last executing test programs: 32.013229133s ago: executing program 1 (id=6535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x5, 0x1, 0x1, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, 0x0, &(0x7f00000006c0)) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r6, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'bridge_slave_0\x00'}, {0x20, 'rose0\x00'}], 0xa, "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"}, 0x1022) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='rose0\x00', 0x10) open_tree(0xffffffffffffffff, 0x0, 0x3f06c29079e5912) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}}, 0x0) 31.406459212s ago: executing program 1 (id=6536): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x44}}, 0x0) 30.994810788s ago: executing program 1 (id=6537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000008000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000002f00000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff0000000000008bdbd70d1c0496799ec47505726541060000000000000000000000000000000000000000000000000000000000000000000000ffef000000000000000000000000000000000000000000000000000200000000000000000000000000000002000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb00000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000a37155e4844ccee500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000000000000000000000000000000000000000000000000000726564697265637400"/2376]}, 0x9c0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/126, 0x7e, 0x40002000, 0x0, 0x0) 30.856529221s ago: executing program 1 (id=6538): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a02010000000000000000007b080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000008500000008000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 30.687278289s ago: executing program 1 (id=6539): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r0, @ANYBLOB="0003010000000000b7020000140000007b030000000000008500000005000000bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 30.457144158s ago: executing program 1 (id=6540): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000100)) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x14, {0x8, 0xffffffff}, 0xd0, 0x9}}) r2 = socket(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xffffffffffffff65, &(0x7f0000000300), 0x1}, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c0586300060008000300"], 0x40}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) getdents(r4, &(0x7f0000000180)=""/187, 0xbb) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) 18.901187118s ago: executing program 2 (id=6554): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 17.289892578s ago: executing program 2 (id=6559): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r'], 0x44}}, 0x0) 16.645915897s ago: executing program 2 (id=6562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r0, 0x1000) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x8, 0x0, 0x9, 0x8f0, 0x800}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x101}, 0x0, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0200007d00000005df000000000000000000000000000000000000000000000000040000000000000000000000000000001f00046e6f6465767b6576626f6825ffffff8102000000000000ff03ff9200000034007002007dfa673effeb09b5351f5bde05"], 0x21d) 15.629448532s ago: executing program 2 (id=6565): r0 = syz_open_dev$loop(&(0x7f0000000200), 0x7fffffffffffffff, 0x44000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x340, 0x210, 0x140, 0xfeffffff, 0x210, 0xa8, 0x2a8, 0x2a8, 0xffffffff, 0x2a8, 0x2a8, 0x5, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @private, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 15.422785639s ago: executing program 2 (id=6566): setrlimit(0x1, &(0x7f0000000000)) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e400ff00403a00fe880000000000000000000200000001fe80d90000feffffff00000000000000aa02009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624cfa14ff3aaab57fff"], 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100c}) close(0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x80, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f050e000302120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f0000001940)=""/4086, 0xff6) 15.067212566s ago: executing program 2 (id=6568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000080), 0xc) read(r5, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x891a, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r6, 0x0, 0x0) preadv(r4, &(0x7f0000000180), 0x0, 0x2, 0x8) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000940)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000000101010300000000000000000a0000080c00198008000100e1060000040001803f2a7783d9962eb57480ab7234b861fed6c2454add594c76d51a404aae1357294b18d361afe1d624048e1da003d42107ab8555aecf918bca867a966fb8b430f8036e3284d38865fb5a1cf9e158d39e1e3f872f16092b833941acde7ae5daa3c64706a7d20c101813ce12064f84bc9f68d515f1a014499eb55c4ffd92a561bbd7f11aa08ecd55155b92caae1e8071ff88d424f9fa299107df5f380000000000000000e44d30e5f04dc79634aa96beb7e74f7623f3"], 0x24}}, 0x4000000) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r7], 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x40) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r8, @ANYRES16=0x0], 0x48}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400d4001307010000000000fbdbdf2500000000f85b446cc93c1b28fb4da42131d555e8728f9cc5add0e839fe51f275c596a1284afc6f9f1c931206093110c72f1cd717173e8786b1c8ce9db2e968579dc454", @ANYRESDEC=r0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x4048954}, 0x8005) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r11 = dup(r10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r11, 0x0) 10.489266432s ago: executing program 0 (id=6584): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003090e00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB='v:'], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.908929084s ago: executing program 0 (id=6587): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000f80000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9.717212827s ago: executing program 0 (id=6589): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x12060000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000000007b110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000ac00000000000000b7020000000000007b9a00fe00000000d6090800000000007b9af0ff00000000bf8600000000000057080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$pppl2tp(r0, 0x0, 0x0) 6.599434135s ago: executing program 0 (id=6591): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket$nl_route(0x10, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000100)=[{0x0, 0x401e}, {}], 0x2) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f0000000000)=""/190) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x120002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x40) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x1, 0x1000}, {0x3, 0xa68c, 0x1000}, {0x3, 0x3}, {0x0, 0x0, 0x1000}, {0x4, 0x200, 0x1000}, {0x3, 0x3340}], 0x6, &(0x7f0000000140)={0x0, 0x989680}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r3, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200) socket$inet6(0xa, 0xa, 0x6) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0xc800) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)="4be45f5d87bfff9d1b686e6dfdedc3a2b3b0c62b9b4a8cd268192d77ab68cd65c7845e30bdcf00e61d44a46b4d1a690aa57fe84ce09c4448321e113c12feed86eda6c0a126bcf8545b52ed188989cd1ca53ca2740fd3177e593bdf41b851a941a09dfbfc0e5913a2f80492d7585f9095de827d629ce62ffc48f2596d6f14ca9de6404ef44555f7dab159fc2df202c09eb466fd1dca794bd321bbd421b3a5f0bcd78f489a4a7ae0e289f7f3", 0xab}, {&(0x7f0000000440)="29208e9c2a8c0571879ca86f0497c85fcf342f37c553435893b5e52a1b7fbba2325b357ce4abb22f814074693dcfed03de2a4ff6310ad6c5cc30efd2a5", 0x3d}, {&(0x7f0000000240)="00095cbccddb61173d4de95bea2b39f8dea25f15b0d7d1", 0x17}, {&(0x7f00000004c0)="12558c9e0264e499f534858ca2212a287d8626bb5591bdf93a3040f54fe4f2a0f95d2668b25d53986489133c1ae7dd2ad7953a4371adb93962a8d6c4358d2e707335ad0fb60b42b1696b8fdd6ae9976504467a25d87678d9238b7c867b5b59e2ec4236d5e2b27554ba1ff2371b4ff7e2a0248adabb76598e30487f0345689ca16c90d5359705ba538098e5c91cb0eb65c566c04941bb7536dc57ee4df950ad63cd76369b1ca8f940994e38d63c839128f8e751dc", 0xb4}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000740)="80ff9c75f83511055f9771d3015c0801699808117a31a523d9adb948b0f00f53de9257d9a539eb3bc0fa1f39aeb2d1ff1eefe61d85fd663e4365c10ea36f904bab331ba9d6ed260199e935123707ee1757c15765d6b6c059bfacafa9ae4f905f1b3d11670f4fc156b115f8e5c9580bdfe99e7803105f7f115e44f7e619edb2005a6c55f53ba14a6cb0401e65bc3a689051f0e9fb471567b47a1a8f0bf1fe25f7b8398dd076df0c4a4310669919e1f5d09f20", 0xb2}], 0x6}, 0x8000) mount$fuseblk(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRESDEC=0x0]) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.530682306s ago: executing program 0 (id=6594): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 4.1822502s ago: executing program 0 (id=6597): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB='v:'], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.44326622s ago: executing program 3 (id=6599): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0x40485404, &(0x7f0000000980)={{0x3, 0x0, 0x1, 0x3}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) r4 = dup(r1) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000080)="000000000000004088fae7df591fe6f51d37ce5f9084ff6943b8000000f80000a101b28a9c680028e200000100864104bfeacd1f63dd65dd530700a2e99f1f9c856d24196a983326f58afa9fa492bf8cec4529e4", 0x54, r5) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f000086fff4)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x2, r8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.307616423s ago: executing program 4 (id=6601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_robust_list(0x0, 0x0) syz_usb_connect(0x0, 0x1e3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000484d8e40da0b290145d4010203010902d10101000000000904a2000b7730550009050b150000029908090509004000004105090507034000200506072501010301000725018106560909050f15000207080807250100ca030009050313000006180c07250182400100072501417a990909050a001000081c0007250181070200090501"], 0x0) 2.354854329s ago: executing program 3 (id=6602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="86d80292547b1615"], 0x24}}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000001fc0)={0x8, {"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", 0x1000}}, 0x1006) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) getdents(r5, &(0x7f0000000fc0)=""/4096, 0x1000) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x6c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfc}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x4, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4, 0x5}]}, 0x68}}, 0x0) 2.207498282s ago: executing program 4 (id=6603): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f00000000c0)=""/126, 0x7e, 0x40002000, 0x0, 0x0) 1.940729219s ago: executing program 4 (id=6604): write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x3, 0x8864}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @arp=@generic={0x5, 0x201, 0x6, 0x0, 0x9, @random="a717748cdb9a", "", @broadcast}}, 0x22) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000f940000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.689209805s ago: executing program 4 (id=6605): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) 1.370123111s ago: executing program 3 (id=6606): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003001400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYBLOB='v:'], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.081960857s ago: executing program 4 (id=6607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30002200003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000000021"], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bd25, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x22a42, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) read(r3, &(0x7f0000000100)=""/85, 0x55) 645.332158ms ago: executing program 3 (id=6608): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 546.965238ms ago: executing program 3 (id=6609): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r1 = creat(0x0, 0x0) write$cgroup_pressure(r1, &(0x7f00000001c0)={'some'}, 0x4cdad095) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000402800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 417.304294ms ago: executing program 4 (id=6610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x0, 'W'}, @main=@item_012={0x2, 0x0, 0x0, "c11d"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x40, 0x5, 0xe4, {0xe4, 0xf, "fa28e27eb29d561128599287fb8911aff59bdae154cb5c87a2fccdb1869946ed62e5289cab90533ee43ee206a626bce3549fffe3c4d8a38f40156f4eb4db324422720fd1e4f2b2aaef7200928d9b476ea533213d916f21bed5583dde117a2d33821566822d4125e26a43416072c6afeb50c902548c113f80be48939f55ea65686def393e18d9ddb8db93509095807448ea35e2fd6b3ce3985ce68f8cfc7fd2c9bd4b4acb2b74e2117c1c3582c0af1e6c70d927bc32e1bb93665810a1096d11ad56cb713073cf412ac26a98d33e49a7300475b5dfc786257715fd4d6f0b8a24a2b9b8"}}, &(0x7f0000000000)={0x0, 0x3, 0x68, @string={0x68, 0x3, "1ba2b3e3eb8f5ab95a42816175e7daffcd90785a3765412efd5d3951b510f94f967afe4e846e1b8b4087e07e3eff7a1d8de4a017c379a8e0cb3b5bad075ae36c2ad28e226c2368eec2fc0e0f614a65ad93c8bc082ebce2c31cc12890d4da6ecf03d52dfb374f"}}, &(0x7f00000000c0)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0x1, 0x88, 0x1, 0xf4}, @ss_container_id={0x14, 0x10, 0x4, 0x1b, "e53d953a3603701a324a5fd0a7e3f23c"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x7, 0x2, "c27a845b", 'Vs#)'}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0xe, 0x5, 0x0, 0x5}}}, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x40, 0x13, 0xf2, "ddab05df8c450e800941506d2de43177f65a0b324596767e125c4720f83b5dd9745832d908bc961041702d15c62882acccc4a1000a4174a20686c95fe7d679870457e36f88c661f1600ee12d61b0604165f94ed15420cb99111f73a2855d10d89367af036e0fefcabd970a1d727891649936c9943488d32c7baaa8022a2cc24c5fde10d5706268f4ef755906ed6e3f8975a0ee7ad8e7bf83b6f839fc6c0b88d751531e9662f6f413b320b766d5ec2f45c8016edec644858981fe3a03eb05654b60dfc8166c1d49e87a1984edf3072b38de8ad4793ea71bb8626d37b212d8888aac2d23913c16d3ec1509a131efca7520d9be"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0xa0, 0x4}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0xb, 0x2, 'B!'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @local}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a739"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x6}}) 0s ago: executing program 3 (id=6611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000084010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) kernel console output (not intermixed with test programs): ommended to keep mac addresses unique to avoid problems! [ 1614.346473][T31090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.364867][T31090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.376214][T31090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.387935][T31090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.399483][T31090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.411920][T31090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.422142][T31090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1614.433987][T31090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1614.448495][T31090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.555748][T31238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.659774][T31090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.693642][T31090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.702426][T31090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.728328][T31090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.819881][T31238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.948135][T31209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1615.003705][T19797] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1615.111418][T27158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.134624][T27158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.198755][T19797] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1615.208364][T19797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.217728][T19797] usb 5-1: Product: syz [ 1615.222145][T19797] usb 5-1: Manufacturer: syz [ 1615.253622][T19797] usb 5-1: SerialNumber: syz [ 1615.259794][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.271754][T19797] usb 5-1: config 0 descriptor?? [ 1615.294421][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.302821][T31209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.369598][T31238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1615.404617][T31238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1615.434655][T31238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1615.468473][T31238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1615.626633][T31209] veth0_vlan: entered promiscuous mode [ 1615.686825][T31209] veth1_vlan: entered promiscuous mode [ 1615.700497][T19797] usb 5-1: Firmware version (0.0) predates our first public release. [ 1615.712443][T19797] usb 5-1: Please update to version 0.2 or newer [ 1615.866274][T19797] usb 5-1: USB disconnect, device number 10 [ 1616.070111][T31209] veth0_macvtap: entered promiscuous mode [ 1616.133687][T31238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.148310][T31209] veth1_macvtap: entered promiscuous mode [ 1616.190607][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.201418][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.213777][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.231210][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.254392][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.265124][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.275407][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.286648][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.307517][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.353828][ T6035] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1616.361753][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.375587][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.402854][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.425474][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.439836][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.450700][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.473069][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.493205][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.510846][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.523635][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.543736][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.561313][ T6035] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.576155][ T6035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1616.581756][T31209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.591966][ T6035] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1616.606429][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.628004][ T6035] usb 1-1: Product: syz [ 1616.632241][ T6035] usb 1-1: Manufacturer: syz [ 1616.637764][ T6035] usb 1-1: SerialNumber: syz [ 1616.660338][ T6035] usb 1-1: selecting invalid altsetting 1 [ 1616.666090][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.738535][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.749246][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.763722][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.779282][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.790288][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.804052][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.815637][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.826034][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.844266][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.865551][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.876801][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.891236][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.903606][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.915482][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.927390][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.938142][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.949100][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.960965][T31209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1616.974860][T31209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.987018][T31209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.999630][T31209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.009161][T31209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.018642][T31209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.028830][T31209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.157262][T31238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.234371][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.242050][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.284630][ T6035] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 1617.310571][ T6035] usb 1-1: selecting invalid altsetting 1 [ 1617.323051][ T6035] cdc_ncm 1-1:1.0: bind() failure [ 1617.338514][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.345721][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.369366][ T6035] usb 1-1: USB disconnect, device number 110 [ 1617.548967][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.599425][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.691743][T31238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1617.713036][T31238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.819344][ T29] audit: type=1326 audit(1727060666.900:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.844377][ T29] audit: type=1326 audit(1727060666.900:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.867772][ T29] audit: type=1326 audit(1727060666.900:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.894408][ T29] audit: type=1326 audit(1727060666.900:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.917948][ T29] audit: type=1326 audit(1727060666.900:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.943840][ T29] audit: type=1326 audit(1727060666.900:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1617.972230][ T29] audit: type=1326 audit(1727060666.900:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31405 comm="syz.4.6439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf0b97def9 code=0x7ffc0000 [ 1618.024407][T27160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1618.032311][T27160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1618.055648][T31411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1618.097925][T31411] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1618.106794][T31411] gretap1: entered promiscuous mode [ 1618.112140][T31411] gretap1: entered allmulticast mode [ 1618.629539][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.095435][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.143203][ T5279] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1619.146646][T31427] FAULT_INJECTION: forcing a failure. [ 1619.146646][T31427] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.183288][T31427] CPU: 1 UID: 0 PID: 31427 Comm: syz.0.6447 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1619.193786][T31427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1619.203972][T31427] Call Trace: [ 1619.207301][T31427] [ 1619.210364][T31427] dump_stack_lvl+0x241/0x360 [ 1619.215110][T31427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1619.220390][T31427] ? __pfx__printk+0x10/0x10 [ 1619.225238][T31427] ? fs_reclaim_acquire+0x93/0x140 [ 1619.230424][T31427] ? __pfx___might_resched+0x10/0x10 [ 1619.235787][T31427] should_fail_ex+0x3b0/0x4e0 [ 1619.240529][T31427] ? tomoyo_encode+0x26f/0x540 [ 1619.245439][T31427] should_failslab+0xac/0x100 [ 1619.250154][T31427] ? tomoyo_encode+0x26f/0x540 [ 1619.254969][T31427] __kmalloc_noprof+0xd8/0x400 [ 1619.259861][T31427] tomoyo_encode+0x26f/0x540 [ 1619.264588][T31427] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1619.270386][T31427] tomoyo_path_number_perm+0x23a/0x880 [ 1619.275983][T31427] ? tomoyo_path_number_perm+0x208/0x880 [ 1619.281677][T31427] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1619.287826][T31427] ? __fget_files+0x29/0x470 [ 1619.292702][T31427] ? __fget_files+0x3f3/0x470 [ 1619.297425][T31427] security_file_ioctl+0xc6/0x2a0 [ 1619.302470][T31427] __se_sys_ioctl+0x47/0x170 [ 1619.307173][T31427] do_syscall_64+0xf3/0x230 [ 1619.311700][T31427] ? clear_bhb_loop+0x35/0x90 [ 1619.316398][T31427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.322403][T31427] RIP: 0033:0x7f9ea0d7def9 [ 1619.326883][T31427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.347274][T31427] RSP: 002b:00007f9ea07ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.356008][T31427] RAX: ffffffffffffffda RBX: 00007f9ea0f35f80 RCX: 00007f9ea0d7def9 [ 1619.364041][T31427] RDX: 0000000020000080 RSI: 00000000810c5701 RDI: 0000000000000003 [ 1619.372029][T31427] RBP: 00007f9ea07ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1619.380014][T31427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1619.388011][T31427] R13: 0000000000000000 R14: 00007f9ea0f35f80 R15: 00007f9ea105fa28 [ 1619.396937][T31427] [ 1619.411521][T31427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1619.448527][T31238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.500479][ T5279] usb 3-1: config 0 has no interfaces? [ 1619.506295][ T5279] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1619.518039][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.534669][T19797] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1619.560925][ T5279] usb 3-1: config 0 descriptor?? [ 1619.578861][T19056] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1619.624487][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.631079][T19056] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1619.652532][T19056] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1619.681702][T19056] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1619.710554][T19056] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1619.735381][T19056] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1619.763142][T19797] usb 5-1: Using ep0 maxpacket: 8 [ 1619.770029][T19797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1619.783808][T19797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1619.821224][T31420] program syz.2.6406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1619.847689][T19797] usb 5-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 1619.858685][T19797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.884090][T19797] usb 5-1: Product: syz [ 1619.888479][T19797] usb 5-1: Manufacturer: syz [ 1619.903796][T19797] usb 5-1: SerialNumber: syz [ 1619.939759][T19797] usb 5-1: config 0 descriptor?? [ 1619.991589][T31437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1620.015314][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.082874][T31238] veth0_vlan: entered promiscuous mode [ 1620.202617][T19797] usb 5-1: USB disconnect, device number 11 [ 1620.268377][T31247] udevd[31247]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1620.496883][T31238] veth1_vlan: entered promiscuous mode [ 1620.522232][T31443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1620.563235][T31443] vlan2: entered promiscuous mode [ 1620.841792][ T52] bridge_slave_1: left allmulticast mode [ 1620.883704][ T52] bridge_slave_1: left promiscuous mode [ 1620.896645][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.931742][ T52] bridge_slave_0: left allmulticast mode [ 1620.967800][ T52] bridge_slave_0: left promiscuous mode [ 1620.984119][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1621.691602][ T6035] usb 3-1: USB disconnect, device number 93 [ 1621.823920][T25583] Bluetooth: hci8: command tx timeout [ 1622.251815][T31462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6458'. [ 1622.465313][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1622.488437][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1622.535949][ T52] bond0 (unregistering): Released all slaves [ 1622.644139][T31448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1622.674054][T31448] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1622.693769][T31448] gretap1: entered promiscuous mode [ 1622.732117][T31448] gretap1: entered allmulticast mode [ 1622.748704][T31464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6459'. [ 1623.095198][T31472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1623.170731][T31472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6463'. [ 1623.353179][ T5279] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1623.389301][T31238] veth0_macvtap: entered promiscuous mode [ 1623.565679][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 1623.636390][ T5279] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1623.684961][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1623.704586][ T5279] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1623.720539][ T5279] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1623.737417][ T5279] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1623.748009][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.789774][T31238] veth1_macvtap: entered promiscuous mode [ 1623.884611][T25583] Bluetooth: hci8: command tx timeout [ 1624.045176][ T5279] usb 1-1: GET_CAPABILITIES returned 0 [ 1624.057722][ T5279] usbtmc 1-1:16.0: can't read capabilities [ 1624.081541][ T52] hsr_slave_0: left promiscuous mode [ 1624.143879][ T52] hsr_slave_1: left promiscuous mode [ 1624.223790][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.231490][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.247810][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.286394][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.441973][ T52] veth0_macvtap: left promiscuous mode [ 1624.468965][ T52] veth1_vlan: left promiscuous mode [ 1624.501507][ T52] veth0_vlan: left promiscuous mode [ 1625.967485][T25583] Bluetooth: hci8: command tx timeout [ 1626.668568][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1626.839130][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1628.063288][T25583] Bluetooth: hci8: command tx timeout [ 1628.258872][T31485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 1628.273163][T31485] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6467'. [ 1628.291640][T31485] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6467'. [ 1628.466813][ T5276] usb 1-1: USB disconnect, device number 111 [ 1628.524178][T31509] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 1628.606001][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.619279][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.629719][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.642652][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.653219][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.663737][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.673973][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.685188][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.710974][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.727366][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.738022][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.755984][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.772681][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.783700][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.793868][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.806227][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.820952][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.822689][T31522] loop4: detected capacity change from 0 to 7 [ 1628.831717][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.851591][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1628.862283][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.878274][T31238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1628.891775][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.913217][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.933727][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.935199][T31522] buffer_io_error: 4 callbacks suppressed [ 1628.935219][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1628.954626][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1628.969672][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1628.986779][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1628.998406][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.012447][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.023687][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.034325][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.045382][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.063781][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.072060][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.101175][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.122322][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.130558][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.145370][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.156694][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.165061][T31522] ldm_validate_partition_table(): Disk read failed. [ 1629.171765][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.176775][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.191924][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.201420][T31522] Buffer I/O error on dev loop4, logical block 0, async page read [ 1629.213568][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.228926][T31522] Dev loop4: unable to read RDB block 0 [ 1629.263460][T31522] loop4: unable to read partition table [ 1629.269528][T31522] loop4: partition table beyond EOD, truncated [ 1629.276211][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.295982][T31522] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 1629.295982][T31522] ) failed (rc=-5) [ 1629.309727][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.322300][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.333307][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.343679][T31238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1629.356061][T31238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1629.367931][T31238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.438121][T31435] chnl_net:caif_netlink_parms(): no params data found [ 1629.479999][T31238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.533720][T31238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.581546][T31238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.601173][T31238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.093177][T19797] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1630.248692][T31435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.263128][ T8] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1630.284865][T19797] usb 5-1: Using ep0 maxpacket: 32 [ 1630.301310][T31435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.351811][T19797] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1630.375001][T19797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1630.394403][T31435] bridge_slave_0: entered allmulticast mode [ 1630.395468][T19797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1630.411897][T19797] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1630.423345][T19797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.441101][T19797] usb 5-1: config 0 descriptor?? [ 1630.446848][T19056] Bluetooth: hci5: command 0x0406 tx timeout [ 1630.463829][T31540] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1630.464784][T31435] bridge_slave_0: entered promiscuous mode [ 