last executing test programs: 40.641213325s ago: executing program 4 (id=991): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x401, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote}, {@remote, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = getpid() setpriority(0x2, r4, 0x1) sendmsg$netlink(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)={0xcc, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, "", [@nested={0xbb, 0x148, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0xce, 0x0, 0x0, @pid=r4}, @generic="66d2c2c7c94e0fb10517977f0fbd44fe02b669a0b4de8ef6d15a2ff9c2bf50db928731de709ebf6bf11ce6acd707c99b60b20f5a2c7842a9dca2b2c9e39a7fc139257a953bb9910ecaa79b977cd2792cb244b949cd0de06d35e96205c0c399d8a4c020a3d2843a01609de4608bcb974e6f3ea0a35bd525b5ccc416f70f01acb38a60649619f5ffe4bee6a68ff12064380ec797"]}]}, 0xcc}], 0x1, 0x0, 0x0, 0x80a1}, 0x20040000) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x401, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote}, {@remote, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) socket(0x10, 0x803, 0x0) (async) getpid() (async) setpriority(0x2, r4, 0x1) (async) sendmsg$netlink(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)={0xcc, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, "", [@nested={0xbb, 0x148, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @fd=r1}, @typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0xce, 0x0, 0x0, @pid=r4}, @generic="66d2c2c7c94e0fb10517977f0fbd44fe02b669a0b4de8ef6d15a2ff9c2bf50db928731de709ebf6bf11ce6acd707c99b60b20f5a2c7842a9dca2b2c9e39a7fc139257a953bb9910ecaa79b977cd2792cb244b949cd0de06d35e96205c0c399d8a4c020a3d2843a01609de4608bcb974e6f3ea0a35bd525b5ccc416f70f01acb38a60649619f5ffe4bee6a68ff12064380ec797"]}]}, 0xcc}], 0x1, 0x0, 0x0, 0x80a1}, 0x20040000) (async) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) dup(r1) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r6, 0xae9a) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, 0x0) (async) 40.265539671s ago: executing program 4 (id=994): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3b320660"], 0x20000600}, 0x1, 0x0, 0x0, 0xc007}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@broadcast, @multicast1}, &(0x7f00000002c0)=0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0x1d8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x88000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xfd, 0x9}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {0x122}, [@common=@icmp={{0x28}, {0x11, 'h/'}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'team_slave_1\x00', 0x32, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB="03eb240721cde8c800"/31, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000020110000000416e2b5536e78d3645ab5a7cee3bfd027c778704e905a6e96dd59ce4b5b93cf70e13c27ba5d3aebab8da74e792c789694391e923f67c117c330c7cc04d88eb4"], 0x80}}, 0x8000) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x78, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x78}, 0x1, 0x0, 0x300}, 0x2) 33.299063048s ago: executing program 0 (id=1028): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000007) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb00000090daeb400baab03d7e0033000000ac14140000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0200000000006573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003501fe8fd57fd400"/260], 0x14c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x1}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x1) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x7b, &(0x7f0000000080)={r6}, 0x8) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x2000011a) fcntl$setsig(r0, 0xa, 0x21) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r7, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dmmidi(0x0, 0x876, 0x115e82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r9 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) 32.469822258s ago: executing program 0 (id=1033): syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x2, 0xc4, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0xe, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@multicast1, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x9c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xf}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101, 0xfffffffc}, {@broadcast, 0x52b1}, {@remote, 0x71}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @loopback, @multicast1, @private=0xa010102, @loopback]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 31.778327958s ago: executing program 0 (id=1037): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800000009"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={'blake2s-256-generic\x00'}}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) 31.217638832s ago: executing program 0 (id=1039): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'vlan0\x00'}) 30.775332968s ago: executing program 0 (id=1041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x3c}, 0x1, 0x0, 0x4000000000000000}, 0x0) 30.263398637s ago: executing program 0 (id=1043): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb65e44d4957b00ed35a858d44b25d5b8dad1be42", 0x118}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d7", 0x3a}, {&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48", 0x52}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2", 0x55}, {&(0x7f0000000540)}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1aece", 0xe5}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9b8", 0xe}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4da8299a", 0x15}, {&(0x7f0000000a40)="bd2f6aa36cea", 0x6}], 0x6}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, 0x0, 0x0, 0x11, 0x0, 0x0) 19.567227393s ago: executing program 1 (id=1068): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="9f9087453b0000000000000052859b36", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x1000000) 19.123787231s ago: executing program 1 (id=1069): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x400) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x11, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x2d2d, &(0x7f00000001c0)={0x0, 0x4795, 0x4, 0x0, 0x384}) open(&(0x7f0000000280)='.\x00', 0x0, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) unshare(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x18, 0x803, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f00000000c0)='y', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000}, 0x48811) sendmmsg$inet6(r3, &(0x7f0000002300)=[{{&(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='F', 0x1}], 0x1}}], 0x2, 0x4004851) setsockopt(r3, 0x84, 0x11, &(0x7f0000000040), 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000001000390400"/20, @ANYRES32=r4, @ANYBLOB="0198000000000000580012800b000100697036677265000048000280060011004e200000060003000b00000008000500f912000006000e00020000000800140003000000050017000000000006000200b200000008000d0009000000040012"], 0x78}}, 0x0) 17.964913767s ago: executing program 1 (id=1070): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)=""/66, 0x42}, {&(0x7f0000001f00)=""/4093, 0xffd}, {&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000040)=""/51, 0x33}], 0x4}, 0x0) 16.992584792s ago: executing program 1 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x18042) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="3801000010ca8a2f594e69456df7954458e6000100000000000000000000000000000000000000000000000000000000000000000000bc0c6926b7bd2ed39368f09bfbc56a00000000040000000000000000000000000000000036ab51c3d6ad68332587b05ffd66989d7556a67ca1ccb0a73e6ceb6f12b2ad8a024c45484a810c9f6a7d9eb880ed45124aabbaa3f07c74fee5042c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000f600000000000000000004000000000000006c000000200100000000000000000000000000020000004ba05051b40f70dfda6989d862388b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002006700000000000000480003006465666c61746500"/255], 0x138}}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) keyctl$restrict_keyring(0x10, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) syz_emit_ethernet(0x74, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045ff00660065000003019007001e0001e00000010c009078020003ffffffff0a01010244281e100000000200002366000000070000000400000040000007ff00000007000074df00000001890b1eac1e01010000000000d57e000000000000000000000000001dcd68dbdb0cacec8f63f95f4e6053b3bf87eda12627c06601536e9c3a97c9d968"], &(0x7f0000000ac0)={0x1, 0x2, [0x1a, 0x115, 0xad, 0x286]}) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)='o', 0x1, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0xa, 0xa, 0x9, 0x7}, 0x10) fspick(r7, &(0x7f0000000980)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 16.95370254s ago: executing program 4 (id=995): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f5, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e464ca4e6a7c6c20eb67265583d0400260c06"], 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket(0x1, 0x80802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000840)=""/133, 0x85}], 0x7}, 0x10000}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 15.8824164s ago: executing program 1 (id=1075): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) pipe2(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000a007ac2977fca6d2e9bf5b8da52af240340881f5ff320c615869e3ce5e33e391e12bb2b9370c83405b39761c4dc45a2d4557c4b7eeb81c90a19f8dd370af245bf99c56fc9d1ec0ad7a9ac8929d86053e5264d45af1c7ec12c82228aa584d89456947e574f1bdacdd47093ada5b4720aa536a944f566837de1aa9a30013a94", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) readv(r8, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f00000002c0)=""/246, 0xf6}], 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x57, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000"], 0x0) 15.19119895s ago: executing program 4 (id=1076): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) pipe2(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000a007ac2977fca6d2e9bf5b8da52af240340881f5ff320c615869e3ce5e33e391e12bb2b9370c83405b39761c4dc45a2d4557c4b7eeb81c90a19f8dd370af245bf99c56fc9d1ec0ad7a9ac8929d86053e5264d45af1c7ec12c82228aa584d89456947e574f1bdacdd47093ada5b4720aa536a944f566837de1aa9a30013a94", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x57, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000"], 0x0) 15.090781301s ago: executing program 1 (id=1077): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xc00}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x8000, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}]}}]}, 0x8c}}, 0x24044804) 11.882151347s ago: executing program 4 (id=1086): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000002a40)=ANY=[@ANYBLOB="02c900", @ANYRES64, @ANYRES64], 0x17) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100001100090400000002060000edac24b6b114203e3a6518cc69d48e394f"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x0, 0x0, 0x4, "0b0f2d5e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c910"], 0x1d) 11.022246981s ago: executing program 3 (id=1091): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000280)={0x1d, r1, 0x2, {0x0, 0xff, 0x2}, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000140)={0x3c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'dh\x00', 0x24, 0x8, 0xe}, 0x2c) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) close(0x3) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000200)) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x400, 0x711200) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002bc0)={0x29, 0xfffffffffffffffd, 0xa3, 0x81, @scatter={0xa, 0x0, &(0x7f0000002980)=[{&(0x7f0000000300)=""/141, 0x8d}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/182, 0xb6}, {&(0x7f0000001540)=""/101, 0x65}, {&(0x7f00000015c0)=""/152, 0x98}, {&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000001780)=""/237, 0xed}, {&(0x7f0000001880)=""/202, 0xca}, {&(0x7f0000001980)=""/4096, 0x1000}]}, &(0x7f0000002a40)="662bc73537c4b91d605df68f506980e7f900c897f53b98c73caaa95350eddb4301562512202a9dca5397f1f0fd83d70254254fa93c260f7eaa0b498125e9dc0c5d6efe80574dc27fda47f3f4d05df33f99f96860e1f04ba5a82875b5c25ee3e19becfc5114f25a78223c7319811fe64686f14f3213893d2c2e5573c1a50a2912e26e3526c818c7c1b385e64bd406115b60bd688e23ae444e72fe68a254193351ed95cf", &(0x7f0000002b00)=""/78, 0xc9, 0x4, 0xffffffffffffffff, &(0x7f0000002b80)}) 10.615358712s ago: executing program 3 (id=1092): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200000000122f1eafbcf706e1050000008848000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 10.463845796s ago: executing program 3 (id=1093): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x6, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 10.261215265s ago: executing program 3 (id=1094): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f00000005c0)=@abs={0x1}, 0x6e) pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0xfe) userfaultfd(0x800) poll(0x0, 0x0, 0x0) 9.987394841s ago: executing program 4 (id=1095): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) lgetxattr(0x0, 0x0, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xe6da) pipe2(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1544010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08000a007ac2977fca6d2e9bf5b8da52af240340881f5ff320c615869e3ce5e33e391e12bb2b9370c83405b39761c4dc45a2d4557c4b7eeb81c90a19f8dd370af245bf99c56fc9d1ec0ad7a9ac8929d86053e5264d45af1c7ec12c82228aa584d89456947e574f1bdacdd47093ada5b4720aa536a944f566837de1aa9a30013a94", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x57, 0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000"], 0x0) 9.281044816s ago: executing program 3 (id=1096): mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x50, 0xffffffffffffffff, 0x30738000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x4}) mknod(&(0x7f0000000000)='./file0\x00', 0x81, 0xff) 9.219314772s ago: executing program 3 (id=1097): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_newneigh={0x40, 0x1c, 0x4, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x0, r5, 0x80, 0x4, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_PROBES={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0x9, 0x8}, 0xc) pselect6(0x40, &(0x7f0000000500), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000340)={0x0, 0x31, 0xb9, 0xbed2, 0xe6, 0x400, &(0x7f0000000240)="06f8f300cee056e595c447e143f3a7345b1aac4d66921647bb261239129c8b5626db271277674fbd0f37e8e7b1280d11dbefc9ee592d0ce8120ab0fc5ad91c1b4eff6d62cca602c49b3f54a6271addeb6384d2f047b1b3f15937d2f33b7bd23b2cea8438b9f0288e187aadca0754d0bd631dfe65cc044ec01253f368856062a0f3cc86004568cd01c181429fd637f254d2cac225aaf4c2e6d0f1dcd5c0418902673c4365c8786f4394b426970d7f0cb5d9466091f0dc916779cc18a02331f2caabb737497158fb44837d2ed31ea15aa8001a1b40d82a2f67089d6c0812344ee6e4294578c14e"}) 1.228599194s ago: executing program 2 (id=1109): syz_open_procfs(0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) ioctl$PPPIOCGUNIT(r1, 0x80047456, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x7, 0x5, 0x8, 0x61, 0xfff, 0x6, 0x80000001, 0x80000000}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r4 = syz_io_uring_setup(0x0, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000a00)={0x2, 0x0, [{0x1, 0x89, &(0x7f0000000500)=""/137}, {0x0, 0xb, &(0x7f0000000980)=""/11}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 365.077827ms ago: executing program 2 (id=1110): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) write$fb(r2, &(0x7f00000001c0)="098e9fd3b5fde1fdfa1009a7c6b08511a9d9c4e2935c76561dfb26d3b969e4673fb766cf53c4c50b1fbd0d0af59e8cd77f6ccbbc4b60cd04572ea649bac4494dfa550722d0e7194a3156811b9c30b28f66ff741645cf5872e922054da5264c7b4b7ba969b91f9ef2608ceaa4cebda3", 0x6f) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) r3 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x356e, 0x0, 0x1}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x121400, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', 0x0, r6, 0x4, 0x3, 0x2}, 0x48) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, "fde4480520f51200"}) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) epoll_create1(0x0) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040), 0x0, 0x80000}) (async) write$fb(r2, &(0x7f00000001c0)="098e9fd3b5fde1fdfa1009a7c6b08511a9d9c4e2935c76561dfb26d3b969e4673fb766cf53c4c50b1fbd0d0af59e8cd77f6ccbbc4b60cd04572ea649bac4494dfa550722d0e7194a3156811b9c30b28f66ff741645cf5872e922054da5264c7b4b7ba969b91f9ef2608ceaa4cebda3", 0x6f) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) (async) syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x356e, 0x0, 0x1}, &(0x7f0000000540), &(0x7f0000000340)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x4}) (async) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x121400, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', 0x0, r6, 0x4, 0x3, 0x2}, 0x48) (async) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, "fde4480520f51200"}) (async) 191.307012ms ago: executing program 2 (id=1111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0xf5ffffff, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) 173.171921ms ago: executing program 2 (id=1112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0xfffffff5, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0x9c}}, 0x0) 135.6513ms ago: executing program 2 (id=1113): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x3, 0x21) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x6140, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) write$ppp(r4, &(0x7f00000000c0)="8f6a0209cc28f46f55e38bcf8516bda26b1f84ab037c86868196e1d146bad6ca6b2877415776e372c155fa88f3fa3140a81ad8b83ec5048e2f302bd5a0e56a5a94650b92e9956b450939802dcff4fd351af6e79068418b181abaa43315bb7ff21661a580f67ae1bad2", 0x69) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xb0, 0x0, 0x1}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060500000000000000090200737b7a32000000001400078005001400090000000800084000000000050005000a00000005000100060000ed2d775038552869dbc50c1cfb8c00110003006861"], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x74) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x2, 0x3, 0x3, 0xb, 0x1, 0x2, 0x4}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x17, &(0x7f0000000400)=""/23, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0xff, 0x7fffffff}, 0x10, 0x138e5, r7, 0x5, &(0x7f00000003c0)=[r0, r0, r0, r7, r7, 0x1], &(0x7f0000000580)=[{0x2, 0x2, 0x3, 0x3}, {0x1, 0x4, 0x10, 0x6}, {0x0, 0x2, 0x5, 0xa}, {0x0, 0x3, 0x1, 0xb}, {0x2, 0x2, 0x7, 0x8}], 0x10, 0x6}, 0x90) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', 0x80100, 0x306f3d963f8a7b12) r10 = fanotify_init(0x0, 0x0) dup2(r10, r9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) 0s ago: executing program 2 (id=1114): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x7, &(0x7f0000002000)={0x1}) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000180)="0100", 0x2, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) (async) fcntl$lock(r3, 0x26, &(0x7f0000000040)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2a40, 0x2) execveat(r5, &(0x7f0000000200)='./file0\x00', &(0x7f0000000500)=[&(0x7f00000002c0)='broadcast-link\x00', &(0x7f0000000300)='broadcast-link\x00', &(0x7f0000000340)='(!-\')%%!\'},({[[\'*\x00', &(0x7f0000000380)='(%.