370495][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 505.377328][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 505.387918][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 505.395671][ T30] hwsim_exit_net+0x5c1/0x670 [ 505.401006][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 505.411241][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 505.419966][ T30] cleanup_net+0x802/0xcc0 [ 505.427947][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 505.435318][ T30] ? process_scheduled_works+0x976/0x1850 [ 505.441073][ T30] process_scheduled_works+0xa63/0x1850 [ 505.451368][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.459804][ T30] ? assign_work+0x364/0x3d0 [ 505.467923][ T30] worker_thread+0x870/0xd30 [ 505.476100][ T30] ? __kthread_parkme+0x169/0x1d0 [ 505.481157][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.490231][ T30] kthread+0x2f0/0x390 [ 505.497125][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.506335][ T30] ? __pfx_kthread+0x10/0x10 [ 505.510952][ T30] ret_from_fork+0x4b/0x80 [ 505.519107][ T30] ? __pfx_kthread+0x10/0x10 [ 505.526580][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.531390][ T30] [ 505.539124][ T30] INFO: task kworker/u8:3:52 blocked for more than 144 seconds. [ 505.549471][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 505.560309][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.575868][ T30] task:kworker/u8:3 state:D stack:22880 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 505.587422][ T30] Workqueue: events_unbound linkwatch_event [ 505.599636][ T30] Call Trace: [ 505.604860][ T30] [ 505.607820][ T30] __schedule+0x1893/0x4b50 [ 505.617232][ T30] ? __pfx___schedule+0x10/0x10 [ 505.622118][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.629647][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 505.640098][ T30] ? kthread_data+0x52/0xd0 [ 505.650635][ T30] ? schedule+0x90/0x320 [ 505.660556][ T30] ? wq_worker_sleeping+0x66/0x240 [ 505.667054][ T30] ? schedule+0x90/0x320 [ 505.671327][ T30] schedule+0x14b/0x320 [ 505.680140][ T30] schedule_preempt_disabled+0x13/0x30 [ 505.688107][ T30] __mutex_lock+0x6a7/0xd70 [ 505.697854][ T30] ? __mutex_lock+0x52a/0xd70 [ 505.707040][ T30] ? linkwatch_event+0xe/0x60 [ 505.711753][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 505.722662][ T5232] Bluetooth: hci17: command tx timeout [ 505.728523][ T30] ? process_scheduled_works+0x976/0x1850 [ 505.740849][ T30] linkwatch_event+0xe/0x60 [ 505.747148][ T30] process_scheduled_works+0xa63/0x1850 [ 505.755222][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 505.761243][ T30] ? assign_work+0x364/0x3d0 [ 505.769454][ T30] worker_thread+0x870/0xd30 [ 505.776529][ T30] ? __kthread_parkme+0x169/0x1d0 [ 505.781589][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.791466][ T30] kthread+0x2f0/0x390 [ 505.797502][ T30] ? __pfx_worker_thread+0x10/0x10 [ 505.807144][ T30] ? __pfx_kthread+0x10/0x10 [ 505.811802][ T30] ret_from_fork+0x4b/0x80 [ 505.820717][ T30] ? __pfx_kthread+0x10/0x10 [ 505.830045][ T30] ret_from_fork_asm+0x1a/0x30 [ 505.836620][ T30] [ 505.839731][ T30] INFO: task kworker/u8:5:388 blocked for more than 144 seconds. [ 505.852400][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 505.859700][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.875333][ T30] task:kworker/u8:5 state:D stack:19992 pid:388 tgid:388 ppid:2 flags:0x00004000 [ 505.888868][ T5232] Bluetooth: hci18: command tx timeout [ 505.896942][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 505.909092][ T30] Call Trace: [ 505.915402][ T30] [ 505.918360][ T30] __schedule+0x1893/0x4b50 [ 505.926599][ T30] ? __pfx___schedule+0x10/0x10 [ 505.931484][ T30] ? __pfx_lock_release+0x10/0x10 [ 505.940097][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 505.949065][ T30] ? kthread_data+0x52/0xd0 [ 505.956020][ T30] ? schedule+0x90/0x320 [ 505.960296][ T30] ? wq_worker_sleeping+0x66/0x240 [ 505.970713][ T30] ? schedule+0x90/0x320 [ 505.977779][ T30] schedule+0x14b/0x320 [ 505.981969][ T30] schedule_preempt_disabled+0x13/0x30 [ 505.991910][ T30] __mutex_lock+0x6a7/0xd70 [ 505.999001][ T30] ? __mutex_lock+0x52a/0xd70 [ 506.007737][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 506.017206][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 506.022285][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 506.033421][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.039437][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 506.052473][ T5232] Bluetooth: hci19: command tx timeout [ 506.060942][ T30] ? process_scheduled_works+0x976/0x1850 [ 506.070199][ T30] process_scheduled_works+0xa63/0x1850 [ 506.078241][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 506.089291][ T30] ? assign_work+0x364/0x3d0 [ 506.096334][ T30] worker_thread+0x870/0xd30 [ 506.100967][ T30] ? __kthread_parkme+0x169/0x1d0 [ 506.110227][ T30] ? __pfx_worker_thread+0x10/0x10 [ 506.119491][ T30] kthread+0x2f0/0x390 [ 506.135767][ T30] ? __pfx_worker_thread+0x10/0x10 [ 506.140909][ T30] ? __pfx_kthread+0x10/0x10 [ 506.149185][ T30] ret_from_fork+0x4b/0x80 [ 506.157144][ T30] ? __pfx_kthread+0x10/0x10 [ 506.161760][ T30] ret_from_fork_asm+0x1a/0x30 [ 506.169115][ T30] [ 506.172211][ T30] INFO: task dhcpcd:4893 blocked for more than 144 seconds. [ 506.186340][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 506.195369][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.207243][ T30] task:dhcpcd state:D stack:20416 pid:4893 tgid:4893 ppid:4892 flags:0x00000002 [ 506.224673][ T30] Call Trace: [ 506.227977][ T30] [ 506.230924][ T30] __schedule+0x1893/0x4b50 [ 506.241072][ T30] ? __pfx___schedule+0x10/0x10 [ 506.247464][ T30] ? __pfx_lock_release+0x10/0x10 [ 506.257231][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 506.264077][ T30] ? schedule+0x90/0x320 [ 506.268354][ T30] schedule+0x14b/0x320 [ 506.278309][ T30] schedule_preempt_disabled+0x13/0x30 [ 506.287908][ T30] __mutex_lock+0x6a7/0xd70 [ 506.297043][ T30] ? __mutex_lock+0x52a/0xd70 [ 506.301758][ T30] ? rtnl_dumpit+0x99/0x200 [ 506.310030][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 506.319681][ T30] ? __alloc_skb+0x28f/0x440 [ 506.326294][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 506.331275][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 506.342586][ T30] rtnl_dumpit+0x99/0x200 [ 506.346953][ T30] netlink_dump+0x647/0xd80 [ 506.351492][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 506.363832][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 506.368902][ T30] __netlink_dump_start+0x5a2/0x790 [ 506.378851][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 506.385597][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 506.390570][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.401841][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 506.408162][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 506.419120][ T30] netlink_rcv_skb+0x1e3/0x430 [ 506.426670][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 506.432165][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.442225][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 506.448895][ T30] netlink_unicast+0x7f6/0x990 [ 506.458874][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 506.465561][ T30] ? __virt_addr_valid+0x183/0x530 [ 506.470705][ T30] ? __check_object_size+0x49c/0x900 [ 506.480819][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 506.487814][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.497732][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 506.504043][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.509359][ T30] __sock_sendmsg+0x221/0x270 [ 506.520075][ T30] __sys_sendto+0x398/0x4f0 [ 506.529418][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 506.539083][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.546529][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 506.558428][ T30] __x64_sys_sendto+0xde/0x100 [ 506.564581][ T30] do_syscall_64+0xf3/0x230 [ 506.569116][ T30] ? clear_bhb_loop+0x35/0x90 [ 506.578606][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.586870][ T30] RIP: 0033:0x7fbf88083ad7 [ 506.591310][ T30] RSP: 002b:00007ffda49ae148 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.602452][ T30] RAX: ffffffffffffffda RBX: 00007ffda49af270 RCX: 00007fbf88083ad7 [ 506.610454][ T30] RDX: 0000000000000014 RSI: 00007ffda49af190 RDI: 000000000000000e [ 506.627759][ T30] RBP: 00007ffda49af200 R08: 00007ffda49af174 R09: 000000000000000c [ 506.640490][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 506.650940][ T30] R13: 00007ffda49af174 R14: 00007ffda49af190 R15: 0000000000000105 [ 506.664776][ T30] [ 506.667878][ T30] INFO: task kworker/0:7:5276 blocked for more than 145 seconds. [ 506.680013][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 506.712469][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.721507][ T30] task:kworker/0:7 state:D stack:20976 pid:5276 tgid:5276 ppid:2 flags:0x00004000 [ 506.777833][ T30] Workqueue: events switchdev_deferred_process_work [ 506.785814][ T30] Call Trace: [ 506.789118][ T30] [ 506.792065][ T30] __schedule+0x1893/0x4b50 [ 506.812393][ T30] ? try_to_wake_up+0x971/0x1480 [ 506.817381][ T30] ? schedule+0x90/0x320 [ 506.839883][ T30] ? __pfx___schedule+0x10/0x10 [ 506.853625][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 506.859645][ T30] ? __pfx_lock_release+0x10/0x10 [ 506.889211][ T30] ? kick_pool+0x45c/0x620 [ 506.907781][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 506.913316][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 506.918549][ T30] ? schedule+0x90/0x320 [ 506.939973][ T30] schedule+0x14b/0x320 [ 506.958125][ T30] schedule_preempt_disabled+0x13/0x30 [ 506.972499][ T30] __mutex_lock+0x6a7/0xd70 [ 506.977045][ T30] ? __mutex_lock+0x52a/0xd70 [ 506.981744][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 507.008619][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 507.023711][ T30] ? process_scheduled_works+0x976/0x1850 [ 507.038058][ T30] switchdev_deferred_process_work+0xe/0x20 [ 507.054224][ T30] process_scheduled_works+0xa63/0x1850 [ 507.059829][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.082678][ T30] ? assign_work+0x364/0x3d0 [ 507.087309][ T30] worker_thread+0x870/0xd30 [ 507.091925][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 507.127735][ T30] ? __kthread_parkme+0x169/0x1d0 [ 507.139846][ T30] ? __pfx_worker_thread+0x10/0x10 [ 507.162775][ T30] kthread+0x2f0/0x390 [ 507.166873][ T30] ? __pfx_worker_thread+0x10/0x10 [ 507.172006][ T30] ? __pfx_kthread+0x10/0x10 [ 507.212542][ T30] ret_from_fork+0x4b/0x80 [ 507.216997][ T30] ? __pfx_kthread+0x10/0x10 [ 507.221608][ T30] ret_from_fork_asm+0x1a/0x30 [ 507.248681][ T30] [ 507.269019][ T30] [ 507.269019][ T30] Showing all locks held in the system: [ 507.276826][ T30] 6 locks held by kworker/u8:0/11: [ 507.281950][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 507.328176][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 507.367734][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 507.391880][ T30] #3: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 507.419107][ T30] #4: ffff888040838768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x12b/0x700 [ 507.448953][ T30] #5: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 507.477927][ T30] 3 locks held by kworker/1:0/25: [ 507.492528][ T30] 1 lock held by khungtaskd/30: [ 507.497403][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 507.528384][ T30] 6 locks held by kworker/1:1/51: [ 507.538215][ T30] 3 locks held by kworker/u8:3/52: [ 507.558924][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 507.587795][ T30] #1: ffffc90000bc7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 507.612578][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 507.621610][ T30] 3 locks held by kworker/u8:5/388: [ 507.654047][ T30] #0: ffff8881446f4148 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 507.690220][ T30] #1: ffffc90002fdfd00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 507.722689][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xbf/0x610 [ 507.758553][ T30] 3 locks held by kworker/u8:7/2467: [ 507.778206][ T30] #0: ffff88814b49e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 507.822458][ T30] #1: ffffc900094c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 507.858726][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 507.892470][ T30] 2 locks held by dhcpcd/4893: [ 507.897256][ T30] #0: ffff888021a816c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 507.932409][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 507.941260][ T30] 2 locks held by getty/4976: [ 507.956502][ T30] #0: ffff88803256a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 507.973507][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 507.989354][ T30] 3 locks held by kworker/0:7/5276: [ 507.996409][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 508.013132][ T30] #1: ffffc900039cfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 508.029787][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 508.041548][ T30] 3 locks held by kworker/1:5/5289: [ 508.053135][ T30] 2 locks held by syz-executor/7085: [ 508.058437][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.076944][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 508.089228][ T30] 2 locks held by syz-executor/7086: [ 508.096919][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.111387][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 