1630.478154][T19797] hub 5-1:0.0: USB hub found [ 1630.508786][ T8] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 1630.517222][ T8] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1630.529199][ T8] usb 1-1: config 0 has no interface number 0 [ 1630.539116][ T8] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1630.564324][ T8] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1630.593182][ T8] usb 1-1: config 0 interface 255 has no altsetting 0 [ 1630.600324][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1630.610841][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.626072][ T8] usb 1-1: config 0 descriptor?? [ 1630.708951][T31435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.725618][T19797] hub 5-1:0.0: 2 ports detected [ 1630.767831][T31435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.848531][T31435] bridge_slave_1: entered allmulticast mode [ 1630.874561][T31435] bridge_slave_1: entered promiscuous mode [ 1631.143167][T10194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1631.156769][T10194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1631.228778][T31435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1631.576741][T31435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1631.628857][ T8] usb 1-1: string descriptor 0 read error: -71 [ 1631.647685][ T8] usb 1-1: USB disconnect, device number 112 [ 1632.057634][T31435] team0: Port device team_slave_0 added [ 1632.117544][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.159392][T31435] team0: Port device team_slave_1 added [ 1632.159552][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.253928][T31435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.314308][T31435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.486670][T31435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.559902][T31435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.601644][T31435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1632.692118][T31435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.912730][ T5279] usb 5-1: reset high-speed USB device number 12 using dummy_hcd [ 1633.055313][T31435] hsr_slave_0: entered promiscuous mode [ 1633.066701][T31579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1633.123103][ T5279] usb 5-1: device descriptor read/64, error -32 [ 1633.148054][T31435] hsr_slave_1: entered promiscuous mode [ 1633.209198][T31435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1633.257162][T31435] Cannot create hsr debugfs directory [ 1633.595032][ T29] audit: type=1800 audit(1727060682.680:1698): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6482" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1634.079724][ T5279] hub 5-1:0.0: set hub depth failed [ 1634.105083][ T5276] usb 5-1: USB disconnect, device number 12 [ 1634.362280][T10194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.443538][T19056] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1634.462714][T19056] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1634.473800][T19056] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1634.493260][T19056] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1634.507816][T19056] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1634.520158][T19056] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1634.825144][T10194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.047445][T31624] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1635.207071][T10194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.282825][T31631] program syz.4.6492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1635.361092][ T29] audit: type=1400 audit(1727060684.440:1699): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1635.649100][ T5279] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1635.737804][T10194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.773364][ T6035] usb 4-1: device descriptor read/64, error -71 [ 1635.828224][ T5279] usb 5-1: device descriptor read/64, error -71 [ 1636.013280][ T6035] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1636.086255][ T5279] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1636.175331][ T6035] usb 4-1: device descriptor read/64, error -71 [ 1636.223150][ T5279] usb 5-1: device descriptor read/64, error -71 [ 1636.301168][ T6035] usb usb4-port1: attempt power cycle [ 1636.339108][ T5279] usb usb5-port1: attempt power cycle [ 1636.626186][T25583] Bluetooth: hci0: command tx timeout [ 1636.693129][ T6035] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1636.703062][ T5279] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1636.713740][ T6035] usb 4-1: device descriptor read/8, error -71 [ 1636.765991][ T5279] usb 5-1: device descriptor read/8, error -71 [ 1636.869502][T31612] chnl_net:caif_netlink_parms(): no params data found [ 1636.880444][T10194] bridge_slave_1: left allmulticast mode [ 1636.886412][T10194] bridge_slave_1: left promiscuous mode [ 1636.899297][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1636.963740][ T6035] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1636.982249][T10194] bridge_slave_0: left allmulticast mode [ 1636.994546][ T6035] usb 4-1: device descriptor read/8, error -71 [ 1637.008805][T10194] bridge_slave_0: left promiscuous mode [ 1637.013789][ T5279] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1637.014849][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.063757][ T5279] usb 5-1: device descriptor read/8, error -71 [ 1637.111205][ T6035] usb usb4-port1: unable to enumerate USB device [ 1637.180852][ T5279] usb usb5-port1: unable to enumerate USB device [ 1637.667846][T19056] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1637.679141][T19056] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1637.690426][T19056] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1637.700001][T19056] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1637.746084][T19056] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1637.758834][T19056] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1638.449138][T17763] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1638.643066][ T5279] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1638.653892][T17763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1638.683164][T25583] Bluetooth: hci0: command tx timeout [ 1638.693686][T17763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1638.704116][T17763] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1638.714360][T17763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.732180][T17763] usb 4-1: config 0 descriptor?? [ 1638.798198][T10194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.833534][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 1638.844816][T10194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.860025][ T5279] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1638.875060][T10194] bond0 (unregistering): Released all slaves [ 1638.893985][ T5279] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1638.937508][ T5279] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1639.038125][ T5279] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1639.101566][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.132432][ T5279] usb 5-1: Product: syz [ 1639.165580][ T5279] usb 5-1: Manufacturer: syz [ 1639.170265][ T5279] usb 5-1: SerialNumber: syz [ 1639.198969][T31435] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1639.443160][T31435] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1639.478972][T31658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6497'. [ 1639.600957][ T5279] usb 5-1: 0:2 : does not exist [ 1639.644813][ T5279] usb 5-1: USB disconnect, device number 17 [ 1639.884005][T25583] Bluetooth: hci7: command tx timeout [ 1640.247114][T31435] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1640.304679][T17763] usbhid 4-1:0.0: can't add hid device: -71 [ 1640.326128][T31435] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1640.334173][T17763] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1640.387850][T17763] usb 4-1: USB disconnect, device number 35 [ 1640.641511][T31612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.658465][T31612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.677740][T31612] bridge_slave_0: entered allmulticast mode [ 1640.686122][T31612] bridge_slave_0: entered promiscuous mode [ 1640.710191][T31612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.718473][T31612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.728098][T31612] bridge_slave_1: entered allmulticast mode [ 1640.736241][T31612] bridge_slave_1: entered promiscuous mode [ 1640.764640][T25583] Bluetooth: hci0: command tx timeout [ 1640.830660][T10194] hsr_slave_0: left promiscuous mode [ 1640.843626][T10194] hsr_slave_1: left promiscuous mode [ 1640.850473][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.858703][T10194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.871204][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.880139][T10194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.960438][T10194] veth1_macvtap: left promiscuous mode [ 1641.009223][T10194] veth0_macvtap: left promiscuous mode [ 1641.043413][T10194] veth1_vlan: left promiscuous mode [ 1641.049067][T10194] veth0_vlan: left promiscuous mode [ 1641.653924][T17763] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1641.876770][T17763] usb 4-1: Using ep0 maxpacket: 8 [ 1641.963761][T25583] Bluetooth: hci7: command tx timeout [ 1641.983126][T17763] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 1641.992336][T17763] usb 4-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0 [ 1642.002509][T17763] usb 4-1: Product: syz [ 1642.008901][T17763] usb 4-1: config 0 descriptor?? [ 1642.017595][T17763] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1642.277680][T17763] usb 4-1: USB disconnect, device number 36 [ 1642.618284][T10194] team0 (unregistering): Port device team_slave_1 removed [ 1642.833167][T10194] team0 (unregistering): Port device team_slave_0 removed [ 1642.859063][T25583] Bluetooth: hci0: command tx timeout [ 1643.143788][T31681] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 1644.043498][T25583] Bluetooth: hci7: command tx timeout [ 1644.680901][T31612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.726893][T31688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1644.780624][T31688] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1644.793230][T31688] gretap1: entered promiscuous mode [ 1644.798512][T31688] gretap1: entered allmulticast mode [ 1644.839158][T31612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.130366][T31612] team0: Port device team_slave_0 added [ 1645.160763][T31612] team0: Port device team_slave_1 added [ 1645.193116][ T5279] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1645.331295][T31612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.341492][T31612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.369957][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 1645.376521][T31612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.395715][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1645.407826][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1645.420067][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1645.433545][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1645.442658][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.453162][ T5279] usb 4-1: config 0 descriptor?? [ 1645.459081][T31692] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1645.468115][ T5279] hub 4-1:0.0: USB hub found [ 1645.573722][T31612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.605856][T31612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.673926][ T5279] hub 4-1:0.0: 2 ports detected [ 1645.684406][T31612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.912151][T31612] hsr_slave_0: entered promiscuous mode [ 1645.923361][ T6035] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1645.951128][T31612] hsr_slave_1: entered promiscuous mode [ 1645.983352][T31612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1645.995937][T31612] Cannot create hsr debugfs directory [ 1646.041794][T31652] chnl_net:caif_netlink_parms(): no params data found [ 1646.083310][ T6035] usb 5-1: device descriptor read/64, error -71 [ 1646.131113][T25583] Bluetooth: hci7: command tx timeout [ 1646.335031][ T6035] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1646.495596][ T6035] usb 5-1: device descriptor read/64, error -71 [ 1646.521830][T10194] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.624693][ T6035] usb usb5-port1: attempt power cycle [ 1646.694232][T31435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1646.844898][T10194] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.864438][T31652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.884790][T31652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.892393][T31652] bridge_slave_0: entered allmulticast mode [ 1646.908333][T31652] bridge_slave_0: entered promiscuous mode [ 1646.984814][ T6035] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1647.053128][ T6035] usb 5-1: device descriptor read/8, error -71 [ 1647.088490][T10194] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.112398][T31692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.148929][T31692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1647.161697][T31652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.205271][T31652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.212769][T31652] bridge_slave_1: entered allmulticast mode [ 1647.253814][T31652] bridge_slave_1: entered promiscuous mode [ 1647.323292][ T6035] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1647.375323][ T6035] usb 5-1: device descriptor read/8, error -71 [ 1647.393646][T19797] usb 4-1: USB disconnect, device number 37 [ 1647.468986][T10194] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.525565][ T6035] usb usb5-port1: unable to enumerate USB device [ 1647.565128][T31435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.620178][T31652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.669724][T31652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.773425][T27160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.780714][T27160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.907055][T27160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.914390][T27160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1647.932694][T31652] team0: Port device team_slave_0 added [ 1648.051430][T31652] team0: Port device team_slave_1 added [ 1648.244241][T31652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.259527][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.324265][T31652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.366793][T31746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1648.414736][T31652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.421754][T31652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.492551][T31652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.790926][T31753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1648.955808][T10194] bridge_slave_1: left allmulticast mode [ 1648.974492][T10194] bridge_slave_1: left promiscuous mode [ 1648.980554][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.023526][ T5276] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1649.050006][T10194] bridge_slave_0: left allmulticast mode [ 1649.056173][T10194] bridge_slave_0: left promiscuous mode [ 1649.073477][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.114425][T10194] bridge_slave_1: left allmulticast mode [ 1649.124788][T10194] bridge_slave_1: left promiscuous mode [ 1649.130575][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.172453][T10194] bridge_slave_0: left allmulticast mode [ 1649.181320][T10194] bridge_slave_0: left promiscuous mode [ 1649.187307][ T5276] usb 4-1: device descriptor read/64, error -71 [ 1649.213256][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.433368][ T5276] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1649.576104][ T5276] usb 4-1: device descriptor read/64, error -71 [ 1649.686843][ T5276] usb usb4-port1: attempt power cycle [ 1650.043175][ T5276] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1650.096814][ T5276] usb 4-1: device descriptor read/8, error -71 [ 1650.354107][ T5276] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1650.410451][ T5276] usb 4-1: device descriptor read/8, error -71 [ 1650.535335][ T5276] usb usb4-port1: unable to enumerate USB device [ 1651.482827][T10194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1651.501765][T10194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1651.527588][T10194] bond0 (unregistering): Released all slaves [ 1651.944120][T10194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1651.977853][T10194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.011128][T10194] bond0 (unregistering): Released all slaves [ 1652.147606][T31652] hsr_slave_0: entered promiscuous mode [ 1652.153839][ T8] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1652.167271][T31652] hsr_slave_1: entered promiscuous mode [ 1652.194107][T31652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1652.204192][T31652] Cannot create hsr debugfs directory [ 1652.323257][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1652.343771][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1652.352808][ T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1652.379647][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1652.427363][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1652.439898][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.457537][ T8] usb 4-1: Product: syz [ 1652.461912][ T8] usb 4-1: Manufacturer: syz [ 1652.466847][ T8] usb 4-1: SerialNumber: syz [ 1652.490278][T31435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.766610][ T8] usb 4-1: 0:2 : does not exist [ 1652.821084][ T8] usb 4-1: USB disconnect, device number 42 [ 