{,-%,\x00', &(0x7f00000003c0)='\x1a:^\'w\\\x00', &(0x7f0000000400)='[^\\,\x00', &(0x7f0000000440)='TIPC\x00', &(0x7f0000000480)='{,-\x00', &(0x7f00000004c0)='broadcast-link\x00'], &(0x7f00000005c0)=[&(0x7f0000000580)=',)^$(\x00'], 0x1000) (async) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000a5", 0x8) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x26, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c000000000006907864010102ac1414aa40010000c3c65e3f23167ae2980c01f83a14fc11decee79f6ed1be983f3aebb8b643185fc34722c7d6624a5a51c2d0814b3af1d66fc1a22fddb86a9f8e668611a2cdb91f4c8a577cdec70adc7c2e5406ea4ce02df131afef7100a70af1b0b31fa9390e671d06878b6483aa85f5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac000000907800001312623eebe039a1f617fd02722e3486ebd90000"], 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x9cf2, 0x40}, &(0x7f0000000600)=0x8) r8 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r8, 0x0, 0x0) (async) dup2(r8, r8) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) kernel console output (not intermixed with test programs): de [ 318.876706][ T9490] syzkaller0: entered allmulticast mode [ 318.889613][ T4619] Bluetooth: hci0: command tx timeout [ 319.782656][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.810155][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.826824][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.856110][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.863962][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.871594][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.008660][ T4619] Bluetooth: hci4: command tx timeout [ 320.273034][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.294940][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.304529][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.315805][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.323677][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 320.334228][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.957453][ T4619] Bluetooth: hci0: command tx timeout [ 321.822193][ T9439] chnl_net:caif_netlink_parms(): no params data found [ 321.998515][ T4619] Bluetooth: hci1: command tx timeout [ 322.078732][ T4619] Bluetooth: hci4: command tx timeout [ 322.103942][ T9494] chnl_net:caif_netlink_parms(): no params data found [ 322.195077][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.203048][ T9439] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.211728][ T9439] bridge_slave_0: entered allmulticast mode [ 322.228677][ T9439] bridge_slave_0: entered promiscuous mode [ 322.288168][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.296231][ T9439] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.305104][ T9439] bridge_slave_1: entered allmulticast mode [ 322.312954][ T9439] bridge_slave_1: entered promiscuous mode [ 322.404115][ T9439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.408841][ T4619] Bluetooth: hci3: command tx timeout [ 322.429018][ T9439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.439668][ T9497] chnl_net:caif_netlink_parms(): no params data found [ 322.476985][ T972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.507300][ T5281] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 322.572073][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.580054][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.587952][ T9494] bridge_slave_0: entered allmulticast mode [ 322.595360][ T9494] bridge_slave_0: entered promiscuous mode [ 322.604282][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.611845][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.619191][ T9494] bridge_slave_1: entered allmulticast mode [ 322.626551][ T9494] bridge_slave_1: entered promiscuous mode [ 322.700164][ T972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.711046][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 322.729828][ T5281] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 322.758458][ T5281] usb 1-1: config 150 has no interface number 0 [ 322.764772][ T5281] usb 1-1: config 150 interface 204 has no altsetting 0 [ 322.779112][ T5281] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 322.794885][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.827288][ T5281] usb 1-1: Product: syz [ 322.831585][ T5281] usb 1-1: Manufacturer: syz [ 322.836189][ T5281] usb 1-1: SerialNumber: syz [ 322.903701][ T972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.946346][ T9484] chnl_net:caif_netlink_parms(): no params data found [ 323.023573][ T9439] team0: Port device team_slave_0 added [ 323.037381][ T4619] Bluetooth: hci0: command tx timeout [ 323.084422][ T5281] usb 1-1: USB disconnect, device number 43 [ 323.212643][ T972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.243523][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.258248][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.272673][ T9439] team0: Port device team_slave_1 added [ 323.570804][ T9494] team0: Port device team_slave_0 added [ 323.577872][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.586068][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.613220][ T9439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.728849][ T9494] team0: Port device team_slave_1 added [ 323.735328][ T9439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.742718][ T9439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.768978][ T9439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.793317][ T9497] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.800611][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.808173][ T9497] bridge_slave_0: entered allmulticast mode [ 323.816006][ T9497] bridge_slave_0: entered promiscuous mode [ 323.828195][ T9497] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.835371][ T9497] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.843122][ T9497] bridge_slave_1: entered allmulticast mode [ 323.850894][ T9497] bridge_slave_1: entered promiscuous mode [ 323.858206][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.865333][ T9484] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.872755][ T9484] bridge_slave_0: entered allmulticast mode [ 323.881919][ T9484] bridge_slave_0: entered promiscuous mode [ 323.948636][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.955875][ T9484] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.963708][ T9484] bridge_slave_1: entered allmulticast mode [ 323.970017][ T5293] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 323.971324][ T9484] bridge_slave_1: entered promiscuous mode [ 324.001467][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.008714][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.035205][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.069090][ T9439] hsr_slave_0: entered promiscuous mode [ 324.075673][ T9439] hsr_slave_1: entered promiscuous mode [ 324.081457][ T4619] Bluetooth: hci1: command tx timeout [ 324.089363][ T9439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.096930][ T9439] Cannot create hsr debugfs directory [ 324.119230][ T9497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.164836][ T9484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.175091][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.183128][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.183258][ T5293] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 324.209649][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.237956][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.249855][ T5293] usb 1-1: config 0 descriptor?? [ 324.305190][ T9497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.339743][ T9484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.477854][ T4619] Bluetooth: hci3: command tx timeout [ 324.511714][ T9494] hsr_slave_0: entered promiscuous mode [ 324.583432][ T9494] hsr_slave_1: entered promiscuous mode [ 324.599318][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.614748][ T9494] Cannot create hsr debugfs directory [ 324.730649][ T9484] team0: Port device team_slave_0 added [ 324.786463][ T9497] team0: Port device team_slave_0 added [ 324.803694][ T5293] usb 1-1: string descriptor 0 read error: -71 [ 324.813246][ T9497] team0: Port device team_slave_1 added [ 324.839191][ T5293] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 324.876902][ T5293] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 324.908158][ T5293] usb 1-1: USB disconnect, device number 44 [ 324.923598][ T972] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.934527][ T5293] ftdi_sio 1-1:0.0: device disconnected [ 325.002449][ T9484] team0: Port device team_slave_1 added [ 325.033481][ T972] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.117571][ T4619] Bluetooth: hci0: command tx timeout [ 325.128386][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.139071][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.166454][ T9484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.215710][ T972] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.232841][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.239950][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.267059][ T9497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.317866][ T9484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.324849][ T9484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.352372][ T9484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.365555][ T9497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.372956][ T9497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.407289][ T9497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.483896][ T972] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.717410][ T9497] hsr_slave_0: entered promiscuous mode [ 325.723800][ T9497] hsr_slave_1: entered promiscuous mode [ 325.729912][ T5275] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 325.746092][ T9497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.755687][ T9497] Cannot create hsr debugfs directory [ 325.883070][ T9484] hsr_slave_0: entered promiscuous mode [ 325.889554][ T9484] hsr_slave_1: entered promiscuous mode [ 325.895680][ T9484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.905248][ T9484] Cannot create hsr debugfs directory [ 325.917807][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 325.929005][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 325.945785][ T5275] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 325.955078][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 325.963660][ T5275] usb 1-1: Product: syz [ 325.984138][ T5275] usb 1-1: Manufacturer: syz [ 325.995022][ T5275] usb 1-1: SerialNumber: syz [ 326.014912][ T5275] usb 1-1: config 0 descriptor?? [ 326.035023][ T5275] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.088318][ T5275] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 326.112231][ T5329] udevd[5329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.158089][ T4619] Bluetooth: hci1: command tx timeout [ 326.277334][ T5275] usb 1-1: USB disconnect, device number 45 [ 326.373679][ T972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.492086][ T972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.557457][ T4619] Bluetooth: hci3: command tx timeout [ 326.595643][ T972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.683325][ T972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.745745][ T9439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.757957][ T9439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.770385][ T9439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.783141][ T9439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.976316][ T972] bridge_slave_1: left allmulticast mode [ 326.982479][ T972] bridge_slave_1: left promiscuous mode [ 326.988713][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.001386][ T972] bridge_slave_0: left allmulticast mode [ 327.007107][ T972] bridge_slave_0: left promiscuous mode [ 327.013207][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.024379][ T972] bridge_slave_1: left allmulticast mode [ 327.030465][ T972] bridge_slave_1: left promiscuous mode [ 327.036225][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.045881][ T972] bridge_slave_0: left allmulticast mode [ 327.053764][ T972] bridge_slave_0: left promiscuous mode [ 327.060408][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.071707][ T972] bridge_slave_1: left allmulticast mode [ 327.077520][ T972] bridge_slave_1: left promiscuous mode [ 327.083338][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.092592][ T972] bridge_slave_0: left allmulticast mode [ 327.098757][ T972] bridge_slave_0: left promiscuous mode [ 327.104415][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.187750][ T5310] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 327.382108][ T5310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.392777][ T5310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.405715][ T5310] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 327.427393][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 327.435462][ T5310] usb 1-1: SerialNumber: syz [ 327.680421][ T5310] usb 1-1: 0:2 : does not exist [ 327.731499][ T5310] usb 1-1: USB disconnect, device number 46 [ 327.784170][ T5329] udevd[5329]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.986026][ T972] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 328.191360][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.204516][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.216194][ T972] bond0 (unregistering): Released all slaves [ 328.238057][ T4619] Bluetooth: hci1: command tx timeout [ 328.445850][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.466217][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.492204][ T972] bond0 (unregistering): Released all slaves [ 328.637394][ T4619] Bluetooth: hci3: command tx timeout [ 328.739669][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.760775][ T972] bond0 (unregistering): Released all slaves [ 329.069580][ T972] IPVS: stopping backup sync thread 8741 ... [ 329.194483][ T9439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.300642][ T9439] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.424299][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.431507][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.554920][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.562152][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.933481][ T9439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.116277][ T972] hsr_slave_0: left promiscuous mode [ 330.130179][ T972] hsr_slave_1: left promiscuous mode [ 330.175318][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.188386][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.196686][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.205443][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.227087][ T972] hsr_slave_0: left promiscuous mode [ 330.236885][ T972] hsr_slave_1: left promiscuous mode [ 330.244870][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.252973][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.262372][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.270461][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.290898][ T972] hsr_slave_0: left promiscuous mode [ 330.303450][ T972] hsr_slave_1: left promiscuous mode [ 330.320655][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.333172][ T972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.342687][ T972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.351244][ T972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.410690][ T972] veth1_macvtap: left promiscuous mode [ 330.416291][ T972] veth0_macvtap: left promiscuous mode [ 330.422492][ T972] veth1_vlan: left promiscuous mode [ 330.427994][ T972] veth0_vlan: left promiscuous mode [ 330.435968][ T972] veth1_macvtap: left promiscuous mode [ 330.443398][ T972] veth0_macvtap: left promiscuous mode [ 330.450148][ T972] veth1_vlan: left promiscuous mode [ 330.455495][ T972] veth0_vlan: left promiscuous mode [ 330.465010][ T972] veth1_macvtap: left promiscuous mode [ 330.472167][ T972] veth0_macvtap: left promiscuous mode [ 330.478181][ T972] veth1_vlan: left promiscuous mode [ 330.483540][ T972] veth0_vlan: left promiscuous mode [ 331.284058][ T972] team0 (unregistering): Port device team_slave_1 removed [ 331.330769][ T972] team0 (unregistering): Port device team_slave_0 removed [ 331.419454][ T5310] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 331.607319][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 331.629005][ T9606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.644338][ T9606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.661910][ T5310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.674119][ T5310] usb 1-1: no configurations [ 331.681709][ T5310] usb 1-1: can't read configurations, error -22 [ 332.163137][ T972] team0 (unregistering): Port device team_slave_1 removed [ 332.276187][ T972] team0 (unregistering): Port device team_slave_0 removed [ 333.028253][ T25] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 333.239199][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.265046][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.283335][ T25] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 333.296351][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.318634][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.326685][ T25] usb 1-1: Product: syz [ 333.331127][ T25] usb 1-1: Manufacturer: syz [ 333.604119][ T972] team0 (unregistering): Port device team_slave_1 removed [ 333.661364][ T972] team0 (unregistering): Port device team_slave_0 removed [ 334.301740][ T9613] team_slave_0: entered promiscuous mode [ 334.307525][ T9613] team_slave_1: entered promiscuous mode [ 334.358754][ T9613] team_slave_0: left promiscuous mode [ 334.364280][ T9613] team_slave_1: left promiscuous mode [ 334.560074][ T9439] veth0_vlan: entered promiscuous mode [ 334.600731][ T9439] veth1_vlan: entered promiscuous mode [ 334.787413][ T9439] veth0_macvtap: entered promiscuous mode [ 334.832934][ T9484] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.868422][ T9484] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.890948][ T9484] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.914150][ T9439] veth1_macvtap: entered promiscuous mode [ 334.948266][ T9484] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.099810][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.117114][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.127942][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.139159][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.150461][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.162481][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.173964][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.187467][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.204116][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.216151][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.261650][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.409970][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.448526][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.459921][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.472627][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.485541][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.497695][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.508222][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.521522][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.534017][ T9439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.547330][ T9439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.578919][ T9439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.641023][ T9494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.668185][ T5281] usb 1-1: USB disconnect, device number 49 [ 335.685092][ T9494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.741949][ T9494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.789956][ T9494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.839333][ T9439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.867745][ T9439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.876580][ T9439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.895515][ T9439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.317038][ T9497] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.342977][ T9497] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.407109][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.470280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.495175][ T9497] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.639628][ T9497] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.729340][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.736606][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.753822][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.792478][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.904887][ T9484] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.942938][ T9494] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.988143][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.995309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.033463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.040689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.110316][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.117503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.221729][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.228931][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.266622][ T9668] netlink: 'syz.0.930': attribute type 10 has an invalid length. [ 337.427640][ T9497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.551064][ T9497] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.641349][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.648565][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.819095][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.826221][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.873038][ T9484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.096266][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.227183][ T9484] veth0_vlan: entered promiscuous mode [ 338.275299][ T9497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.336768][ T9484] veth1_vlan: entered promiscuous mode [ 338.359111][ T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 338.391357][ T9494] veth0_vlan: entered promiscuous mode [ 338.436663][ T9494] veth1_vlan: entered promiscuous mode [ 338.591254][ T9484] veth0_macvtap: entered promiscuous mode [ 338.607557][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 338.619149][ T25] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 338.645205][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.651435][ T9702] team_slave_0: entered promiscuous mode [ 338.663989][ T9702] team_slave_1: entered promiscuous mode [ 338.689699][ T25] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 338.714018][ T9702] team_slave_0: left promiscuous mode [ 338.719572][ T9702] team_slave_1: left promiscuous mode [ 338.725402][ T25] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 338.748673][ T25] usb 1-1: Product: syz [ 338.758569][ T25] usb 1-1: config 0 descriptor?? [ 338.784045][ T9484] veth1_macvtap: entered promiscuous mode [ 338.829359][ T9497] veth0_vlan: entered promiscuous mode [ 338.854310][ T9497] veth1_vlan: entered promiscuous mode [ 338.925795][ T9494] veth0_macvtap: entered promiscuous mode [ 338.979150][ T9494] veth1_macvtap: entered promiscuous mode [ 339.031471][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.066194][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.077054][ T5276] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 339.103161][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.135532][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.153441][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.174596][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.217620][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.239674][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.271387][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.288646][ T5276] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.292527][ T29] audit: type=1800 audit(1723906010.008:296): pid=9716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.934" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 339.319516][ T5276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.330914][ T5276] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 339.348569][ T5276] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.359306][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.367257][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.367452][ T5276] usb 2-1: Product: syz [ 339.381811][ T5276] usb 2-1: Manufacturer: syz [ 339.409732][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.460036][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.490186][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.558424][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.571021][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.581455][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.592746][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.604741][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.620090][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.633604][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.648156][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.659425][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.679199][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.691920][ T9484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.703834][ T9484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.760158][ T9484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.825469][ T9484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.839254][ T9484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.863642][ T9484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.889635][ T9484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.942599][ T9497] veth0_macvtap: entered promiscuous mode [ 339.975933][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.996113][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.017375][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.028829][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.039467][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.051632][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.062075][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.074220][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.085571][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.096612][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.107035][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.118354][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.128998][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.140314][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.173482][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.212556][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 340.229211][ T25] usb 1-1: USB disconnect, device number 50 [ 340.258355][ T9497] veth1_macvtap: entered promiscuous mode [ 340.301795][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.341285][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.364293][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.389285][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.403876][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.423351][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.441306][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.465381][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.475929][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.494784][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.514334][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.526524][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.546778][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.571622][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.584273][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.601524][ T9494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.621361][ T9494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.648262][ T9494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.667019][ T9494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.927807][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.962164][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.985195][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.008079][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.025811][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.036925][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.058095][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.089118][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.105385][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.125208][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.155669][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.176760][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.193810][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.237888][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.255253][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.266818][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.299207][ T9497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.328992][ T5275] usb 2-1: USB disconnect, device number 29 [ 341.371657][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.398079][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.415884][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.450347][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.493067][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.520196][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.531882][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.545762][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.576154][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.603724][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.614510][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.635916][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.646486][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.659835][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.672162][ T9497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.683560][ T9497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.702349][ T9497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.017642][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.025513][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.073775][ T9497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.075032][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.104565][ T9497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.134501][ T9497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.137837][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.154207][ T9497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.333620][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.359276][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.373409][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.391701][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.678291][ T9755] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.685743][ T9755] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.749537][ T9755] bridge0: entered allmulticast mode [ 342.777373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.823271][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.839089][ T9759] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.846316][ T9759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.853915][ T9759] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.861156][ T9759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.897505][ T9759] bridge0: entered promiscuous mode [ 343.002336][ T1073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.040356][ T1073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.354258][ T9781] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 343.415200][ T9781] bond0: (slave bond_slave_0): Releasing backup interface [ 344.367286][ T5310] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 344.612141][ T5310] usb 5-1: Using ep0 maxpacket: 16 [ 344.651500][ T5310] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 344.661003][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.682017][ T5310] usb 5-1: Product: syz [ 344.686237][ T5310] usb 5-1: Manufacturer: syz [ 344.700881][ T5310] usb 5-1: SerialNumber: syz [ 344.723808][ T5310] usb 5-1: config 0 descriptor?? [ 344.887486][ T5275] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 344.958915][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.977003][ T5281] usb 5-1: USB disconnect, device number 51 [ 344.999043][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.011101][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.022771][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.034748][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.044087][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.100258][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.127834][ T5275] usb 2-1: config 0 has no interfaces? [ 345.164961][ T5275] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 345.194689][ T5275] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 345.221189][ T5275] usb 2-1: Manufacturer: syz [ 345.247891][ T5275] usb 2-1: config 0 descriptor?? [ 345.277006][ T9811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.336499][ T9811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.523391][ T9812] chnl_net:caif_netlink_parms(): no params data found [ 345.780378][ T9825] ptrace attach of "./syz-executor exec"[9497] was attempted by "./syz-executor exec"[9825] [ 345.788097][ T5281] usb 2-1: USB disconnect, device number 30 [ 345.894940][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.908275][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.922832][ T9812] bridge_slave_0: entered allmulticast mode [ 345.937603][ T9812] bridge_slave_0: entered promiscuous mode [ 345.969463][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.982951][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.005058][ T9812] bridge_slave_1: entered allmulticast mode [ 346.019037][ T9812] bridge_slave_1: entered promiscuous mode [ 346.228315][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.269630][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.339964][ T9812] team0: Port device team_slave_0 added [ 346.357797][ T9812] team0: Port device team_slave_1 added [ 346.474496][ T9837] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 346.534444][ T9837] bond0: (slave bond_slave_0): Releasing backup interface [ 346.583692][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.603848][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.637750][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.738834][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.784727][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.816860][ T4619] Bluetooth: hci1: command tx timeout [ 346.876014][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.978393][ T9848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 346.988223][ T9848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 347.046149][ T9812] hsr_slave_0: entered promiscuous mode [ 347.068630][ T9812] hsr_slave_1: entered promiscuous mode [ 347.117652][ T4619] Bluetooth: hci2: command tx timeout [ 347.211386][ T9852] xt_NFQUEUE: number of total queues is 0 [ 347.614080][ T9812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.703551][ T9812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.707245][ T5281] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 347.800497][ T9812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.897903][ T5281] usb 5-1: device descriptor read/64, error -71 [ 347.996469][ T9812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.188477][ T5281] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 348.294167][ T9812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.315800][ T9812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.347536][ T9812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.369774][ T9812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.387720][ T5281] usb 5-1: device descriptor read/64, error -71 [ 348.519951][ T5281] usb usb5-port1: attempt power cycle [ 348.621532][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.704826][ T9812] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.762620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.769842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.835333][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.842529][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.946315][ T9879] team_slave_0: entered promiscuous mode [ 348.952180][ T9879] team_slave_1: entered promiscuous mode [ 348.970316][ T5281] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 348.991784][ T9879] team_slave_0: left promiscuous mode [ 348.997295][ T9879] team_slave_1: left promiscuous mode [ 348.998760][ T9885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.020629][ T5281] usb 5-1: device descriptor read/8, error -71 [ 349.041935][ T9885] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.197526][ T4619] Bluetooth: hci2: command tx timeout [ 349.247610][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 349.301874][ T5281] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 349.339928][ T9888] program syz.2.