508.122609][ T30] 2 locks held by syz-executor/7087: [ 508.127911][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.143832][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 508.159122][ T30] 2 locks held by syz-executor/7089: [ 508.165306][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.180426][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 508.190556][ T30] 2 locks held by syz-executor/7090: [ 508.201506][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.220993][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 508.236099][ T30] 2 locks held by syz-executor/7101: [ 508.241405][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.258452][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.270554][ T30] 2 locks held by syz-executor/7107: [ 508.281509][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.297911][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.308515][ T30] 2 locks held by syz-executor/7108: [ 508.320484][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.330242][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.346415][ T30] 2 locks held by syz-executor/7113: [ 508.351721][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.369439][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.380786][ T30] 2 locks held by syz-executor/7115: [ 508.391792][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.401938][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.418872][ T30] 2 locks held by syz-executor/7122: [ 508.424497][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.440576][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.451401][ T30] 2 locks held by syz-executor/7124: [ 508.463099][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.478733][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.490187][ T30] 2 locks held by syz-executor/7126: [ 508.501172][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.512031][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.526830][ T30] 2 locks held by syz-executor/7128: [ 508.532131][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.544104][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.560186][ T30] 2 locks held by syz-executor/7130: [ 508.567431][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.582137][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.594791][ T30] 2 locks held by syz-executor/7143: [ 508.600094][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.615379][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.628943][ T30] 2 locks held by syz-executor/7145: [ 508.637716][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.650689][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.664850][ T30] 2 locks held by syz-executor/7156: [ 508.670155][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.685476][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.699289][ T30] 2 locks held by syz-executor/7158: [ 508.707024][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.721196][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.733795][ T30] 2 locks held by syz-executor/7159: [ 508.739101][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 508.755566][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 508.771477][ T30] [ 508.775309][ T30] ============================================= [ 508.775309][ T30] [ 508.790430][ T30] NMI backtrace for cpu 0 [ 508.794787][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 508.804951][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 508.815013][ T30] Call Trace: [ 508.818302][ T30] [ 508.821240][ T30] dump_stack_lvl+0x241/0x360 [ 508.825946][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.831160][ T30] ? __pfx__printk+0x10/0x10 [ 508.835781][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 508.840735][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 508.846205][ T30] ? _printk+0xd5/0x120 [ 508.850375][ T30] ? __pfx__printk+0x10/0x10 [ 508.854983][ T30] ? __wake_up_klogd+0xcc/0x110 [ 508.859851][ T30] ? __pfx__printk+0x10/0x10 [ 508.864459][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 508.869503][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 508.875500][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 508.881501][ T30] watchdog+0xff4/0x1040 [ 508.885764][ T30] ? watchdog+0x1ea/0x1040 [ 508.890202][ T30] ? __pfx_watchdog+0x10/0x10 [ 508.894893][ T30] kthread+0x2f0/0x390 [ 508.898974][ T30] ? __pfx_watchdog+0x10/0x10 [ 508.903663][ T30] ? __pfx_kthread+0x10/0x10 [ 508.908266][ T30] ret_from_fork+0x4b/0x80 [ 508.912701][ T30] ? __pfx_kthread+0x10/0x10 [ 508.917308][ T30] ret_from_fork_asm+0x1a/0x30 [ 508.922098][ T30] [ 508.925723][ T30] Sending NMI from CPU 0 to CPUs 1: [ 508.930958][ C1] NMI backtrace for cpu 1 [ 508.930970][ C1] CPU: 1 UID: 0 PID: 5289 Comm: kworker/1:5 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 508.930990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 508.931001][ C1] Workqueue: events nsim_dev_trap_report_work [ 508.931020][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 508.931048][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 34 33 9c 0c 48 89 de 5b e9 c3 d3 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 65 8b 15 90 17 [ 508.931062][ C1] RSP: 0018:ffffc90000a17dd8 EFLAGS: 00000293 [ 508.931076][ C1] RAX: 0000000000000100 RBX: 0000000000000000 RCX: 91675e47e0c43100 [ 508.931088][ C1] RDX: ffff88801efcbc00 RSI: 0000000000000000 RDI: 000000000000fff5 [ 508.931099][ C1] RBP: ffffc90000a17f30 R08: ffffffff8a73e873 R09: 1ffffffff2038b55 [ 508.931112][ C1] R10: dffffc0000000000 R11: fffffbfff2038b56 R12: ffff888028ffa280 [ 508.931125][ C1] R13: 1ffff92000142fc4 R14: ffff88804b01bb80 R15: dffffc0000000000 [ 508.931138][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 508.931152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.931164][ C1] CR2: 000000000c2b5ffb CR3: 000000002d270000 CR4: 00000000003506f0 [ 508.931178][ C1] DR0: 0040000000000081 DR1: 0000000000000003 DR2: 0000000000002000 [ 508.931189][ C1] DR3: 000000000000000e DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 508.931200][ C1] Call Trace: [ 508.931206][ C1] [ 508.931213][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 508.931231][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 508.931255][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 508.931272][ C1] ? nmi_handle+0x2a/0x5a0 [ 508.931295][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 508.931316][ C1] ? nmi_handle+0x14f/0x5a0 [ 508.931331][ C1] ? nmi_handle+0x2a/0x5a0 [ 508.931347][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 508.931367][ C1] ? default_do_nmi+0x63/0x160 [ 508.931385][ C1] ? exc_nmi+0x123/0x1f0 [ 508.931402][ C1] ? end_repeat_nmi+0xf/0x53 [ 508.931426][ C1] ? fib6_rule_lookup+0x2d3/0x790 [ 508.931446][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 508.931466][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 508.931486][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 508.931506][ C1] [ 508.931512][ C1] [ 508.931517][ C1] fib6_rule_lookup+0x40f/0x790 [ 508.931535][ C1] ? handle_softirqs+0x2c5/0x980 [ 508.931554][ C1] ? do_softirq+0x11b/0x1e0 [ 508.931573][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 508.931594][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 508.931614][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 508.931640][ C1] ? ip6_route_output_flags+0x30/0x610 [ 508.931658][ C1] ip6_route_output_flags+0x38e/0x610 [ 508.931680][ C1] __nf_ip6_route+0x42/0xc0 [ 508.931698][ C1] synproxy_send_tcp_ipv6+0x2a3/0x7c0 [ 508.931721][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 508.931747][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 508.931771][ C1] ? skb_put+0x114/0x1f0 [ 508.931794][ C1] synproxy_send_client_synack_ipv6+0x7d0/0xc30 [ 508.931822][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 508.931845][ C1] ? synproxy_pernet+0x45/0x270 [ 508.931868][ C1] nft_synproxy_do_eval+0x739/0xa60 [ 508.931891][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 508.931916][ C1] ? __pfx_validate_chain+0x10/0x10 [ 508.931937][ C1] nft_do_chain+0x4ad/0x1da0 [ 508.931958][ C1] ? __lock_acquire+0x1384/0x2050 [ 508.931982][ C1] ? nf_nat_inet_fn+0xa30/0xd10 [ 508.932007][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 508.932041][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 508.932060][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 508.932078][ C1] nft_do_chain_inet+0x418/0x6b0 [ 508.932100][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 508.932121][ C1] ? nf_nat_ipv6_local_in+0x1cd/0x620 [ 508.932140][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 508.932156][ C1] ? nf_nat_ipv6_fn+0x2cb/0x3e0 [ 508.932175][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 508.932196][ C1] nf_hook_slow+0xc3/0x220 [ 508.932214][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 508.932238][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 508.932261][ C1] NF_HOOK+0x29e/0x450 [ 508.932284][ C1] ? NF_HOOK+0x9a/0x450 [ 508.932305][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 508.932328][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 508.932354][ C1] ? ip6_rcv_finish_core+0x1fb/0x410 [ 508.932379][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 508.932400][ C1] NF_HOOK+0x3a4/0x450 [ 508.932421][ C1] ? skb_orphan+0xae/0xd0 [ 508.932435][ C1] ? NF_HOOK+0x9a/0x450 [ 508.932457][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 508.932479][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 508.932505][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 508.932529][ C1] __netif_receive_skb+0x1ea/0x650 [ 508.932550][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 508.932573][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 508.932590][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.932612][ C1] ? __pfx_lock_release+0x10/0x10 [ 508.932635][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 508.932660][ C1] process_backlog+0x662/0x15b0 [ 508.932682][ C1] ? process_backlog+0x33b/0x15b0 [ 508.932705][ C1] ? __pfx_process_backlog+0x10/0x10 [ 508.932723][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.932746][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.932771][ C1] __napi_poll+0xcb/0x490 [ 508.932789][ C1] net_rx_action+0x89b/0x1240 [ 508.932818][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 508.932846][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.932872][ C1] handle_softirqs+0x2c5/0x980 [ 508.932896][ C1] ? do_softirq+0x11b/0x1e0 [ 508.932917][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 508.932941][ C1] do_softirq+0x11b/0x1e0 [ 508.932960][ C1] [ 508.932965][ C1] [ 508.932971][ C1] ? __pfx_do_softirq+0x10/0x10 [ 508.932991][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 508.933015][ C1] ? rcu_is_watching+0x15/0xb0 [ 508.933032][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 508.933061][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 508.933077][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 508.933098][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 508.933118][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 508.933136][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 508.933158][ C1] ? process_scheduled_works+0x976/0x1850 [ 508.933180][ C1] process_scheduled_works+0xa63/0x1850 [ 508.933213][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 508.933238][ C1] ? assign_work+0x364/0x3d0 [ 508.933260][ C1] worker_thread+0x870/0xd30 [ 508.933287][ C1] ? __kthread_parkme+0x169/0x1d0 [ 508.933311][ C1] ? __pfx_worker_thread+0x10/0x10 [ 508.933332][ C1] kthread+0x2f0/0x390 [ 508.933346][ C1] ? __pfx_worker_thread+0x10/0x10 [ 508.933367][ C1] ? __pfx_kthread+0x10/0x10 [ 508.933382][ C1] ret_from_fork+0x4b/0x80 [ 508.933403][ C1] ? __pfx_kthread+0x10/0x10 [ 508.933418][ C1] ret_from_fork_asm+0x1a/0x30 [ 508.933446][ C1] [ 509.649123][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 509.656007][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 509.666168][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 509.676234][ T30] Call Trace: [ 509.679521][ T30] [ 509.682459][ T30] dump_stack_lvl+0x241/0x360 [ 509.687157][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.692372][ T30] ? __pfx__printk+0x10/0x10 [ 509.696976][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 509.702980][ T30] ? vscnprintf+0x5d/0x90 [ 509.707324][ T30] panic+0x349/0x880 [ 509.711233][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 509.717401][ T30] ? __pfx_panic+0x10/0x10 [ 509.721830][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 509.727211][ T30] ? __irq_work_queue_local+0x137/0x410 [ 509.732772][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 509.738153][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 509.744317][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 509.750481][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 509.756651][ T30] watchdog+0x1033/0x1040 [ 509.760994][ T30] ? watchdog+0x1ea/0x1040 [ 509.765427][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.770114][ T30] kthread+0x2f0/0x390 [ 509.774190][ T30] ? __pfx_watchdog+0x10/0x10 [ 509.778880][ T30] ? __pfx_kthread+0x10/0x10 [ 509.783483][ T30] ret_from_fork+0x4b/0x80 [ 509.787919][ T30] ? __pfx_kthread+0x10/0x10 [ 509.792519][ T30] ret_from_fork_asm+0x1a/0x30 [ 509.797307][ T30] [ 509.800556][ T30] Kernel Offset: disabled [ 509.804870][ T30] Rebooting in 86400 seconds..