1652.870828][T31510] udevd[31510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1653.365485][T10194] hsr_slave_0: left promiscuous mode [ 1653.379292][T10194] hsr_slave_1: left promiscuous mode [ 1653.407040][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.416383][T10194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.428308][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.435968][T10194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.445727][T31796] fuse: Unknown parameter 'obj_user' [ 1653.462563][T10194] hsr_slave_0: left promiscuous mode [ 1653.517284][T10194] hsr_slave_1: left promiscuous mode [ 1653.527743][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.535981][T10194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.590499][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.603477][T10194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.755702][T10194] veth1_macvtap: left promiscuous mode [ 1653.761337][T10194] veth0_macvtap: left promiscuous mode [ 1653.768759][T10194] veth1_vlan: left promiscuous mode [ 1653.803319][T10194] veth0_vlan: left promiscuous mode [ 1653.835412][T10194] veth1_macvtap: left promiscuous mode [ 1653.841125][T10194] veth0_macvtap: left promiscuous mode [ 1653.863754][T10194] veth1_vlan: left promiscuous mode [ 1653.917933][T10194] veth0_vlan: left promiscuous mode [ 1655.618772][T10194] team0 (unregistering): Port device team_slave_1 removed [ 1655.721730][T10194] team0 (unregistering): Port device team_slave_0 removed [ 1656.340404][T19056] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1656.355771][T19056] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1656.385987][T19056] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1656.399568][T19056] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1656.409039][T19056] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1656.420981][T19056] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1658.377442][T10194] team0 (unregistering): Port device team_slave_1 removed [ 1658.518629][T10194] team0 (unregistering): Port device team_slave_0 removed [ 1658.533728][T25583] Bluetooth: hci10: command tx timeout [ 1660.000415][T31802] bond_slave_0: entered promiscuous mode [ 1660.006216][T31802] bond_slave_1: entered promiscuous mode [ 1660.012749][T31802] vlan0: entered promiscuous mode [ 1660.018526][T31802] bond0: entered promiscuous mode [ 1660.041968][T31802] vlan0: entered allmulticast mode [ 1660.065250][T31802] bond0: entered allmulticast mode [ 1660.070461][T31802] bond_slave_0: entered allmulticast mode [ 1660.081208][T31802] bond_slave_1: entered allmulticast mode [ 1660.093931][T31802] bond0: left allmulticast mode [ 1660.098897][T31802] bond_slave_0: left allmulticast mode [ 1660.107278][T31802] bond_slave_1: left allmulticast mode [ 1660.115565][T31802] bond0: left promiscuous mode [ 1660.124332][T31802] bond_slave_0: left promiscuous mode [ 1660.129823][T31802] bond_slave_1: left promiscuous mode [ 1660.315499][T31435] veth0_vlan: entered promiscuous mode [ 1660.329711][T31612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1660.506023][T31612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1660.553276][T31612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1660.613021][T25583] Bluetooth: hci10: command tx timeout [ 1660.639777][T31612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1660.692282][T31435] veth1_vlan: entered promiscuous mode [ 1661.396612][T31435] veth0_macvtap: entered promiscuous mode [ 1661.434219][T31435] veth1_macvtap: entered promiscuous mode [ 1661.623921][T31805] chnl_net:caif_netlink_parms(): no params data found [ 1661.770273][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.791944][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.820583][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.832665][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.846440][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.861521][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.873004][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.891077][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.902784][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.913832][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.927259][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.939924][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.953039][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.966980][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.978572][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.989789][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.054519][T31435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.184781][T31612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.221147][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.239093][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.255960][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.329068][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.363850][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.376492][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.387151][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.418833][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.452982][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.472984][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.501277][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.513045][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.573227][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.591436][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.603505][T31435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.616437][T31435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.636937][T31435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.683250][T25583] Bluetooth: hci10: command tx timeout [ 1662.787938][T31612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.806155][T31435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.833668][T31435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.865376][T31435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.884321][T31435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.907678][T31652] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1662.923794][T31652] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1662.999443][T27158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.006840][T27158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.017530][T27158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.024869][T27158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.054225][T31652] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1663.126132][T31652] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1663.180122][T31805] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.189130][T31805] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.201353][T31805] bridge_slave_0: entered allmulticast mode [ 1663.211474][T31805] bridge_slave_0: entered promiscuous mode [ 1663.223272][T31805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.230531][T31805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.240179][T31805] bridge_slave_1: entered allmulticast mode [ 1663.252109][T31805] bridge_slave_1: entered promiscuous mode [ 1663.332741][T31805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.353957][T31805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.497992][T31805] team0: Port device team_slave_0 added [ 1663.511226][T31805] team0: Port device team_slave_1 added [ 1663.633888][T31805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.640990][T31805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.726708][T31805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.892298][T31805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.914111][T31805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.947858][T31805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.009233][T18367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.025670][T18367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.062693][T31612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.339223][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.480460][T31805] hsr_slave_0: entered promiscuous mode [ 1664.523193][T31805] hsr_slave_1: entered promiscuous mode [ 1664.533042][T31805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1664.540712][T31805] Cannot create hsr debugfs directory [ 1664.697902][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.766789][T19056] Bluetooth: hci10: command tx timeout [ 1664.893675][ T5228] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1664.900036][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.926877][ T5228] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1664.945294][ T5228] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1664.959326][ T5228] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1664.973428][ T5228] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1664.981207][ T5228] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1665.032468][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1665.043133][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1665.105745][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.241593][T31652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1665.339443][T31652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1665.361914][T27160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.369121][T27160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.425504][T27160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.432780][T27160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.543363][T19797] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1665.590434][T31805] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.703470][T19797] usb 2-1: Using ep0 maxpacket: 8 [ 1665.735057][T19797] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1665.741679][T31612] veth0_vlan: entered promiscuous mode [ 1665.757874][T19797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1665.770071][T19797] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1665.783530][T19797] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1665.796879][T19797] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1665.807609][T19797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.879938][T31805] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.068987][T31805] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.256816][T31866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6443'. [ 1666.293408][ T5228] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.339319][T31805] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.468808][T31612] veth1_vlan: entered promiscuous mode [ 1666.733466][ T11] bridge_slave_1: left allmulticast mode [ 1666.754762][ T11] bridge_slave_1: left promiscuous mode [ 1666.760624][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.857112][ T11] bridge_slave_0: left allmulticast mode [ 1666.904998][ T11] bridge_slave_0: left promiscuous mode [ 1666.925453][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.085715][T25583] Bluetooth: hci9: command tx timeout [ 1668.377219][T19797] usb 2-1: usb_control_msg returned -71 [ 1668.390426][T19797] usbtmc 2-1:16.0: can't read capabilities [ 1668.455350][T19797] usb 2-1: USB disconnect, device number 93 [ 1668.879825][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.904871][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.921890][ T11] bond0 (unregistering): Released all slaves [ 1668.923683][T19797] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1669.148360][T19797] usb 2-1: Using ep0 maxpacket: 16 [ 1669.178457][T25583] Bluetooth: hci9: command tx timeout [ 1669.206412][T31652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.215479][T19797] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1669.225291][T19797] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1669.275561][T19797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1669.288889][T19797] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1669.333798][T19797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.337865][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.341839][T19797] usb 2-1: Product: syz [ 1669.341862][T19797] usb 2-1: Manufacturer: syz [ 1669.341882][T19797] usb 2-1: SerialNumber: syz [ 1669.351852][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.548182][T31862] chnl_net:caif_netlink_parms(): no params data found [ 1669.663243][T19797] usb 2-1: 0:2 : does not exist [ 1669.728587][T19797] usb 2-1: USB disconnect, device number 94 [ 1669.799861][T31806] udevd[31806]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1669.879876][T31612] veth0_macvtap: entered promiscuous mode [ 1669.990361][ T11] hsr_slave_0: left promiscuous mode [ 1670.029840][ T11] hsr_slave_1: left promiscuous mode [ 1670.039227][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1670.049039][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.063810][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.071355][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.129636][ T11] veth1_macvtap: left promiscuous mode [ 1670.168910][ T11] veth0_macvtap: left promiscuous mode [ 1670.591552][T31907] ip6t_srh: unknown srh invflags 7863 [ 1671.246330][T25583] Bluetooth: hci9: command tx timeout [ 1671.430967][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1671.542684][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1672.941375][T31805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1673.032071][T31805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1673.162721][ T29] audit: type=1326 audit(1727060722.240:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.211507][T31805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1673.233475][ T29] audit: type=1326 audit(1727060722.240:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.253816][T31805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1673.263463][ T29] audit: type=1326 audit(1727060722.240:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.292758][T31612] veth1_macvtap: entered promiscuous mode [ 1673.303413][ T29] audit: type=1326 audit(1727060722.240:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.329407][T25583] Bluetooth: hci9: command tx timeout [ 1673.335254][ T29] audit: type=1326 audit(1727060722.240:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.382866][ T29] audit: type=1326 audit(1727060722.240:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.408415][T31862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.426400][T31862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.454330][T31862] bridge_slave_0: entered allmulticast mode [ 1673.463809][T31862] bridge_slave_0: entered promiscuous mode [ 1673.493474][ T29] audit: type=1326 audit(1727060722.240:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.517080][ T29] audit: type=1326 audit(1727060722.240:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.544805][ T29] audit: type=1326 audit(1727060722.280:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.565470][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.582685][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.595723][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.607536][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.618893][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.630577][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.640815][ T29] audit: type=1326 audit(1727060722.280:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31917 comm="syz.1.6535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f37def9 code=0x7ffc0000 [ 1673.642001][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.675858][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.688780][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.702107][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.713278][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.726369][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.740224][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.752065][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.762211][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.773685][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.786294][T31612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.828825][T31862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.836526][T31862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.847700][T31862] bridge_slave_1: entered allmulticast mode [ 1673.862730][T31862] bridge_slave_1: entered promiscuous mode [ 1673.935218][T31920] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1673.952069][T31920] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1673.963012][T31920] gretap1: entered promiscuous mode [ 1673.970394][T31920] gretap1: entered allmulticast mode [ 1674.047826][T31862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.073339][T31652] veth0_vlan: entered promiscuous mode [ 1674.091213][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.140873][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.157625][T31922] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 1674.177200][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.193480][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.203868][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.217538][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.235010][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.257732][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.271054][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.310094][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.322816][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.333471][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.343511][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.364273][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.376352][T31612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1674.387585][T31612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1674.405089][T31612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1674.421119][T31862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.642685][T31612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.670184][T31612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.689895][T31612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.742133][T31612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.850313][T31652] veth1_vlan: entered promiscuous mode [ 1674.900931][T31934] IPv6: sit1: Disabled Multicast RS [ 1675.015710][T31862] team0: Port device team_slave_0 added [ 1675.061344][T31862] team0: Port device team_slave_1 added [ 1675.264329][T31862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1675.271374][T31862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.338514][T31862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.420840][T31862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.453323][T31862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.510773][T31862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.707127][T31862] hsr_slave_0: entered promiscuous mode [ 1675.743510][T31862] hsr_slave_1: entered promiscuous mode [ 1675.752193][T31862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1675.787265][T31862] Cannot create hsr debugfs directory [ 1675.866591][T31805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.922657][T31652] veth0_macvtap: entered promiscuous mode [ 1676.077618][T31652] veth1_macvtap: entered promiscuous mode [ 1676.125844][T31805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.139650][T18367] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.146888][T18367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.176068][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1676.196874][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1676.283080][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.313756][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.345208][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.360830][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.375393][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.388880][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.401123][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.423262][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.440425][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.452007][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.465090][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.480608][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.492642][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.503650][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.515652][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.536788][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.553755][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.567839][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.581559][T31652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.596008][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.603283][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.682728][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.723030][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.743013][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.779766][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.811470][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.863069][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.885583][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.913136][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.943044][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.964069][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.999058][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.027466][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.064824][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.104549][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.132975][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.144323][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.154864][T31652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1677.169055][T31652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.189575][T31652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.419366][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.430463][T31652] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.451175][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.497479][T31652] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.509604][T31652] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.519143][T31652] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.670654][T31930] syz.1.6540: vmalloc error: size 3932160, failed to allocated page array size 7680, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1677.703426][T31930] CPU: 0 UID: 0 PID: 31930 Comm: syz.1.6540 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1677.714104][T31930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1677.724219][T31930] Call Trace: [ 1677.727550][T31930] [ 1677.730597][T31930] dump_stack_lvl+0x241/0x360 [ 1677.735350][T31930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1677.740613][T31930] ? __pfx__printk+0x10/0x10 [ 1677.745282][T31930] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1677.751935][T31930] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1677.758519][T31930] warn_alloc+0x278/0x410 [ 1677.763019][T31930] ? __pfx_warn_alloc+0x10/0x10 [ 1677.768412][T31930] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1677.774744][T31930] ? __get_vm_area_node+0x23d/0x270 [ 1677.780211][T31930] __vmalloc_node_range_noprof+0x691/0x13f0 [ 1677.786363][T31930] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 1677.792632][T31930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1677.799185][T31930] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1677.805412][T31930] ? __get_vm_area_node+0x23d/0x270 [ 1677.810784][T31930] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 1677.816738][T31930] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1677.822943][T31930] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1677.828739][T31930] ? rcu_is_watching+0x15/0xb0 [ 1677.833550][T31930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1677.839916][T31930] ? rcu_is_watching+0x15/0xb0 [ 1677.844696][T31930] ? trace_kmalloc+0x1f/0xd0 [ 1677.849320][T31930] ? __kmalloc_node_noprof+0x247/0x440 [ 1677.854810][T31930] ? __kvmalloc_node_noprof+0x72/0x190 [ 1677.860330][T31930] __kvmalloc_node_noprof+0x142/0x190 [ 1677.865849][T31930] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1677.872136][T31930] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 1677.878183][T31930] ? tpg_update_mv_step+0x361/0x4f0 [ 1677.883781][T31930] vivid_update_format_cap+0x133c/0x2090 [ 1677.889574][T31930] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 1677.895621][T31930] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 1677.901576][T31930] __video_do_ioctl+0xc23/0xdd0 [ 1677.906550][T31930] ? __pfx___video_do_ioctl+0x10/0x10 [ 1677.911944][T31930] ? __might_fault+0xc6/0x120 [ 1677.916759][T31930] video_usercopy+0x89b/0x1180 [ 1677.921556][T31930] ? __pfx___video_do_ioctl+0x10/0x10 [ 1677.926965][T31930] ? __pfx_video_usercopy+0x10/0x10 [ 1677.932230][T31930] ? __fget_files+0x29/0x470 [ 1677.936854][T31930] ? __fget_files+0x3f3/0x470 [ 1677.941552][T31930] v4l2_ioctl+0x189/0x1e0 [ 1677.945939][T31930] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1677.951045][T31930] __se_sys_ioctl+0xf9/0x170 [ 1677.955724][T31930] do_syscall_64+0xf3/0x230 [ 1677.960361][T31930] ? clear_bhb_loop+0x35/0x90 [ 1677.965079][T31930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.971173][T31930] RIP: 0033:0x7f335f37def9 [ 1677.975705][T31930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1677.995440][T31930] RSP: 002b:00007f3360254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1678.003988][T31930] RAX: ffffffffffffffda RBX: 00007f335f535f80 RCX: 00007f335f37def9 [ 1678.012067][T31930] RDX: 0000000020000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1678.020409][T31930] RBP: 00007f335f3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1678.028522][T31930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.036601][T31930] R13: 0000000000000000 R14: 00007f335f535f80 R15: 00007f335f65fa28 [ 1678.044646][T31930] [ 1678.064617][T31930] Mem-Info: [ 1678.067965][T31930] active_anon:10600 inactive_anon:71 isolated_anon:0 [ 1678.067965][T31930] active_file:19488 inactive_file:3961 isolated_file:0 [ 1678.067965][T31930] unevictable:768 dirty:60 writeback:0 [ 1678.067965][T31930] slab_reclaimable:5963 slab_unreclaimable:116623 [ 1678.067965][T31930] mapped:43859 shmem:5340 pagetables:865 [ 1678.067965][T31930] sec_pagetables:0 bounce:0 [ 1678.067965][T31930] kernel_misc_reclaimable:0 [ 1678.067965][T31930] free:1230709 free_pcp:1829 free_cma:0 [ 1678.119705][T31930] Node 0 active_anon:42400kB inactive_anon:284kB active_file:77752kB inactive_file:15836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:175268kB dirty:236kB writeback:0kB shmem:19824kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11652kB pagetables:3460kB sec_pagetables:0kB all_unreclaimable? no [ 1678.156321][T31930] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1678.191164][T31930] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.240794][T31930] lowmem_reserve[]: 0 2465 2466 0 0 [ 1678.271156][T31930] Node 0 DMA32 free:982440kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:42164kB inactive_anon:284kB active_file:77712kB inactive_file:15136kB unevictable:1536kB writepending:232kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:2688kB local_pcp:720kB free_cma:0kB [ 1678.381815][T31930] lowmem_reserve[]: 0 0 0 0 0 [ 1678.399292][T31930] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:136kB inactive_anon:0kB active_file:40kB inactive_file:700kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.444760][T31930] lowmem_reserve[]: 0 0 0 0 0 [ 1678.456839][T31930] Node 1 Normal free:3930244kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1678.490412][T31930] lowmem_reserve[]: 0 0 0 0 0 [ 1678.572785][T31930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1678.590606][T31930] Node 0 DMA32: 16*4kB (UM) 587*8kB (UME) 399*16kB (UME) 246*32kB (ME) 230*64kB (ME) 94*128kB (ME) 50*256kB (UME) 32*512kB (UME) 15*1024kB (UME) 5*2048kB (UM) 215*4096kB (M) = 981192kB [ 1678.613445][T31930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1678.670826][T31930] Node 1 Normal: 195*4kB (UME) 49*8kB (UME) 53*16kB (UME) 187*32kB (UME) 91*64kB (UME) 29*128kB (UME) 12*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 3*2048kB (ME) 950*4096kB (UM) = 3930244kB [ 1678.732672][T31930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1678.746769][T31930] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1678.783911][T31930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1678.794130][T31930] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1678.804273][T31930] 28864 total pagecache pages [ 1678.809007][T31930] 71 pages in swap cache [ 1678.863245][T31930] Free swap = 124308kB [ 1678.867529][T31930] Total swap = 124996kB [ 1678.871726][T31930] 2097051 pages RAM [ 1678.880218][T31930] 0 pages HighMem/MovableOnly [ 1678.889818][T31930] 427078 pages reserved [ 1678.894699][T31930] 0 pages cma reserved [ 1679.175140][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.201794][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.299698][T31805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.402582][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.437740][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.640018][T31805] veth0_vlan: entered promiscuous mode [ 1679.664031][ T5280] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1679.812792][T31805] veth1_vlan: entered promiscuous mode [ 1679.888680][T31968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6496'. [ 1680.002027][T31862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1680.093749][T31862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1680.159083][T31862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1680.275533][T31862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1680.304117][ T5280] usb 1-1: Using ep0 maxpacket: 8 [ 1680.356806][T31805] veth0_macvtap: entered promiscuous mode [ 1680.376551][ T5280] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1680.386321][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.418661][ T5280] usb 1-1: Product: syz [ 1680.425908][T31805] veth1_macvtap: entered promiscuous mode [ 1680.443209][ T5280] usb 1-1: Manufacturer: syz [ 1680.447984][ T5280] usb 1-1: SerialNumber: syz [ 1680.466851][ T5280] usb 1-1: config 0 descriptor?? [ 1680.542371][T31862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.568394][T31862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.608994][T31862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1680.619816][T31862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1680.663833][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.670974][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.703263][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.710454][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.731662][ T5280] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1680.779998][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1680.881933][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.893341][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.904806][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.915533][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.925978][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.937906][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.949912][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.961515][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1680.975862][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1680.990136][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.001678][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.038607][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.131829][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.153127][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.173026][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.199908][T31963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1681.203563][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.233052][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.253645][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.273133][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.293004][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.305354][T31805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.313393][T31963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1681.408580][T31862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.456268][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.527763][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.568775][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.632709][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.693358][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.739141][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.794904][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.847975][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.910675][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.954275][ T5280] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1681.993137][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.033259][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1682.063124][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.098185][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1682.162043][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.196190][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1682.221748][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.275398][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1682.290027][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.303044][T31805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1682.358338][T31805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1682.392412][T31805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.519590][T31805] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.560224][T31805] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.569406][T31805] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.578384][T31805] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.590277][T31988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1682.613119][T31988] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1682.622668][T31988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1682.640728][T31988] vlan2: entered allmulticast mode [ 1682.733538][T31988] gretap0: entered allmulticast mode [ 1683.002665][T31994] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1683.485795][ T5280] usb 1-1: USB disconnect, device number 113 [ 1683.679671][T31862] veth0_vlan: entered promiscuous mode [ 1683.709033][T32007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1683.735365][T27158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1683.783039][T27158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.855036][T32010] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1683.951662][T31862] veth1_vlan: entered promiscuous mode [ 1683.989519][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.027379][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1684.249322][T31862] veth0_macvtap: entered promiscuous mode [ 1684.359734][T31862] veth1_macvtap: entered promiscuous mode [ 