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.351308][ T5281] usb 5-1: device descriptor read/8, error -71 [ 349.386254][ T9812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.477542][ T25] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.498069][ T5281] usb usb5-port1: unable to enumerate USB device [ 349.504805][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 349.530711][ T9812] veth0_vlan: entered promiscuous mode [ 349.543501][ T25] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 349.598470][ T9812] veth1_vlan: entered promiscuous mode [ 349.606890][ T25] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.626169][ T9888] netlink: 'syz.2.972': attribute type 21 has an invalid length. [ 349.635065][ T25] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.636412][ T9888] netlink: 128 bytes leftover after parsing attributes in process `syz.2.972'. [ 349.662509][ T9888] netlink: 'syz.2.972': attribute type 4 has an invalid length. [ 349.667278][ T25] usb 2-1: Product: syz [ 349.670749][ T9888] netlink: 'syz.2.972': attribute type 5 has an invalid length. [ 349.674687][ T939] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 349.682716][ T9888] netlink: 3 bytes leftover after parsing attributes in process `syz.2.972'. [ 349.699667][ T25] usb 2-1: Manufacturer: syz [ 349.753771][ T9888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.972'. [ 349.812288][ T9812] veth0_macvtap: entered promiscuous mode [ 349.832580][ T9812] veth1_macvtap: entered promiscuous mode [ 349.868814][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.880307][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.898675][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.923304][ T939] usb 4-1: Using ep0 maxpacket: 32 [ 349.951336][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.971447][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.987283][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.005671][ T939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.017635][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.031308][ T939] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 350.040522][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.053548][ T939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.064539][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.075744][ T939] usb 4-1: config 0 descriptor?? [ 350.094919][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.114420][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.130847][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.146486][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.157095][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.172424][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.183564][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.198311][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.210119][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.222009][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.255235][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.285775][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.299334][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.310953][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.322771][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.335693][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.347446][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.361655][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.376530][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.399978][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.410945][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.429086][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.443089][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.453807][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.473052][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.486362][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.497783][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.510551][ T939] ft260 0003:0403:6030.0012: item fetching failed at offset 0/2 [ 350.520417][ T939] ft260 0003:0403:6030.0012: failed to parse HID [ 350.528105][ T9812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.540204][ T939] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -22 [ 350.540510][ T9812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.568790][ T9812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.582915][ T9856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.583562][ T9812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.613376][ T9812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.626909][ T9812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.648048][ T9812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.732017][ T939] usb 4-1: USB disconnect, device number 31 [ 350.938339][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.969638][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.080528][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.093987][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.277764][ T4619] Bluetooth: hci2: command tx timeout [ 351.442379][ T5281] usb 2-1: USB disconnect, device number 31 [ 351.630438][ T25] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 351.817336][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 351.824360][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 351.824385][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 351.824401][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.824414][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.824432][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 351.824444][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 351.824466][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 351.824480][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.838040][ T25] usb 1-1: config 0 descriptor?? [ 351.842365][ T9910] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.900445][ T4619] Bluetooth: hci5: urb ffff888059949b00 submission failed (90) [ 351.907261][ T5310] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 352.093869][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 352.107273][ T5310] usb 5-1: Using ep0 maxpacket: 32 [ 352.110029][ T5310] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 352.110056][ T5310] usb 5-1: config 0 has no interface number 0 [ 352.110084][ T5310] usb 5-1: too many endpoints for config 0 interface 155 altsetting 107: 255, using maximum allowed: 30 [ 352.110187][ T5310] usb 5-1: config 0 interface 155 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 352.110208][ T5310] usb 5-1: config 0 interface 155 has no altsetting 0 [ 352.147712][ T5310] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 352.147746][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.147767][ T5310] usb 5-1: Product: syz [ 352.147784][ T5310] usb 5-1: Manufacturer: syz [ 352.147800][ T5310] usb 5-1: SerialNumber: syz [ 352.158625][ T5310] usb 5-1: config 0 descriptor?? [ 352.287496][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 352.289427][ T25] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 352.289455][ T25] usb 2-1: config 150 has no interface number 0 [ 352.289521][ T25] usb 2-1: config 150 interface 204 has no altsetting 0 [ 352.289542][ T25] usb 2-1: config 150 interface 1 has no altsetting 0 [ 352.323898][ T25] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 352.323954][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.323975][ T25] usb 2-1: Product: syz [ 352.323991][ T25] usb 2-1: Manufacturer: syz [ 352.324007][ T25] usb 2-1: SerialNumber: syz [ 352.605100][ T25] usb 2-1: USB disconnect, device number 32 [ 352.726277][ T9921] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.980'. [ 352.781545][ T9] usb 1-1: USB disconnect, device number 51 [ 353.266050][ T9927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.311212][ T9927] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 353.384770][ T4619] Bluetooth: hci2: command tx timeout [ 353.937695][ T9939] fuse: Bad value for 'fd' [ 354.410607][ T5310] peak_usb 5-1:0.155 can0: unable to request usb[type=0 value=1] err=-71 [ 354.437358][ T5310] peak_usb 5-1:0.155: unable to read PCAN-USB Pro firmware info (err -71) [ 354.528269][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 354.567390][ T9954] netlink: 'syz.3.989': attribute type 2 has an invalid length. [ 354.718849][ T5310] peak_usb 5-1:0.155: probe with driver peak_usb failed with error -71 [ 354.756622][ T5310] usb 5-1: USB disconnect, device number 56 [ 354.873360][ T1073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.050369][ T1073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.213438][ T1073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.409987][ T1073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.451713][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 355.497348][ T9972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.999'. [ 355.722826][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.745107][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.754625][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.772035][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.788738][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 355.798955][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.919010][ T5281] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 355.995984][ T1073] bridge_slave_1: left allmulticast mode [ 356.011846][ T1073] bridge_slave_1: left promiscuous mode [ 356.033036][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.093321][ T1073] bridge_slave_0: left allmulticast mode [ 356.127369][ T1073] bridge_slave_0: left promiscuous mode [ 356.133153][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.149619][ T9989] x_tables: unsorted entry at hook 2 [ 356.157708][ T5281] usb 1-1: config 0 interface 0 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 356.178340][ T5281] usb 1-1: config 0 interface 0 has no altsetting 0 [ 356.203882][ T5281] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 356.233283][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.255239][ T5281] usb 1-1: Product: syz [ 356.264185][ T5281] usb 1-1: Manufacturer: syz [ 356.293823][ T5281] usb 1-1: SerialNumber: syz [ 356.323213][ T5281] usb 1-1: config 0 descriptor?? [ 356.368375][ T5281] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 356.407065][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87 [ 356.434238][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 356.469227][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 356.492841][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 356.522685][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 356.545502][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 356.555950][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 356.587598][ T51] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.619164][ T5281] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 356.645775][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 356.677545][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 356.685761][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 356.726211][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 356.735701][ T5281] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 356.783979][ T5281] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 356.792276][ T51] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 356.792310][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.792331][ T51] usb 2-1: Product: syz [ 356.792348][ T51] usb 2-1: Manufacturer: syz [ 356.792363][ T51] usb 2-1: SerialNumber: syz [ 356.808414][ T51] usb 2-1: config 0 descriptor?? [ 356.822598][ T5281] usb 1-1: USB disconnect, device number 52 [ 356.869487][ T51] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 356.895110][ T5281] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 356.937091][ T5281] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 356.962424][ T5281] keyspan 1-1:0.0: device disconnected [ 357.143408][ T29] audit: type=1326 audit(1723906027.868:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9990 comm="syz.1.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x0 [ 357.263483][T10018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.280747][T10018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.385591][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.418812][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.443687][ T1073] bond0 (unregistering): Released all slaves [ 357.773204][T10021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.827471][T10021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.917516][ T4619] Bluetooth: hci0: command tx timeout [ 358.597405][ T5310] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 358.751473][ T1073] hsr_slave_0: left promiscuous mode [ 358.783077][ T1073] hsr_slave_1: left promiscuous mode [ 358.807460][ T5310] usb 1-1: Using ep0 maxpacket: 8 [ 358.817049][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.826723][ T5310] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 358.851633][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.861103][ T5310] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.881612][ T5310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.892608][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.905137][ T5310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.924205][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.944643][ T5310] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.022825][ T5310] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 359.029833][ T1073] veth1_macvtap: left promiscuous mode [ 359.040766][ T1073] veth0_macvtap: left promiscuous mode [ 359.048033][ T1073] veth1_vlan: left promiscuous mode [ 359.067463][ T5310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.070136][ T1073] veth0_vlan: left promiscuous mode [ 359.169268][ T5279] usb 2-1: USB disconnect, device number 33 [ 359.357743][ T5310] usb 1-1: usb_control_msg returned -32 [ 359.364876][ T5310] usbtmc 1-1:16.0: can't read capabilities [ 359.997285][ T4619] Bluetooth: hci0: command tx timeout [ 360.124812][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 360.224517][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 360.888184][T10060] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 360.958745][ T9984] chnl_net:caif_netlink_parms(): no params data found [ 361.239035][T10075] fuse: Unknown parameter 'Lrootmode' [ 361.253596][ T5310] usb 1-1: USB disconnect, device number 53 [ 361.591334][T10091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.669798][ T9984] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.676982][ T9984] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.702768][T10098] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1028'. [ 361.703908][ T9984] bridge_slave_0: entered allmulticast mode [ 361.748795][ T9984] bridge_slave_0: entered promiscuous mode [ 361.836343][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 361.844699][ T972] tipc: Subscription rejected, illegal request [ 361.888279][ T9984] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.909673][ T9984] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.951283][ T9984] bridge_slave_1: entered allmulticast mode [ 361.970330][ T9984] bridge_slave_1: entered promiscuous mode [ 361.984907][T10101] netlink: 'syz.3.1029': attribute type 10 has an invalid length. [ 362.077353][ T4619] Bluetooth: hci0: command tx timeout [ 362.260689][ T9984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.284990][ T9984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.483518][ T9984] team0: Port device team_slave_0 added [ 362.513453][ T9984] team0: Port device team_slave_1 added [ 362.568008][T10123] FAULT_INJECTION: forcing a failure. [ 362.568008][T10123] name failslab, interval 1, probability 0, space 0, times 0 [ 362.600750][T10123] CPU: 1 UID: 0 PID: 10123 Comm: syz.3.1035 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 362.611566][T10123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 362.621631][T10123] Call Trace: [ 362.624905][T10123] [ 362.627844][T10123] dump_stack_lvl+0x241/0x360 [ 362.632539][T10123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.637741][T10123] ? __pfx__printk+0x10/0x10 [ 362.642337][T10123] ? kmem_cache_alloc_bulk_noprof+0x52/0x790 [ 362.648315][T10123] ? __pfx___might_resched+0x10/0x10 [ 362.653600][T10123] should_fail_ex+0x3b0/0x4e0 [ 362.658278][T10123] should_failslab+0xac/0x100 [ 362.662955][T10123] kmem_cache_alloc_bulk_noprof+0x7a/0x790 [ 362.668753][T10123] ? mas_alloc_nodes+0x26c/0x840 [ 362.673687][T10123] ? mas_alloc_nodes+0x26c/0x840 [ 362.678617][T10123] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 362.683979][T10123] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 362.689605][T10123] mas_alloc_nodes+0x3d5/0x840 [ 362.694368][T10123] mas_preallocate+0xfca/0x1730 [ 362.699226][T10123] ? __pfx_mas_preallocate+0x10/0x10 [ 362.704511][T10123] ? __mas_set_range+0x133/0x3c0 [ 362.709449][T10123] __split_vma+0x2e5/0xc30 [ 362.713874][T10123] ? __pfx___split_vma+0x10/0x10 [ 362.718815][T10123] do_vmi_align_munmap+0x433/0x18c0 [ 362.724032][T10123] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 362.729671][T10123] ? mtree_range_walk+0x6fd/0x8e0 [ 362.734712][T10123] ? mas_find+0x8c0/0xbb0 [ 362.739039][T10123] do_vmi_munmap+0x261/0x2f0 [ 362.743632][T10123] do_munmap+0x136/0x1c0 [ 362.747870][T10123] ? __pfx_do_munmap+0x10/0x10 [ 362.752631][T10123] ? down_write_killable+0x19e/0x260 [ 362.757918][T10123] ? __pfx_lock_release+0x10/0x10 [ 362.762946][T10123] __se_sys_mremap+0xfbf/0x1980 [ 362.767806][T10123] ? __pfx___se_sys_mremap+0x10/0x10 [ 362.773085][T10123] ? __fget_files+0x3f6/0x470 [ 362.777766][T10123] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 362.783741][T10123] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 362.790087][T10123] ? do_syscall_64+0x100/0x230 [ 362.794844][T10123] ? __x64_sys_mremap+0x20/0xc0 [ 362.799695][T10123] do_syscall_64+0xf3/0x230 [ 362.804196][T10123] ? clear_bhb_loop+0x35/0x90 [ 362.808875][T10123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.814776][T10123] RIP: 0033:0x7f308e979e79 [ 362.819188][T10123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.838792][T10123] RSP: 002b:00007f308f80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 362.847379][T10123] RAX: ffffffffffffffda RBX: 00007f308eb15f80 RCX: 00007f308e979e79 [ 362.855343][T10123] RDX: 0000000000004000 RSI: 0000000000001000 RDI: 000000002054b000 [ 362.863305][T10123] RBP: 00007f308f80f090 R08: 00000000209e7000 R09: 0000000000000000 [ 362.871301][T10123] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 362.879263][T10123] R13: 0000000000000000 R14: 00007f308eb15f80 R15: 00007f308ec3fa38 [ 362.887246][T10123] [ 363.109111][ T1073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.249377][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.256405][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.319885][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.338166][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.342307][ T9984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.359753][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.376792][T10139] vivid-002: ================= START STATUS ================= [ 363.385685][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.399315][T10139] vivid-002: Radio HW Seek Mode: Bounded [ 363.408144][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.410902][T10139] vivid-002: Radio Programmable HW Seek: false [ 363.427977][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 363.473158][T10139] vivid-002: RDS Rx I/O Mode: Block I/O [ 363.482305][T10139] vivid-002: Generate RBDS Instead of RDS: false [ 363.491623][T10139] vivid-002: RDS Reception: true [ 363.504083][T10139] vivid-002: RDS Program Type: 0 inactive [ 363.510821][T10139] vivid-002: RDS PS Name: inactive [ 363.516305][T10139] vivid-002: RDS Radio Text: inactive [ 363.523063][T10139] vivid-002: RDS Traffic Announcement: false inactive [ 363.532818][T10139] vivid-002: RDS Traffic Program: false inactive [ 363.551364][T10139] vivid-002: RDS Music: false inactive [ 363.557012][T10139] vivid-002: ================== END STATUS ================== [ 363.572916][ T1073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.642693][T10139] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 363.655618][ T9984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.679626][ T9984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.734357][ T9984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.856036][ T1073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.144091][ T1073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.157588][ T5225] Bluetooth: hci0: command tx timeout [ 364.205341][ T9984] hsr_slave_0: entered promiscuous mode [ 364.222548][ T9984] hsr_slave_1: entered promiscuous mode [ 364.239129][ T9984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.247285][ T9984] Cannot create hsr debugfs directory [ 364.587323][ T51] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.648177][ T1073] bridge_slave_1: left allmulticast mode [ 364.664286][ T1073] bridge_slave_1: left promiscuous mode [ 364.674986][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.699416][ T1073] bridge_slave_0: left allmulticast mode [ 364.705114][ T1073] bridge_slave_0: left promiscuous mode [ 364.721251][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.777472][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 364.784534][ T51] usb 4-1: config 7 has an invalid interface number: 152 but max is 0 [ 364.804399][ T51] usb 4-1: config 7 has no interface number 0 [ 364.812725][ T51] usb 4-1: config 7 interface 152 altsetting 190 endpoint 0x4 has an invalid bInterval 253, changing to 7 [ 364.853568][ T51] usb 4-1: config 7 interface 152 has no altsetting 0 [ 364.881134][ T51] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=66.6d [ 364.919029][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.927079][ T51] usb 4-1: Product: syz [ 364.933297][ T51] usb 4-1: Manufacturer: syz [ 364.938786][ T51] usb 4-1: SerialNumber: syz [ 365.307050][T10163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.343158][T10163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.424749][ T51] usbtest 4-1:7.152: couldn't get endpoints, -71 [ 365.427592][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.437759][ T51] usbtest 4-1:7.152: probe with driver usbtest failed with error -71 [ 365.449545][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.467422][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.475288][ T51] usb 4-1: USB disconnect, device number 32 [ 365.482089][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.498020][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.505419][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.522765][ T5225] Bluetooth: hci3: command tx timeout [ 365.691538][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.704270][ T1073] bond0 (unregistering): Released all slaves [ 366.409067][ T1073] hsr_slave_0: left promiscuous mode [ 366.429570][ T1073] hsr_slave_1: left promiscuous mode [ 366.435696][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.443384][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.454159][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.461755][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.484429][ T1073] veth1_macvtap: left promiscuous mode [ 366.490228][ T1073] veth0_macvtap: left promiscuous mode [ 366.495790][ T1073] veth1_vlan: left promiscuous mode [ 366.501255][ T1073] veth0_vlan: left promiscuous mode [ 366.687380][ T5281] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 366.889681][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 366.897072][ T5281] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 366.920180][ T5281] usb 4-1: config 0 has no interface number 0 [ 366.926840][ T5281] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 366.950164][ T5281] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 366.967096][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.975279][ T5281] usb 4-1: Product: syz [ 366.988647][ T5281] usb 4-1: Manufacturer: syz [ 366.993280][ T5281] usb 4-1: SerialNumber: syz [ 367.015805][ T5281] usb 4-1: config 0 descriptor?? [ 367.038183][ T5281] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 367.059879][ T5281] em28xx 4-1:0.191: Video interface 191 found: [ 367.125298][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 367.186590][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 367.462548][ T5281] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 367.553503][ T5281] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 367.577403][ T5281] em28xx 4-1:0.191: board has no eeprom [ 367.602269][ T5225] Bluetooth: hci2: command tx timeout [ 367.603408][ T4619] Bluetooth: hci3: command tx timeout [ 367.661644][ T5281] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 367.669647][ T5281] em28xx 4-1:0.191: analog set to bulk mode. [ 367.675699][ T9] em28xx 4-1:0.191: Registering V4L2 extension [ 367.706753][ T5281] usb 4-1: USB disconnect, device number 33 [ 367.718093][ T5281] em28xx 4-1:0.191: Disconnecting em28xx [ 367.855847][ T9] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 367.865804][ T9] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 367.883520][ T9] em28xx 4-1:0.191: No AC97 audio processor [ 367.901571][ T9] usb 4-1: Decoder not found [ 367.906509][ T9] em28xx 4-1:0.191: failed to create media graph [ 367.921677][T10141] chnl_net:caif_netlink_parms(): no params data found [ 367.930406][ T9] em28xx 4-1:0.191: V4L2 device video71 deregistered [ 367.952503][T10191] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 367.964239][ T9] em28xx 4-1:0.191: Remote control support is not available for this card. [ 367.973133][ T5281] em28xx 4-1:0.191: Closing input extension [ 368.003296][T10191] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 368.008006][ T5281] em28xx 4-1:0.191: Freeing device [ 368.519659][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.557643][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.569705][T10141] bridge_slave_0: entered allmulticast mode [ 368.587475][T10141] bridge_slave_0: entered promiscuous mode [ 368.657540][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.666993][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.707038][T10141] bridge_slave_1: entered allmulticast mode [ 368.737357][T10141] bridge_slave_1: entered promiscuous mode [ 368.844960][T10180] chnl_net:caif_netlink_parms(): no params data found [ 368.919165][T10141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.936054][T10141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.994313][ T9984] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.020154][ T9984] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.171841][ T9984] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.184850][ T9984] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 369.245740][T10141] team0: Port device team_slave_0 added [ 369.281988][T10141] team0: Port device team_slave_1 added [ 369.430150][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.438573][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.446000][T10180] bridge_slave_0: entered allmulticast mode [ 369.454066][T10180] bridge_slave_0: entered promiscuous mode [ 369.463257][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.471185][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.488225][T10180] bridge_slave_1: entered allmulticast mode [ 369.503978][T10180] bridge_slave_1: entered promiscuous mode [ 369.520000][T10141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.527796][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.554103][T10141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.593486][ T1073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.643659][T10141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.656826][T10141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.683240][ T4619] Bluetooth: hci2: command tx timeout [ 369.687664][ T4619] Bluetooth: hci3: command tx timeout [ 369.699709][T10141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.731556][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.761678][ T1073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.792993][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.797260][ T5281] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 369.878051][ T1073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.921647][T10180] team0: Port device team_slave_0 added [ 369.933331][T10180] team0: Port device team_slave_1 added [ 369.947950][T10141] hsr_slave_0: entered promiscuous mode [ 369.954418][T10141] hsr_slave_1: entered promiscuous mode [ 369.960783][T10141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.968667][T10141] Cannot create hsr debugfs directory [ 369.998474][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 370.009517][ T5281] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 370.018196][ T5281] usb 4-1: config 0 has no interface number 0 [ 370.024805][ T5281] usb 4-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.040051][ T5281] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 370.049397][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.058001][ T5281] usb 4-1: Product: syz [ 370.062370][ T5281] usb 4-1: Manufacturer: syz [ 370.067009][ T5281] usb 4-1: SerialNumber: syz [ 370.082276][ T5281] usb 4-1: config 0 descriptor?? [ 370.099299][ T5281] em28xx 4-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 370.109789][ T5281] em28xx 4-1:0.191: Video interface 191 found: [ 370.122960][ T1073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.229382][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.236399][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.266950][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.315914][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.323760][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.356354][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.368217][ T5281] em28xx 4-1:0.191: unknown em28xx chip ID (0) [ 370.442132][ T5281] em28xx 4-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 370.465160][ T5281] em28xx 4-1:0.191: board has no eeprom [ 370.557257][ T5281] em28xx 4-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 370.565133][ T5281] em28xx 4-1:0.191: analog set to bulk mode. [ 370.574065][ T9] em28xx 4-1:0.191: Registering V4L2 extension [ 370.595932][T10180] hsr_slave_0: entered promiscuous mode [ 370.642748][ T5281] usb 4-1: USB disconnect, device number 34 [ 370.658342][ T5281] em28xx 4-1:0.191: Disconnecting em28xx [ 370.684034][T10180] hsr_slave_1: entered promiscuous mode [ 370.732774][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.766270][T10180] Cannot create hsr debugfs directory [ 370.886065][ T9] em28xx 4-1:0.191: Config register raw data: 0xffffffed [ 370.909809][ T9] em28xx 4-1:0.191: AC97 chip type couldn't be determined [ 370.968685][ T9] em28xx 4-1:0.191: No AC97 audio processor [ 370.987639][ T9] usb 4-1: Decoder not found [ 370.998183][ T9] em28xx 4-1:0.191: failed to create media graph [ 371.018574][ T9] em28xx 4-1:0.191: V4L2 device video71 deregistered [ 371.058563][ T9] em28xx 4-1:0.191: Remote control support is not available for this card. [ 371.088675][ T5281] em28xx 4-1:0.191: Closing input extension [ 371.111839][ T5281] em28xx 4-1:0.191: Freeing device [ 371.176690][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 371.573352][ T1073] bridge_slave_1: left allmulticast mode [ 371.593480][ T1073] bridge_slave_1: left promiscuous mode [ 371.607546][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.670659][ T1073] bridge_slave_0: left allmulticast mode [ 371.686547][ T1073] bridge_slave_0: left promiscuous mode [ 371.694537][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.747616][ T5281] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 371.767575][ T4619] Bluetooth: hci3: command tx timeout [ 371.769499][ T5225] Bluetooth: hci2: command tx timeout [ 371.997344][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 372.015128][ T5281] usb 4-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config [ 372.035890][ T5281] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.055232][ T5281] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 372.065453][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.086537][ T5281] usb 4-1: config 0 descriptor?? [ 372.214569][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.226573][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.240172][ T1073] bond0 (unregistering): Released all slaves [ 372.309669][ T9984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.463283][ T9984] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.476729][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.483961][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.602930][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.610104][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.700012][ T29] audit: type=1326 audit(1723906043.418:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10259 comm="syz.3.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308e979e79 code=0x0 [ 372.779796][T10141] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.803097][T10141] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.839903][ T1073] hsr_slave_0: left promiscuous mode [ 372.858233][ T1073] hsr_slave_1: left promiscuous mode [ 372.870885][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.887785][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.908334][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.921842][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.982067][ T1073] veth1_macvtap: left promiscuous mode [ 372.993419][ T1073] veth0_macvtap: left promiscuous mode [ 373.005942][ T1073] veth1_vlan: left promiscuous mode [ 373.012677][ T1073] veth0_vlan: left promiscuous mode [ 373.839588][ T5225] Bluetooth: hci2: command tx timeout [ 374.140124][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 374.214910][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 374.478209][ T5281] usb 4-1: USB disconnect, device number 35 [ 375.030598][ T5281] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 375.100818][T10141] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.112424][T10141] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.139193][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1066'. [ 375.219253][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 375.229208][ T5281] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 375.244817][ T5281] usb 4-1: config 0 has no interface number 0 [ 375.263870][ T5281] usb 4-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 375.316978][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.332604][ T5281] usb 4-1: Product: syz [ 375.347402][ T5281] usb 4-1: Manufacturer: syz [ 375.352042][ T5281] usb 4-1: SerialNumber: syz [ 375.401544][ T5281] usb 4-1: config 0 descriptor?? [ 375.429672][ T5281] usb 4-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 375.483309][ T9984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.628884][T10334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.638736][ T5281] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 375.650895][T10334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.746962][ T9984] veth0_vlan: entered promiscuous mode [ 375.829385][ T9984] veth1_vlan: entered promiscuous mode [ 375.905632][T10141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.106662][ T9984] veth0_macvtap: entered promiscuous mode [ 376.172325][T10180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.201629][T10180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.232845][T10141] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.268408][ T9984] veth1_macvtap: entered promiscuous mode [ 376.286563][T10180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.338778][T10180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.379564][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.386687][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.407632][ T5281] usb 4-1: device descriptor read/64, error -71 [ 376.440458][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.447662][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.556109][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.586276][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.614599][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.635377][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.651479][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.663066][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.677552][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.688256][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.702221][ T5281] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 376.717435][ T5281] usb 4-1: device reset changed ep0 maxpacket size! [ 376.733072][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.747062][ T5281] ueagle-atm 4-1:0.245: usbatm_usb_probe: bind failed: -19! [ 376.763615][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.778648][ T5281] usb 4-1: USB disconnect, device number 36 [ 376.795044][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.806174][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.819172][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.834792][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.868646][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.932024][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.958533][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.978186][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.988916][ T5281] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 377.000264][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.010745][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.021449][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.031470][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.042428][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.052552][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.064015][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.074354][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.085567][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.095630][ T9984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.106259][ T9984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.119065][ T9984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.178113][ T5281] usb 4-1: Using ep0 maxpacket: 32 [ 377.185456][ T9984] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.196233][ T9984] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.203941][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.216491][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.222619][ T9984] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.235026][ T9984] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.244515][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.282266][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.427003][ T5281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.428995][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.440392][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 377.475372][ T5281] usb 4-1: can't read configurations, error -71 [ 377.533784][T10141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.579876][ T3954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.601546][ T3954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.699713][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.746833][ T972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.790895][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.798129][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.799068][ T972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.864072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.871280][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.086180][T10141] veth0_vlan: entered promiscuous mode [ 378.154649][ T29] audit: type=1326 audit(1723906048.878:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.228231][T10141] veth1_vlan: entered promiscuous mode [ 378.242671][ T29] audit: type=1326 audit(1723906048.878:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.285641][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.373112][ T29] audit: type=1326 audit(1723906048.908:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.459213][ T29] audit: type=1326 audit(1723906048.908:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.494046][ T29] audit: type=1326 audit(1723906048.908:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.595889][ T29] audit: type=1326 audit(1723906048.908:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.604132][T10141] veth0_macvtap: entered promiscuous mode [ 378.710871][ T29] audit: type=1326 audit(1723906048.908:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.726694][T10141] veth1_macvtap: entered promiscuous mode [ 378.782276][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.796681][ T29] audit: type=1326 audit(1723906048.908:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.821944][ T29] audit: type=1326 audit(1723906048.908:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.846326][ T29] audit: type=1326 audit(1723906048.918:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10404 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe86779e79 code=0x7ffc0000 [ 378.941863][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.966207][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.977424][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.017573][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.057531][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.088044][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.107437][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.129774][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.147447][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.167215][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.177086][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.207351][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.229424][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.240348][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.261365][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.287063][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.297511][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.317522][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.344392][T10141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.430978][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.455950][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.470106][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.492276][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.502782][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.526414][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.536428][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.555014][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.564950][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.575784][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.597769][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.617301][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.633857][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.644894][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.678495][T10141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.704928][T10141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.717459][T10141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.756306][T10141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.765497][T10141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.774368][T10141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.783635][T10141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.041872][ T1073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.153099][T10425] team_slave_0: entered promiscuous mode [ 380.158937][T10425] team_slave_1: entered promiscuous mode [ 380.172381][T10425] team_slave_0: left promiscuous mode [ 380.177977][T10425] team_slave_1: left promiscuous mode [ 380.275852][T10180] veth0_vlan: entered promiscuous mode [ 380.339855][ T5275] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 380.396867][ T1073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.531352][T10180] veth1_vlan: entered promiscuous mode [ 380.559480][ T5275] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.576764][ T5275] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.620162][ T5275] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 380.655001][ T1073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.679810][ T5275] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.698005][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.727812][ T5275] usb 5-1: Product: syz [ 380.732020][ T5275] usb 5-1: Manufacturer: syz [ 380.788310][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.836729][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.879464][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.884649][ T1073] netdevsim netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.898884][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.907050][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.916655][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.924678][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 380.932291][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.126119][T10180] veth0_macvtap: entered promiscuous mode [ 381.156770][T10180] veth1_macvtap: entered promiscuous mode [ 381.205414][ T3954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.224444][ T3954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.317680][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.328748][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.338782][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.354899][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.368884][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.380597][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.393388][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.404961][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.419101][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.432450][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.465133][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.478791][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.490249][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.502930][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.515382][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.528102][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.542407][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.555409][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.631514][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.734272][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.804352][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.888912][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904810][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904839][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904857][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904874][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904889][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904905][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904919][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904938][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904952][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904963][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.904978][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.904997][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.905010][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.905027][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.905041][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.910385][T10180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.023203][ T1073] bridge_slave_1: left allmulticast mode [ 382.023233][ T1073] bridge_slave_1: left promiscuous mode [ 382.023445][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.035704][ T1073] bridge_slave_0: left allmulticast mode [ 382.204156][ T1073] bridge_slave_0: left promiscuous mode [ 382.210266][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.762020][ T25] usb 5-1: USB disconnect, device number 57 [ 383.037771][ T5225] Bluetooth: hci4: command tx timeout [ 383.067336][T10447] loop6: detected capacity change from 0 to 7 [ 383.087300][T10447] Dev loop6: unable to read RDB block 7 [ 383.092928][T10447] loop6: unable to read partition table [ 383.107368][T10447] loop6: partition table beyond EOD, truncated [ 383.119313][T10447] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 383.119313][T10447] ) failed (rc=-5) [ 383.316921][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.336226][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.347295][ T25] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 383.365280][ T1073] bond0 (unregistering): Released all slaves [ 383.416352][T10180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.426004][T10180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.435003][T10180] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.453436][T10180] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.554394][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 383.595153][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 383.646226][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.685560][ T25] usb 5-1: Product: syz [ 383.705822][ T25] usb 5-1: Manufacturer: syz [ 383.726057][ T25] usb 5-1: SerialNumber: syz [ 383.752917][ T25] r8152-cfgselector 5-1: Unknown version 0x0000 [ 383.772758][ T25] r8152-cfgselector 5-1: config 0 descriptor?? [ 383.987629][T10429] chnl_net:caif_netlink_parms(): no params data found [ 384.167569][ T5279] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 384.254313][ T5225] Bluetooth: Fragment is too long (len 24, expected 0) [ 384.273128][ T939] r8152-cfgselector 5-1: USB disconnect, device number 58 [ 384.382442][ T5279] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 384.402379][ T1073] hsr_slave_0: left promiscuous mode [ 384.412200][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.441799][ T1073] hsr_slave_1: left promiscuous mode [ 384.462919][ T5279] usb 3-1: config 0 descriptor?? [ 384.487956][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.516140][T10486] loop6: detected capacity change from 0 to 7 [ 384.526129][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.534143][T10486] Dev loop6: unable to read RDB block 7 [ 384.534216][T10486] loop6: unable to read partition table [ 384.555725][T10486] loop6: partition table beyond EOD, truncated [ 384.563119][T10486] loop_reread_partitions: partition scan of loop6 (被xڬdƤݡ [ 384.563119][T10486] ) failed (rc=-5) [ 384.581985][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.611640][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.686544][ T1073] veth1_macvtap: left promiscuous mode [ 384.721806][ T1073] veth0_macvtap: left promiscuous mode [ 384.739942][ T1073] veth1_vlan: left promiscuous mode [ 384.753535][ T1073] veth0_vlan: left promiscuous mode [ 384.967058][ T5279] usb 3-1: Cannot read MAC address [ 384.982948][ T5279] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 385.026327][ T5279] usb 3-1: USB disconnect, device number 27 [ 385.118243][ T5225] Bluetooth: hci4: command tx timeout [ 385.737323][ T939] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 385.959102][ T939] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.981044][ T939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.991329][ T939] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 386.058368][ T939] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 386.129626][ T939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 386.162819][ T939] usb 5-1: Product: syz [ 386.167012][ T939] usb 5-1: Manufacturer: syz [ 386.381475][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 386.483929][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 386.760332][ T5275] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 386.947461][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 386.958915][ T5275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 386.975994][ T5275] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 386.995921][ T5275] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.006762][ T5275] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.025972][ T5275] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 25 [ 387.054862][ T5275] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.068435][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 387.082851][ T5275] usb 3-1: SerialNumber: syz [ 387.129708][ T5275] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 387.138090][ T5275] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 387.153688][ T5275] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 387.197395][ T5225] Bluetooth: hci4: command tx timeout [ 387.311001][T10496] team_slave_0: entered promiscuous mode [ 387.316758][T10496] team_slave_1: entered promiscuous mode [ 387.347871][T10496] team_slave_0: left promiscuous mode [ 387.353334][T10496] team_slave_1: left promiscuous mode [ 387.392126][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.426991][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.491123][T10429] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.513187][T10429] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.524811][T10429] bridge_slave_0: entered allmulticast mode [ 387.537866][T10429] bridge_slave_0: entered promiscuous mode [ 387.577688][T10429] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.604488][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.624714][T10429] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.632196][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.640166][T10429] bridge_slave_1: entered allmulticast mode [ 387.649993][T10429] bridge_slave_1: entered promiscuous mode [ 387.710871][T10503] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.716903][T10503] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 387.789205][T10429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.829607][T10429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.934892][T10503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 387.966393][T10503] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 387.987747][T10429] team0: Port device team_slave_0 added [ 388.003917][T10429] team0: Port device team_slave_1 added [ 388.021926][T10503] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.032230][T10503] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 388.056543][T10429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.064068][T10503] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 388.084061][T10503] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 388.092557][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.124271][ T5277] usb 3-1: USB disconnect, device number 28 [ 388.152845][T10429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.169526][T10429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.177352][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.204454][T10429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.375499][T10516] FAULT_INJECTION: forcing a failure. [ 388.375499][T10516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.405915][T10516] CPU: 0 UID: 0 PID: 10516 Comm: syz.2.1100 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 388.416723][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 388.426802][T10516] Call Trace: [ 388.430104][T10516] [ 388.433053][T10516] dump_stack_lvl+0x241/0x360 [ 388.437769][T10516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.443001][T10516] ? __pfx__printk+0x10/0x10 [ 388.447625][T10516] ? __pfx_lock_release+0x10/0x10 [ 388.452687][T10516] should_fail_ex+0x3b0/0x4e0 [ 388.457391][T10516] _copy_from_user+0x2f/0xe0 [ 388.462009][T10516] ip_mcast_join_leave+0x123/0x360 [ 388.467125][T10516] ? __pfx_ip_mcast_join_leave+0x10/0x10 [ 388.472762][T10516] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.479100][T10516] ? do_ip_setsockopt+0x1a2d/0x3cd0 [ 388.484290][T10516] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 388.490015][T10516] do_ip_setsockopt+0x22eb/0x3cd0 [ 388.495036][T10516] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 388.500402][T10516] ? aa_sk_perm+0x96d/0xab0 [ 388.504906][T10516] ? __pfx_aa_sk_perm+0x10/0x10 [ 388.509754][T10516] ? __pfx_lock_acquire+0x10/0x10 [ 388.514772][T10516] ? aa_sock_opt_perm+0x79/0x120 [ 388.519704][T10516] ip_setsockopt+0x63/0x100 [ 388.524201][T10516] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 388.530096][T10516] do_sock_setsockopt+0x3af/0x720 [ 388.535121][T10516] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 388.540656][T10516] ? __fget_files+0x29/0x470 [ 388.545245][T10516] ? __fget_files+0x3f6/0x470 [ 388.549925][T10516] __sys_setsockopt+0x1ae/0x250 [ 388.554772][T10516] __x64_sys_setsockopt+0xb5/0xd0 [ 388.559799][T10516] do_syscall_64+0xf3/0x230 [ 388.564294][T10516] ? clear_bhb_loop+0x35/0x90 [ 388.568969][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.574855][T10516] RIP: 0033:0x7ff7d2179e79 [ 388.579261][T10516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.598859][T10516] RSP: 002b:00007ff7d2f3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 388.607265][T10516] RAX: ffffffffffffffda RBX: 00007ff7d2315f80 RCX: 00007ff7d2179e79 [ 388.615251][T10516] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 388.623235][T10516] RBP: 00007ff7d2f3a090 R08: 0000000000000088 R09: 0000000000000000 [ 388.631208][T10516] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 388.639175][T10516] R13: 0000000000000000 R14: 00007ff7d2315f80 R15: 00007ff7d243fa38 [ 388.647162][T10516] [ 388.725352][T10503] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.754348][ T5277] usb 5-1: USB disconnect, device number 59 [ 388.763699][T10503] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 388.777088][T10429] hsr_slave_0: entered promiscuous mode [ 388.819464][T10429] hsr_slave_1: entered promiscuous mode [ 389.109130][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 389.162299][T10527] fuse: Bad value for 'user_id' [ 389.174606][T10527] fuse: Bad value for 'user_id' [ 389.457460][ T5276] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 389.617297][ T5276] usb 3-1: device descriptor read/64, error -71 [ 389.897786][ T5276] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 390.053001][ T5276] usb 3-1: device descriptor read/64, error -71 [ 390.177555][ T5276] usb usb3-port1: attempt power cycle [ 390.587661][ T5276] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 390.617968][ T5276] usb 3-1: device descriptor read/8, error -71 [ 390.893116][ T5276] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 390.928523][ T5276] usb 3-1: device descriptor read/8, error -71 [ 391.047520][ T5276] usb usb3-port1: unable to enumerate USB device [ 392.262256][T10530] binder: 10528:10530 ioctl c0306201 0 returned -14 [ 393.629982][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 394.784726][T10550] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 394.795176][T10550] bond0: (slave bond_slave_0): Releasing backup interface [ 440.404010][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.410660][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.853623][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860117][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 546.637542][ T30] INFO: task dhcpcd:4893 blocked for more than 143 seconds. [ 546.644881][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 546.653177][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 546.661986][ T30] task:dhcpcd state:D stack:22240 pid:4893 tgid:4893 ppid:1 flags:0x00000002 [ 546.672262][ T30] Call Trace: [ 546.675554][ T30] [ 546.679423][ T30] __schedule+0x1800/0x4a60 [ 546.683994][ T30] ? __pfx___schedule+0x10/0x10 [ 546.688974][ T30] ? __pfx_lock_release+0x10/0x10 [ 546.694027][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 546.699641][ T30] ? schedule+0x90/0x320 [ 546.703916][ T30] schedule+0x14b/0x320 [ 546.708234][ T30] schedule_preempt_disabled+0x13/0x30 [ 546.713716][ T30] __mutex_lock+0x6a4/0xd70 [ 546.721329][ T30] ? __mutex_lock+0x527/0xd70 [ 546.726043][ T30] ? genl_rcv_msg+0x121/0xec0 [ 