1684.505445][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.584761][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.723144][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.823047][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1684.889825][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1684.951652][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.003302][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.045613][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.102134][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.148128][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.196022][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.240898][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.290940][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.345876][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.393198][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.473561][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.510995][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.584680][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.614014][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.667172][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.721422][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1685.757100][ T5228] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1685.768517][ T5228] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1685.785189][ T5228] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1685.796887][ T5228] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1685.809769][ T5228] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1685.818155][ T5228] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1685.820704][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1685.931386][T31862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.991638][T32033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1686.012024][T32033] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1686.027295][T32033] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6552'. [ 1686.041031][T32033] vlan3: entered allmulticast mode [ 1686.104527][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.153033][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.180468][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.219592][T32055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1686.228441][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.278832][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.311183][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1686.338701][T32056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1686.347858][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.373559][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.407075][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.410575][ T5276] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1686.442442][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.454097][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.467442][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.478479][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.498668][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.513968][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.527465][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.539734][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.551834][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.564939][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.576215][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.587873][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.600526][T31862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1686.614111][T31862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1686.626240][T31862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1686.639119][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 1686.673374][ T5276] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.685634][ T5276] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1686.705209][ T5276] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1686.714630][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1686.723198][ T5276] usb 3-1: Product: syz [ 1686.727437][ T5276] usb 3-1: Manufacturer: syz [ 1686.732402][ T5276] usb 3-1: SerialNumber: syz [ 1686.816083][ T5276] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input215 [ 1687.070513][T31862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.089703][T31862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.113086][T31862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.121873][T31862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.123250][ T5276] usb 3-1: USB disconnect, device number 94 [ 1687.130690][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1687.320657][ T5276] appletouch 3-1:1.0: input: appletouch disconnected [ 1687.473212][ T9615] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1687.578189][T27158] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.645366][ T9615] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1687.658042][ T9615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.674872][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6556'. [ 1687.675533][ T9615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.697495][ T9615] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1687.708406][ T9615] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1687.717685][ T9615] usb 1-1: Manufacturer: syz [ 1687.738113][ T9615] usb 1-1: config 0 descriptor?? [ 1687.748335][ T9615] igorplugusb 1-1:0.0: endpoint incorrect [ 1687.884195][T25583] Bluetooth: hci11: command tx timeout [ 1687.975082][ T9615] usb 1-1: USB disconnect, device number 114 [ 1688.111208][T27158] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.214435][T32092] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1688.254368][T32092] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1688.291720][T32092] gretap1: entered promiscuous mode [ 1688.313586][T32092] gretap1: entered allmulticast mode [ 1688.571356][T27158] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.902673][T32048] chnl_net:caif_netlink_parms(): no params data found [ 1689.016681][T32115] tunl0: entered promiscuous mode [ 1689.063578][T32115] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6563'. [ 1689.230486][T27158] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.289716][T32123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6564'. [ 1689.374921][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.419516][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.581301][T32128] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 1689.800121][T32048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.833354][T32048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.869338][T32048] bridge_slave_0: entered allmulticast mode [ 1689.904676][T32048] bridge_slave_0: entered promiscuous mode [ 1689.936577][T10194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.949626][T10194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.963145][T25583] Bluetooth: hci11: command tx timeout [ 1690.058777][T32048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.083144][ T6035] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1690.104374][T32048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.111914][T32048] bridge_slave_1: entered allmulticast mode [ 1690.119724][T32048] bridge_slave_1: entered promiscuous mode [ 1690.245438][T32048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.257635][T27158] bridge_slave_1: left allmulticast mode [ 1690.293354][ T6035] usb 1-1: Using ep0 maxpacket: 32 [ 1690.300532][ T6035] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.313527][ T6035] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1690.319770][T27158] bridge_slave_1: left promiscuous mode [ 1690.329490][ T6035] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1690.341806][ T6035] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1690.351312][ T6035] usb 1-1: Product: syz [ 1690.410702][ T6035] usb 1-1: Manufacturer: syz [ 1690.420120][T27158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.460276][T25583] Bluetooth: hci10: SCO packet for unknown connection handle 0 [ 1690.461548][ T6035] usb 1-1: SerialNumber: syz [ 1690.482535][T27158] bridge_slave_0: left allmulticast mode [ 1690.484927][T25583] Bluetooth: unknown link type 237 [ 1690.495695][T25583] Bluetooth: hci10: connection err: -111 [ 1690.517350][T27158] bridge_slave_0: left promiscuous mode [ 1690.556561][ T6035] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input216 [ 1690.583010][T27158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.777545][ T9] usb 1-1: USB disconnect, device number 115 [ 1690.777594][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1690.899280][ T9] appletouch 1-1:1.0: input: appletouch disconnected [ 1691.793637][T32176] loop4: detected capacity change from 0 to 7 [ 1691.803010][T32176] buffer_io_error: 4 callbacks suppressed [ 1691.803031][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.846716][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.857124][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.900780][T25583] Bluetooth: hci6: command 0x0406 tx timeout [ 1691.924628][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.959939][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.985073][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1691.995180][T32181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1692.005979][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.033723][T32176] ldm_validate_partition_table(): Disk read failed. [ 1692.043938][T25583] Bluetooth: hci11: command tx timeout [ 1692.083152][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.091405][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.118960][T32176] Buffer I/O error on dev loop4, logical block 0, async page read [ 1692.150157][T32176] Dev loop4: unable to read RDB block 0 [ 1692.190769][T32176] loop4: unable to read partition table [ 1692.207417][T32176] loop4: partition table beyond EOD, truncated [ 1692.224484][T32176] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 1692.224484][T32176] ) failed (rc=-5) [ 1692.586445][T27158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.650360][T32189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1692.673479][T27158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.689122][T32189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1692.708363][T27158] bond0 (unregistering): Released all slaves [ 1692.754596][T32048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.850500][T32143] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1693.235095][T32048] team0: Port device team_slave_0 added [ 1693.291499][T32048] team0: Port device team_slave_1 added [ 1693.375876][T17763] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1693.585765][T17763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1693.620735][T17763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.622483][T32048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.659470][T17763] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1693.690058][T32048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.743779][T17763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.770828][T17763] usb 4-1: config 0 descriptor?? [ 1693.857313][T32048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.099527][T32048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.104894][T32209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.133746][T32209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.143007][T25583] Bluetooth: hci11: command tx timeout [ 1694.153506][T32048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.203037][T32048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.226090][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.257457][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x6 [ 1694.286604][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x5 [ 1694.300618][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x4 [ 1694.307927][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.317142][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.324409][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.331535][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.346868][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.355499][T17763] elecom 0003:056E:00FE.007C: unknown main item tag 0x0 [ 1694.364658][T17763] elecom 0003:056E:00FE.007C: unknown global tag 0xd [ 1694.371541][T17763] elecom 0003:056E:00FE.007C: item 0 4 1 13 parsing failed [ 1694.383532][T17763] elecom 0003:056E:00FE.007C: probe with driver elecom failed with error -22 [ 1694.417216][T27158] hsr_slave_0: left promiscuous mode [ 1694.454743][T27158] hsr_slave_1: left promiscuous mode [ 1694.523262][T27158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.563114][T27158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.588865][T27158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.607366][T19797] usb 4-1: USB disconnect, device number 43 [ 1694.642805][T27158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.756956][T32225] loop4: detected capacity change from 0 to 7 [ 1694.770793][T32225] ldm_validate_partition_table(): Disk read failed. [ 1694.778348][T27158] veth1_macvtap: left promiscuous mode [ 1694.793146][T27158] veth0_macvtap: left promiscuous mode [ 1694.803851][T32225] Dev loop4: unable to read RDB block 0 [ 1694.809800][T27158] veth1_vlan: left promiscuous mode [ 1694.834298][T32225] loop4: unable to read partition table [ 1694.840197][T32225] loop4: partition table beyond EOD, truncated [ 1694.847517][T27158] veth0_vlan: left promiscuous mode [ 1694.876730][T32225] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 1694.876730][T32225] ) failed (rc=-5) [ 1695.264399][T32235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1695.344376][T32235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1696.224855][ T5276] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1696.394273][ T5276] usb 4-1: Using ep0 maxpacket: 8 [ 1696.401012][ T5276] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1696.476654][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1696.556718][ T5276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1696.590550][ T5276] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1696.600577][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.609320][ T5276] usb 4-1: Product: syz [ 1696.615039][ T5276] usb 4-1: Manufacturer: syz [ 1696.619720][ T5276] usb 4-1: SerialNumber: syz [ 1696.634166][ T5276] usb 4-1: config 0 descriptor?? [ 1696.642877][ T5276] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1698.095366][T27158] team0 (unregistering): Port device team_slave_1 removed [ 1698.424107][T17763] usb 4-1: USB disconnect, device number 44 [ 1698.491550][T27158] team0 (unregistering): Port device team_slave_0 removed [ 1699.114613][T19797] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1699.284572][T19797] usb 4-1: Using ep0 maxpacket: 32 [ 1699.299698][T19797] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 1699.323940][T19797] usb 4-1: config 0 has no interface number 0 [ 1699.343067][T19797] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 1699.359637][T19797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.455257][T19797] usb 4-1: config 0 descriptor?? [ 1699.674943][ T5279] usb 4-1: USB disconnect, device number 45 [ 1700.022255][ T5279] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1700.176373][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 1700.224256][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.236706][ T5279] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1700.252216][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1700.273128][ T5279] usb 4-1: SerialNumber: syz [ 1700.297436][ T5279] usb 4-1: config 0 descriptor?? [ 1700.532541][ T5279] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 1700.540944][ T5279] usb 4-1: No valid video chain found. [ 1700.556115][ T5279] usb 4-1: USB disconnect, device number 46 [ 1700.872196][T32048] hsr_slave_0: entered promiscuous mode [ 1700.901722][T32048] hsr_slave_1: entered promiscuous mode [ 1700.936478][T32048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1700.948577][T32048] Cannot create hsr debugfs directory [ 1701.460502][ T5228] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1701.493989][ T5228] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1701.504854][ T5228] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1701.535189][ T5228] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1701.571699][ T5228] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1701.594639][ T5228] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1702.097484][T32286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.149345][T32286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.282196][T25583] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1702.295789][T25583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1702.306540][T25583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1702.334351][T25583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1702.383289][T25583] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1702.390847][T25583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1702.637312][T27158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.776793][T32294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6602'. [ 1702.994395][T32297] netlink: 'syz.3.6602': attribute type 1 has an invalid length. [ 1703.065458][T32299] ebt_among: wrong size: 1048 against expected 710676, rounded to 710680 [ 1703.111232][T27158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.210139][T32274] chnl_net:caif_netlink_parms(): no params data found [ 1703.338100][T27158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.388376][T32303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.412858][T32303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.643291][ T5228] Bluetooth: hci8: command tx timeout [ 1703.727888][T27158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.801456][T32306] loop4: detected capacity change from 0 to 7 [ 1703.813740][T32306] buffer_io_error: 28 callbacks suppressed [ 1703.813761][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.833961][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.843368][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.863429][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.873267][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.881266][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1703.987854][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1704.023824][T32306] ldm_validate_partition_table(): Disk read failed. [ 1704.057261][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1704.084235][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1704.093466][T32306] Buffer I/O error on dev loop4, logical block 0, async page read [ 1704.102548][T32306] Dev loop4: unable to read RDB block 0 [ 1704.111551][T32306] loop4: unable to read partition table [ 1704.119095][T32306] loop4: partition table beyond EOD, truncated [ 1704.146539][T32306] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 1704.146539][T32306] ) failed (rc=-5) [ 1704.259835][T32274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1704.284027][T32274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.302813][T32274] bridge_slave_0: entered allmulticast mode [ 1704.310410][T32274] bridge_slave_0: entered promiscuous mode [ 1704.442675][T32274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.447741][ T5228] Bluetooth: hci0: command tx timeout [ 1704.486406][T32274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.511160][T32274] bridge_slave_1: entered allmulticast mode [ 1704.570955][T32274] bridge_slave_1: entered promiscuous mode [ 1704.668938][T32048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1704.695236][T32330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1704.735254][T32048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1704.754499][T32330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1704.812417][T32328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6609'. [ 1704.983015][T32048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1705.019504][T32048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1705.072729][T32274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.146074][T32274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.159064][T32338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1705.167690][ T30] INFO: task syz.2.6313:30737 blocked for more than 143 seconds. [ 1705.177294][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1705.186159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1705.196530][ T30] task:syz.2.6313 state:D stack:25184 pid:30737 tgid:30737 ppid:28748 flags:0x00000004 [ 1705.273073][ T30] Call Trace: [ 1705.276445][ T30] [ 1705.295097][T32338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1705.313237][ T30] __schedule+0x1895/0x4b30 [ 1705.326492][ T30] ? __pfx___schedule+0x10/0x10 [ 1705.331536][ T30] ? __pfx_lock_release+0x10/0x10 [ 1705.382534][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1705.404095][ T30] ? schedule+0x90/0x320 [ 1705.409919][ T30] schedule+0x14b/0x320 [ 1705.415805][ T30] schedule_preempt_disabled+0x13/0x30 [ 1705.454395][ T30] __mutex_lock+0x6a7/0xd70 [ 1705.465562][ T30] ? __mutex_lock+0x52a/0xd70 [ 1705.470343][ T30] ? vhost_net_stop+0x11e/0x210 [ 1705.515119][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1705.520292][ T30] ? vhost_net_buf_unproduce+0xc7/0x770 [ 1705.526076][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 1705.531251][ T30] vhost_net_stop+0x11e/0x210 [ 1705.536072][ T30] vhost_net_release+0x101/0x470 [ 1705.543285][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 1705.548833][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1705.555152][ T30] ? evm_file_release+0x13d/0x1c0 [ 1705.560244][ T30] ? __pfx_vhost_net_release+0x10/0x10 [ 1705.565971][ T30] __fput+0x23f/0x880 [ 1705.570033][ T30] task_work_run+0x24f/0x310 [ 1705.589755][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1705.599756][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1705.606597][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 1705.627106][ T30] do_syscall_64+0x100/0x230 [ 1705.631794][ T30] ? clear_bhb_loop+0x35/0x90 [ 1705.646205][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.653588][ T30] RIP: 0033:0x7f668637def9 [ 1705.659086][ T30] RSP: 002b:00007f668665fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1705.668785][ T30] RAX: 0000000000000000 RBX: 00007f6686537a80 RCX: 00007f668637def9 [ 1705.678257][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1705.687551][ T30] RBP: 00007f6686537a80 R08: 0000000000000006 R09: 00007f668665fe7f [ 1705.696958][ T30] R10: 00000000005e4260 R11: 0000000000000246 R12: 000000000017c743 [ 1705.724059][ T5228] Bluetooth: hci8: command tx timeout [ 1705.763034][ T30] R13: 00007f668665fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 1705.771159][ T30] [ 1705.774758][ T30] INFO: task syz.2.6313:30738 blocked for more than 143 seconds. [ 1705.782786][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1705.791467][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1705.814151][ T30] task:syz.2.6313 state:D stack:21056 pid:30738 tgid:30737 ppid:28748 flags:0x00000004 [ 1705.843318][ T30] Call Trace: [ 1705.846711][ T30] [ 1705.883642][ T30] __schedule+0x1895/0x4b30 [ 1705.888416][ T30] ? __pfx___schedule+0x10/0x10 [ 1705.904054][ T30] ? __pfx_lock_release+0x10/0x10 [ 1705.909262][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1705.926088][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1705.932526][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1705.937819][ T30] ? schedule+0x90/0x320 [ 1705.942132][ T30] schedule+0x14b/0x320 [ 1705.947523][ T30] ? down_read+0x6a5/0xa40 [ 1705.983099][ T30] schedule_preempt_disabled+0x13/0x30 [ 1705.988679][ T30] down_read+0x705/0xa40 [ 1706.011002][ T30] ? __pfx_down_read+0x10/0x10 [ 1706.023066][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 1706.028800][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1706.063056][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1706.068539][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1706.091777][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1706.103367][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1706.108844][ T30] filemap_fault+0x8c5/0x1950 [ 1706.125023][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1706.131237][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1706.144338][ T30] ? __pfx_lock_release+0x10/0x10 [ 1706.149563][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1706.193278][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1706.198600][ T30] __do_fault+0x135/0x460 [ 1706.221321][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1706.252970][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1706.262579][ T30] ? mark_lock+0x9a/0x360 [ 1706.278068][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1706.311593][ T30] ? __lock_acquire+0x1384/0x2050 [ 1706.318734][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 1706.326416][ T30] ? __pfx_lock_release+0x10/0x10 [ 1706.331527][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1706.337915][ T30] ? mt_find+0x2a9/0x920 [ 1706.342266][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1706.353562][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1706.358792][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1706.366748][ T30] exc_page_fault+0x2b9/0x8c0 [ 1706.371517][ T30] ? __might_fault+0xaa/0x120 [ 1706.376706][ T30] asm_exc_page_fault+0x26/0x30 [ 1706.381796][ T30] RIP: 0010:strncpy_from_user+0x110/0x2e0 [ 1706.391233][ T30] Code: 00 00 00 4c 89 e6 e8 0f f1 a2 fc 49 83 fc 07 0f 86 9a 00 00 00 48 89 6c 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 1706.412374][ T30] RSP: 0018:ffffc90003ba7d80 EFLAGS: 00050246 [ 1706.422603][ T30] RAX: 0000000000000002 RBX: ffff88807b36d500 RCX: ffff888025613c00 [ 1706.433615][ T30] RDX: ffffc900175a0000 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 1706.442792][ T30] RBP: 0000000000000fe0 R08: ffffffff84f1cd81 R09: 1ffffffff2039055 [ 1706.455597][ T30] R10: dffffc0000000000 R11: fffffbfff2039056 R12: 0000000000000fe0 [ 1706.467058][ T30] R13: 0000000000000000 R14: ffff88807b36d520 R15: 0000000020000300 [ 1706.478770][ T30] ? strncpy_from_user+0xf1/0x2e0 [ 1706.484311][ T30] getname_flags+0xf1/0x540 [ 1706.493775][ T30] user_path_at+0x24/0x60 [ 1706.498259][ T30] __se_sys_chroot+0xbc/0x2b0 [ 1706.523293][ T5228] Bluetooth: hci0: command tx timeout [ 1706.540694][ T30] ? __pfx___se_sys_chroot+0x10/0x10 [ 1706.566316][ T30] ? do_syscall_64+0x100/0x230 [ 1706.571194][ T30] ? do_syscall_64+0xb6/0x230 [ 1706.588151][ T30] do_syscall_64+0xf3/0x230 [ 1706.592762][ T30] ? clear_bhb_loop+0x35/0x90 [ 1706.623269][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.629272][ T30] RIP: 0033:0x7f668637def9 [ 1706.644797][ T30] RSP: 002b:00007f6687155038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 1706.664029][ T30] RAX: ffffffffffffffda RBX: 00007f6686535f80 RCX: 00007f668637def9 [ 1706.705000][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 1706.715429][ T30] RBP: 00007f66863f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1706.723831][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1706.745214][ T30] R13: 0000000000000000 R14: 00007f6686535f80 R15: 00007f668665fa28 [ 1706.789379][ T30] [ 1706.940269][ T30] INFO: task vhost-30739:30740 blocked for more than 145 seconds. [ 1706.957820][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1707.014134][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1707.023088][ T30] task:vhost-30739 state:D stack:24696 pid:30740 tgid:30737 ppid:28748 flags:0x00004004 [ 1707.033497][ T30] Call Trace: [ 1707.036818][ T30] [ 1707.039799][ T30] __schedule+0x1895/0x4b30 [ 1707.044626][ T30] ? __pfx___schedule+0x10/0x10 [ 1707.049709][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.054957][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1707.061109][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.067638][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1707.072818][ T30] ? schedule+0x90/0x320 [ 1707.078198][ T30] schedule+0x14b/0x320 [ 1707.082417][ T30] ? down_read+0x6a5/0xa40 [ 1707.088742][ T30] schedule_preempt_disabled+0x13/0x30 [ 1707.094535][ T30] down_read+0x705/0xa40 [ 1707.098856][ T30] ? __pfx_down_read+0x10/0x10 [ 1707.103858][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 1707.109473][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1707.121249][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1707.126940][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1707.133081][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1707.138463][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1707.143933][ T30] filemap_fault+0x8c5/0x1950 [ 1707.148700][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1707.155108][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.160390][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.165918][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1707.170865][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.176329][ T30] __do_fault+0x135/0x460 [ 1707.182824][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.188306][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1707.193529][ T30] ? mark_lock+0x9a/0x360 [ 1707.197915][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1707.203461][ T30] ? __lock_acquire+0x1384/0x2050 [ 1707.208603][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 1707.214772][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.219880][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1707.225287][ T30] ? mt_find+0x2a9/0x920 [ 1707.229638][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1707.235144][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.240244][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1707.248284][ T30] exc_page_fault+0x2b9/0x8c0 [ 1707.253219][ T30] asm_exc_page_fault+0x26/0x30 [ 1707.258131][ T30] RIP: 0010:__get_user_nocheck_2+0xa/0x20 [ 1707.264154][ T30] Code: 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 0f ae e8 <0f> b7 10 31 c0 0f 01 ca c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 [ 1707.287371][ T30] RSP: 0018:ffffc900039af6e8 EFLAGS: 00050202 [ 1707.294731][ T30] RAX: 00000000200002c2 RBX: ffff888073cd0290 RCX: dffffc0000000000 [ 1707.302869][ T30] RDX: ffffc90013391000 RSI: 000000000000005c RDI: 000000000000005d [ 1707.311028][ T30] RBP: ffffc900039af6f0 R08: ffffffff890e2626 R09: 0000000000000000 [ 1707.319191][ T30] R10: ffffc900039af960 R11: fffff52000735f2e R12: ffff888073cd0390 [ 1707.327736][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888073cd01e0 [ 1707.335858][ T30] ? vhost_get_vq_desc+0x136/0x2740 [ 1707.341131][ T30] vhost_get_avail_idx+0xd5/0x410 [ 1707.346385][ T30] vhost_get_vq_desc+0x146/0x2740 [ 1707.351581][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1707.357724][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.364318][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1707.370265][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1707.376262][ T30] ? __pfx_vhost_get_vq_desc+0x10/0x10 [ 1707.381787][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1707.388268][ T30] ? peek_head_len+0x5c0/0x930 [ 1707.394301][ T30] handle_rx+0x825/0x1fe0 [ 1707.398727][ T30] ? __lock_acquire+0x1384/0x2050 [ 1707.404178][ T30] ? __pfx_handle_rx+0x10/0x10 [ 1707.409034][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1707.415200][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.421612][ T30] ? kcov_remote_start+0x4b9/0x7d0 [ 1707.426907][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1707.432177][ T30] ? kcov_remote_start+0x97/0x7d0 [ 1707.437376][ T30] vhost_run_work_list+0x145/0x1c0 [ 1707.442591][ T30] ? __pfx_vhost_run_work_list+0x10/0x10 [ 1707.448406][ T30] vhost_task_fn+0x267/0x3f0 [ 1707.453163][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.458341][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.463690][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1707.469736][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.476294][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.481472][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.487777][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1707.494315][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1707.499795][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.505081][ T30] ret_from_fork+0x4b/0x80 [ 1707.509656][ T30] ? __pfx_vhost_task_fn+0x10/0x10 [ 1707.514899][ T30] ret_from_fork_asm+0x1a/0x30 [ 1707.519786][ T30] [ 1707.523053][ T30] INFO: task syz.2.6313:30742 blocked for more than 145 seconds. [ 1707.530908][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1707.538833][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1707.563111][ T30] task:syz.2.6313 state:D stack:25184 pid:30742 tgid:30737 ppid:28748 flags:0x00000004 [ 1707.574722][ T30] Call Trace: [ 1707.578050][ T30] [ 1707.581011][ T30] __schedule+0x1895/0x4b30 [ 1707.585708][ T30] ? __pfx___schedule+0x10/0x10 [ 1707.592575][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.597799][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1707.603933][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.610418][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1707.615704][ T30] ? schedule+0x90/0x320 [ 1707.620137][ T30] schedule+0x14b/0x320 [ 1707.624448][ T30] ? down_read+0x6a5/0xa40 [ 1707.628930][ T30] schedule_preempt_disabled+0x13/0x30 [ 1707.634557][ T30] down_read+0x705/0xa40 [ 1707.638870][ T30] ? __pfx_down_read+0x10/0x10 [ 1707.644051][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 1707.649667][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1707.655400][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1707.661059][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1707.667205][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1707.672553][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1707.677976][ T30] filemap_fault+0x8c5/0x1950 [ 1707.682814][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1707.688178][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.694497][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.699598][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1707.705490][ T30] ? preempt_count_add+0x93/0x190 [ 1707.710589][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.716246][ T30] __do_fault+0x135/0x460 [ 1707.720676][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1707.726960][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1707.732301][ T30] ? unwind_get_return_address+0x4d/0x90 [ 1707.738137][ T30] ? mark_lock+0x9a/0x360 [ 1707.742531][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1707.748150][ T30] ? __lock_acquire+0x1384/0x2050 [ 1707.753548][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 1707.759621][ T30] ? __pfx_lock_release+0x10/0x10 [ 1707.765592][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1707.770627][ T30] ? mt_find+0x2a9/0x920 [ 1707.775193][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1707.780567][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1707.787121][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1707.793602][ T30] exc_page_fault+0x2b9/0x8c0 [ 1707.799416][ T30] asm_exc_page_fault+0x26/0x30 [ 1707.804677][ T30] RIP: 0010:__get_user_4+0x11/0x20 [ 1707.809846][ T30] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 1707.813146][ T5228] Bluetooth: hci8: command tx timeout [ 1707.830038][ T30] RSP: 0018:ffffc90003a57db8 EFLAGS: 00050202 [ 1707.843408][ T30] RAX: 0000000020000380 RBX: 00000000c0045005 RCX: ffffc90003a57d03 [ 1707.851560][ T30] RDX: 0000000000000000 RSI: ffffffff8c0adbc0 RDI: ffffffff8c60ddc0 [ 1707.860789][ T30] RBP: ffffc90003a57ec8 R08: ffffffff901c82af R09: 1ffffffff2039055 [ 1707.868991][ T30] R10: dffffc0000000000 R11: fffffbfff2039056 R12: 00000000c0045005 [ 1707.877204][ T30] R13: ffff88806a40e000 R14: dffffc0000000000 R15: ffff888011bbe0e0 [ 1707.885429][ T30] snd_pcm_oss_ioctl+0x5c6/0xff0 [ 1707.890453][ T30] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1707.897070][ T30] ? __fget_files+0x29/0x470 [ 1707.901733][ T30] ? __fget_files+0x3f3/0x470 [ 1707.907588][ T30] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1707.913624][ T30] __se_sys_ioctl+0xf9/0x170 [ 1707.918299][ T30] do_syscall_64+0xf3/0x230 [ 1707.923048][ T30] ? clear_bhb_loop+0x35/0x90 [ 1707.927789][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.933914][ T30] RIP: 0033:0x7f668637def9 [ 1707.938381][ T30] RSP: 002b:00007f6687113038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.946994][ T30] RAX: ffffffffffffffda RBX: 00007f6686536130 RCX: 00007f668637def9 [ 1707.955202][ T30] RDX: 0000000020000380 RSI: 00000000c0045005 RDI: 0000000000000006 [ 1707.963425][ T30] RBP: 00007f66863f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1707.971560][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1707.979689][ T30] R13: 0000000000000000 R14: 00007f6686536130 R15: 00007f668665fa28 [ 1707.987944][ T30] [ 1707.991313][ T30] INFO: task syz.2.6313:30745 blocked for more than 146 seconds. [ 1708.000265][ T30] Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1708.008843][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1708.017814][ T30] task:syz.2.6313 state:D stack:25184 pid:30745 tgid:30737 ppid:28748 flags:0x00000004 [ 1708.028406][ T30] Call Trace: [ 1708.031727][ T30] [ 1708.034979][ T30] __schedule+0x1895/0x4b30 [ 1708.039559][ T30] ? __pfx___schedule+0x10/0x10 [ 1708.044810][ T30] ? __pfx_lock_release+0x10/0x10 [ 1708.049904][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1708.056264][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1708.062752][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1708.068261][ T30] ? schedule+0x90/0x320 [ 1708.072581][ T30] schedule+0x14b/0x320 [ 1708.077423][ T30] ? down_read+0x6a5/0xa40 [ 1708.081944][ T30] schedule_preempt_disabled+0x13/0x30 [ 1708.087970][ T30] down_read+0x705/0xa40 [ 1708.092670][ T30] ? __pfx_down_read+0x10/0x10 [ 1708.097668][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 1708.104392][ T30] page_cache_ra_unbounded+0x135/0x8a0 [ 1708.109968][ T30] do_sync_mmap_readahead+0x499/0x970 [ 1708.124641][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 1708.130628][ T30] ? count_memcg_event_mm+0x90/0x420 [ 1708.141115][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1708.146602][ T30] filemap_fault+0x8c5/0x1950 [ 1708.151343][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1708.156689][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1708.161945][ T30] ? __pfx_lock_release+0x10/0x10 [ 1708.167131][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1708.172047][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1708.177433][ T30] __do_fault+0x135/0x460 [ 1708.181821][ T30] ? handle_pte_fault+0x2188/0x6800 [ 1708.187286][ T30] handle_pte_fault+0x2d1c/0x6800 [ 1708.192387][ T30] ? mark_lock+0x9a/0x360 [ 1708.196910][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1708.203490][ T30] ? __lock_acquire+0x1384/0x2050 [ 1708.209687][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 1708.216178][ T30] ? __pfx_lock_release+0x10/0x10 [ 1708.221277][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1708.226684][ T30] ? mt_find+0x2a9/0x920 [ 1708.231028][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1708.236531][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1708.241643][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1708.247169][ T30] exc_page_fault+0x2b9/0x8c0 [ 1708.252021][ T30] ? __might_fault+0xaa/0x120 [ 1708.258404][ T30] asm_exc_page_fault+0x26/0x30 [ 1708.264493][ T30] RIP: 0010:strncpy_from_user+0x110/0x2e0 [ 1708.270304][ T30] Code: 00 00 00 4c 89 e6 e8 0f f1 a2 fc 49 83 fc 07 0f 86 9a 00 00 00 48 89 6c 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 1708.290822][ T30] RSP: 0018:ffffc90008d87d20 EFLAGS: 00050246 [ 1708.297137][ T30] RAX: 0000000000000002 RBX: ffff888011dde600 RCX: ffff8880252ada00 [ 1708.306258][ T30] RDX: ffffc90017ba3000 RSI: 0000000000000fe0 RDI: 0000000000000007 [ 1708.315541][ T30] RBP: 0000000000000fe0 R08: ffffffff84f1cd81 R09: 1ffffffff2039055 [ 1708.323689][ T30] R10: dffffc0000000000 R11: fffffbfff2039056 R12: 0000000000000fe0 [ 1708.331713][ T30] R13: 0000000000000000 R14: ffff888011dde620 R15: 0000000020000140 [ 1708.339806][ T30] ? strncpy_from_user+0xf1/0x2e0 [ 1708.345069][ T30] getname_flags+0xf1/0x540 [ 1708.349659][ T30] ? security_capable+0x7e/0x2d0 [ 1708.354800][ T30] user_path_at+0x24/0x60 [ 1708.359183][ T30] __se_sys_move_mount+0x1ac/0xd20 [ 1708.365003][ T30] ? __pfx___se_sys_move_mount+0x10/0x10 [ 1708.370800][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1708.377690][ T30] ? do_syscall_64+0x100/0x230 [ 1708.383171][ T30] ? __x64_sys_move_mount+0x20/0xc0 [ 1708.388651][ T30] do_syscall_64+0xf3/0x230 [ 1708.393289][ T30] ? clear_bhb_loop+0x35/0x90 [ 1708.398044][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.404114][ T30] RIP: 0033:0x7f668637def9 [ 1708.410555][ T30] RSP: 002b:00007f66870f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1708.419163][ T30] RAX: ffffffffffffffda RBX: 00007f6686536208 RCX: 00007f668637def9 [ 1708.427325][ T30] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: ffffffffffffffff [ 1708.435617][ T30] RBP: 00007f66863f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1708.443952][ T30] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 1708.452264][ T30] R13: 0000000000000000 R14: 00007f6686536208 R15: 00007f668665fa28 [ 1708.460409][ T30] [ 1708.463636][ T30] [ 1708.463636][ T30] Showing all locks held in the system: [ 1708.471526][ T30] 1 lock held by khungtaskd/30: [ 1708.476745][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1708.487173][ T30] 2 locks held by kworker/u8:3/52: [ 1708.492412][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1708.503024][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 1708.504715][T27158] bridge_slave_1: left allmulticast mode [ 1708.518823][ T30] 2 locks held by dhcpcd/4896: [ 1708.527172][ T30] #0: ffff88804a30b6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 1708.537781][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 1708.546950][ T30] 2 locks held by getty/4982: [ 1708.551789][ T30] #0: ffff8880321da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1708.561905][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1708.572194][ T30] 3 locks held by kworker/1:4/5276: [ 1708.577549][ T30] 2 locks held by kworker/u8:6/18367: [ 1708.582999][T27158] bridge_slave_1: left promiscuous mode [ 1708.583217][T27158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.588701][ T30] 9 locks held by kworker/u8:5/27158: [ 1708.601312][ T30] 1 lock held by syz.4.6307/30720: [ 1708.606838][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 1708.615105][ T5228] Bluetooth: hci0: command tx timeout [ 1708.618862][ T30] 1 lock held by syz.2.6313/30737: [ 1708.629390][ T30] #0: ffff888073cd0258 (&vq->mutex){+.+.}-{3:3}, at: vhost_net_stop+0x11e/0x210 [ 1708.638858][ T30] 1 lock held by syz.2.6313/30738: [ 1708.644235][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.655698][ T30] 2 locks held by vhost-30739/30740: [ 1708.661034][ T30] #0: ffff888073cd0258 (&vq->mutex){+.+.}-{3:3}, at: handle_rx+0x1c5/0x1fe0 [ 1708.670017][ T30] #1: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.681542][ T30] 1 lock held by syz.2.6313/30742: [ 1708.686795][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.698231][ T30] 1 lock held by syz.2.6313/30745: [ 1708.704070][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.716480][ T30] 1 lock held by syz.1.6343/30859: [ 1708.722720][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.734200][ T30] 1 lock held by syz.1.6343/30860: [ 1708.739433][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.751032][ T30] 2 locks held by syz.3.6393/31142: [ 1708.756431][ T30] #0: ffff88802fcf0d18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1708.767192][ T30] #1: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1708.778837][ T30] 2 locks held by syz.3.6393/31143: [ 1708.785814][ T30] #0: ffff88807f3db118 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 1708.810101][ T30] #1: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1708.835408][ T30] 1 lock held by syz.4.6511/31700: [ 1708.840606][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.853124][ T30] 3 locks held by syz-executor/31805: [ 1708.858631][ T30] #0: ffff888070578d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1708.870086][ T30] #1: ffff888070578078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1708.883844][ T30] #2: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1708.896962][ T30] 1 lock held by syz.2.6568/32137: [ 1708.903736][ T30] #0: ffff888148d0e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1708.916529][ T30] 3 locks held by syz-executor/32274: [ 1708.925264][ T30] #0: ffff888059158d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1708.937297][ T30] #1: ffff888059158078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1708.948470][ T30] #2: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1708.959839][ T30] 4 locks held by syz.3.6611/32338: [ 1708.965408][ T30] #0: ffff888071fb0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1708.976854][ T30] #1: ffff888071fb0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1708.987908][ T30] #2: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1708.999426][ T30] #3: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1709.016347][ T30] [ 1709.018794][ T30] ============================================= [ 1709.018794][ T30] [ 1709.031997][ T30] NMI backtrace for cpu 0 [ 1709.035815][T27158] bridge_slave_0: left allmulticast mode [ 1709.036550][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1709.042226][T27158] bridge_slave_0: left promiscuous mode [ 1709.052383][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1709.052411][ T30] Call Trace: [ 1709.052424][ T30] [ 1709.052435][ T30] dump_stack_lvl+0x241/0x360 [ 1709.052474][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1709.052512][ T30] ? __pfx__printk+0x10/0x10 [ 1709.052552][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1709.094460][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1709.099989][ T30] ? _printk+0xd5/0x120 [ 1709.104289][ T30] ? __pfx__printk+0x10/0x10 [ 1709.109037][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1709.113956][ T30] ? __pfx__printk+0x10/0x10 [ 1709.118606][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1709.123689][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1709.129727][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1709.135795][ T30] watchdog+0xff4/0x1040 [ 1709.140158][ T30] ? watchdog+0x1ea/0x1040 [ 1709.144688][ T30] ? __pfx_watchdog+0x10/0x10 [ 1709.149491][ T30] kthread+0x2f0/0x390 [ 1709.153577][ T30] ? __pfx_watchdog+0x10/0x10 [ 1709.158270][ T30] ? __pfx_kthread+0x10/0x10 [ 1709.162966][ T30] ret_from_fork+0x4b/0x80 [ 1709.167467][ T30] ? __pfx_kthread+0x10/0x10 [ 1709.172069][ T30] ret_from_fork_asm+0x1a/0x30 [ 1709.176864][ T30] [ 1709.181634][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1709.187280][T27158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.195496][ C1] NMI backtrace for cpu 1 [ 1709.195514][ C1] CPU: 1 UID: 0 PID: 32292 Comm: syz-executor Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1709.195537][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1709.195549][ C1] RIP: 0010:lock_acquire+0x1fd/0x550 [ 1709.195583][ C1] Code: 4c 24 30 4c 8b 44 24 38 6a 00 6a 00 6a 00 ff 75 10 ff 74 24 48 e8 c3 04 00 00 48 83 c4 28 48 c7 c7 c0 db 0a 8c e8 d3 35 52 0a ff ff ff ff 65 0f c1 05 46 6d 92 7e 83 f8 01 0f 85 a3 01 00 00 [ 1709.195600][ C1] RSP: 0018:ffffc90003f076e0 EFLAGS: 00000086 [ 1709.195617][ C1] RAX: 0000000000000001 RBX: ffffc90003f07740 RCX: c1401c9b5bfba200 [ 1709.195632][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adbc0 RDI: ffffffff8c60ddc0 [ 1709.195647][ C1] RBP: ffffc90003f07828 R08: ffffffff942597c7 R09: 1ffffffff284b2f8 [ 1709.195662][ C1] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: 1ffff920007e0ee4 [ 1709.195676][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000246 [ 1709.195690][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1709.195706][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1709.195725][ C1] CR2: 00007fff30a4fba8 CR3: 000000002f2a2000 CR4: 00000000003506f0 [ 1709.195742][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1709.195754][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1709.195766][ C1] Call Trace: [ 1709.195773][ C1] [ 1709.195781][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1709.195810][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1709.195837][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1709.195872][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1709.195896][ C1] ? nmi_handle+0x14f/0x5a0 [ 1709.195915][ C1] ? nmi_handle+0x2a/0x5a0 [ 1709.195933][ C1] ? lock_acquire+0x1fd/0x550 [ 1709.195958][ C1] ? default_do_nmi+0x63/0x160 [ 1709.195977][ C1] ? exc_nmi+0x123/0x1f0 [ 1709.195993][ C1] ? end_repeat_nmi+0xf/0x53 [ 1709.196021][ C1] ? lock_acquire+0x1fd/0x550 [ 1709.196046][ C1] ? lock_acquire+0x1fd/0x550 [ 1709.196072][ C1] ? lock_acquire+0x1fd/0x550 [ 1709.196098][ C1] [ 1709.196105][ C1] [ 1709.196114][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1709.196140][ C1] ? page_ext_put+0x97/0xc0 [ 1709.196161][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 1709.196184][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 1709.196207][ C1] ? page_ext_get+0x20/0x2a0 [ 1709.196228][ C1] _raw_spin_trylock+0x46/0x80 [ 1709.196248][ C1] ? free_unref_page+0x67f/0xf20 [ 1709.196274][ C1] free_unref_page+0x67f/0xf20 [ 1709.196304][ C1] vfree+0x186/0x2e0 [ 1709.196330][ C1] kcov_close+0x28/0x50 [ 1709.196353][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1709.196375][ C1] __fput+0x23f/0x880 [ 1709.196403][ C1] task_work_run+0x24f/0x310 [ 1709.196421][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1709.196451][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1709.196471][ C1] ? do_exit+0xa2a/0x28e0 [ 1709.196488][ C1] ? kmem_cache_free+0x1a2/0x420 [ 1709.196513][ C1] ? do_exit+0xa2a/0x28e0 [ 1709.196531][ C1] do_exit+0xa2f/0x28e0 [ 1709.196551][ C1] ? __pfx_do_exit+0x10/0x10 [ 1709.196568][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1709.196593][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1709.196620][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1709.196646][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1709.196668][ C1] do_group_exit+0x207/0x2c0 [ 1709.196685][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1709.196705][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1709.196735][ C1] get_signal+0x176f/0x1810 [ 1709.196756][ C1] ? __sock_sendmsg+0x113/0x270 [ 1709.196781][ C1] ? __pfx_get_signal+0x10/0x10 [ 1709.196807][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1709.196833][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1709.196856][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1709.196887][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1709.196911][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1709.196936][ C1] do_syscall_64+0x100/0x230 [ 1709.196959][ C1] ? clear_bhb_loop+0x35/0x90 [ 1709.196983][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.197005][ C1] RIP: 0033:0x7fbec317fd8c [ 1709.197020][ C1] Code: Unable to access opcode bytes at 0x7fbec317fd62. [ 1709.197030][ C1] RSP: 002b:00007fbec345f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1709.197049][ C1] RAX: 000000000000003c RBX: 00007fbec3e64620 RCX: 00007fbec317fd8c [ 1709.197063][ C1] RDX: 000000000000003c RSI: 00007fbec3e64670 RDI: 0000000000000003 [ 1709.197076][ C1] RBP: 0000000000000000 R08: 00007fbec345f704 R09: 000000000000000c [ 1709.197088][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1709.197100][ C1] R13: 0000000000000000 R14: 00007fbec3e64670 R15: 0000000000000000 [ 1709.197119][ C1] [ 1709.293060][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1709.293084][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 1709.293113][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1709.293129][ T30] Call Trace: [ 1709.293140][ T30] [ 1709.293151][ T30] dump_stack_lvl+0x241/0x360 [ 1709.293194][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1709.293227][ T30] ? __pfx__printk+0x10/0x10 [ 1709.293255][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1709.293298][ T30] ? vscnprintf+0x5d/0x90 [ 1709.293337][ T30] panic+0x349/0x880 [ 1709.293369][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1709.293408][ T30] ? __pfx_panic+0x10/0x10 [ 1709.293435][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1709.293462][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1709.293494][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1709.293528][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1709.293565][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1709.293604][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1709.293646][ T30] watchdog+0x1033/0x1040 [ 1709.293681][ T30] ? watchdog+0x1ea/0x1040 [ 1709.293718][ T30] ? __pfx_watchdog+0x10/0x10 [ 1709.293749][ T30] kthread+0x2f0/0x390 [ 1709.293772][ T30] ? __pfx_watchdog+0x10/0x10 [ 1709.293803][ T30] ? __pfx_kthread+0x10/0x10 [ 1709.293827][ T30] ret_from_fork+0x4b/0x80 [ 1709.293860][ T30] ? __pfx_kthread+0x10/0x10 [ 1709.293884][ T30] ret_from_fork_asm+0x1a/0x30 [ 1709.293932][ T30] [ 1709.822854][ T30] Kernel Offset: disabled [ 1709.827216][ T30] Rebooting in 86400 seconds..