546.730882][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 546.735944][ T30] ? __pfx_validate_chain+0x10/0x10 [ 546.741416][ T30] ? __pfx_validate_chain+0x10/0x10 [ 546.746638][ T30] ? radix_tree_lookup+0x238/0x290 [ 546.751907][ T30] genl_rcv_msg+0x121/0xec0 [ 546.756435][ T30] ? mark_lock+0x9a/0x350 [ 546.767205][ T30] ? __lock_acquire+0x137a/0x2040 [ 546.772285][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.782929][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 546.788544][ T30] ? __pfx___might_resched+0x10/0x10 [ 546.793880][ T30] netlink_rcv_skb+0x1e3/0x430 [ 546.813369][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 546.818677][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.824034][ T30] genl_rcv+0x28/0x40 [ 546.837096][ T30] netlink_unicast+0x7f6/0x990 [ 546.841935][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 546.853928][ T30] ? __virt_addr_valid+0x183/0x530 [ 546.862975][ T30] ? __check_object_size+0x49c/0x900 [ 546.868394][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 546.873679][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 546.878864][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.884184][ T30] ? __import_iovec+0x536/0x820 [ 546.889429][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 546.894533][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 546.900978][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 546.906483][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.912039][ T30] __sock_sendmsg+0x221/0x270 [ 546.916877][ T30] ____sys_sendmsg+0x525/0x7d0 [ 546.921783][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.927389][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 546.932035][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.940059][ T30] ? __secure_computing+0x125/0x370 [ 546.945549][ T30] do_syscall_64+0xf3/0x230 [ 546.950344][ T30] ? clear_bhb_loop+0x35/0x90 [ 546.955234][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.961313][ T30] RIP: 0033:0x7f8dadf7da4b [ 546.965746][ T30] RSP: 002b:00007fff06d07f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.974547][ T30] RAX: ffffffffffffffda RBX: 000055aaab3e894f RCX: 00007f8dadf7da4b [ 546.982655][ T30] RDX: 0000000000000000 RSI: 00007fff06d07f90 RDI: 0000000000000010 [ 546.990973][ T30] RBP: 00007fff06d1c458 R08: 0000000000000000 R09: 0000000000000000 [ 546.999283][ T30] R10: 00007fff06d1c6a0 R11: 0000000000000246 R12: 0000000000000010 [ 547.008250][ T30] R13: 00007fff06d0bff0 R14: 0000000000000000 R15: 000055aace7cd320 [ 547.016462][ T30] [ 547.019672][ T30] INFO: task kworker/1:4:5279 blocked for more than 143 seconds. [ 547.027747][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 547.035501][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.049949][ T30] task:kworker/1:4 state:D stack:18800 pid:5279 tgid:5279 ppid:2 flags:0x00004000 [ 547.061888][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 547.068730][ T30] Call Trace: [ 547.072030][ T30] [ 547.074989][ T30] __schedule+0x1800/0x4a60 [ 547.086274][ T30] ? __pfx___schedule+0x10/0x10 [ 547.091299][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.097471][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.102643][ T30] ? kick_pool+0x1bd/0x620 [ 547.107296][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.112523][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 547.118548][ T30] ? schedule+0x90/0x320 [ 547.122960][ T30] schedule+0x14b/0x320 [ 547.127375][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.132871][ T30] __mutex_lock+0x6a4/0xd70 [ 547.137437][ T30] ? __mutex_lock+0x527/0xd70 [ 547.142497][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 547.148873][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.153915][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.159977][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 547.166539][ T30] ? process_scheduled_works+0x945/0x1830 [ 547.172572][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 547.178863][ T30] ? process_scheduled_works+0x945/0x1830 [ 547.184610][ T30] process_scheduled_works+0xa2c/0x1830 [ 547.190417][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 547.196432][ T30] ? assign_work+0x364/0x3d0 [ 547.201664][ T30] worker_thread+0x86d/0xd40 [ 547.206304][ T30] ? __kthread_parkme+0x169/0x1d0 [ 547.211475][ T30] ? __pfx_worker_thread+0x10/0x10 [ 547.216601][ T30] kthread+0x2f0/0x390 [ 547.221166][ T30] ? __pfx_worker_thread+0x10/0x10 [ 547.226307][ T30] ? __pfx_kthread+0x10/0x10 [ 547.232129][ T30] ret_from_fork+0x4b/0x80 [ 547.236566][ T30] ? __pfx_kthread+0x10/0x10 [ 547.241248][ T30] ret_from_fork_asm+0x1a/0x30 [ 547.246053][ T30] [ 547.249284][ T30] INFO: task syz-executor:9984 blocked for more than 143 seconds. [ 547.257265][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 547.264907][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.274199][ T30] task:syz-executor state:D stack:20992 pid:9984 tgid:9984 ppid:1 flags:0x00004006 [ 547.285103][ T30] Call Trace: [ 547.288647][ T30] [ 547.291601][ T30] __schedule+0x1800/0x4a60 [ 547.296152][ T30] ? __pfx___schedule+0x10/0x10 [ 547.301149][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.306196][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 547.311718][ T30] ? schedule+0x90/0x320 [ 547.316116][ T30] schedule+0x14b/0x320 [ 547.320338][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.325807][ T30] __mutex_lock+0x6a4/0xd70 [ 547.330359][ T30] ? kobject_put+0x446/0x480 [ 547.334964][ T30] ? __mutex_lock+0x527/0xd70 [ 547.339713][ T30] ? rfkill_unregister+0xd0/0x230 [ 547.344748][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.349837][ T30] ? __pfx_device_del+0x10/0x10 [ 547.354707][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 547.360021][ T30] rfkill_unregister+0xd0/0x230 [ 547.364989][ T30] hci_unregister_dev+0x366/0x510 [ 547.370108][ T30] vhci_release+0x83/0xd0 [ 547.374459][ T30] ? __pfx_vhci_release+0x10/0x10 [ 547.379555][ T30] __fput+0x24a/0x8a0 [ 547.383562][ T30] task_work_run+0x24f/0x310 [ 547.388219][ T30] ? __pfx_task_work_run+0x10/0x10 [ 547.393357][ T30] ? do_exit+0xa2a/0x27f0 [ 547.397962][ T30] ? kmem_cache_free+0x145/0x350 [ 547.402927][ T30] do_exit+0xa2f/0x27f0 [ 547.407332][ T30] ? __pfx_do_exit+0x10/0x10 [ 547.411932][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 547.417572][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.423584][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 547.429966][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 547.435097][ T30] do_group_exit+0x207/0x2c0 [ 547.439753][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 547.444969][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 547.450219][ T30] get_signal+0x16a1/0x1740 [ 547.454719][ T30] ? __pfx_get_signal+0x10/0x10 [ 547.459722][ T30] arch_do_signal_or_restart+0x96/0x860 [ 547.465297][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 547.471501][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.477540][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 547.483284][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 547.488922][ T30] do_syscall_64+0x100/0x230 [ 547.493516][ T30] ? clear_bhb_loop+0x35/0x90 [ 547.498247][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.504158][ T30] RIP: 0033:0x7fc496b700d7 [ 547.508634][ T30] RSP: 002b:00007fc496e3fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 547.517101][ T30] RAX: fffffffffffffe00 RBX: 000000000000000d RCX: 00007fc496b700d7 [ 547.525095][ T30] RDX: 0000000040000000 RSI: 00007fc496e3fdec RDI: 00000000ffffffff [ 547.533421][ T30] RBP: 00007fc496e3fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 547.541627][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555814945eb [ 547.549804][ T30] R13: 0000555581494590 R14: 000000000005dfaa R15: 00007fc496e3fe40 [ 547.558698][ T30] [ 547.561752][ T30] INFO: task syz-executor:10180 blocked for more than 144 seconds. [ 547.569934][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 547.577725][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 547.586402][ T30] task:syz-executor state:D stack:20560 pid:10180 tgid:10180 ppid:1 flags:0x00004006 [ 547.596667][ T30] Call Trace: [ 547.600115][ T30] [ 547.603246][ T30] __schedule+0x1800/0x4a60 [ 547.610590][ T30] ? __pfx___schedule+0x10/0x10 [ 547.615473][ T30] ? __pfx_lock_release+0x10/0x10 [ 547.620574][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 547.626056][ T30] ? schedule+0x90/0x320 [ 547.630420][ T30] schedule+0x14b/0x320 [ 547.634597][ T30] schedule_preempt_disabled+0x13/0x30 [ 547.640125][ T30] __mutex_lock+0x6a4/0xd70 [ 547.644638][ T30] ? __mutex_lock+0x527/0xd70 [ 547.649422][ T30] ? rfkill_register+0x34/0x8c0 [ 547.654280][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 547.659476][ T30] ? mod_delayed_work_on+0x2b6/0x370 [ 547.664779][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 547.671116][ T30] rfkill_register+0x34/0x8c0 [ 547.675811][ T30] wiphy_register+0x234c/0x2b30 [ 547.681311][ T30] ? __pfx_wiphy_register+0x10/0x10 [ 547.686622][ T30] ? minstrel_ht_alloc+0x72b/0x860 [ 547.691999][ T30] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 547.698331][ T30] ieee80211_register_hw+0x30fb/0x3e10 [ 547.703825][ T30] ? ieee80211_register_hw+0x15a1/0x3e10 [ 547.709530][ T30] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 547.715352][ T30] ? __asan_memset+0x23/0x50 [ 547.720073][ T30] ? __hrtimer_init+0x170/0x250 [ 547.724947][ T30] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 547.730775][ T30] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 547.736874][ T30] hwsim_new_radio_nl+0xece/0x2290 [ 547.742056][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 547.747864][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 547.753441][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 547.760103][ T30] genl_rcv_msg+0xb14/0xec0 [ 547.764630][ T30] ? mark_lock+0x9a/0x350 [ 547.769137][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.774185][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 547.779282][ T30] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 547.784844][ T30] ? __pfx___might_resched+0x10/0x10 [ 547.790227][ T30] netlink_rcv_skb+0x1e3/0x430 [ 547.795020][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 547.800125][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 547.805447][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 547.810958][ T30] genl_rcv+0x28/0x40 [ 547.814959][ T30] netlink_unicast+0x7f6/0x990 [ 547.820008][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 547.825310][ T30] ? __virt_addr_valid+0x183/0x530 [ 547.831855][ T30] ? __check_object_size+0x49c/0x900 [ 547.837575][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 547.842717][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 547.847817][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.853117][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.859360][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 547.864315][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 547.869863][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 547.875342][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 547.881005][ T30] __sock_sendmsg+0x221/0x270 [ 547.885707][ T30] __sys_sendto+0x3a4/0x4f0 [ 547.890490][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 547.895563][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 547.901824][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 547.908406][ T30] __x64_sys_sendto+0xde/0x100 [ 547.913189][ T30] do_syscall_64+0xf3/0x230 [ 547.919232][ T30] ? clear_bhb_loop+0x35/0x90 [ 547.923949][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.929917][ T30] RIP: 0033:0x7f72d317bd0c [ 547.934351][ T30] RSP: 002b:00007f72d343fe80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 547.942866][ T30] RAX: ffffffffffffffda RBX: 00007f72d3e44620 RCX: 00007f72d317bd0c [ 547.950881][ T30] RDX: 0000000000000024 RSI: 00007f72d3e44670 RDI: 0000000000000003 [ 547.959114][ T30] RBP: 0000000000000000 R08: 00007f72d343fed4 R09: 000000000000000c [ 547.967158][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 547.975137][ T30] R13: 0000000000000000 R14: 00007f72d3e44670 R15: 0000000000000000 [ 547.983163][ T30] [ 547.986205][ T30] INFO: task syz-executor:10429 blocked for more than 144 seconds. [ 547.994144][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 548.002424][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.011171][ T30] task:syz-executor state:D stack:21728 pid:10429 tgid:10429 ppid:1 flags:0x00000004 [ 548.021464][ T30] Call Trace: [ 548.024736][ T30] [ 548.027723][ T30] __schedule+0x1800/0x4a60 [ 548.032276][ T30] ? __pfx___schedule+0x10/0x10 [ 548.037202][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.042239][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.047766][ T30] ? schedule+0x90/0x320 [ 548.052031][ T30] schedule+0x14b/0x320 [ 548.056215][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.061718][ T30] __mutex_lock+0x6a4/0xd70 [ 548.066299][ T30] ? __mutex_lock+0x527/0xd70 [ 548.071031][ T30] ? genl_rcv_msg+0x121/0xec0 [ 548.075821][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.080968][ T30] ? __pfx_validate_chain+0x10/0x10 [ 548.086177][ T30] ? __pfx_validate_chain+0x10/0x10 [ 548.092914][ T30] ? radix_tree_lookup+0x238/0x290 [ 548.098175][ T30] genl_rcv_msg+0x121/0xec0 [ 548.102694][ T30] ? mark_lock+0x9a/0x350 [ 548.107012][ T30] ? __lock_acquire+0x137a/0x2040 [ 548.112115][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.117215][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 548.122269][ T30] ? __pfx___might_resched+0x10/0x10 [ 548.127635][ T30] netlink_rcv_skb+0x1e3/0x430 [ 548.134070][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.139161][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.144473][ T30] genl_rcv+0x28/0x40 [ 548.148528][ T30] netlink_unicast+0x7f6/0x990 [ 548.153338][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 548.159081][ T30] ? __virt_addr_valid+0x183/0x530 [ 548.164232][ T30] ? __check_object_size+0x49c/0x900 [ 548.169574][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 548.174697][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 548.179521][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.184812][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 548.189821][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 548.195126][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 548.200655][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.205960][ T30] __sock_sendmsg+0x221/0x270 [ 548.210882][ T30] __sys_sendto+0x3a4/0x4f0 [ 548.215411][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 548.220754][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.226766][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 548.233420][ T30] __x64_sys_sendto+0xde/0x100 [ 548.238989][ T30] do_syscall_64+0xf3/0x230 [ 548.243511][ T30] ? clear_bhb_loop+0x35/0x90 [ 548.248431][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.254344][ T30] RIP: 0033:0x7f322237bd0c [ 548.259023][ T30] RSP: 002b:00007f322263f5e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 548.267636][ T30] RAX: ffffffffffffffda RBX: 00007f3223044620 RCX: 00007f322237bd0c [ 548.275631][ T30] RDX: 0000000000000020 RSI: 00007f3223044670 RDI: 0000000000000005 [ 548.283679][ T30] RBP: 0000000000000000 R08: 00007f322263f634 R09: 000000000000000c [ 548.291736][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 548.299787][ T30] R13: 00007f322263f688 R14: 00007f3223044670 R15: 0000000000000000 [ 548.307826][ T30] [ 548.310882][ T30] INFO: task syz.4.1095:10498 blocked for more than 145 seconds. [ 548.319203][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 548.326837][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.335604][ T30] task:syz.4.1095 state:D stack:24464 pid:10498 tgid:10491 ppid:9984 flags:0x00004006 [ 548.345850][ T30] Call Trace: [ 548.349186][ T30] [ 548.352128][ T30] __schedule+0x1800/0x4a60 [ 548.356658][ T30] ? __pfx___schedule+0x10/0x10 [ 548.361582][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.366619][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.372139][ T30] ? schedule+0x90/0x320 [ 548.376390][ T30] schedule+0x14b/0x320 [ 548.380602][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.386081][ T30] __mutex_lock+0x6a4/0xd70 [ 548.390736][ T30] ? kobject_put+0x446/0x480 [ 548.395333][ T30] ? __mutex_lock+0x527/0xd70 [ 548.400062][ T30] ? rfkill_unregister+0xd0/0x230 [ 548.405114][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.410235][ T30] ? __pfx_device_del+0x10/0x10 [ 548.415097][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 548.421152][ T30] rfkill_unregister+0xd0/0x230 [ 548.426017][ T30] nfc_unregister_device+0x96/0x2a0 [ 548.431260][ T30] virtual_ncidev_close+0x59/0x90 [ 548.436338][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 548.442155][ T30] __fput+0x24a/0x8a0 [ 548.446158][ T30] task_work_run+0x24f/0x310 [ 548.450799][ T30] ? __pfx_task_work_run+0x10/0x10 [ 548.455937][ T30] ? switch_task_namespaces+0xe4/0x110 [ 548.461485][ T30] do_exit+0xa2f/0x27f0 [ 548.465673][ T30] ? __pfx_do_exit+0x10/0x10 [ 548.470326][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 548.475720][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.481839][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 548.488244][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 548.493392][ T30] do_group_exit+0x207/0x2c0 [ 548.498275][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 548.503491][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 548.508986][ T30] get_signal+0x16a1/0x1740 [ 548.513514][ T30] ? __pfx_get_signal+0x10/0x10 [ 548.518644][ T30] arch_do_signal_or_restart+0x96/0x860 [ 548.524208][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 548.530628][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 548.536761][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 548.542531][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 548.548192][ T30] do_syscall_64+0x100/0x230 [ 548.552801][ T30] ? clear_bhb_loop+0x35/0x90 [ 548.557539][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.563444][ T30] RIP: 0033:0x7fc496b79e79 [ 548.567924][ T30] RSP: 002b:00007fc4979a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 548.576351][ T30] RAX: fffffffffffffe00 RBX: 00007fc496d16138 RCX: 00007fc496b79e79 [ 548.584356][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc496d16138 [ 548.592410][ T30] RBP: 00007fc496d16130 R08: 0000000000000000 R09: 0000000000000000 [ 548.600513][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc496d1613c [ 548.608561][ T30] R13: 0000000000000000 R14: 00007fc496e3f950 R15: 00007fc496e3fa38 [ 548.616577][ T30] [ 548.619653][ T30] INFO: task syz.3.1097:10503 blocked for more than 145 seconds. [ 548.627694][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 548.635336][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.644065][ T30] task:syz.3.1097 state:D stack:25136 pid:10503 tgid:10501 ppid:9494 flags:0x00004006 [ 548.654297][ T30] Call Trace: [ 548.657668][ T30] [ 548.660609][ T30] __schedule+0x1800/0x4a60 [ 548.665117][ T30] ? __pfx___schedule+0x10/0x10 [ 548.670023][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.675065][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.680567][ T30] ? schedule+0x90/0x320 [ 548.684801][ T30] schedule+0x14b/0x320 [ 548.689147][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.694632][ T30] __mutex_lock+0x6a4/0xd70 [ 548.699186][ T30] ? __mutex_lock+0x527/0xd70 [ 548.703871][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 548.709225][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.714265][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 548.719518][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 548.725402][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 548.731787][ T30] nfc_rfkill_set_block+0x50/0x310 [ 548.736926][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 548.742784][ T30] rfkill_set_block+0x1f1/0x440 [ 548.748237][ T30] rfkill_fop_write+0x5bb/0x790 [ 548.753123][ T30] ? common_file_perm+0x1a6/0x210 [ 548.758345][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 548.763944][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 548.769536][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 548.774407][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 548.780073][ T30] vfs_write+0x2a2/0xc90 [ 548.784355][ T30] ? __pfx_vfs_write+0x10/0x10 [ 548.789210][ T30] ? __fget_files+0x29/0x470 [ 548.793814][ T30] ? __fget_files+0x3f6/0x470 [ 548.798570][ T30] ? __fget_files+0x29/0x470 [ 548.803196][ T30] ksys_write+0x1a0/0x2c0 [ 548.807585][ T30] ? __pfx_ksys_write+0x10/0x10 [ 548.812443][ T30] ? exc_page_fault+0x590/0x8c0 [ 548.817363][ T30] ? do_syscall_64+0xb6/0x230 [ 548.822056][ T30] do_syscall_64+0xf3/0x230 [ 548.826564][ T30] ? clear_bhb_loop+0x35/0x90 [ 548.831278][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.837219][ T30] RIP: 0033:0x7f308e979e79 [ 548.841650][ T30] RSP: 002b:00007f308f7ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 548.850153][ T30] RAX: ffffffffffffffda RBX: 00007f308eb16058 RCX: 00007f308e979e79 [ 548.858197][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000006 [ 548.866185][ T30] RBP: 00007f308e9e7916 R08: 0000000000000000 R09: 0000000000000000 [ 548.874207][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.882582][ T30] R13: 0000000000000001 R14: 00007f308eb16058 R15: 00007f308ec3fa38 [ 548.890825][ T30] [ 548.893871][ T30] INFO: task syz.2.1114:10553 blocked for more than 145 seconds. [ 548.901851][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 548.909739][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.918619][ T30] task:syz.2.1114 state:D stack:27392 pid:10553 tgid:10552 ppid:10141 flags:0x00000004 [ 548.929018][ T30] Call Trace: [ 548.932303][ T30] [ 548.935220][ T30] __schedule+0x1800/0x4a60 [ 548.940093][ T30] ? __pfx___schedule+0x10/0x10 [ 548.944962][ T30] ? __pfx_lock_release+0x10/0x10 [ 548.951157][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 548.956644][ T30] ? schedule+0x90/0x320 [ 548.961456][ T30] schedule+0x14b/0x320 [ 548.965658][ T30] schedule_preempt_disabled+0x13/0x30 [ 548.971412][ T30] __mutex_lock+0x6a4/0xd70 [ 548.975938][ T30] ? __mutex_lock+0x527/0xd70 [ 548.980916][ T30] ? genl_rcv_msg+0x121/0xec0 [ 548.985612][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 548.990886][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 548.996113][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 549.001759][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 549.007117][ T30] ? radix_tree_lookup+0x238/0x290 [ 549.012255][ T30] genl_rcv_msg+0x121/0xec0 [ 549.016775][ T30] ? mark_lock+0x9a/0x350 [ 549.021220][ T30] ? __lock_acquire+0x137a/0x2040 [ 549.026265][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.031385][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 549.036431][ T30] ? __pfx___might_resched+0x10/0x10 [ 549.041879][ T30] netlink_rcv_skb+0x1e3/0x430 [ 549.047075][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.052197][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.057578][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 549.063071][ T30] genl_rcv+0x28/0x40 [ 549.067117][ T30] netlink_unicast+0x7f6/0x990 [ 549.071896][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 549.077247][ T30] ? __virt_addr_valid+0x183/0x530 [ 549.082378][ T30] ? __check_object_size+0x49c/0x900 [ 549.087737][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 549.092857][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 549.097681][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.102983][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 549.107994][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.113291][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 549.118886][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.124194][ T30] __sock_sendmsg+0x221/0x270 [ 549.128975][ T30] __sys_sendto+0x3a4/0x4f0 [ 549.133492][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 549.138591][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 549.144598][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 549.150992][ T30] __x64_sys_sendto+0xde/0x100 [ 549.155774][ T30] do_syscall_64+0xf3/0x230 [ 549.160366][ T30] ? clear_bhb_loop+0x35/0x90 [ 549.165056][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.171004][ T30] RIP: 0033:0x7ff7d217bd0c [ 549.175434][ T30] RSP: 002b:00007ff7d2f38ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 549.183919][ T30] RAX: ffffffffffffffda RBX: 00007ff7d2f38fc0 RCX: 00007ff7d217bd0c [ 549.191953][ T30] RDX: 0000000000000020 RSI: 00007ff7d2f39010 RDI: 0000000000000005 [ 549.200367][ T30] RBP: 0000000000000000 R08: 00007ff7d2f38f14 R09: 000000000000000c [ 549.208406][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 549.216416][ T30] R13: 00007ff7d2f38f68 R14: 00007ff7d2f39010 R15: 0000000000000000 [ 549.224460][ T30] [ 549.227528][ T30] INFO: task syz-executor:10557 blocked for more than 145 seconds. [ 549.235416][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 549.243079][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.251861][ T30] task:syz-executor state:D stack:23680 pid:10557 tgid:10557 ppid:5212 flags:0x00004004 [ 549.262107][ T30] Call Trace: [ 549.265390][ T30] [ 549.268378][ T30] __schedule+0x1800/0x4a60 [ 549.272933][ T30] ? __pfx___schedule+0x10/0x10 [ 549.278539][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.284472][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 549.290438][ T30] ? schedule+0x90/0x320 [ 549.294718][ T30] schedule+0x14b/0x320 [ 549.299191][ T30] schedule_preempt_disabled+0x13/0x30 [ 549.304681][ T30] __mutex_lock+0x6a4/0xd70 [ 549.309265][ T30] ? __mutex_lock+0x527/0xd70 [ 549.314086][ T30] ? rfkill_register+0x34/0x8c0 [ 549.319176][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 549.324210][ T30] ? __init_waitqueue_head+0xae/0x150 [ 549.329668][ T30] ? device_initialize+0x266/0x460 [ 549.334793][ T30] rfkill_register+0x34/0x8c0 [ 549.339525][ T30] hci_register_dev+0x407/0x8b0 [ 549.344392][ T30] vhci_create_device+0x38b/0x6e0 [ 549.349491][ T30] vhci_write+0x3d1/0x490 [ 549.353830][ T30] vfs_write+0xa72/0xc90 [ 549.358146][ T30] ? __pfx_vhci_write+0x10/0x10 [ 549.363023][ T30] ? __pfx_vfs_write+0x10/0x10 [ 549.367878][ T30] ksys_write+0x1a0/0x2c0 [ 549.372235][ T30] ? __pfx_ksys_write+0x10/0x10 [ 549.377138][ T30] ? do_syscall_64+0x100/0x230 [ 549.381937][ T30] ? do_syscall_64+0xb6/0x230 [ 549.386600][ T30] do_syscall_64+0xf3/0x230 [ 549.391191][ T30] ? clear_bhb_loop+0x35/0x90 [ 549.395894][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.401856][ T30] RIP: 0033:0x7f570b978920 [ 549.406283][ T30] RSP: 002b:00007ffcbb8fcf08 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 549.414749][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f570b978920 [ 549.422755][ T30] RDX: 0000000000000002 RSI: 00007ffcbb8fcf1a RDI: 00000000000000ca [ 549.430788][ T30] RBP: 00007f570bb16a38 R08: 0000000000000000 R09: 0000000000000000 [ 549.438821][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 549.446804][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 549.454847][ T30] [ 549.457938][ T30] INFO: task syz-executor:10558 blocked for more than 146 seconds. [ 549.465829][ T30] Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 549.473510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.482203][ T30] task:syz-executor state:D stack:23680 pid:10558 tgid:10558 ppid:5212 flags:0x00000000 [ 549.492415][ T30] Call Trace: [ 549.495698][ T30] [ 549.498677][ T30] __schedule+0x1800/0x4a60 [ 549.503228][ T30] ? __pfx___schedule+0x10/0x10 [ 549.508168][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.513388][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 549.519012][ T30] ? schedule+0x90/0x320 [ 549.523272][ T30] schedule+0x14b/0x320 [ 549.527482][ T30] schedule_preempt_disabled+0x13/0x30 [ 549.532965][ T30] __mutex_lock+0x6a4/0xd70 [ 549.537728][ T30] ? __mutex_lock+0x527/0xd70 [ 549.542426][ T30] ? rfkill_register+0x34/0x8c0 [ 549.547565][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 549.552604][ T30] ? __init_waitqueue_head+0xae/0x150 [ 549.558232][ T30] ? device_initialize+0x266/0x460 [ 549.563369][ T30] rfkill_register+0x34/0x8c0 [ 549.568331][ T30] hci_register_dev+0x407/0x8b0 [ 549.573205][ T30] vhci_create_device+0x38b/0x6e0 [ 549.578487][ T30] vhci_write+0x3d1/0x490 [ 549.582845][ T30] vfs_write+0xa72/0xc90 [ 549.587164][ T30] ? __pfx_vhci_write+0x10/0x10 [ 549.592051][ T30] ? __pfx_vfs_write+0x10/0x10 [ 549.596816][ T30] ksys_write+0x1a0/0x2c0 [ 549.601228][ T30] ? __pfx_ksys_write+0x10/0x10 [ 549.606100][ T30] ? do_syscall_64+0x100/0x230 [ 549.610966][ T30] ? do_syscall_64+0xb6/0x230 [ 549.615664][ T30] do_syscall_64+0xf3/0x230 [ 549.620389][ T30] ? clear_bhb_loop+0x35/0x90 [ 549.625078][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.631237][ T30] RIP: 0033:0x7fc349578920 [ 549.635664][ T30] RSP: 002b:00007ffc8d529438 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 549.644404][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc349578920 [ 549.652470][ T30] RDX: 0000000000000002 RSI: 00007ffc8d52944a RDI: 00000000000000ca [ 549.660744][ T30] RBP: 00007fc349716a38 R08: 0000000000000000 R09: 0000000000000000 [ 549.668967][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 549.676948][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 549.685195][ T30] [ 549.688270][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 549.697362][ T30] [ 549.697362][ T30] Showing all locks held in the system: [ 549.705081][ T30] 1 lock held by khungtaskd/30: [ 549.710108][ T30] #0: ffffffff8e9382e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 549.720070][ T30] 2 locks held by kworker/u8:6/1073: [ 549.725384][ T30] 2 locks held by dhcpcd/4893: [ 549.730200][ T30] #0: ffffffff8fce81b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 549.738456][ T30] #1: ffffffff8fce8068 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 549.747516][ T30] 2 locks held by getty/4977: [ 549.752195][ T30] #0: ffff88802b2560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 549.762116][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 549.772314][ T30] 3 locks held by kworker/1:4/5279: [ 549.777570][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 549.788635][ T30] #1: ffffc900035f7d00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 549.802218][ T30] #2: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 549.813582][ T30] 1 lock held by syz-executor/9984: [ 549.818829][ T30] #0: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 549.829004][ T30] 3 locks held by syz-executor/10180: [ 549.834379][ T30] #0: ffffffff8fce81b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 549.842687][ T30] #1: ffffffff8fce8068 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 549.851731][ T30] #2: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 549.861926][ T30] 2 locks held by syz-executor/10429: [ 549.867493][ T30] #0: ffffffff8fce81b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 549.875725][ T30] #1: ffffffff8fce8068 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 549.886166][ T30] 2 locks held by syz.4.1095/10498: [ 549.891449][ T30] #0: ffff8880637a8100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 549.901527][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 549.911919][ T30] 2 locks held by syz.3.1097/10503: [ 549.917175][ T30] #0: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 549.927358][ T30] #1: ffff8880637a8100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 549.937117][ T30] 2 locks held by syz.2.1114/10553: [ 549.942316][ T30] #0: ffffffff8fce81b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 549.950569][ T30] #1: ffffffff8fce8068 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 549.959599][ T30] 2 locks held by syz-executor/10557: [ 549.964951][ T30] #0: ffff88807b1d5918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 549.975032][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 549.985003][ T30] 2 locks held by syz-executor/10558: [ 549.990434][ T30] #0: ffff88805be7f918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 550.001021][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 550.011055][ T30] 2 locks held by syz-executor/10559: [ 550.016438][ T30] #0: ffff88805999b918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 550.026593][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 550.036595][ T30] 2 locks held by syz-executor/10561: [ 550.042223][ T30] #0: ffff8880694d2118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 550.053577][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 550.063612][ T30] 2 locks held by syz-executor/10563: [ 550.069047][ T30] #0: ffff88806368a118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6e0 [ 550.079768][ T30] #1: ffffffff8ff59a88 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 550.089841][ T30] [ 550.092175][ T30] ============================================= [ 550.092175][ T30] [ 550.100670][ T30] NMI backtrace for cpu 1 [ 550.105005][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 550.115520][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.125565][ T30] Call Trace: [ 550.128848][ T30] [ 550.131786][ T30] dump_stack_lvl+0x241/0x360 [ 550.136471][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.141654][ T30] ? __pfx__printk+0x10/0x10 [ 550.146228][ T30] ? vprintk_emit+0x631/0x770 [ 550.150896][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 550.155916][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 550.160854][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 550.166303][ T30] ? _printk+0xd5/0x120 [ 550.170454][ T30] ? __pfx__printk+0x10/0x10 [ 550.175037][ T30] ? __wake_up_klogd+0xcc/0x110 [ 550.179885][ T30] ? __pfx__printk+0x10/0x10 [ 550.184469][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 550.189484][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 550.195457][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 550.201433][ T30] watchdog+0xff4/0x1040 [ 550.205676][ T30] ? watchdog+0x1ea/0x1040 [ 550.210095][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.214850][ T30] kthread+0x2f0/0x390 [ 550.218916][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.223585][ T30] ? __pfx_kthread+0x10/0x10 [ 550.228174][ T30] ret_from_fork+0x4b/0x80 [ 550.232587][ T30] ? __pfx_kthread+0x10/0x10 [ 550.237175][ T30] ret_from_fork_asm+0x1a/0x30 [ 550.241953][ T30] [ 550.245305][ T30] Sending NMI from CPU 1 to CPUs 0: [ 550.250578][ C0] NMI backtrace for cpu 0 [ 550.250592][ C0] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 550.250611][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.250621][ C0] Workqueue: bat_events batadv_nc_worker [ 550.250644][ C0] RIP: 0010:kasan_check_range+0x8f/0x290 [ 550.250669][ C0] Code: 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 0f 85 c9 01 00 00 49 ff c3 <48> ff c5 75 ee e9 1e 01 00 00 45 89 dc 41 83 e4 07 0f 84 b5 00 00 [ 550.250681][ C0] RSP: 0018:ffffc90000ab79f0 EFLAGS: 00000282 [ 550.250694][ C0] RAX: 0000000000000001 RBX: 1ffffffff202fab5 RCX: ffffffff816ff570 [ 550.250707][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9017d5a8 [ 550.250718][ C0] RBP: ffffffffffffffff R08: ffffffff9017d5af R09: 1ffffffff202fab5 [ 550.250729][ C0] R10: dffffc0000000000 R11: fffffbfff202fab6 R12: 1ffff92000156f50 [ 550.250741][ C0] R13: ffffffff8b80f53b R14: dffffc0000000001 R15: fffffbfff202fab6 [ 550.250753][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 550.250767][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 550.250778][ C0] CR2: 00007f637149cb57 CR3: 000000000e734000 CR4: 00000000003506f0 [ 550.250793][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 550.250803][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 550.250813][ C0] Call Trace: [ 550.250820][ C0] [ 550.250827][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 550.250845][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 550.250865][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 550.250882][ C0] ? nmi_handle+0x2a/0x5a0 [ 550.250905][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 550.250922][ C0] ? nmi_handle+0x14f/0x5a0 [ 550.250936][ C0] ? nmi_handle+0x2a/0x5a0 [ 550.250952][ C0] ? kasan_check_range+0x8f/0x290 [ 550.250971][ C0] ? default_do_nmi+0x63/0x160 [ 550.250989][ C0] ? exc_nmi+0x123/0x1f0 [ 550.251005][ C0] ? end_repeat_nmi+0xf/0x53 [ 550.251023][ C0] ? batadv_nc_worker+0xcb/0x610 [ 550.251043][ C0] ? lock_release+0xb0/0xa30 [ 550.251061][ C0] ? kasan_check_range+0x8f/0x290 [ 550.251081][ C0] ? kasan_check_range+0x8f/0x290 [ 550.251102][ C0] ? kasan_check_range+0x8f/0x290 [ 550.251121][ C0] [ 550.251127][ C0] [ 550.251134][ C0] lock_release+0xb0/0xa30 [ 550.251152][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 550.251172][ C0] ? batadv_nc_worker+0xcb/0x610 [ 550.251190][ C0] ? __pfx_lock_release+0x10/0x10 [ 550.251210][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 550.251231][ C0] ? batadv_nc_worker+0xcb/0x610 [ 550.251249][ C0] batadv_nc_worker+0x28b/0x610 [ 550.251268][ C0] ? batadv_nc_worker+0xcb/0x610 [ 550.251287][ C0] ? process_scheduled_works+0x945/0x1830 [ 550.251306][ C0] process_scheduled_works+0xa2c/0x1830 [ 550.251337][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.251360][ C0] ? assign_work+0x364/0x3d0 [ 550.251380][ C0] worker_thread+0x86d/0xd40 [ 550.251404][ C0] ? __kthread_parkme+0x169/0x1d0 [ 550.251424][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.251443][ C0] kthread+0x2f0/0x390 [ 550.251461][ C0] ? __pfx_worker_thread+0x10/0x10 [ 550.251479][ C0] ? __pfx_kthread+0x10/0x10 [ 550.251498][ C0] ret_from_fork+0x4b/0x80 [ 550.251516][ C0] ? __pfx_kthread+0x10/0x10 [ 550.251535][ C0] ret_from_fork_asm+0x1a/0x30 [ 550.251562][ C0] [ 550.265776][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 550.265793][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0 [ 550.265815][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 550.265826][ T30] Call Trace: [ 550.265834][ T30] [ 550.265842][ T30] dump_stack_lvl+0x241/0x360 [ 550.265868][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 550.265886][ T30] ? __pfx__printk+0x10/0x10 [ 550.265907][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 550.265937][ T30] ? vscnprintf+0x5d/0x90 [ 550.265958][ T30] panic+0x349/0x860 [ 550.265982][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 550.266003][ T30] ? __pfx_panic+0x10/0x10 [ 550.266024][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 550.266044][ T30] ? __irq_work_queue_local+0x137/0x410 [ 550.266067][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 550.266086][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 550.266105][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 550.266128][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 550.266150][ T30] watchdog+0x1033/0x1040 [ 550.266174][ T30] ? watchdog+0x1ea/0x1040 [ 550.266201][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.266222][ T30] kthread+0x2f0/0x390 [ 550.266245][ T30] ? __pfx_watchdog+0x10/0x10 [ 550.266266][ T30] ? __pfx_kthread+0x10/0x10 [ 550.266289][ T30] ret_from_fork+0x4b/0x80 [ 550.266311][ T30] ? __pfx_kthread+0x10/0x10 [ 550.266333][ T30] ret_from_fork_asm+0x1a/0x30 [ 550.266367][ T30] [ 550.272325][ T30] Kernel Offset: disabled [ 550.748502][ T30] Rebooting in 86400 seconds..